last executing test programs: 1m14.608465589s ago: executing program 3 (id=108): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x4090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m14.533133273s ago: executing program 3 (id=111): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xd6d, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b00a0000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m14.382062612s ago: executing program 3 (id=115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x60}}}}}}, 0x0) 1m14.363564424s ago: executing program 3 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m13.779634519s ago: executing program 3 (id=118): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1m12.606089588s ago: executing program 3 (id=138): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000480)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x11, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x11, 0x0, @opaque="00000000000000064a"}}}}}}}, 0x4b) 1m12.535087313s ago: executing program 32 (id=138): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000480)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x11, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x11, 0x0, @opaque="00000000000000064a"}}}}}}}, 0x4b) 1m2.610797706s ago: executing program 0 (id=315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1m2.519600232s ago: executing program 0 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[], 0x0) 1m2.478464915s ago: executing program 0 (id=320): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) 1m2.249603578s ago: executing program 0 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 1m2.178146732s ago: executing program 0 (id=326): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) shutdown(r0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 1m1.948288006s ago: executing program 0 (id=328): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x140c0, &(0x7f0000001180)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$eJzs3U9LW1kYx/GfJmNiHE0Ww8AMDHOY2cxsgpN5ATNhUBgmMMUaabsoXOtNG3KbyL3BEik1m9JtX4d02V2h7RtwU7rpvjspFLpxUXqL9yaaaJLGkD9avx+Q8yTPeXKO5ihPLiTuX3t8t1Tw0gWrqum40bRU14GUOowaphrjdBDPqFVdv899ePPT1es3/svmcksrxixnV//MGGMWfn5+7/6TX15W59aeLjyLaS91c/995u3ezN4P+59W7xQ9U/RMuVI1llmvVKrWumObjaJXShtzxbEtzzbFsme7bfmCU9ncrBmrvDGf2HRtzzNWuWZKds1UK6bq1ox12yqWTTqdNvMJXW7RPubkd1dWrGzXtB8Z6o4wcrOd7nTdbL1zMr87hj0BAIBzpnf/H/b63fv/3Fo4nqX///7L/b9E/z8i9bZbXfr/b8e4IYyc62atROP3tx39PwAAAAAAAAAAAAAAAAAAAAAAF8GB7yd9308ejo27gtsxSXFJfiN/VNDP28pxYbQ+/37LV9fnP/TXhLaLIWt5415cch5t5bfy4RjmswUV5cjWopL6GJyHhjBe/je3tGgCKb1wdhr1O1v5iGLN+qZUp/qpqBQ+QHv9N0q0rp9RUt91Xj9jOtXP6LdfW+rTSurVLVXkaCM418f1D/4w5p//cyfqZ4N5AAAAAAB8DdLmyKnX70E+mBDX6XxY33J9wPf9nV7XB068vo7qR64lAgAAAAAwFl5tu2Q5ju0OEMQkDVYuDbxor8D3paE+4EBBRJNcvVvwt6RzsI1xBXE1z5gZpPydznRE/T7mRCVN/MdyhmDSf5kAAAAADJtX2z7+Bz/9ev1wRLsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy6vfzwJrzT6WaiZ6f9nckMvZvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhHPgcAAP//ps0YVA==") unshare(0x480) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m1.948027876s ago: executing program 33 (id=328): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x140c0, &(0x7f0000001180)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") unshare(0x480) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 46.641591591s ago: executing program 1 (id=596): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0xfffffffffffffd8b, 0x1, {0x94}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0xffff, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xfffc}}}]}}]}]}]}}]}, 0x6c}}, 0x800) 46.565100796s ago: executing program 1 (id=609): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 46.521037499s ago: executing program 1 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x599, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x1b8}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x7040, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) 46.49667978s ago: executing program 1 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 46.405090416s ago: executing program 1 (id=605): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xce23, 0x5, @empty, 0x4}, 0x1c) listen(r1, 0x50) 46.129161342s ago: executing program 1 (id=612): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00005af000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f00005ad000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00005ae000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 46.099293864s ago: executing program 34 (id=612): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00005af000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f00005ad000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00005ae000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 36.29149513s ago: executing program 6 (id=774): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x42a5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) listen(r0, 0x6) shutdown(r0, 0x1) 35.884595715s ago: executing program 6 (id=779): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x9c00, 0x0, 0x3) 34.900783174s ago: executing program 6 (id=786): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000100), 0x80, 0x642, &(0x7f00000023c0)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000000000000000feffff95"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x5aa, &(0x7f00000008c0)="$eJzs3U9oHPUeAPDvzGab/sl76YP34L1HD+W9B31Qukn6R6un9ioWCj0IXjRstqFkky3ZRJsQMD1bxB5EpQj1pgePigcP4sWjVy+KZ6HYoNDkoCuTnU3TNGm3MZut2c8HZvf3m5nd7+83M9/ZnWGGCaBnHc1e0oh/RcTFJGJw3bS+yCcebc63vLRQXllaKCfRaFz6KYkkIu4tLZRb8yf5+6GIWIyIf0bEV8WI4+naV+5rFepz8xOj1WplOq8PzUxeHarPzZ+4Mjk6XhmvTJ169rkzZ0+fGTk5sr65K431teKT9fXG9zffuvHNC7dvfvzJkcXyO6NJnIuBfNr6fuyk5jIpxrkN4093IlgXJd1uANtSyPM8S6V/xGAU8qx/rP5OtwzotEZ/RAPoUYn8hx7V+h+QHf+2ht38/3HnfPMAJIu7vLRQfiNa8fua5yZi/+qxycGfkweOTLLjzcO72VD2pMXrETHc1/fw9p/k29/2De9EA+moL883V9TD6z9d2//EJvufgda50z+otf9bzvd/y5vELzwcv5jt/y62GePXl394f8v41/vj35vGT9biJ3n8iXWfSyPi1Tbj33rp87NbTWt8GHEsNo/fkjz6/PDQ5SvVynDzddMYXxw78vzW/Y84uEX85jnb/as/M+uX/74Pmm1K2+z/Z19/+p/FR8T//38fvf6TTba/AxHxdpvx/3bvoxe3mnbnenI3+xfQzvp/8Pe3GLfbjP/MuaPf5UVnDQEAAAAAAAAAYAelq9eyJWlprZympVLzHt6/x8G0WqvPHL9cm50aa17zdjiKaetKq8FmPcnqI/n1uK36yQ31U4U8YOHAar1UrlXHutx3AAAAAAAAAAAAAAAAAAAAeFoc2nD//y+F1fv/Nz6uGtir2nzkN7AHyX/oXQ/mf9K1dgC7z+8/9KyG/IfeJf+hd8l/6F3yH3qX/IfeJf+hd8l/AAAAAAAAAAAAAAAAAAAAAAAAAADoiIsXLmRDY2VpoZzVx/rmZidqr50Yq9QnSpOz5VK5Nn21NF6rjVcrpXJt8nHfl9RqV4djavba0EylPjNUn5t/ZbI2O9V6pmil2PEeAQAAAAAAAAAAAAAAAAAAwJ/PwOqQpKWIYrOepqVSxF8i4nASyeUr1cpwRPw1Ir4tFPuz+ki3Gw0AAAAAAAAAAAAAAAAAAAB7TH1ufmK0Wq1Md67Ql4fqYIj2C31PMnNELO5sM7JvXD/mzXY+VcwXYJcX3d4oFLa1Ha48HY3fzUIXd0oAAAAAAAAAAAAAAAAAANCj7t/02+4nfutsgwAAAAAAAAAAAAAAAAAAAKAnpT8mEZENxwb/N7Bx6r5kubD6HhGv37r07rXRmZnpkWz83bXxM+/l4092o/1Au1p5mkZElscAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAffW5+YnRarUyvc1CfxvzdLuPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvxewAAAP//TKbQBg==") openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189) 34.517045697s ago: executing program 6 (id=792): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 34.377265605s ago: executing program 6 (id=796): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, 0x0) setregid(0xffffffffffffffff, r1) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) writev(r2, &(0x7f0000000840)=[{0x0}, {&(0x7f00000000c0)='n', 0xffffffb3}], 0x2) 33.62584138s ago: executing program 6 (id=800): connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)={0x44, 0x33, 0x100, 0x70bd26, 0x25dfdbfb, "", [@nested={0x32, 0x149, 0x0, 0x1, [@generic="a6351f7a2da1202628c49a8918fd37745b3b1470a5100e936f821ada5d0eeb8aa6ea44004e699e817483c3fd1542"]}]}, 0x44}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='G', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 33.62007991s ago: executing program 35 (id=800): connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)={0x44, 0x33, 0x100, 0x70bd26, 0x25dfdbfb, "", [@nested={0x32, 0x149, 0x0, 0x1, [@generic="a6351f7a2da1202628c49a8918fd37745b3b1470a5100e936f821ada5d0eeb8aa6ea44004e699e817483c3fd1542"]}]}, 0x44}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='G', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 30.160665897s ago: executing program 8 (id=801): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0xb, "09001d00"}, @main=@item_012={0x2, 0x0, 0xb, "d1f9"}, @local=@item_012={0x2, 0x2, 0x2, "8fe0"}, @global=@item_4={0x3, 0x1, 0x0, "0800be00"}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x1, "09037a31"}, @local=@item_4={0x3, 0x2, 0x5, "c7b83395"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) 29.557740853s ago: executing program 8 (id=852): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x400) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1000, 0xdfa, 0x4, 0xf, 0x9a, "b3cde055b6530658efc3a01b53d2e209001000"}) 28.994616767s ago: executing program 8 (id=866): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 26.511657755s ago: executing program 8 (id=889): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x40020480) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 26.425275461s ago: executing program 8 (id=894): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @rand_addr=0x64010102}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x2, 0x0, 0x4, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 26.256099741s ago: executing program 8 (id=903): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) syz_clone(0x8080000, 0x0, 0xffffffffffffffd4, 0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "6bbe4d", 0xc, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[], {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x6, 0x0, @void}}}}}}}}, 0x0) 26.197065674s ago: executing program 36 (id=903): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) syz_clone(0x8080000, 0x0, 0xffffffffffffffd4, 0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "6bbe4d", 0xc, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[], {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x6, 0x0, @void}}}}}}}}, 0x0) 1.820466951s ago: executing program 9 (id=1372): socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x30, 0x1ff}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)="d7", 0x1, 0x10000, &(0x7f0000000000)={0xa, 0x0, 0x4, @private1, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000100)=0x4) 1.69381237s ago: executing program 4 (id=1375): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x5, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x74}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0xff, 0x7, 0x0, 0x7fffffff, 0x110, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0xd}, 0xa, 0x1, 0x100007, 0x3, 0x81, 0x5, 0x5, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xa, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 1.610627365s ago: executing program 4 (id=1377): socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.546066638s ago: executing program 4 (id=1378): lchown(&(0x7f0000000000)='./cgroup\x00', 0x0, 0xee01) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r0 = socket(0x10, 0x803, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffe, 0x0, 0xfffffff3}) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', 0x0, &(0x7f0000000080)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 1.369140739s ago: executing program 5 (id=1383): socket$inet6(0xa, 0x3, 0x7) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.334542711s ago: executing program 5 (id=1384): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$rds(0x15, 0x5, 0x0) openat(r0, 0x0, 0x4000, 0x200) close_range(r1, 0xffffffffffffffff, 0x0) 1.305894623s ago: executing program 2 (id=1385): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000002030103000000000000000003000002090002000000000a020000000800010001"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.213877008s ago: executing program 5 (id=1386): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 1.191291649s ago: executing program 5 (id=1387): r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) close(0x3) 1.130031413s ago: executing program 5 (id=1388): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040d0}, 0xc0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x2, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 980.502162ms ago: executing program 2 (id=1390): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0xa041, 0xd) fcntl$setlease(r1, 0x400, 0x0) close(r1) syz_genetlink_get_family_id$tipc2(0x0, r0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x1e, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r1, 0x0, 0x24000010) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 863.565389ms ago: executing program 9 (id=1391): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x24, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18", @ANYRES32, @ANYBLOB='\x00', @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) syz_io_uring_complete(0x0) 817.956802ms ago: executing program 2 (id=1392): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffe5}, 0x68) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8080, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fed, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r2, 0x2219, 0x7724, 0x16, 0x0, 0x13) r3 = syz_open_dev$usbfs(0x0, 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) 817.434682ms ago: executing program 9 (id=1393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 797.652813ms ago: executing program 9 (id=1394): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x80) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="11"], 0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f00000001c0)=0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 722.320807ms ago: executing program 9 (id=1395): set_mempolicy(0x4005, &(0x7f0000000080)=0x9, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000000000000001"], 0x84}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd13381600000000000000", @ANYRES32=0x0, @ANYBLOB="0800050004000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000000) 666.033201ms ago: executing program 4 (id=1396): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) fchmod(r2, 0x145) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @dev={0xac, 0x14, 0x14, 0x31}}, {0xc00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001400030500008000ffdbdf25020751ff", @ANYRES32=r4, @ANYBLOB="080002007f000001"], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 665.383841ms ago: executing program 9 (id=1398): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 645.786922ms ago: executing program 4 (id=1400): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@udp6=r3}, 0x20) recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 631.679383ms ago: executing program 5 (id=1401): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) pidfd_getfd(0xffffffffffffffff, r0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") 616.093374ms ago: executing program 2 (id=1402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x8, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @generic={0xf6, 0x2}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x51}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000440)=0x4, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) 546.155348ms ago: executing program 2 (id=1403): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x106, 0x106, 0x4, [@enum64={0xe, 0x2, 0x0, 0x13, 0x0, 0x8, [{0x6, 0x0, 0x800}, {0x5, 0x0, 0xc7e5}]}, @enum64={0x1, 0x6, 0x0, 0x13, 0x1, 0xc, [{0x2, 0x8000, 0x4}, {0xf, 0x9, 0x6}, {0x4, 0x3, 0x40}, {0x10, 0x9, 0xa0d9}, {0x9, 0x7f, 0xfffff801}, {0x3, 0x9}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xc, 0x5}]}, @datasec={0x5, 0x9, 0x0, 0xf, 0x2, [{0x1, 0x10, 0x9}, {0x4, 0x7fff, 0x1}, {0x3, 0x5, 0xa3fd3cc8}, {0x1, 0x2, 0x4}, {0x2, 0x80000000}, {0x2, 0x80000000, 0x10}, {0x1, 0x6b81, 0xe}, {0x2, 0xe, 0x1ff}, {0x5, 0x1, 0x6}], "b2e9"}]}, {0x0, [0x5f, 0x0]}}, &(0x7f00000003c0)=""/223, 0x124, 0xdf, 0x0, 0x89c6, 0x10000, @value=r1}, 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) 545.857098ms ago: executing program 7 (id=1404): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f00000001c0)={0x2b7f}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 465.510483ms ago: executing program 4 (id=1405): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 335.428861ms ago: executing program 7 (id=1406): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) 274.427474ms ago: executing program 2 (id=1407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000000200)="000bda8b37dd", 0x6) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 270.039424ms ago: executing program 7 (id=1408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0x81ff, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 133.514473ms ago: executing program 7 (id=1409): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) lsetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='b[rgs4}%.'], 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 513.79µs ago: executing program 7 (id=1410): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0xaf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000380)={0x3, 0x80, 0x9, 0x9d, 0x0, 0x7, 0x0, 0x9, 0x2c04, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={0x0, 0xf}, 0x2a4, 0x401, 0x1, 0x1, 0x7, 0x19e9eaf7, 0x7, 0x0, 0x5, 0x0, 0x3d}, 0xffffffffffffffff, 0x3, r0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xe, r2, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6d}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 7 (id=1411): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4040) kernel console output (not intermixed with test programs): 6b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.301201][ T4267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.328140][ T4271] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.389846][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.434927][ T4310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.273'. [ 55.445466][ T4310] netlink: 16 bytes leftover after parsing attributes in process `syz.5.273'. [ 55.566606][ T4321] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.025470][ T4329] program syz.1.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.072168][ T4332] .1!€ÿ: renamed from bond_slave_0 (while UP) [ 56.094830][ T4332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.115058][ T4332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.173558][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 56.173577][ T29] audit: type=1400 audit(1769102981.426:554): avc: denied { watch_reads } for pid=4335 comm="syz.1.270" path="/42/file0/file0" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 56.228147][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 56.311580][ T4347] netlink: 44 bytes leftover after parsing attributes in process `syz.0.277'. [ 56.323955][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.331388][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.434124][ T29] audit: type=1400 audit(1769102981.696:555): avc: denied { read } for pid=4348 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.484621][ T4356] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.569425][ T29] audit: type=1400 audit(1769102981.826:556): avc: denied { rename } for pid=4355 comm="syz.0.283" name="file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.657108][ T4365] set_capacity_and_notify: 11 callbacks suppressed [ 56.657131][ T4365] loop1: detected capacity change from 0 to 512 [ 56.657429][ T29] audit: type=1400 audit(1769102981.826:557): avc: denied { link } for pid=4355 comm="syz.0.283" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 56.689251][ T4365] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.718968][ T4321] syz.5.267 (4321) used greatest stack depth: 7192 bytes left [ 56.736388][ C1] hrtimer: interrupt took 36589 ns [ 56.801327][ T4365] EXT4-fs (loop1): 1 truncate cleaned up [ 56.895238][ T4379] loop1: detected capacity change from 0 to 512 [ 56.928113][ T4379] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.943577][ T4379] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.291: corrupted inode contents [ 56.959338][ T4385] loop4: detected capacity change from 0 to 512 [ 56.969972][ T4385] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.980270][ T4379] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.291: mark_inode_dirty error [ 56.992180][ T4379] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.291: corrupted inode contents [ 57.004915][ T4379] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.291: mark_inode_dirty error [ 57.015488][ T4385] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.295: bg 0: block 4: invalid block bitmap [ 57.040985][ T4385] EXT4-fs (loop4): Remounting filesystem read-only [ 57.047964][ T4385] EXT4-fs (loop4): 1 truncate cleaned up [ 57.188031][ T29] audit: type=1400 audit(1769102982.446:558): avc: denied { create } for pid=4395 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.237691][ T29] audit: type=1400 audit(1769102982.466:559): avc: denied { bind } for pid=4395 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.266421][ T4405] loop5: detected capacity change from 0 to 1024 [ 57.273918][ T29] audit: type=1400 audit(1769102982.526:560): avc: denied { mount } for pid=4402 comm="syz.2.302" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 57.296042][ T29] audit: type=1400 audit(1769102982.526:561): avc: denied { watch watch_reads } for pid=4402 comm="syz.2.302" path="/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 57.398685][ T29] audit: type=1400 audit(1769102982.616:562): avc: denied { execute } for pid=4403 comm="syz.5.304" path="/20/file0/cpu.stat" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.453161][ T4415] geneve2: entered promiscuous mode [ 57.458510][ T4415] geneve2: entered allmulticast mode [ 57.486914][ T29] audit: type=1400 audit(1769102982.746:563): avc: denied { mounton } for pid=4418 comm="syz.2.309" path="/66/file1" dev="tmpfs" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.755358][ T4442] loop0: detected capacity change from 0 to 1024 [ 57.785390][ T4442] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.835820][ T4453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.845859][ T4453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.870494][ T4454] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.320: bg 0: block 112: padding at end of block bitmap is not set [ 57.911057][ T4442] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 8: comm syz.0.320: lblock 8 mapped to illegal pblock 8 (length 1) [ 57.945317][ T37] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 4) [ 57.959408][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 57.971921][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.971921][ T37] [ 58.196504][ T334] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.236399][ T334] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.275792][ T334] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.327352][ T334] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.386884][ T4472] -: renamed from syzkaller0 [ 58.424795][ T4462] chnl_net:caif_netlink_parms(): no params data found [ 58.466184][ T334] bridge_slave_1: left allmulticast mode [ 58.471872][ T334] bridge_slave_1: left promiscuous mode [ 58.477653][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.488676][ T334] bridge_slave_0: left allmulticast mode [ 58.494579][ T334] bridge_slave_0: left promiscuous mode [ 58.500385][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.513179][ T4088] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 58.722188][ T334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.741087][ T334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.758030][ T334] bond0 (unregistering): Released all slaves [ 58.831767][ T334] hsr_slave_0: left promiscuous mode [ 58.846955][ T334] hsr_slave_1: left promiscuous mode [ 58.856212][ T334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.863755][ T334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.876721][ T334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.884362][ T334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.906379][ T334] veth1_macvtap: left promiscuous mode [ 58.911998][ T334] veth0_macvtap: left promiscuous mode [ 58.917705][ T334] veth1_vlan: left promiscuous mode [ 58.923021][ T334] veth0_vlan: left promiscuous mode [ 59.094002][ T334] team0 (unregistering): Port device team_slave_1 removed [ 59.116170][ T334] team0 (unregistering): Port device team_slave_0 removed [ 59.228090][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.235289][ T4462] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.254413][ T4462] bridge_slave_0: entered allmulticast mode [ 59.271955][ T4462] bridge_slave_0: entered promiscuous mode [ 59.292386][ T4462] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.299619][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.313899][ T4462] bridge_slave_1: entered allmulticast mode [ 59.320629][ T4462] bridge_slave_1: entered promiscuous mode [ 59.360859][ T4462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.381887][ T4462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.426771][ T4462] team0: Port device team_slave_0 added [ 59.441319][ T4462] team0: Port device team_slave_1 added [ 59.498475][ T4462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.505543][ T4462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.531611][ T4462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.565809][ T4462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.572834][ T4462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.598981][ T4462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.628774][ T4462] hsr_slave_0: entered promiscuous mode [ 59.654247][ T4462] hsr_slave_1: entered promiscuous mode [ 59.686150][ T4462] debugfs: 'hsr0' already exists in 'hsr' [ 59.691975][ T4462] Cannot create hsr debugfs directory [ 59.898064][ T4548] loop4: detected capacity change from 0 to 512 [ 59.961361][ T4548] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.986757][ T4462] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 59.997408][ T4462] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 60.007234][ T4462] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 60.039384][ T4462] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 60.115431][ T4575] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 60.186951][ T4462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.226825][ T4462] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.237111][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.244290][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.270038][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.277213][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.306157][ T4590] netlink: 76 bytes leftover after parsing attributes in process `syz.4.348'. [ 60.321330][ T4592] loop1: detected capacity change from 0 to 1024 [ 60.467035][ T4462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.495749][ T4613] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 60.757433][ T4462] veth0_vlan: entered promiscuous mode [ 60.770409][ T4462] veth1_vlan: entered promiscuous mode [ 60.790277][ T4462] veth0_macvtap: entered promiscuous mode [ 60.803315][ T4462] veth1_macvtap: entered promiscuous mode [ 60.833421][ T4462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.850626][ T4462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.862410][ T53] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.889272][ T4659] loop1: detected capacity change from 0 to 256 [ 60.905464][ T53] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.920806][ T4663] loop2: detected capacity change from 0 to 128 [ 60.925200][ T53] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.939030][ T4663] EXT4-fs: Ignoring removed nobh option [ 60.974883][ T4663] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.990619][ T53] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.069083][ T3425] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 61.076723][ T3425] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 61.084292][ T3425] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 61.099357][ T3425] hid-generic 0003:0003:0000.0001: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 61.141941][ T4679] l2tp_ppp: sess 2/0: no socket in recv [ 61.189514][ T4676] fido_id[4676]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.563078][ T4706] loop1: detected capacity change from 0 to 256 [ 61.660679][ T4706] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.744712][ T4706] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.821308][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 61.821328][ T29] audit: type=1400 audit(1769102987.076:575): avc: denied { connect } for pid=4724 comm="syz.1.371" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.849993][ T4722] loop4: detected capacity change from 0 to 256 [ 61.892135][ T4722] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.893199][ T29] audit: type=1400 audit(1769102987.106:576): avc: denied { write } for pid=4724 comm="syz.1.371" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.034702][ T29] audit: type=1400 audit(1769102987.296:577): avc: denied { ioctl } for pid=4731 comm="syz.1.373" path="socket:[9149]" dev="sockfs" ino=9149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.104783][ T4741] loop4: detected capacity change from 0 to 128 [ 62.227168][ T3399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.257474][ T3399] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.305364][ T4749] syz.4.374: attempt to access beyond end of device [ 62.305364][ T4749] loop4: rw=2049, sector=537, nr_sectors = 16 limit=128 [ 62.319530][ T4741] syz.4.374: attempt to access beyond end of device [ 62.319530][ T4741] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 62.334204][ T4749] syz.4.374: attempt to access beyond end of device [ 62.334204][ T4749] loop4: rw=2049, sector=561, nr_sectors = 8 limit=128 [ 62.348809][ T4741] syz.4.374: attempt to access beyond end of device [ 62.348809][ T4741] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 62.363067][ T4749] syz.4.374: attempt to access beyond end of device [ 62.363067][ T4749] loop4: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 62.378144][ T29] audit: type=1400 audit(1769102987.606:578): avc: denied { write } for pid=4754 comm="syz.6.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.471162][ T4741] syz.4.374: attempt to access beyond end of device [ 62.471162][ T4741] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 62.480620][ T4749] syz.4.374: attempt to access beyond end of device [ 62.480620][ T4749] loop4: rw=2049, sector=609, nr_sectors = 8 limit=128 [ 62.502814][ T4741] syz.4.374: attempt to access beyond end of device [ 62.502814][ T4741] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 62.516767][ T4741] syz.4.374: attempt to access beyond end of device [ 62.516767][ T4741] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 62.532370][ T4741] syz.4.374: attempt to access beyond end of device [ 62.532370][ T4741] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 62.601245][ T4759] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 62.814187][ T29] audit: type=1400 audit(1769102988.056:579): avc: denied { ioctl } for pid=4765 comm="syz.2.383" path="socket:[9202]" dev="sockfs" ino=9202 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.838822][ T29] audit: type=1400 audit(1769102988.066:580): avc: denied { bind } for pid=4765 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.905843][ T29] audit: type=1400 audit(1769102988.166:581): avc: denied { read } for pid=4772 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.986014][ T29] audit: type=1400 audit(1769102988.246:582): avc: denied { create } for pid=4782 comm="syz.6.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.011250][ T3399] IPVS: starting estimator thread 0... [ 63.076866][ T4786] loop6: detected capacity change from 0 to 512 [ 63.103787][ T4784] IPVS: using max 2016 ests per chain, 100800 per kthread [ 63.136846][ T4786] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.272557][ T4800] loop2: detected capacity change from 0 to 128 [ 63.309723][ T4800] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.547745][ T4806] loop4: detected capacity change from 0 to 512 [ 63.667070][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.395'. [ 63.715166][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.395'. [ 63.902507][ T4815] loop2: detected capacity change from 0 to 2048 [ 63.933474][ T4813] SELinux: failed to load policy [ 63.939480][ T29] audit: type=1400 audit(1769102989.186:583): avc: denied { load_policy } for pid=4812 comm="syz.5.396" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 64.040549][ T4815] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.397'. [ 64.075929][ T4806] Set syz1 is full, maxelem 65536 reached [ 64.159723][ T4821] loop6: detected capacity change from 0 to 128 [ 64.173544][ T4821] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.530945][ T29] audit: type=1400 audit(1769102989.786:584): avc: denied { connect } for pid=4838 comm="syz.6.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.322874][ T4854] loop2: detected capacity change from 0 to 1024 [ 65.353032][ T4854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.458526][ T4845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.522814][ T4845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.786278][ T4892] loop5: detected capacity change from 0 to 1024 [ 65.796767][ T4893] loop2: detected capacity change from 0 to 2048 [ 65.807675][ T4892] EXT4-fs: inline encryption not supported [ 65.820818][ T4889] SELinux: failed to load policy [ 65.871182][ T3309] Alternate GPT is invalid, using primary GPT. [ 65.877633][ T3309] loop2: p1 p2 p3 [ 65.881387][ T3309] loop2: partition table partially beyond EOD, truncated [ 65.905349][ T4892] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 65.949385][ T4893] Alternate GPT is invalid, using primary GPT. [ 65.955744][ T4893] loop2: p1 p2 p3 [ 65.959489][ T4893] loop2: partition table partially beyond EOD, truncated [ 65.975841][ T4892] EXT4-fs (loop5): Remounting filesystem read-only [ 66.456645][ T4925] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.632871][ T4934] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.661835][ T4934] EXT4-fs (loop2): 1 truncate cleaned up [ 66.676022][ T4934] xt_hashlimit: size too large, truncated to 1048576 [ 66.876909][ T4951] set_capacity_and_notify: 2 callbacks suppressed [ 66.876962][ T4951] loop5: detected capacity change from 0 to 128 [ 66.901361][ T4951] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.984379][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 66.984396][ T29] audit: type=1400 audit(1769102992.246:593): avc: denied { create } for pid=4960 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.012560][ T4961] lo speed is unknown, defaulting to 1000 [ 67.018450][ T4961] lo speed is unknown, defaulting to 1000 [ 67.024929][ T29] audit: type=1400 audit(1769102992.266:594): avc: denied { write } for pid=4960 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.045332][ T4961] lo speed is unknown, defaulting to 1000 [ 67.052719][ T4961] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.068718][ T29] audit: type=1400 audit(1769102992.326:595): avc: denied { bind } for pid=4964 comm="syz.5.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.074701][ T4961] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 67.120603][ T29] audit: type=1400 audit(1769102992.356:596): avc: denied { setopt } for pid=4964 comm="syz.5.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.151496][ T4969] loop5: detected capacity change from 0 to 1024 [ 67.152214][ T4961] lo speed is unknown, defaulting to 1000 [ 67.164724][ T4961] lo speed is unknown, defaulting to 1000 [ 67.170971][ T4961] lo speed is unknown, defaulting to 1000 [ 67.177735][ T4961] lo speed is unknown, defaulting to 1000 [ 67.184365][ T4961] lo speed is unknown, defaulting to 1000 [ 67.209407][ T4969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.216795][ T4969] IPv6: NLM_F_CREATE should be set when creating new route [ 67.224178][ T4969] IPv6: NLM_F_CREATE should be set when creating new route [ 67.231401][ T4969] IPv6: NLM_F_CREATE should be set when creating new route [ 67.248244][ T29] audit: type=1326 audit(1769102992.506:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.6.457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc2aedacb9 code=0x0 [ 67.313597][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c8dfa00: rx timeout, send abort [ 67.317340][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.459'. [ 67.348804][ T4979] lo speed is unknown, defaulting to 1000 [ 67.813583][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c8df800: rx timeout, send abort [ 67.821901][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c8dfa00: abort rx timeout. Force session deactivation [ 67.932368][ T4998] loop5: detected capacity change from 0 to 1024 [ 67.942525][ T4998] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.028559][ T5003] loop5: detected capacity change from 0 to 7 [ 68.041497][ T3305] loop5: [ 68.051006][ T5003] loop5: [ 68.111713][ T29] audit: type=1400 audit(1769102993.366:598): avc: denied { create } for pid=5006 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 68.144836][ T29] audit: type=1400 audit(1769102993.376:599): avc: denied { ioctl } for pid=5008 comm="syz.6.471" path="socket:[10556]" dev="sockfs" ino=10556 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.321861][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c8df800: abort rx timeout. Force session deactivation [ 68.371469][ T5023] loop6: detected capacity change from 0 to 512 [ 68.378970][ T5021] loop2: detected capacity change from 0 to 1024 [ 68.395395][ T5021] EXT4-fs: Ignoring removed bh option [ 68.405266][ T5023] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.439905][ T5021] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 68.458202][ T5021] EXT4-fs (loop2): Remounting filesystem read-only [ 68.465115][ T5021] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 68.552235][ T5029] loop5: detected capacity change from 0 to 512 [ 68.564102][ T5029] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 68.586215][ T5029] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.594352][ T5029] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 68.614258][ T5029] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 68.633383][ T5029] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #13: comm syz.5.478: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 68.670774][ T29] audit: type=1400 audit(1769102993.926:600): avc: denied { create } for pid=5033 comm="syz.6.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.704983][ T5029] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.478: couldn't read orphan inode 13 (err -117) [ 68.746334][ T29] audit: type=1400 audit(1769102993.956:601): avc: denied { bind } for pid=5033 comm="syz.6.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.766235][ T29] audit: type=1400 audit(1769102993.956:602): avc: denied { connect } for pid=5033 comm="syz.6.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.791275][ T5029] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.478: deleted inode referenced: 12 [ 69.101574][ T5066] netlink: 12 bytes leftover after parsing attributes in process `syz.6.493'. [ 69.110983][ T5068] loop5: detected capacity change from 0 to 512 [ 69.289474][ T5080] loop2: detected capacity change from 0 to 512 [ 69.296254][ T5080] EXT4-fs: Ignoring removed nobh option [ 69.306169][ T5080] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.351186][ T5086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.501'. [ 69.352644][ T5080] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.500: corrupted inode contents [ 69.360634][ T5086] bridge_slave_1: left allmulticast mode [ 69.377624][ T5086] bridge_slave_1: left promiscuous mode [ 69.383688][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.390743][ T5080] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #18: comm syz.2.500: mark_inode_dirty error [ 69.404947][ T5086] bridge_slave_0: left allmulticast mode [ 69.410647][ T5086] bridge_slave_0: left promiscuous mode [ 69.416448][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.441088][ T5080] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.500: corrupted inode contents [ 69.453646][ T5080] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #18: comm syz.2.500: mark_inode_dirty error [ 69.466493][ T5080] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #18: comm syz.2.500: mark inode dirty (error -117) [ 69.479765][ T5080] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 69.612403][ T5103] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.690539][ T5103] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.731746][ T5114] loop1: detected capacity change from 0 to 1024 [ 69.752414][ T5103] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.757335][ T5114] EXT4-fs: Ignoring removed bh option [ 69.817649][ T5114] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 69.832405][ T5114] EXT4-fs (loop1): Remounting filesystem read-only [ 69.843636][ T5103] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.856428][ T5114] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 69.943115][ T4804] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.955585][ T4804] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.968933][ T4804] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.000472][ T4804] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.016198][ T5129] EXT4-fs: Ignoring removed bh option [ 70.021953][ T5129] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 70.047800][ T5129] EXT4-fs (loop2): 1 truncate cleaned up [ 70.081357][ T5134] syzkaller0: entered promiscuous mode [ 70.086983][ T5134] syzkaller0: entered allmulticast mode [ 70.120459][ T5137] netlink: 4 bytes leftover after parsing attributes in process `syz.6.519'. [ 70.138279][ T5137] bridge_slave_1: left allmulticast mode [ 70.144130][ T5137] bridge_slave_1: left promiscuous mode [ 70.150179][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.173390][ T5137] bridge_slave_0: left allmulticast mode [ 70.179252][ T5137] bridge_slave_0: left promiscuous mode [ 70.185083][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.199076][ T5139] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.520: bad orphan inode 134217728 [ 70.490547][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 70.501722][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 70.532519][ T5151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.525'. [ 70.657752][ T5163] EXT4-fs: inline encryption not supported [ 70.673264][ T5163] EXT4-fs: Ignoring removed nobh option [ 70.679178][ T5163] EXT4-fs: Ignoring removed bh option [ 70.694391][ T5163] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 70.711369][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'. [ 71.181088][ T5209] EXT4-fs: Ignoring removed bh option [ 71.206657][ T5209] EXT4-fs mount: 60 callbacks suppressed [ 71.206674][ T5209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.226048][ T5209] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.239588][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.251487][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.355496][ T5215] EXT4-fs: Ignoring removed oldalloc option [ 71.368617][ T5215] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.546: Parent and EA inode have the same ino 15 [ 71.385807][ T5215] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.546: Parent and EA inode have the same ino 15 [ 71.398921][ T5215] EXT4-fs (loop1): 1 orphan inode deleted [ 71.405344][ T5215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.431500][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.753146][ T5232] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÛß% [ 71.786099][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.877878][ T5256] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.892783][ T5256] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 71.903268][ T5256] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 71.911532][ T5256] System zones: 1-12 [ 71.917213][ T5256] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.556: corrupted in-inode xattr: e_value size too large [ 71.932177][ T5256] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.556: couldn't read orphan inode 15 (err -117) [ 71.945068][ T5256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.963152][ T5256] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.556: Unrecognised inode hash code 4 [ 71.974516][ T5256] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.556: Corrupt directory, running e2fsck is recommended [ 71.988857][ T5256] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.556: Unrecognised inode hash code 4 [ 72.000299][ T5256] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.556: Corrupt directory, running e2fsck is recommended [ 72.028373][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.158293][ T5277] set_capacity_and_notify: 6 callbacks suppressed [ 72.158313][ T5277] loop5: detected capacity change from 0 to 2048 [ 72.195807][ T5277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.210101][ T5277] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.558: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 72.238851][ T5277] lo speed is unknown, defaulting to 1000 [ 72.435986][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 72.581531][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 72.581549][ T29] audit: type=1326 audit(1769102997.836:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6cf0acb9 code=0x7ffc0000 [ 72.615854][ T29] audit: type=1326 audit(1769102997.836:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6cf0acb9 code=0x7ffc0000 [ 72.639441][ T29] audit: type=1326 audit(1769102997.836:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f2c6cf0acb9 code=0x7ffc0000 [ 72.663107][ T29] audit: type=1326 audit(1769102997.836:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6cf0acb9 code=0x7ffc0000 [ 72.686507][ T29] audit: type=1326 audit(1769102997.846:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c6cf0acb9 code=0x7ffc0000 [ 72.699408][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 72.709772][ T29] audit: type=1326 audit(1769102997.846:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6cf0acb9 code=0x7ffc0000 [ 72.741964][ T29] audit: type=1326 audit(1769102997.846:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c6cf0acb9 code=0x7ffc0000 [ 72.765464][ T29] audit: type=1326 audit(1769102997.846:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6cf0acb9 code=0x7ffc0000 [ 72.789139][ T29] audit: type=1326 audit(1769102997.846:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2c6cf0acb9 code=0x7ffc0000 [ 72.812450][ T29] audit: type=1326 audit(1769102997.846:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6cf0acb9 code=0x7ffc0000 [ 72.917000][ T5332] program syz.2.572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.972864][ T5334] loop1: detected capacity change from 0 to 512 [ 72.988109][ T3863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.989475][ T5334] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.005474][ T5334] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 73.042007][ T5334] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 73.053276][ T5334] System zones: 1-12 [ 73.057985][ T5334] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.573: corrupted in-inode xattr: e_value size too large [ 73.073961][ T5334] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.573: couldn't read orphan inode 15 (err -117) [ 73.086962][ T5334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.106993][ T5334] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.573: Unrecognised inode hash code 4 [ 73.118334][ T5334] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.573: Corrupt directory, running e2fsck is recommended [ 73.131663][ T5334] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.573: Unrecognised inode hash code 4 [ 73.143020][ T5334] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.573: Corrupt directory, running e2fsck is recommended [ 73.193340][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.380337][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.590'. [ 73.562620][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 73.706823][ T5403] loop1: detected capacity change from 0 to 512 [ 73.713479][ T5403] EXT4-fs: Ignoring removed nobh option [ 73.732142][ T5403] EXT4-fs (loop1): 1 orphan inode deleted [ 73.738895][ T5403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.788769][ T3316] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 73.814277][ T3316] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 73.839810][ T3316] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 73.878963][ T5110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.931205][ T5419] loop6: detected capacity change from 0 to 764 [ 73.948226][ T5419] Symlink component flag not implemented [ 73.954215][ T5419] Symlink component flag not implemented (116) [ 74.102733][ T5428] netlink: 16 bytes leftover after parsing attributes in process `syz.6.615'. [ 74.112486][ T5428] netlink: 16 bytes leftover after parsing attributes in process `syz.6.615'. [ 74.145311][ T5430] syzkaller1: entered promiscuous mode [ 74.150875][ T5430] syzkaller1: entered allmulticast mode [ 74.242521][ T5431] lo speed is unknown, defaulting to 1000 [ 74.291722][ T5441] loop6: detected capacity change from 0 to 8192 [ 74.315620][ T5431] chnl_net:caif_netlink_parms(): no params data found [ 74.328844][ T5441] bio_check_eod: 83 callbacks suppressed [ 74.328863][ T5441] syz.6.617: attempt to access beyond end of device [ 74.328863][ T5441] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 74.369799][ T5431] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.377093][ T5431] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.384533][ T5431] bridge_slave_0: entered allmulticast mode [ 74.391203][ T5431] bridge_slave_0: entered promiscuous mode [ 74.398447][ T5431] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.405659][ T5431] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.412913][ T5431] bridge_slave_1: entered allmulticast mode [ 74.419664][ T5431] bridge_slave_1: entered promiscuous mode [ 74.437146][ T5431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.447874][ T5431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.467876][ T5431] team0: Port device team_slave_0 added [ 74.474739][ T5431] team0: Port device team_slave_1 added [ 74.494057][ T5431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.501086][ T5431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.527155][ T5431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.543103][ T4462] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 74.550253][ T5431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.551326][ T4462] FAT-fs (loop6): Filesystem has been set read-only [ 74.558266][ T5431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.590913][ T5431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.664453][ T5454] loop6: detected capacity change from 0 to 2048 [ 74.680224][ T5431] hsr_slave_0: entered promiscuous mode [ 74.687339][ T5431] hsr_slave_1: entered promiscuous mode [ 74.693532][ T5431] debugfs: 'hsr0' already exists in 'hsr' [ 74.699378][ T5431] Cannot create hsr debugfs directory [ 74.724883][ T5454] loop6: p2 < > p3 < p5 > p4 [ 74.729677][ T5454] loop6: partition table partially beyond EOD, truncated [ 74.793316][ T5431] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 74.800546][ T5454] loop6: p2 start 4278190080 is beyond EOD, truncated [ 74.808464][ T5454] loop6: p4 size 8192 extends beyond EOD, truncated [ 74.815966][ T5454] loop6: p5 size 8192 extends beyond EOD, truncated [ 74.843230][ T5431] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 74.858750][ T5431] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 74.868142][ T5431] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 74.955478][ T5431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.969161][ T5431] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.979369][ T405] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.986554][ T405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.998876][ T4088] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.005983][ T4088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.076073][ T5431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.192132][ T5431] veth0_vlan: entered promiscuous mode [ 75.200863][ T5431] veth1_vlan: entered promiscuous mode [ 75.219922][ T5431] veth0_macvtap: entered promiscuous mode [ 75.227828][ T5431] veth1_macvtap: entered promiscuous mode [ 75.240386][ T5431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.252835][ T5431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.265157][ T61] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.274149][ T61] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.283027][ T61] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.292787][ T61] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.833019][ T5522] lo speed is unknown, defaulting to 1000 [ 75.839126][ T5530] loop7: detected capacity change from 0 to 512 [ 75.845867][ T5532] loop5: detected capacity change from 0 to 1024 [ 75.853312][ T5530] EXT4-fs: Invalid want_extra_isize 64870 [ 75.875358][ T5532] EXT4-fs: Ignoring removed bh option [ 75.918663][ T5532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.945318][ T5532] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.642: Allocating blocks 385-513 which overlap fs metadata [ 76.024232][ T5539] loop7: detected capacity change from 0 to 8192 [ 76.024247][ T5542] SET target dimension over the limit! [ 76.054418][ T5532] EXT4-fs (loop5): pa ffff8881072715b0: logic 16, phys. 129, len 24 [ 76.062522][ T5532] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 76.165792][ T3863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.314121][ T5551] netlink: 12 bytes leftover after parsing attributes in process `syz.7.657'. [ 76.370930][ T5553] loop5: detected capacity change from 0 to 512 [ 76.500508][ T5553] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.522188][ T5553] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.527638][ T5562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.560161][ T5562] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 76.594630][ T3863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.692895][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.739093][ T5572] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.653: bad orphan inode 134217728 [ 76.754468][ T5572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.915987][ T5583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 76.957277][ T5585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.971021][ T5585] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.177252][ T3863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.237646][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.264741][ T5603] set_capacity_and_notify: 3 callbacks suppressed [ 77.264761][ T5603] loop5: detected capacity change from 0 to 512 [ 77.294463][ T5603] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 77.305898][ T5603] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.666: invalid indirect mapped block 2683928664 (level 1) [ 77.320389][ T5603] EXT4-fs (loop5): Remounting filesystem read-only [ 77.331498][ T5603] EXT4-fs (loop5): 1 truncate cleaned up [ 77.337986][ T5603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.376845][ T3863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.507406][ T5618] program syz.7.672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.586927][ T5631] netlink: 'syz.5.675': attribute type 29 has an invalid length. [ 77.596907][ T5631] netlink: 'syz.5.675': attribute type 29 has an invalid length. [ 77.606665][ T5631] netlink: 500 bytes leftover after parsing attributes in process `syz.5.675'. [ 77.717109][ T5639] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.755272][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 77.755288][ T29] audit: type=1326 audit(1769103003.016:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 77.798414][ T5627] loop7: detected capacity change from 0 to 2048 [ 77.812716][ T5639] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.815979][ T29] audit: type=1326 audit(1769103003.046:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 77.825372][ T5646] loop2: detected capacity change from 0 to 1024 [ 77.846409][ T29] audit: type=1326 audit(1769103003.046:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 77.859678][ T5646] EXT4-fs: Ignoring removed nobh option [ 77.876100][ T29] audit: type=1326 audit(1769103003.046:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 77.881821][ T5646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.905486][ T29] audit: type=1326 audit(1769103003.046:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4f671aa22 code=0x7ffc0000 [ 77.934960][ T29] audit: type=1326 audit(1769103003.056:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff4f66db58e code=0x7ffc0000 [ 77.958137][ T29] audit: type=1326 audit(1769103003.056:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff4f671aae7 code=0x7ffc0000 [ 77.984877][ T5646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.998795][ T29] audit: type=1326 audit(1769103003.086:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4f66db58e code=0x7ffc0000 [ 78.022234][ T29] audit: type=1326 audit(1769103003.086:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff4f671a94b code=0x7ffc0000 [ 78.045515][ T29] audit: type=1326 audit(1769103003.116:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff4f66db58e code=0x7ffc0000 [ 78.084306][ T5627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 78.100570][ T5639] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.136849][ T5639] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.150302][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.166625][ T5627] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 78.181788][ T5627] EXT4-fs (loop7): Remounting filesystem read-only [ 78.202191][ T61] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.243453][ T61] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.267977][ T61] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.306405][ T61] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.321872][ T5664] lo speed is unknown, defaulting to 1000 [ 78.447519][ T5678] loop6: detected capacity change from 0 to 1024 [ 78.477203][ T5678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.597135][ T4462] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.843359][ T5695] loop6: detected capacity change from 0 to 512 [ 78.850734][ T5695] EXT4-fs: Ignoring removed nobh option [ 78.857519][ T5695] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 78.886514][ T5431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 78.902680][ T5695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 78.923858][ T5695] System zones: 1-12 [ 78.928438][ T5695] EXT4-fs (loop6): 1 truncate cleaned up [ 78.934954][ T5695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.981306][ T4462] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.257360][ T5714] loop7: detected capacity change from 0 to 16384 [ 79.521468][ T5729] loop7: detected capacity change from 0 to 1024 [ 79.525420][ T5730] loop5: detected capacity change from 0 to 1024 [ 79.538229][ T5729] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.561966][ T5730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.580291][ T5729] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 79.604214][ T3863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.665759][ T5431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.696880][ T5742] netlink: 'syz.5.714': attribute type 29 has an invalid length. [ 79.706251][ T5742] netlink: 'syz.5.714': attribute type 29 has an invalid length. [ 79.723284][ T5742] netlink: 500 bytes leftover after parsing attributes in process `syz.5.714'. [ 79.778396][ T5746] loop5: detected capacity change from 0 to 8192 [ 80.035524][ T5749] loop6: detected capacity change from 0 to 4096 [ 80.054923][ T5749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.191195][ T5757] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.718: corrupted in-inode xattr: e_value size too large [ 80.206253][ T5757] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.718: couldn't read orphan inode 15 (err -117) [ 80.220305][ T5757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.283256][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.718'. [ 80.325615][ T4462] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.340174][ T3863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.429895][ T5766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.445739][ T5766] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.720: missing EA_INODE flag [ 80.458183][ T5766] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.720: error while reading EA inode 11 err=-117 [ 80.579746][ T4462] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.587151][ T5770] netlink: 'syz.5.732': attribute type 1 has an invalid length. [ 80.596480][ T5770] netlink: 224 bytes leftover after parsing attributes in process `syz.5.732'. [ 80.656785][ T5781] netlink: 'syz.7.724': attribute type 1 has an invalid length. [ 80.668373][ T5783] netlink: 'syz.6.722': attribute type 10 has an invalid length. [ 80.676411][ T5783] netlink: 40 bytes leftover after parsing attributes in process `syz.6.722'. [ 80.686802][ T5783] batman_adv: batadv0: Adding interface: veth1_vlan [ 80.693544][ T5783] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.719407][ T5783] batman_adv: batadv0: Interface activated: veth1_vlan [ 80.816921][ T5791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.905525][ T5431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.126316][ T3305] loop2: p2 < > p3 < p5 > p4 [ 81.131103][ T3305] loop2: partition table partially beyond EOD, truncated [ 81.161194][ T5806] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.166959][ T3305] loop2: p2 start 4278190080 is beyond EOD, truncated [ 81.194356][ T3305] loop2: p4 size 8192 extends beyond EOD, truncated [ 81.202056][ T3305] loop2: p5 size 8192 extends beyond EOD, truncated [ 81.217485][ T5805] loop2: p2 < > p3 < p5 > p4 [ 81.222259][ T5805] loop2: partition table partially beyond EOD, truncated [ 81.243982][ T5805] loop2: p2 start 4278190080 is beyond EOD, truncated [ 81.251535][ T5805] loop2: p4 size 8192 extends beyond EOD, truncated [ 81.271617][ T5805] loop2: p5 size 8192 extends beyond EOD, truncated [ 81.390504][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 81.410884][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 81.421083][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 81.457125][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 81.468437][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 81.479718][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 81.687580][ T4462] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.434538][ T5846] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.529410][ T5846] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.570080][ T5846] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.584304][ T5844] set_capacity_and_notify: 5 callbacks suppressed [ 82.584323][ T5844] loop5: detected capacity change from 0 to 2048 [ 82.616655][ T5844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 82.618178][ T5846] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.663291][ T61] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.688401][ T61] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.705826][ T5844] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 82.708100][ T61] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.733800][ T61] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.742264][ T5844] EXT4-fs (loop5): Remounting filesystem read-only [ 82.859424][ T5856] loop7: detected capacity change from 0 to 2048 [ 82.933903][ T3305] loop7: p2 < > p3 < p5 > p4 [ 82.938682][ T3305] loop7: partition table partially beyond EOD, truncated [ 82.947196][ T3305] loop7: p2 start 4278190080 is beyond EOD, truncated [ 82.958018][ T3305] loop7: p4 size 8192 extends beyond EOD, truncated [ 82.973045][ T3305] loop7: p5 size 8192 extends beyond EOD, truncated [ 83.004876][ T5856] loop7: p2 < > p3 < p5 > p4 [ 83.009711][ T5856] loop7: partition table partially beyond EOD, truncated [ 83.037295][ T5870] loop6: detected capacity change from 0 to 2048 [ 83.055918][ T5870] EXT4-fs: Ignoring removed bh option [ 83.095913][ T5856] loop7: p2 start 4278190080 is beyond EOD, truncated [ 83.105620][ T5870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.164854][ T5856] loop7: p4 size 8192 extends beyond EOD, truncated [ 83.172633][ T5856] loop7: p5 size 8192 extends beyond EOD, truncated [ 83.278868][ T4462] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.299762][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 83.300339][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 83.317430][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 83.335446][ T10] IPVS: starting estimator thread 0... [ 83.375988][ T3863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 83.415312][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 83.415331][ T29] audit: type=1326 audit(1769103008.676:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2aedacb9 code=0x7ffc0000 [ 83.445557][ T5881] IPVS: using max 2256 ests per chain, 112800 per kthread [ 83.458245][ T29] audit: type=1326 audit(1769103008.706:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2aedacb9 code=0x7ffc0000 [ 83.481728][ T29] audit: type=1326 audit(1769103008.706:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2aedacb9 code=0x7ffc0000 [ 83.505062][ T29] audit: type=1326 audit(1769103008.706:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2aedacb9 code=0x7ffc0000 [ 83.528476][ T29] audit: type=1326 audit(1769103008.716:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fdc2aedacb9 code=0x7ffc0000 [ 83.549106][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 83.552015][ T29] audit: type=1326 audit(1769103008.716:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2aedacb9 code=0x7ffc0000 [ 83.584981][ T29] audit: type=1326 audit(1769103008.716:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2aedacb9 code=0x7ffc0000 [ 83.608305][ T29] audit: type=1326 audit(1769103008.716:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2aedacb9 code=0x7ffc0000 [ 83.631681][ T29] audit: type=1326 audit(1769103008.716:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fdc2aedacb9 code=0x7ffc0000 [ 83.655089][ T29] audit: type=1326 audit(1769103008.716:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2aedacb9 code=0x7ffc0000 [ 84.009859][ T5899] loop5: detected capacity change from 0 to 512 [ 84.024338][ T5899] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 84.075720][ T5899] EXT4-fs (loop5): 1 orphan inode deleted [ 84.081511][ T5899] EXT4-fs (loop5): 1 truncate cleaned up [ 84.104263][ T5899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.130651][ T5899] EXT4-fs (loop5): shut down requested (2) [ 84.205737][ T5899] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.323351][ T5911] loop5: detected capacity change from 0 to 2048 [ 84.364095][ T3305] loop5: p2 < > p3 < p5 > p4 [ 84.368920][ T3305] loop5: partition table partially beyond EOD, truncated [ 84.376500][ T3305] loop5: p2 start 4278190080 is beyond EOD, truncated [ 84.392469][ T3305] loop5: p4 size 8192 extends beyond EOD, truncated [ 84.400272][ T3305] loop5: p5 size 8192 extends beyond EOD, truncated [ 84.413309][ T5911] loop5: p2 < > p3 < p5 > p4 [ 84.418087][ T5911] loop5: partition table partially beyond EOD, truncated [ 84.426103][ T5911] loop5: p2 start 4278190080 is beyond EOD, truncated [ 84.434524][ T5911] loop5: p4 size 8192 extends beyond EOD, truncated [ 84.443045][ T5911] loop5: p5 size 8192 extends beyond EOD, truncated [ 84.458733][ T3004] loop5: p2 < > p3 < p5 > p4 [ 84.463496][ T3004] loop5: partition table partially beyond EOD, truncated [ 84.471048][ T3004] loop5: p2 start 4278190080 is beyond EOD, truncated [ 84.478834][ T3004] loop5: p4 size 8192 extends beyond EOD, truncated [ 84.486807][ T3004] loop5: p5 size 8192 extends beyond EOD, truncated [ 84.585744][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.7.773'. [ 84.615302][ T5925] l2tp_ppp: sess 2/0: no socket in recv [ 84.933578][ T5935] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.985893][ T5935] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.037071][ T5935] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.089502][ T5935] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.219777][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.247228][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.274360][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.304052][ T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.337485][ T5954] loop6: detected capacity change from 0 to 1024 [ 85.350134][ T5954] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.369772][ T5954] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 85.378202][ T5954] EXT4-fs (loop6): orphan cleanup on readonly fs [ 85.384944][ T5954] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.786: Freeing blocks not in datazone - block = 0, count = 4096 [ 85.398838][ T5954] EXT4-fs (loop6): 1 orphan inode deleted [ 85.405351][ T5954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.509342][ T5961] lo speed is unknown, defaulting to 1000 [ 85.646430][ T4462] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.719960][ T5970] loop2: detected capacity change from 0 to 1024 [ 85.740718][ T5970] EXT4-fs: Ignoring removed bh option [ 85.762161][ T5970] ext4: Unknown parameter 'smackfsroot' [ 85.839466][ T5976] lo speed is unknown, defaulting to 1000 [ 85.855379][ T1595] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.916914][ T1595] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.975782][ T1595] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.045695][ T1595] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.335717][ T5986] loop2: detected capacity change from 0 to 4096 [ 86.390540][ T5986] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 86.410616][ T1595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.420751][ T1595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.439506][ T1595] bond0 (unregistering): Released all slaves [ 86.547054][ T1595] hsr_slave_0: left promiscuous mode [ 86.548913][ T5986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.565632][ T1595] hsr_slave_1: left promiscuous mode [ 86.625606][ T1595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.633069][ T1595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.717530][ T1595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.725099][ T1595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.756615][ T5961] Set syz1 is full, maxelem 65536 reached [ 86.763288][ T1595] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 86.770448][ T1595] batman_adv: batadv0: Removing interface: veth1_vlan [ 86.797794][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.813123][ T1595] veth1_macvtap: left promiscuous mode [ 86.821729][ T1595] veth0_macvtap: left promiscuous mode [ 86.827668][ T1595] veth1_vlan: left promiscuous mode [ 86.833042][ T1595] veth0_vlan: left promiscuous mode [ 87.006018][ T1595] team0 (unregistering): Port device team_slave_1 removed [ 87.017196][ T1595] team0 (unregistering): Port device team_slave_0 removed [ 87.025045][ T61] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 87.085409][ T6037] loop7: detected capacity change from 0 to 128 [ 87.194832][ T405] kworker/u8:7: attempt to access beyond end of device [ 87.194832][ T405] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 87.216285][ T405] kworker/u8:7: attempt to access beyond end of device [ 87.216285][ T405] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 87.244706][ T405] kworker/u8:7: attempt to access beyond end of device [ 87.244706][ T405] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 87.261809][ T6008] lo speed is unknown, defaulting to 1000 [ 87.273859][ T405] kworker/u8:7: attempt to access beyond end of device [ 87.273859][ T405] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 87.304938][ T405] kworker/u8:7: attempt to access beyond end of device [ 87.304938][ T405] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 87.329134][ T405] kworker/u8:7: attempt to access beyond end of device [ 87.329134][ T405] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 87.349675][ T1595] IPVS: stop unused estimator thread 0... [ 87.368790][ T405] kworker/u8:7: attempt to access beyond end of device [ 87.368790][ T405] loop7: rw=1, sector=241, nr_sectors = 8 limit=128 [ 87.407983][ T405] kworker/u8:7: attempt to access beyond end of device [ 87.407983][ T405] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 87.472800][ T405] kworker/u8:7: attempt to access beyond end of device [ 87.472800][ T405] loop7: rw=1, sector=273, nr_sectors = 8 limit=128 [ 87.515277][ T6008] chnl_net:caif_netlink_parms(): no params data found [ 87.522468][ T405] kworker/u8:7: attempt to access beyond end of device [ 87.522468][ T405] loop7: rw=1, sector=289, nr_sectors = 8 limit=128 [ 87.584119][ T6074] loop7: detected capacity change from 0 to 512 [ 87.603264][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.610466][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.625184][ T6008] bridge_slave_0: entered allmulticast mode [ 87.625930][ T6074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.632958][ T6008] bridge_slave_0: entered promiscuous mode [ 87.651369][ T6074] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.694309][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.701437][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.714202][ T6008] bridge_slave_1: entered allmulticast mode [ 87.721189][ T6008] bridge_slave_1: entered promiscuous mode [ 87.749952][ T6079] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 87.775409][ T6008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.791012][ T6008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.819745][ T6008] team0: Port device team_slave_0 added [ 87.826618][ T6008] team0: Port device team_slave_1 added [ 87.855786][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.862858][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.888979][ T6008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.912083][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.919174][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.945325][ T6008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.968825][ T5431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.025633][ T6095] l2tp_ppp: sess 2/0: no socket in recv [ 88.078175][ T6008] hsr_slave_0: entered promiscuous mode [ 88.104409][ T6008] hsr_slave_1: entered promiscuous mode [ 88.118195][ T6008] debugfs: 'hsr0' already exists in 'hsr' [ 88.124407][ T6008] Cannot create hsr debugfs directory [ 88.317381][ T6112] loop5: detected capacity change from 0 to 256 [ 88.335067][ T6112] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.348166][ T6008] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 88.365053][ T6112] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.390884][ T6008] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 88.416253][ T6008] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 88.444420][ T6008] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 88.555303][ T6008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.594709][ T6136] loop5: detected capacity change from 0 to 512 [ 88.602626][ T6136] EXT4-fs: Ignoring removed bh option [ 88.636435][ T6136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.654033][ T6136] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.684417][ T6008] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.706140][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.713296][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.767106][ T6152] loop7: detected capacity change from 0 to 512 [ 88.775311][ T6152] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.829: inode has both inline data and extents flags [ 88.791571][ T4804] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.798753][ T4804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.807233][ T6152] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.829: couldn't read orphan inode 15 (err -117) [ 88.845309][ T3863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.865240][ T6152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.888461][ T6008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.899129][ T6008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.172768][ T6175] loop2: detected capacity change from 0 to 512 [ 89.184664][ T5431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.201742][ T6175] EXT4-fs: Ignoring removed bh option [ 89.239568][ T6175] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 89.311516][ T6008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.334801][ T6175] EXT4-fs (loop2): 1 truncate cleaned up [ 89.351248][ T6175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.388965][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.649053][ T6008] veth0_vlan: entered promiscuous mode [ 89.684911][ T6008] veth1_vlan: entered promiscuous mode [ 89.790625][ T6008] veth0_macvtap: entered promiscuous mode [ 89.800146][ T6008] veth1_macvtap: entered promiscuous mode [ 89.861094][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.881238][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.896785][ T31] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.918410][ T31] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.938330][ T31] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.056259][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.076647][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.089662][ T31] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.570897][ T6229] netlink: 'syz.7.850': attribute type 1 has an invalid length. [ 90.589466][ T6229] bond1: entered promiscuous mode [ 90.594657][ T6229] bond1: entered allmulticast mode [ 90.600325][ T6229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.623086][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.7.850'. [ 90.637106][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.851'. [ 90.648590][ T6229] veth3: entered promiscuous mode [ 90.653819][ T6229] veth3: entered allmulticast mode [ 90.668498][ T6229] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 90.690015][ T6236] loop8: detected capacity change from 0 to 128 [ 90.696835][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.851'. [ 90.719702][ T6236] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.795886][ T6243] SELinux: failed to load policy [ 90.899548][ T6257] lo speed is unknown, defaulting to 1000 [ 91.016450][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.026691][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.068077][ T4088] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.084341][ T4088] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.116380][ T4088] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.147487][ T4088] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.218478][ T3500] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.234168][ T3500] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.329741][ T6280] loop5: detected capacity change from 0 to 1024 [ 91.424184][ T6280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.559637][ T6309] loop5: detected capacity change from 0 to 128 [ 92.582560][ T6309] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.005271][ T6324] loop2: detected capacity change from 0 to 128 [ 93.059138][ T6324] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.360892][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 93.707825][ T6344] lo speed is unknown, defaulting to 1000 [ 94.000244][ T31] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.088319][ T31] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.173897][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 94.173982][ T29] audit: type=1400 audit(1769103019.416:865): avc: denied { ioctl } for pid=6372 comm="syz.2.906" path="socket:[15542]" dev="sockfs" ino=15542 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.204827][ T29] audit: type=1400 audit(1769103019.416:866): avc: denied { write } for pid=6372 comm="syz.2.906" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 94.247703][ T31] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.302022][ T31] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.340522][ T6376] lo speed is unknown, defaulting to 1000 [ 94.469673][ T31] bridge_slave_1: left allmulticast mode [ 94.475532][ T31] bridge_slave_1: left promiscuous mode [ 94.481327][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.531382][ T31] bridge_slave_0: left allmulticast mode [ 94.537425][ T31] bridge_slave_0: left promiscuous mode [ 94.543237][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.617962][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.628195][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.638920][ T31] bond0 (unregistering): Released all slaves [ 94.691581][ T31] hsr_slave_0: left promiscuous mode [ 94.698676][ T31] hsr_slave_1: left promiscuous mode [ 94.704953][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.712381][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.720214][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.727792][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.741466][ T31] veth1_macvtap: left promiscuous mode [ 94.747287][ T31] veth0_macvtap: left promiscuous mode [ 94.752852][ T31] veth1_vlan: left promiscuous mode [ 94.758209][ T31] veth0_vlan: left promiscuous mode [ 94.866432][ T31] team0 (unregistering): Port device team_slave_1 removed [ 94.881024][ T31] team0 (unregistering): Port device team_slave_0 removed [ 94.925513][ T6425] loop5: detected capacity change from 0 to 1024 [ 94.999739][ T6376] chnl_net:caif_netlink_parms(): no params data found [ 95.075609][ T6439] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 95.139942][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.147398][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.164113][ T29] audit: type=1400 audit(1769103020.416:867): avc: denied { setopt } for pid=6445 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.183634][ T29] audit: type=1400 audit(1769103020.416:868): avc: denied { write } for pid=6445 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.217523][ T6376] bridge_slave_0: entered allmulticast mode [ 95.224696][ T6376] bridge_slave_0: entered promiscuous mode [ 95.236204][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.243321][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.250996][ T6376] bridge_slave_1: entered allmulticast mode [ 95.257770][ T6376] bridge_slave_1: entered promiscuous mode [ 95.296124][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.308085][ T6376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.357844][ T6376] team0: Port device team_slave_0 added [ 95.382342][ T6376] team0: Port device team_slave_1 added [ 95.406327][ T6467] xt_hashlimit: size too large, truncated to 1048576 [ 95.437406][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.444443][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.470752][ T6376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.487513][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.494627][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.520875][ T6376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.559347][ T6472] netlink: 68 bytes leftover after parsing attributes in process `syz.5.928'. [ 95.659938][ T6376] hsr_slave_0: entered promiscuous mode [ 95.673884][ T29] audit: type=1326 audit(1769103020.936:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 95.700247][ T6376] hsr_slave_1: entered promiscuous mode [ 95.706333][ T6376] debugfs: 'hsr0' already exists in 'hsr' [ 95.712112][ T6376] Cannot create hsr debugfs directory [ 95.726931][ T6483] netlink: 60 bytes leftover after parsing attributes in process `syz.2.930'. [ 95.766885][ T29] audit: type=1326 audit(1769103020.956:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 95.790582][ T29] audit: type=1326 audit(1769103020.956:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 95.813932][ T29] audit: type=1326 audit(1769103020.986:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 95.837179][ T29] audit: type=1326 audit(1769103020.986:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 95.860430][ T29] audit: type=1326 audit(1769103020.986:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 95.955267][ T6376] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 95.971654][ T6376] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 95.985993][ T6376] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 96.000045][ T6376] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 96.180053][ T6376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.207770][ T6376] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.234595][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.241829][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.266760][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.273968][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.420585][ T6376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.720717][ T6376] veth0_vlan: entered promiscuous mode [ 96.770122][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.777410][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.826925][ T6583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.837047][ T6583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.873236][ T12] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.885506][ T12] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.896613][ T6376] veth1_vlan: entered promiscuous mode [ 96.914277][ T12] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.954092][ T12] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.979222][ T6590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.951'. [ 96.990516][ T6376] veth0_macvtap: entered promiscuous mode [ 97.012040][ T6376] veth1_macvtap: entered promiscuous mode [ 97.051287][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.067243][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.954'. [ 97.088580][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.101041][ T4088] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.121618][ T4088] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.148351][ T4088] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.157980][ T4088] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.196261][ T6604] ªªªªªª: renamed from wg2 (while UP) [ 97.381540][ T6604] loop9: detected capacity change from 0 to 32768 [ 97.544047][ T3305] loop9: p1 p3 < p5 p6 p7 > [ 97.560042][ T3305] loop9: p6 start 117448704 is beyond EOD, truncated [ 97.597508][ T6604] loop9: p1 p3 < p5 p6 p7 > [ 97.615022][ T6604] loop9: p6 start 117448704 is beyond EOD, truncated [ 97.706927][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 97.734355][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 97.746058][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 97.757219][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 97.802899][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 97.822439][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 97.833911][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 97.856124][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 98.052689][ T6637] dvmrp1: entered allmulticast mode [ 98.102250][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'. [ 98.126618][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.9.973'. [ 98.207159][ T3843] Bluetooth: hci0: sending frame failed (-49) [ 98.213488][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 98.298278][ T6665] sock: sock_set_timeout: `syz.7.982' (pid 6665) tries to set negative timeout [ 98.347436][ T6668] loop9: detected capacity change from 0 to 1024 [ 98.599479][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz.9.998'. [ 98.700771][ T6710] loop9: detected capacity change from 0 to 8192 [ 98.849453][ T6721] veth1_to_bond: entered allmulticast mode [ 98.855869][ T6720] veth1_to_bond: left allmulticast mode [ 99.317266][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1019'. [ 99.431854][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 99.431873][ T29] audit: type=1400 audit(1769103024.686:927): avc: denied { bind } for pid=6744 comm="syz.4.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.472020][ T6749] loop2: detected capacity change from 0 to 128 [ 99.491013][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 99.500180][ T6752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1016'. [ 99.535250][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 99.555371][ T6749] bio_check_eod: 51 callbacks suppressed [ 99.555391][ T6749] syz.2.1015: attempt to access beyond end of device [ 99.555391][ T6749] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 99.575666][ T6749] syz.2.1015: attempt to access beyond end of device [ 99.575666][ T6749] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 99.589752][ T6749] syz.2.1015: attempt to access beyond end of device [ 99.589752][ T6749] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 99.646076][ T6749] syz.2.1015: attempt to access beyond end of device [ 99.646076][ T6749] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 99.673449][ T6749] syz.2.1015: attempt to access beyond end of device [ 99.673449][ T6749] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 99.698127][ T6763] xt_hashlimit: size too large, truncated to 1048576 [ 99.811391][ T6749] syz.2.1015: attempt to access beyond end of device [ 99.811391][ T6749] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 99.834016][ T6749] syz.2.1015: attempt to access beyond end of device [ 99.834016][ T6749] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 99.899812][ T6749] syz.2.1015: attempt to access beyond end of device [ 99.899812][ T6749] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 99.915937][ T6749] syz.2.1015: attempt to access beyond end of device [ 99.915937][ T6749] loop2: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 99.975063][ T6749] syz.2.1015: attempt to access beyond end of device [ 99.975063][ T6749] loop2: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 100.066099][ T29] audit: type=1400 audit(1769103025.276:928): avc: denied { bind } for pid=6780 comm="syz.5.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.086606][ T29] audit: type=1400 audit(1769103025.276:929): avc: denied { setopt } for pid=6780 comm="syz.5.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.185088][ T6749] Buffer I/O error on dev loop2, logical block 305, async page read [ 100.193649][ T6749] Buffer I/O error on dev loop2, logical block 306, async page read [ 100.202621][ T6749] Buffer I/O error on dev loop2, logical block 307, async page read [ 100.210817][ T6749] Buffer I/O error on dev loop2, logical block 308, async page read [ 100.219075][ T6749] Buffer I/O error on dev loop2, logical block 309, async page read [ 100.227307][ T6749] Buffer I/O error on dev loop2, logical block 310, async page read [ 100.236231][ T6749] Buffer I/O error on dev loop2, logical block 311, async page read [ 100.244580][ T6749] Buffer I/O error on dev loop2, logical block 312, async page read [ 100.256764][ T6749] Buffer I/O error on dev loop2, logical block 305, async page read [ 100.265189][ T6749] Buffer I/O error on dev loop2, logical block 306, async page read [ 100.712170][ T6766] Set syz1 is full, maxelem 65536 reached [ 100.754453][ T29] audit: type=1400 audit(1769103026.016:930): avc: denied { cmd } for pid=6817 comm="syz.2.1030" path="socket:[17138]" dev="sockfs" ino=17138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.826181][ T29] audit: type=1400 audit(1769103026.086:931): avc: denied { bind } for pid=6827 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 100.903497][ T6836] netlink: 'syz.4.1035': attribute type 2 has an invalid length. [ 100.911496][ T6836] __nla_validate_parse: 7 callbacks suppressed [ 100.911532][ T6836] netlink: 199792 bytes leftover after parsing attributes in process `syz.4.1035'. [ 101.006783][ T6851] tipc: Failed to remove unknown binding: 66,1,1/0:2034421661/2034421663 [ 101.017507][ T6851] tipc: Failed to remove unknown binding: 66,1,1/0:2034421661/2034421663 [ 101.026236][ T6851] tipc: Failed to remove unknown binding: 66,1,1/0:2034421661/2034421663 [ 101.072868][ T6853] lo speed is unknown, defaulting to 1000 [ 101.116129][ T29] audit: type=1400 audit(1769103026.376:932): avc: denied { shutdown } for pid=6854 comm="syz.4.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.143539][ T6863] loop2: detected capacity change from 0 to 512 [ 101.168048][ T6863] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.190335][ T29] audit: type=1326 audit(1769103026.446:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 101.213951][ T29] audit: type=1326 audit(1769103026.446:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 101.237412][ T29] audit: type=1326 audit(1769103026.446:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 101.260816][ T29] audit: type=1326 audit(1769103026.446:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f671acb9 code=0x7ffc0000 [ 101.484903][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1045'. [ 101.529917][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1048'. [ 101.538913][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1048'. [ 101.760117][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1052'. [ 102.074633][ T405] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 102.109389][ T405] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 102.122154][ T405] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.122154][ T405] [ 102.131982][ T405] EXT4-fs (loop2): Total free blocks count 0 [ 102.138218][ T405] EXT4-fs (loop2): Free/Dirty block details [ 102.144270][ T405] EXT4-fs (loop2): free_blocks=65280 [ 102.149914][ T405] EXT4-fs (loop2): dirty_blocks=6878 [ 102.155347][ T405] EXT4-fs (loop2): Block reservation details [ 102.161414][ T405] EXT4-fs (loop2): i_reserved_data_blocks=6878 [ 102.186493][ T405] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 102.199529][ T405] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.199529][ T405] [ 102.299726][ T3317] EXT4-fs unmount: 13 callbacks suppressed [ 102.330758][ T6947] loop2: detected capacity change from 0 to 256 [ 102.357960][ T6950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6950 comm=syz.4.1067 [ 102.371147][ T6950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6950 comm=syz.4.1067 [ 102.383944][ T6950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6950 comm=syz.4.1067 [ 102.396539][ T6950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6950 comm=syz.4.1067 [ 102.409088][ T6950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6950 comm=syz.4.1067 [ 102.421756][ T6950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6950 comm=syz.4.1067 [ 102.434494][ T6950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6950 comm=syz.4.1067 [ 102.447259][ T6950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6950 comm=syz.4.1067 [ 102.459751][ T6950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6950 comm=syz.4.1067 [ 102.472280][ T6950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6950 comm=syz.4.1067 [ 103.036152][ T6986] siw: device registration error -23 [ 103.048562][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1078'. [ 103.057576][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1078'. [ 103.256453][ T7000] ip6t_rpfilter: unknown options [ 103.354618][ T7006] lo speed is unknown, defaulting to 1000 [ 103.499684][ T6968] syz.9.1073 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 103.514137][ T6968] CPU: 0 UID: 0 PID: 6968 Comm: syz.9.1073 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 103.514179][ T6968] Tainted: [W]=WARN [ 103.514257][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.514270][ T6968] Call Trace: [ 103.514278][ T6968] [ 103.514288][ T6968] __dump_stack+0x1d/0x30 [ 103.514329][ T6968] dump_stack_lvl+0x95/0xd0 [ 103.514366][ T6968] dump_stack+0x15/0x1b [ 103.514462][ T6968] dump_header+0x80/0x240 [ 103.514487][ T6968] oom_kill_process+0x295/0x350 [ 103.514509][ T6968] out_of_memory+0x97d/0xb80 [ 103.514532][ T6968] try_charge_memcg+0x62e/0xa10 [ 103.514645][ T6968] obj_cgroup_charge_pages+0xa6/0x150 [ 103.514676][ T6968] __memcg_kmem_charge_page+0x9e/0x170 [ 103.514715][ T6968] __alloc_frozen_pages_noprof+0x18a/0x350 [ 103.514833][ T6968] alloc_pages_mpol+0xb3/0x260 [ 103.514872][ T6968] alloc_pages_noprof+0x8f/0x130 [ 103.514913][ T6968] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 103.515016][ T6968] __kvmalloc_node_noprof+0x471/0x680 [ 103.515055][ T6968] ? ip_set_alloc+0x24/0x30 [ 103.515124][ T6968] ? ip_set_alloc+0x24/0x30 [ 103.515154][ T6968] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 103.515187][ T6968] ip_set_alloc+0x24/0x30 [ 103.515262][ T6968] hash_netiface_create+0x282/0x740 [ 103.515301][ T6968] ? __pfx_hash_netiface_create+0x10/0x10 [ 103.515404][ T6968] ip_set_create+0x3cf/0x970 [ 103.515549][ T6968] ? __nla_parse+0x40/0x60 [ 103.515656][ T6968] nfnetlink_rcv_msg+0x509/0x5d0 [ 103.515711][ T6968] netlink_rcv_skb+0x123/0x220 [ 103.515740][ T6968] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 103.515778][ T6968] nfnetlink_rcv+0x167/0x1720 [ 103.515846][ T6968] ? __kfree_skb+0x109/0x150 [ 103.515867][ T6968] ? nlmon_xmit+0x4f/0x60 [ 103.515887][ T6968] ? consume_skb+0x49/0x140 [ 103.515955][ T6968] ? nlmon_xmit+0x4f/0x60 [ 103.515980][ T6968] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 103.516038][ T6968] ? __dev_queue_xmit+0x139a/0x1f20 [ 103.516148][ T6968] ? __dev_queue_xmit+0x148/0x1f20 [ 103.516183][ T6968] ? ref_tracker_free+0x37d/0x3e0 [ 103.516269][ T6968] ? __netlink_deliver_tap+0x4dc/0x500 [ 103.516304][ T6968] netlink_unicast+0x5c0/0x690 [ 103.516335][ T6968] netlink_sendmsg+0x5c8/0x6f0 [ 103.516376][ T6968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.516445][ T6968] __sock_sendmsg+0x145/0x170 [ 103.516491][ T6968] ____sys_sendmsg+0x31e/0x4a0 [ 103.516518][ T6968] ___sys_sendmsg+0x195/0x1e0 [ 103.516572][ T6968] __x64_sys_sendmsg+0xd4/0x160 [ 103.516686][ T6968] x64_sys_call+0x17ba/0x3000 [ 103.516728][ T6968] do_syscall_64+0xc0/0x2a0 [ 103.516766][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.516792][ T6968] RIP: 0033:0x7f2a646aacb9 [ 103.516818][ T6968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.516844][ T6968] RSP: 002b:00007f2a63107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.516872][ T6968] RAX: ffffffffffffffda RBX: 00007f2a64925fa0 RCX: 00007f2a646aacb9 [ 103.516892][ T6968] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 103.516909][ T6968] RBP: 00007f2a64718bf7 R08: 0000000000000000 R09: 0000000000000000 [ 103.516922][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.516938][ T6968] R13: 00007f2a64926038 R14: 00007f2a64925fa0 R15: 00007ffde521ae78 [ 103.516966][ T6968] [ 103.516974][ T6968] memory: usage 307200kB, limit 307200kB, failcnt 172 [ 103.855870][ T6968] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 103.863883][ T6968] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 103.871279][ T6968] Memory cgroup stats for /syz9: [ 103.871524][ T6968] cache 0 [ 103.879622][ T6968] rss 0 [ 103.882445][ T6968] shmem 0 [ 103.885482][ T6968] mapped_file 0 [ 103.888980][ T6968] dirty 0 [ 103.892043][ T6968] writeback 0 [ 103.895424][ T6968] workingset_refault_anon 3 [ 103.899979][ T6968] workingset_refault_file 0 [ 103.904637][ T6968] swap 184320 [ 103.908354][ T6968] swapcached 4096 [ 103.912024][ T6968] pgpgin 11060 [ 103.915504][ T6968] pgpgout 11059 [ 103.918993][ T6968] pgfault 12489 [ 103.922475][ T6968] pgmajfault 1 [ 103.925903][ T6968] inactive_anon 0 [ 103.929710][ T6968] active_anon 4096 [ 103.933469][ T6968] inactive_file 0 [ 103.937164][ T6968] active_file 0 [ 103.940654][ T6968] unevictable 0 [ 103.944171][ T6968] hierarchical_memory_limit 314572800 [ 103.949573][ T6968] hierarchical_memsw_limit 9223372036854771712 [ 103.955808][ T6968] total_cache 0 [ 103.959287][ T6968] total_rss 0 [ 103.962590][ T6968] total_shmem 0 [ 103.966138][ T6968] total_mapped_file 0 [ 103.970146][ T6968] total_dirty 0 [ 103.973763][ T6968] total_writeback 0 [ 103.977653][ T6968] total_workingset_refault_anon 3 [ 103.982706][ T6968] total_workingset_refault_file 0 [ 103.987789][ T6968] total_swap 184320 [ 103.991700][ T6968] total_swapcached 4096 [ 103.995968][ T6968] total_pgpgin 11060 [ 103.999922][ T6968] total_pgpgout 11059 [ 104.004029][ T6968] total_pgfault 12489 [ 104.008126][ T6968] total_pgmajfault 1 [ 104.012077][ T6968] total_inactive_anon 0 [ 104.016292][ T6968] total_active_anon 4096 [ 104.020575][ T6968] total_inactive_file 0 [ 104.024887][ T6968] total_active_file 0 [ 104.028890][ T6968] total_unevictable 0 [ 104.032906][ T6968] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.1073,pid=6967,uid=0 [ 104.047651][ T6968] Memory cgroup out of memory: Killed process 6967 (syz.9.1073) total-vm:94000kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 104.138100][ T7006] netlink: 764 bytes leftover after parsing attributes in process `syz.5.1086'. [ 104.200090][ T7037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.304913][ T7037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.385796][ T7037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.466375][ T7037] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.533370][ T4804] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.545917][ T4804] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.622854][ T4804] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.631967][ T4804] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.781662][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 104.781681][ T29] audit: type=1400 audit(1769103030.036:993): avc: denied { getopt } for pid=7056 comm="syz.2.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.823866][ T7058] lo speed is unknown, defaulting to 1000 [ 104.914797][ T7062] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.957965][ T7062] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.008728][ T7068] raw_sendmsg: syz.7.1108 forgot to set AF_INET. Fix it! [ 105.030306][ T7062] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.055725][ T7073] pim6reg9: entered allmulticast mode [ 105.110568][ T7062] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.188757][ T29] audit: type=1400 audit(1769103030.446:994): avc: denied { listen } for pid=7086 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.215765][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.233074][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.261811][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.287407][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.317986][ T29] audit: type=1326 audit(1769103030.576:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.7.1117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8df4facb9 code=0x0 [ 105.473836][ T7105] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1120'. [ 105.564383][ T29] audit: type=1400 audit(1769103030.826:996): avc: denied { mount } for pid=7111 comm="syz.2.1122" name="/" dev="autofs" ino=18145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 105.746744][ T7121] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.785978][ T7121] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.847079][ T7121] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.896236][ T7121] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.322751][ T7152] lo speed is unknown, defaulting to 1000 [ 106.400459][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 106.604672][ T29] audit: type=1400 audit(1769103031.866:997): avc: denied { remount } for pid=7160 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.036170][ T29] audit: type=1400 audit(1769103032.296:998): avc: denied { write } for pid=7183 comm="syz.9.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.117605][ T29] audit: type=1400 audit(1769103032.376:999): avc: denied { setattr } for pid=7186 comm="syz.7.1150" name="/" dev="configfs" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.419639][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1160'. [ 107.449042][ T7212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.464876][ T7212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.474655][ T7212] bond1: (slave bond0): Enslaving as an active interface with an up link [ 107.721972][ T7236] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1166'. [ 108.231563][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.251796][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.274243][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.282517][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.316581][ T29] audit: type=1400 audit(1769103033.576:1000): avc: denied { create } for pid=7304 comm="syz.7.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.356501][ T29] audit: type=1400 audit(1769103033.606:1001): avc: denied { open } for pid=7306 comm="syz.9.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 108.375809][ T29] audit: type=1400 audit(1769103033.606:1002): avc: denied { kernel } for pid=7306 comm="syz.9.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 108.618915][ T7336] tipc: Failed to remove unknown binding: 66,0,0/0:3289068616/3289068617 [ 108.627993][ T7336] tipc: Failed to remove unknown binding: 66,0,0/0:3289068616/3289068617 [ 109.251032][ T7359] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 109.379730][ T7374] tipc: Started in network mode [ 109.385045][ T7374] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 109.394162][ T7374] tipc: Enabling of bearer rejected, failed to enable media [ 109.420117][ T7377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1201'. [ 109.547638][ T7391] tipc: Started in network mode [ 109.552657][ T7391] tipc: Node identity ac14140f, cluster identity 4711 [ 109.561118][ T7391] tipc: New replicast peer: 255.255.255.255 [ 109.567401][ T7391] tipc: Enabled bearer , priority 10 [ 109.676619][ T7400] syz_tun: entered allmulticast mode [ 109.682726][ T7399] syz_tun: left allmulticast mode [ 109.783873][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 109.783892][ T29] audit: type=1326 audit(1769103035.036:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9c9b88acb9 code=0x7ffc0000 [ 109.822752][ T29] audit: type=1326 audit(1769103035.046:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9b88acb9 code=0x7ffc0000 [ 109.846545][ T29] audit: type=1326 audit(1769103035.046:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9b88acb9 code=0x7ffc0000 [ 109.870250][ T29] audit: type=1326 audit(1769103035.046:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9b88acb9 code=0x7ffc0000 [ 109.894127][ T29] audit: type=1326 audit(1769103035.046:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c9b88acb9 code=0x7ffc0000 [ 109.917641][ T29] audit: type=1326 audit(1769103035.046:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9b88acb9 code=0x7ffc0000 [ 109.941295][ T29] audit: type=1326 audit(1769103035.046:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9b88acb9 code=0x7ffc0000 [ 109.964739][ T29] audit: type=1326 audit(1769103035.046:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9b88acb9 code=0x7ffc0000 [ 109.988334][ T29] audit: type=1326 audit(1769103035.046:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f9c9b88acb9 code=0x7ffc0000 [ 110.011870][ T29] audit: type=1326 audit(1769103035.046:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9b88acb9 code=0x7ffc0000 [ 110.196656][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1220'. [ 110.259086][ T7423] selinux_netlink_send: 70 callbacks suppressed [ 110.259106][ T7423] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7423 comm=syz.4.1221 [ 110.386741][ T7429] loop2: detected capacity change from 0 to 2048 [ 110.424155][ T7429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.537207][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.559068][ T7444] lo speed is unknown, defaulting to 1000 [ 110.683840][ T9] tipc: Node number set to 2886997007 [ 110.720538][ T7444] RDS: rds_bind could not find a transport for ::ffff:172.20.20.23, load rds_tcp or rds_rdma? [ 111.152617][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1245'. [ 111.832401][ T7521] loop9: detected capacity change from 0 to 2048 [ 111.877322][ T7521] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.339349][ T7521] EXT4-fs (loop9): shut down requested (0) [ 112.356259][ T584] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.376808][ T584] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 112.389185][ T584] EXT4-fs (loop9): This should not happen!! Data will be lost [ 112.389185][ T584] [ 112.398871][ T584] EXT4-fs (loop9): Total free blocks count 0 [ 112.404917][ T584] EXT4-fs (loop9): Free/Dirty block details [ 112.410835][ T584] EXT4-fs (loop9): free_blocks=2415919104 [ 112.416696][ T584] EXT4-fs (loop9): dirty_blocks=16 [ 112.421890][ T584] EXT4-fs (loop9): Block reservation details [ 112.428040][ T584] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 112.648519][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1268'. [ 112.710534][ T7559] team0 (unregistering): Port device team_slave_0 removed [ 112.750881][ T7559] team0 (unregistering): Port device team_slave_1 removed [ 112.803858][ T7561] netlink: 'syz.4.1270': attribute type 30 has an invalid length. [ 113.184201][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1276'. [ 113.235757][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1278'. [ 113.270429][ T7578] netlink: 'syz.9.1278': attribute type 5 has an invalid length. [ 113.278459][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1278'. [ 113.497522][ T7594] 9pnet_fd: Insufficient options for proto=fd [ 114.095094][ T7610] netlink: 'syz.5.1290': attribute type 1 has an invalid length. [ 114.150090][ T7610] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 114.160365][ T7610] bond2: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 114.235024][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1290'. [ 114.254035][ T7610] bond2: (slave vxcan1): making interface the new active one [ 114.284055][ T7610] bond2: (slave vxcan1): Enslaving as an active interface with an up link [ 114.315193][ T7616] bond2 (unregistering): (slave vxcan1): Releasing backup interface [ 114.324728][ T7616] bond2 (unregistering): Released all slaves [ 114.828241][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 114.828261][ T29] audit: type=1400 audit(1769103040.086:1076): avc: denied { ioctl } for pid=7635 comm="syz.2.1299" path="socket:[20023]" dev="sockfs" ino=20023 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.908408][ T7645] syz_tun: entered allmulticast mode [ 114.917577][ T29] audit: type=1400 audit(1769103040.166:1077): avc: denied { read } for pid=7644 comm="syz.9.1302" name="file2" dev="tmpfs" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.959640][ T7645] syz_tun: left allmulticast mode [ 115.824490][ T7671] lo speed is unknown, defaulting to 1000 [ 116.007964][ T29] audit: type=1400 audit(1769103041.266:1078): avc: denied { listen } for pid=7675 comm="syz.4.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 116.027981][ T29] audit: type=1400 audit(1769103041.266:1079): avc: denied { accept } for pid=7675 comm="syz.4.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 116.476982][ T29] audit: type=1400 audit(1769103041.736:1080): avc: denied { nlmsg_read } for pid=7687 comm="syz.9.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.511207][ T29] audit: type=1400 audit(1769103041.736:1081): avc: denied { setattr } for pid=7687 comm="syz.9.1316" path="/dev/bus/usb/001/001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.537078][ T7686] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 116.570776][ T7697] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1320'. [ 116.614225][ T7697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7697 comm=syz.5.1320 [ 116.740410][ T29] audit: type=1400 audit(1769103041.996:1082): avc: denied { bind } for pid=7712 comm="syz.2.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 116.798469][ T29] audit: type=1326 audit(1769103042.056:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.7.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8df4facb9 code=0x7ffc0000 [ 116.821993][ T29] audit: type=1326 audit(1769103042.056:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.7.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8df4facb9 code=0x7ffc0000 [ 116.845684][ T29] audit: type=1326 audit(1769103042.056:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.7.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8df4facb9 code=0x7ffc0000 [ 116.991385][ T7731] netlink: 'syz.4.1334': attribute type 1 has an invalid length. [ 117.036741][ T7731] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 117.210020][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1326'. [ 117.223226][ T7716] hsr_slave_1 (unregistering): left promiscuous mode [ 118.217785][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1368'. [ 118.254525][ T7820] netlink: 'syz.9.1370': attribute type 2 has an invalid length. [ 118.262390][ T7820] netlink: 199776 bytes leftover after parsing attributes in process `syz.9.1370'. [ 118.377118][ T7825] mmap: syz.9.1372 (7825) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.608779][ T7842] capability: warning: `syz.4.1378' uses deprecated v2 capabilities in a way that may be insecure [ 118.784225][ T7853] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1381'. [ 118.891687][ T7859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1385'. [ 119.083412][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 119.107660][ T7859] hsr_slave_1 (unregistering): left promiscuous mode [ 119.497013][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1396'. [ 119.635175][ T7905] loop2: detected capacity change from 0 to 164 [ 119.647084][ T7905] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 119.673040][ T7905] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 119.688794][ T7905] Symlink component flag not implemented [ 119.694524][ T7905] Symlink component flag not implemented [ 119.723425][ T7905] Symlink component flag not implemented (7) [ 119.729588][ T7905] Symlink component flag not implemented (116) [ 119.886606][ T7916] loop2: detected capacity change from 0 to 1024 [ 119.893614][ T7916] EXT4-fs: Ignoring removed oldalloc option [ 119.900025][ T7916] EXT4-fs: Ignoring removed bh option [ 119.928272][ T7916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.203115][ T7916] ================================================================== [ 120.211278][ T7916] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 120.219320][ T7916] [ 120.221674][ T7916] write to 0xffff88811b05e5cc of 4 bytes by task 7924 on cpu 0: [ 120.229322][ T7916] xas_set_mark+0x12b/0x140 [ 120.233865][ T7916] __folio_start_writeback+0x17b/0x370 [ 120.239365][ T7916] ext4_bio_write_folio+0x5ad/0x9f0 [ 120.244633][ T7916] mpage_process_page_bufs+0x4a1/0x620 [ 120.250161][ T7916] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 120.256002][ T7916] ext4_do_writepages+0x9f6/0x2800 [ 120.261321][ T7916] ext4_writepages+0x18f/0x320 [ 120.266196][ T7916] do_writepages+0x1c6/0x310 [ 120.270817][ T7916] file_write_and_wait_range+0x178/0x2f0 [ 120.276478][ T7916] generic_buffers_fsync_noflush+0x45/0x130 [ 120.282505][ T7916] ext4_sync_file+0x1aa/0x680 [ 120.287200][ T7916] vfs_fsync_range+0x10d/0x130 [ 120.292082][ T7916] ext4_buffered_write_iter+0x34f/0x3c0 [ 120.297689][ T7916] ext4_file_write_iter+0x380/0xf70 [ 120.302928][ T7916] iter_file_splice_write+0x6bc/0xa80 [ 120.308360][ T7916] direct_splice_actor+0x156/0x2a0 [ 120.313512][ T7916] splice_direct_to_actor+0x311/0x670 [ 120.318914][ T7916] do_splice_direct+0x119/0x1a0 [ 120.323811][ T7916] do_sendfile+0x380/0x650 [ 120.328280][ T7916] __x64_sys_sendfile64+0x105/0x150 [ 120.333508][ T7916] x64_sys_call+0x2db1/0x3000 [ 120.338206][ T7916] do_syscall_64+0xc0/0x2a0 [ 120.342748][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.348749][ T7916] [ 120.351088][ T7916] read to 0xffff88811b05e5cc of 4 bytes by task 7916 on cpu 1: [ 120.358650][ T7916] __writeback_single_inode+0x201/0x7b0 [ 120.364330][ T7916] writeback_single_inode+0x16d/0x3f0 [ 120.369744][ T7916] sync_inode_metadata+0x6e/0xa0 [ 120.374745][ T7916] generic_buffers_fsync_noflush+0xee/0x130 [ 120.380674][ T7916] ext4_sync_file+0x1aa/0x680 [ 120.385467][ T7916] vfs_fsync_range+0x10d/0x130 [ 120.390267][ T7916] ext4_buffered_write_iter+0x34f/0x3c0 [ 120.395858][ T7916] ext4_file_write_iter+0x380/0xf70 [ 120.401098][ T7916] iter_file_splice_write+0x6bc/0xa80 [ 120.406504][ T7916] direct_splice_actor+0x156/0x2a0 [ 120.411664][ T7916] splice_direct_to_actor+0x311/0x670 [ 120.417062][ T7916] do_splice_direct+0x119/0x1a0 [ 120.421952][ T7916] do_sendfile+0x380/0x650 [ 120.426468][ T7916] __x64_sys_sendfile64+0x105/0x150 [ 120.431694][ T7916] x64_sys_call+0x2db1/0x3000 [ 120.436390][ T7916] do_syscall_64+0xc0/0x2a0 [ 120.440931][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.446843][ T7916] [ 120.449194][ T7916] value changed: 0x0a000021 -> 0x00000021 [ 120.454935][ T7916] [ 120.457277][ T7916] Reported by Kernel Concurrency Sanitizer on: [ 120.463465][ T7916] CPU: 1 UID: 0 PID: 7916 Comm: syz.2.1407 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 120.474796][ T7916] Tainted: [W]=WARN [ 120.478704][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.488823][ T7916] ================================================================== [ 120.717323][ T7916] ================================================================== [ 120.725506][ T7916] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 120.733647][ T7916] [ 120.736008][ T7916] write to 0xffff88811b05e5cc of 4 bytes by task 7924 on cpu 0: [ 120.743665][ T7916] xas_set_mark+0x12b/0x140 [ 120.748272][ T7916] tag_pages_for_writeback+0xe3/0x2e0 [ 120.753695][ T7916] ext4_do_writepages+0x6a8/0x2800 [ 120.758888][ T7916] ext4_writepages+0x18f/0x320 [ 120.763701][ T7916] do_writepages+0x1c6/0x310 [ 120.768350][ T7916] file_write_and_wait_range+0x178/0x2f0 [ 120.774045][ T7916] generic_buffers_fsync_noflush+0x45/0x130 [ 120.779980][ T7916] ext4_sync_file+0x1aa/0x680 [ 120.784702][ T7916] vfs_fsync_range+0x10d/0x130 [ 120.789537][ T7916] ext4_buffered_write_iter+0x34f/0x3c0 [ 120.795144][ T7916] ext4_file_write_iter+0x380/0xf70 [ 120.800417][ T7916] iter_file_splice_write+0x6bc/0xa80 [ 120.805853][ T7916] direct_splice_actor+0x156/0x2a0 [ 120.811033][ T7916] splice_direct_to_actor+0x311/0x670 [ 120.816474][ T7916] do_splice_direct+0x119/0x1a0 [ 120.821394][ T7916] do_sendfile+0x380/0x650 [ 120.825899][ T7916] __x64_sys_sendfile64+0x105/0x150 [ 120.831149][ T7916] x64_sys_call+0x2db1/0x3000 [ 120.835916][ T7916] do_syscall_64+0xc0/0x2a0 [ 120.840470][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.846493][ T7916] [ 120.848851][ T7916] read to 0xffff88811b05e5cc of 4 bytes by task 7916 on cpu 1: [ 120.856508][ T7916] file_write_and_wait_range+0x130/0x2f0 [ 120.862210][ T7916] generic_buffers_fsync_noflush+0x45/0x130 [ 120.868134][ T7916] ext4_sync_file+0x1aa/0x680 [ 120.872850][ T7916] vfs_fsync_range+0x10d/0x130 [ 120.877701][ T7916] ext4_buffered_write_iter+0x34f/0x3c0 [ 120.883331][ T7916] ext4_file_write_iter+0x380/0xf70 [ 120.888590][ T7916] iter_file_splice_write+0x6bc/0xa80 [ 120.894021][ T7916] direct_splice_actor+0x156/0x2a0 [ 120.899195][ T7916] splice_direct_to_actor+0x311/0x670 [ 120.904703][ T7916] do_splice_direct+0x119/0x1a0 [ 120.909579][ T7916] do_sendfile+0x380/0x650 [ 120.914012][ T7916] __x64_sys_sendfile64+0x105/0x150 [ 120.919241][ T7916] x64_sys_call+0x2db1/0x3000 [ 120.923941][ T7916] do_syscall_64+0xc0/0x2a0 [ 120.928498][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.934525][ T7916] [ 120.936871][ T7916] value changed: 0x02000021 -> 0x04000021 [ 120.942620][ T7916] [ 120.944973][ T7916] Reported by Kernel Concurrency Sanitizer on: [ 120.951178][ T7916] CPU: 1 UID: 0 PID: 7916 Comm: syz.2.1407 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 120.962514][ T7916] Tainted: [W]=WARN [ 120.966350][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.976526][ T7916] ================================================================== [ 120.998113][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.