last executing test programs: 3m54.941460106s ago: executing program 0 (id=57): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) 3m54.71183828s ago: executing program 0 (id=60): syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x4040011) 3m54.666955492s ago: executing program 0 (id=63): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3m54.608654486s ago: executing program 0 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x24020400) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) 3m54.573270738s ago: executing program 0 (id=66): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5}, 0x20) 3m53.604340665s ago: executing program 0 (id=87): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff00b702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m53.604076995s ago: executing program 32 (id=87): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff00b702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m45.83095421s ago: executing program 5 (id=234): unshare(0x22020600) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="090000000b000000ff03000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000880)={r3, &(0x7f0000000840)}, 0x20) 3m45.600391294s ago: executing program 5 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x12) 3m45.49510999s ago: executing program 5 (id=239): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 3m45.474905841s ago: executing program 5 (id=240): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) unshare(0x22020600) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ftruncate(0xffffffffffffffff, 0x2007ffb) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 3m45.182172149s ago: executing program 5 (id=245): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3m44.760919813s ago: executing program 5 (id=250): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) close(r2) 3m44.681308388s ago: executing program 33 (id=250): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) close(r2) 1m45.432933649s ago: executing program 1 (id=2489): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) 1m45.331398335s ago: executing program 1 (id=2492): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1m45.283292388s ago: executing program 1 (id=2494): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m44.999590935s ago: executing program 1 (id=2497): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x2, 0x800020, 0x6, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_setup(0x2, &(0x7f0000000040)) 1m44.369666571s ago: executing program 1 (id=2511): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 1m44.333529324s ago: executing program 1 (id=2513): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m29.265515397s ago: executing program 34 (id=2513): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.008314474s ago: executing program 7 (id=4221): socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.982140315s ago: executing program 7 (id=4224): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) unlink(&(0x7f0000000100)='./file0\x00') close_range(r2, 0xffffffffffffffff, 0x0) 2.90226536s ago: executing program 6 (id=4227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f40)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000001000000000000000000000000ffff0000000000000000002002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffffac14143f000000003c000000e0000001000000000000000000000000000300000000000007000000000000000200000000000000000000007ffffffe0000000000000000000000000000000004000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a0000000000000000000002000000200000000000000014000e00ac14"], 0x104}}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) 2.859541152s ago: executing program 7 (id=4229): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 2.071118549s ago: executing program 6 (id=4250): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a835e02c0000000000000000000000000000000c200000000000000000000074000000000000000000000009"], 0x0, 0x96}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)=@newtaction={0x84, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_bpf={0x6c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x44, 0x6, "bcd0e4a0d353fc81acdda61015bde4530e185e2e5e7622985fcc5b7b41a84c955f4cf204a74aec8a38ba3a5c82f61e6339e114ed8adf68644b73e59a93addc89"}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.720525739s ago: executing program 3 (id=4257): sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) 1.677895772s ago: executing program 3 (id=4258): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xa9525000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) 1.494133902s ago: executing program 2 (id=4261): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000005c0)={r3, 0x2}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000640)={r4, 0x8e}, 0x8) 1.454055625s ago: executing program 2 (id=4262): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) msgrcv(r1, 0x0, 0x0, 0x2, 0x0) msgctl$IPC_RMID(r1, 0x0) 1.428412266s ago: executing program 7 (id=4263): write$selinux_user(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x400, 0x4, 0x268}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$eJzs3T9rc1UYAPDn5l9THRLERRG8oINTeaujS6O8gtBJiIuLwbcFSUqhhYAVrZ36BXQUwU/h6ubsNxB0FNzaoXLl5t7bJDapwf6T+vstPT3nPuc+5zyQTnn68St7w2f7SZyc/RLtdhK1rdiK8yS6UYvKV3EWAMDjcZ5l8UcWEc3i92TlyEbt7rICAO5S8fe/8NC5AAD347fv3/qit7399IM0bcdLndNxP4mIvdNxv1jv7canMYqdeBKduIjILhXj997ffhqNNNeN1/eOx/3x3P6932N9Er8Znegujt9MC2V8PyL/2YznIo3ebrPaqhMvLo5/c0F89Fvxxmsz+W9EJ37+JPZjFM8ij53Gf7mZpu9m35x9/lH+mjw+qUV/bfJcaT0iq99bUQAAAAAAAAAAAAAAAAAAAAAAePQ20jQp2vdM+vfkU2X/nfrFZH0jrXTn+/MU8Zf9gov+QFmULXqOs/i26q/zJE3TrHxwGt+IlxvReJhTAwAAAAAAAAAAAAAAAAAAwH/L4WdHw8FotHNw40F9OBhV3QCqr/X/2w23ZmZejaPhoL58w7XV3zXbbSDP9dqHo9GIW7iWfx7Ej+t5Pkue+a7Mt5ypr36ra9PifliGV4W51VO88M5lhmm5VF3ycJAU71qec7ta+mF2qRUrp5EkczOT2o52DrLJRV1k8zVtz13mdKm17BVfJ/kpVrqNvDSt5xcu/Zll2WrHefvXokblTDJpsbFaLZrlYOEB80H7at1/Wr7h0o+M+k0/cwAAAAAAAAAAAAAAAAAAgMXmvzj9NyfXhtbuLCkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuGfT//9fDdoRMT9zZXBcBl/3TDloxcHhAx8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4G/AgAA//9x9ETn") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read(r1, &(0x7f0000000a40)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.36242182s ago: executing program 2 (id=4264): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xf3a, 0x0) dup3(r0, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7042, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.176503251s ago: executing program 6 (id=4265): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) getdents(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000980)=""/4092, 0xffc}], 0x1}, 0x9}], 0x36, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff004) 728.503017ms ago: executing program 3 (id=4272): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004180)=@newtaction={0x14, 0x30, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 687.73607ms ago: executing program 3 (id=4273): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pipe2$9p(0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 594.897505ms ago: executing program 3 (id=4275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x80) 516.07734ms ago: executing program 3 (id=4277): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) listen(0xffffffffffffffff, 0x7f) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) 507.18218ms ago: executing program 2 (id=4278): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x101, 0x10000, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 478.557042ms ago: executing program 7 (id=4279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000380)) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 409.115406ms ago: executing program 4 (id=4282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x1000007, 0x6361, 0x5, 0xffffffed, 0x26}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 316.404561ms ago: executing program 6 (id=4283): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x9}, 0x808, 0x10000, 0x0, 0x6, 0x8, 0x20205, 0xb, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) 308.660982ms ago: executing program 6 (id=4284): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2ae01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000010380)=ANY=[@ANYBLOB="0a0000f80180c2000002aaaaaaaaaabb86dd6d000000006411"], 0x9e) 300.920983ms ago: executing program 4 (id=4285): socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 218.328017ms ago: executing program 4 (id=4286): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r1, 0x402, 0x80000023) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000008) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x21) close_range(r0, 0xffffffffffffffff, 0x0) 197.313249ms ago: executing program 4 (id=4287): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r0, 0x47b5, 0x4600, 0x34, 0x0, 0x0) 196.585998ms ago: executing program 7 (id=4288): syz_clone3(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 155.695701ms ago: executing program 4 (id=4289): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0xff, 0x4b4, &(0x7f0000000c80)="$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") r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x80, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000100)={0x84, @multicast2, 0x4e23, 0x3, 'sh\x00', 0x14, 0xc, 0x22}, 0x2c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r1, &(0x7f0000000540)="86271bba8dc420f5807fb84e60d09b01", 0x10, 0x48800, &(0x7f0000000380)={0x11, 0xf5, r2, 0x1, 0x5, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xd}, {0x5, 0x8}, {0xb, 0x1}}}, 0x24}}, 0x20040000) 109.766793ms ago: executing program 6 (id=4290): mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "d50bb9be6a03d497", "40e62b51c177d8e64ab66ac3d49824a8", "f0b27018", "a54dc30d6d389b76"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) 38.727888ms ago: executing program 2 (id=4291): syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 1.05271ms ago: executing program 4 (id=4292): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file1'}, 0xb) close(r2) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(r3, &(0x7f0000000000)='\t', 0x1) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=4293): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0xb00, 0x2000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x100000000000003, 0x3}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 180.546957][T10893] loop2: detected capacity change from 0 to 512 [ 180.555711][ T29] audit: type=1400 audit(1769981571.852:1356): avc: denied { remount } for pid=10886 comm="syz.3.2662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 180.575661][ T29] audit: type=1326 audit(1769981571.852:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.3.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 180.599278][ T29] audit: type=1326 audit(1769981571.852:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.3.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 180.615959][T10893] EXT4-fs: Ignoring removed i_version option [ 180.623477][ T29] audit: type=1326 audit(1769981571.862:1359): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.3.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 180.629164][T10893] EXT4-fs: Ignoring removed bh option [ 180.652979][ T29] audit: type=1326 audit(1769981571.862:1360): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.3.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 180.682614][ T29] audit: type=1326 audit(1769981571.862:1361): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.3.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 180.706577][ T29] audit: type=1326 audit(1769981571.862:1362): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.3.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 180.808791][T10893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.831036][T10893] ext4 filesystem being mounted at /553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.892281][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.005006][ T29] audit: type=1326 audit(1769981572.302:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.4.2671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x0 [ 182.319218][ T29] audit: type=1400 audit(1769981573.622:1364): avc: denied { mounton } for pid=10956 comm="syz.6.2688" path="/" dev="configfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 182.523110][T10970] netlink: 'syz.3.2694': attribute type 1 has an invalid length. [ 182.553168][T10970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.582342][T10972] macsec1: entered promiscuous mode [ 182.587701][T10972] bond3: entered promiscuous mode [ 182.592911][T10972] macsec1: entered allmulticast mode [ 182.598307][T10972] bond3: entered allmulticast mode [ 183.549325][T10990] __nla_validate_parse: 3 callbacks suppressed [ 183.549355][T10990] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.2701'. [ 183.751645][T11001] lo speed is unknown, defaulting to 1000 [ 183.992199][T11015] delete_channel: no stack [ 184.239327][T11029] sctp: [Deprecated]: syz.4.2719 (pid 11029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.239327][T11029] Use struct sctp_sack_info instead [ 184.273776][T11031] loop6: detected capacity change from 0 to 128 [ 184.287854][T11031] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.335059][T11031] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.370426][ T4223] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.537681][T11043] loop6: detected capacity change from 0 to 8192 [ 184.611909][T11043] loop6: detected capacity change from 0 to 512 [ 184.630212][T11043] ext4: Unknown parameter 'subj_role' [ 184.751568][T11047] loop6: detected capacity change from 0 to 1024 [ 184.786396][T11047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.847290][ T4223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.198638][T11063] syz_tun: entered allmulticast mode [ 185.216664][T11062] syz_tun: left allmulticast mode [ 185.331941][T11067] bridge4: entered allmulticast mode [ 185.416463][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2736'. [ 185.445129][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2736'. [ 185.510438][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 185.510453][ T29] audit: type=1400 audit(1769981576.812:1391): avc: denied { watch watch_reads } for pid=11074 comm="syz.6.2737" path="pipe:[32967]" dev="pipefs" ino=32967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 185.837017][T11089] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 185.846029][T11089] ref_ctr increment failed for inode: 0xb5f offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888126ae86c0 [ 186.245086][T11112] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 186.645344][ T29] audit: type=1326 audit(1769981577.942:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 186.669052][ T29] audit: type=1326 audit(1769981577.942:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 186.692697][ T29] audit: type=1326 audit(1769981577.942:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 186.716323][ T29] audit: type=1326 audit(1769981577.942:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 186.740002][ T29] audit: type=1326 audit(1769981577.942:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 186.763559][ T29] audit: type=1326 audit(1769981577.952:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 186.804570][ T29] audit: type=1326 audit(1769981577.952:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 186.828196][ T29] audit: type=1326 audit(1769981577.952:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 186.851731][ T29] audit: type=1326 audit(1769981577.952:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11128 comm="syz.4.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 186.886381][T11135] netlink: 'syz.3.2761': attribute type 32 has an invalid length. [ 187.017650][ T7622] bond0: (slave syz_tun): Releasing backup interface [ 187.128785][T11145] lo speed is unknown, defaulting to 1000 [ 187.135128][T11165] lo speed is unknown, defaulting to 1000 [ 187.246628][T11145] chnl_net:caif_netlink_parms(): no params data found [ 187.312020][T11145] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.319176][T11145] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.326762][T11145] bridge_slave_0: entered allmulticast mode [ 187.333418][T11145] bridge_slave_0: entered promiscuous mode [ 187.340493][T11145] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.347622][T11145] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.405184][T11145] bridge_slave_1: entered allmulticast mode [ 187.411851][T11145] bridge_slave_1: entered promiscuous mode [ 187.432594][T11145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.443499][T11145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.466192][T11145] team0: Port device team_slave_0 added [ 187.474666][T11145] team0: Port device team_slave_1 added [ 187.523769][T11145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.531010][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.557155][T11145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.568768][T11145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.576064][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.602335][T11145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.643440][T11145] hsr_slave_0: entered promiscuous mode [ 187.654363][T11145] hsr_slave_1: entered promiscuous mode [ 187.738014][T11145] debugfs: 'hsr0' already exists in 'hsr' [ 187.743859][T11145] Cannot create hsr debugfs directory [ 187.931566][T11145] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 187.950939][T11145] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 187.966163][T11145] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 187.977334][T11145] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 188.001555][T11145] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.008714][T11145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.016205][T11145] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.023279][T11145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.045429][ T5373] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.053519][ T5373] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.076736][T11145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.111042][T11145] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.126433][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.133668][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.147707][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.154897][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.291663][T11145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.567691][T11145] veth0_vlan: entered promiscuous mode [ 188.637644][T11145] veth1_vlan: entered promiscuous mode [ 188.700122][T11145] veth0_macvtap: entered promiscuous mode [ 188.720340][T11145] veth1_macvtap: entered promiscuous mode [ 188.746732][T11145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.778024][T11145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.810791][ T5373] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.836936][ T5373] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.868731][ T5373] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.903245][ T5373] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.286946][T11245] ref_ctr_offset mismatch. inode: 0xbc7 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 189.805636][T11257] loop7: detected capacity change from 0 to 512 [ 189.883947][T11257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.896885][T11257] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.935953][T11257] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #2: block 18: comm syz.7.2789: lblock 23 mapped to illegal pblock 18 (length 1) [ 189.995546][T11257] EXT4-fs (loop7): Remounting filesystem read-only [ 190.113844][T11145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.182737][T11281] netlink: 'syz.7.2795': attribute type 1 has an invalid length. [ 190.713240][T11281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.274215][T11356] tipc: Started in network mode [ 191.279223][T11356] tipc: Node identity 123eb5665306, cluster identity 4711 [ 191.286487][T11356] tipc: Enabled bearer , priority 0 [ 191.362919][T11362] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2807'. [ 191.520240][T11364] syzkaller0: entered promiscuous mode [ 191.525861][T11364] syzkaller0: entered allmulticast mode [ 191.538503][T11364] tipc: Resetting bearer [ 191.559043][T11372] syzkaller1: entered promiscuous mode [ 191.564679][T11372] syzkaller1: entered allmulticast mode [ 191.667156][T11355] tipc: Resetting bearer [ 191.756054][T11355] tipc: Disabling bearer [ 193.017834][T11468] loop7: detected capacity change from 0 to 512 [ 193.049980][T11468] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 193.092093][T11468] EXT4-fs (loop7): 1 truncate cleaned up [ 193.118722][T11468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.334788][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 193.334807][ T29] audit: type=1326 audit(1769981584.632:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 193.406624][ T29] audit: type=1326 audit(1769981584.672:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 193.430245][ T29] audit: type=1326 audit(1769981584.672:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 193.453840][ T29] audit: type=1326 audit(1769981584.672:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 193.477491][ T29] audit: type=1326 audit(1769981584.672:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 193.502634][ T29] audit: type=1326 audit(1769981584.672:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 193.526186][ T29] audit: type=1326 audit(1769981584.672:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 193.551188][ T29] audit: type=1326 audit(1769981584.672:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 193.575242][ T29] audit: type=1326 audit(1769981584.672:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 193.598759][ T29] audit: type=1326 audit(1769981584.682:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.4.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 193.911682][T11481] loop2: detected capacity change from 0 to 128 [ 193.918802][T11481] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 193.953446][T11468] net_ratelimit: 122 callbacks suppressed [ 193.953467][T11468] Set syz1 is full, maxelem 65536 reached [ 193.971415][T11481] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.993069][T11481] ext2 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.061627][T11145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.351888][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.370463][T11497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2829'. [ 194.610985][T11506] lo speed is unknown, defaulting to 1000 [ 194.716795][T11515] loop2: detected capacity change from 0 to 512 [ 194.735829][T11515] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.795539][T11515] EXT4-fs (loop2): 1 truncate cleaned up [ 194.801849][T11515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.633843][T11515] Set syz1 is full, maxelem 65536 reached [ 195.887038][T11551] tipc: Enabling of bearer rejected, failed to enable media [ 195.920371][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.935811][T11553] tipc: Enabling of bearer rejected, failed to enable media [ 196.048212][T11559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2855'. [ 196.156364][T11572] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2858'. [ 196.446978][T11595] netlink: 'syz.6.2864': attribute type 1 has an invalid length. [ 196.770620][T11595] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.959739][T11633] netlink: 'syz.6.2875': attribute type 4 has an invalid length. [ 197.015348][T11643] netlink: 'syz.6.2875': attribute type 4 has an invalid length. [ 197.025965][T11642] tipc: Enabling of bearer rejected, failed to enable media [ 197.072492][T11633] gtp0: left promiscuous mode [ 197.110573][T11633] gretap1: left promiscuous mode [ 197.131645][T11633] gtp1: left promiscuous mode [ 197.156902][T11633] bond4: left promiscuous mode [ 197.161873][T11633] bond4: left allmulticast mode [ 197.180938][T11633] bridge4: left allmulticast mode [ 197.196623][T11644] lo speed is unknown, defaulting to 1000 [ 197.382941][T11666] netlink: 'syz.4.2886': attribute type 1 has an invalid length. [ 197.510572][T11678] loop2: detected capacity change from 0 to 1024 [ 197.537790][T11678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.562239][T11678] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2892'. [ 197.571534][T11678] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2892'. [ 197.626587][T11666] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.656376][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.754460][T11689] tipc: Enabled bearer , priority 0 [ 197.837480][T11689] syzkaller0: entered promiscuous mode [ 197.843099][T11689] syzkaller0: entered allmulticast mode [ 197.859336][T11689] tipc: Resetting bearer [ 197.890049][T11687] tipc: Resetting bearer [ 197.902206][T11687] tipc: Disabling bearer [ 198.472920][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 198.472940][ T29] audit: type=1400 audit(1769981589.772:1559): avc: denied { getopt } for pid=11713 comm="syz.7.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.731958][T11728] tipc: Enabled bearer , priority 0 [ 198.776085][T11728] syzkaller0: entered promiscuous mode [ 198.781699][T11728] syzkaller0: entered allmulticast mode [ 198.788029][T11728] tipc: Resetting bearer [ 198.805894][T11727] tipc: Resetting bearer [ 198.823202][T11727] tipc: Disabling bearer [ 198.928165][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2914'. [ 198.937361][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2914'. [ 199.008364][T11743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2915'. [ 199.040113][T11743] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2915'. [ 199.234954][ T29] audit: type=1326 audit(1769981590.532:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 199.258615][ T29] audit: type=1326 audit(1769981590.532:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 199.282206][ T29] audit: type=1326 audit(1769981590.532:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 199.306008][ T29] audit: type=1326 audit(1769981590.532:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 199.329676][ T29] audit: type=1326 audit(1769981590.532:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 199.353586][ T29] audit: type=1326 audit(1769981590.532:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 199.404943][ T29] audit: type=1326 audit(1769981590.532:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 199.428730][ T29] audit: type=1326 audit(1769981590.542:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 199.452461][ T29] audit: type=1326 audit(1769981590.612:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 199.499655][T11761] lo speed is unknown, defaulting to 1000 [ 199.539098][T11765] loop6: detected capacity change from 0 to 1024 [ 199.575550][T11765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.718272][T11776] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 28 [ 199.730853][T11776] EXT4-fs (loop6): This should not happen!! Data will be lost [ 199.730853][T11776] [ 199.740563][T11776] EXT4-fs (loop6): Total free blocks count 0 [ 199.746674][T11776] EXT4-fs (loop6): Free/Dirty block details [ 199.753080][T11776] EXT4-fs (loop6): free_blocks=0 [ 199.758100][T11776] EXT4-fs (loop6): dirty_blocks=0 [ 199.763333][T11776] EXT4-fs (loop6): Block reservation details [ 199.769424][T11776] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 199.845778][T11774] macvtap1: entered promiscuous mode [ 199.852164][T11774] bridge0: entered promiscuous mode [ 199.862014][T11774] macvtap1: entered allmulticast mode [ 199.868844][T11774] bridge0: entered allmulticast mode [ 199.878769][ T4223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.893766][T11774] bridge0: port 1(macvtap1) entered blocking state [ 199.902404][T11774] bridge0: port 1(macvtap1) entered disabled state [ 199.948392][T11774] bridge0: left allmulticast mode [ 199.953854][T11774] bridge0: left promiscuous mode [ 200.332836][T11814] loop7: detected capacity change from 0 to 1024 [ 200.342140][T11815] tipc: Enabled bearer , priority 0 [ 200.376348][T11814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.405131][T11814] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2944'. [ 200.414386][T11814] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2944'. [ 200.440822][T11815] syzkaller0: entered promiscuous mode [ 200.446487][T11815] syzkaller0: entered allmulticast mode [ 200.453523][T11815] tipc: Resetting bearer [ 200.479780][T11813] tipc: Resetting bearer [ 200.493169][T11813] tipc: Disabling bearer [ 200.493698][T11145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.757225][T11837] loop2: detected capacity change from 0 to 512 [ 200.778090][T11837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.798771][T11837] ext4 filesystem being mounted at /588/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.868461][T11837] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #19: comm syz.2.2950: corrupted inode contents [ 200.880785][T11837] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #19: comm syz.2.2950: mark_inode_dirty error [ 200.892736][T11837] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #19: comm syz.2.2950: corrupted inode contents [ 200.906062][T11837] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #19: comm syz.2.2950: mark_inode_dirty error [ 200.919027][T11837] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #19: comm syz.2.2950: mark inode dirty (error -117) [ 200.932356][T11837] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 200.964301][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.999530][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2952'. [ 201.008629][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2952'. [ 201.623455][T11874] batman_adv: batadv0: Adding interface: ipvlan0 [ 201.629901][T11874] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.655302][T11874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.665857][T11874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.675752][T11874] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 202.138434][T11897] loop7: detected capacity change from 0 to 1024 [ 202.168094][T11897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.243173][T11145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.741078][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2985'. [ 203.022789][T11936] lo speed is unknown, defaulting to 1000 [ 203.160552][T11952] netlink: 'syz.3.2995': attribute type 10 has an invalid length. [ 203.168585][T11952] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2995'. [ 203.209174][T11952] dummy0: entered allmulticast mode [ 203.226262][T11952] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 203.307755][T11958] loop2: detected capacity change from 0 to 2048 [ 203.376499][ T3304] GPT:first_usable_lbas don't match. [ 203.381898][ T3304] GPT:34 != 290 [ 203.385424][ T3304] GPT: Use GNU Parted to correct GPT errors. [ 203.391523][ T3304] loop2: p1 p2 p3 [ 203.429409][T11958] GPT:first_usable_lbas don't match. [ 203.434815][T11958] GPT:34 != 290 [ 203.438357][T11958] GPT: Use GNU Parted to correct GPT errors. [ 203.444501][T11958] loop2: p1 p2 p3 [ 203.465456][ T3002] GPT:first_usable_lbas don't match. [ 203.470819][ T3002] GPT:34 != 290 [ 203.474321][ T3002] GPT: Use GNU Parted to correct GPT errors. [ 203.480460][ T3002] loop2: p1 p2 p3 [ 203.487099][T11967] lo speed is unknown, defaulting to 1000 [ 203.596368][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 203.619414][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 203.619978][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 203.653628][T11977] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 203.684682][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 203.699401][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 203.710690][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 203.748560][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 203.760199][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 203.772562][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 203.854775][T11986] lo speed is unknown, defaulting to 1000 [ 203.944486][T11992] bridge_slave_0: left allmulticast mode [ 203.950326][T11992] bridge_slave_0: left promiscuous mode [ 203.956363][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.003171][T11992] bridge_slave_1: left allmulticast mode [ 204.008985][T11992] bridge_slave_1: left promiscuous mode [ 204.014705][T11992] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.045198][T11992] bond0: (slave bond_slave_0): Releasing backup interface [ 204.083982][T11992] bond0: (slave bond_slave_1): Releasing backup interface [ 204.115435][T11992] team0: Port device team_slave_0 removed [ 204.124774][T11992] team0: Port device team_slave_1 removed [ 204.131697][T11992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.140357][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 204.140374][ T29] audit: type=1400 audit(1769981595.442:1640): avc: denied { create } for pid=11999 comm="syz.6.3013" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.170918][T11992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.178980][ T29] audit: type=1400 audit(1769981595.442:1641): avc: denied { map } for pid=11999 comm="syz.6.3013" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.203434][ T29] audit: type=1400 audit(1769981595.442:1642): avc: denied { read write } for pid=11999 comm="syz.6.3013" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.229448][T11992] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 204.247494][T11995] team0: Mode changed to "loadbalance" [ 204.328306][ T29] audit: type=1326 audit(1769981595.632:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 204.354094][T11997] bridge0: entered promiscuous mode [ 204.368465][T11997] macvtap1: entered promiscuous mode [ 204.376909][T11997] macvtap1: entered allmulticast mode [ 204.377047][ T29] audit: type=1326 audit(1769981595.632:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 204.382728][T11997] bridge0: entered allmulticast mode [ 204.406437][ T29] audit: type=1326 audit(1769981595.652:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 204.406540][ T29] audit: type=1326 audit(1769981595.652:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 204.406575][ T29] audit: type=1326 audit(1769981595.662:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 204.442277][ T29] audit: type=1326 audit(1769981595.712:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0f0f0b78e code=0x7ffc0000 [ 204.508944][ T29] audit: type=1326 audit(1769981595.712:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0f0f0b78e code=0x7ffc0000 [ 204.575077][T11997] bridge0: port 3(macvtap1) entered blocking state [ 204.582284][T11997] bridge0: port 3(macvtap1) entered disabled state [ 204.650310][T11997] bridge0: left allmulticast mode [ 204.658732][T11997] bridge0: left promiscuous mode [ 205.045994][T12029] lo speed is unknown, defaulting to 1000 [ 205.131031][T12031] lo speed is unknown, defaulting to 1000 [ 205.632994][T12056] lo speed is unknown, defaulting to 1000 [ 206.192784][T12074] loop6: detected capacity change from 0 to 512 [ 206.199907][T12074] EXT4-fs: inline encryption not supported [ 206.205898][T12074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.242464][T12074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 206.251093][T12074] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 206.275614][T12077] loop2: detected capacity change from 0 to 1024 [ 206.278054][T12072] lo speed is unknown, defaulting to 1000 [ 206.304366][T12074] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3048: Failed to acquire dquot type 1 [ 206.332694][T12077] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3041: bad orphan inode 134217728 [ 206.353975][T12074] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 206.373627][T12077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.386330][T12074] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.3048: corrupted inode contents [ 206.399085][T12074] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.3048: mark_inode_dirty error [ 206.474922][T12074] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.3048: corrupted inode contents [ 206.550008][T12074] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.3048: mark_inode_dirty error [ 206.628655][T12074] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.3048: corrupted inode contents [ 206.650455][T12074] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 206.677911][T12074] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.3048: corrupted inode contents [ 206.713302][T12074] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.3048: mark_inode_dirty error [ 206.753354][T12074] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 206.786632][T12074] EXT4-fs (loop6): 1 truncate cleaned up [ 206.792970][T12074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.914222][ T4223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.987516][T12093] netlink: 'syz.4.3046': attribute type 10 has an invalid length. [ 206.995542][T12093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3046'. [ 207.031309][T12093] dummy0: entered promiscuous mode [ 207.036611][T12093] dummy0: entered allmulticast mode [ 207.043421][T12093] bridge0: port 1(dummy0) entered blocking state [ 207.049863][T12093] bridge0: port 1(dummy0) entered disabled state [ 207.107961][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.184739][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3050'. [ 207.212784][T12101] macvtap1: entered promiscuous mode [ 207.219313][T12101] bridge0: entered promiscuous mode [ 207.231403][T12101] macvtap1: entered allmulticast mode [ 207.237955][T12101] bridge0: entered allmulticast mode [ 207.246947][T12101] bridge0: port 2(macvtap1) entered blocking state [ 207.255608][T12101] bridge0: port 2(macvtap1) entered disabled state [ 207.279777][T12113] loop6: detected capacity change from 0 to 128 [ 207.291522][T12101] bridge0: left allmulticast mode [ 207.297645][T12101] bridge0: left promiscuous mode [ 207.370651][T12118] syz.6.3054: attempt to access beyond end of device [ 207.370651][T12118] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 207.384340][T12118] syz.6.3054: attempt to access beyond end of device [ 207.384340][T12118] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 207.398060][T12118] syz.6.3054: attempt to access beyond end of device [ 207.398060][T12118] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 207.411714][T12118] syz.6.3054: attempt to access beyond end of device [ 207.411714][T12118] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 207.432303][T12118] syz.6.3054: attempt to access beyond end of device [ 207.432303][T12118] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 207.453712][T12118] syz.6.3054: attempt to access beyond end of device [ 207.453712][T12118] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 207.467433][T12103] lo speed is unknown, defaulting to 1000 [ 207.585779][T12126] tipc: Enabled bearer , priority 0 [ 207.767776][T12126] syzkaller0: entered promiscuous mode [ 207.773342][T12126] syzkaller0: entered allmulticast mode [ 207.793808][T12126] tipc: Resetting bearer [ 207.815595][T12125] tipc: Resetting bearer [ 207.831100][T12125] tipc: Disabling bearer [ 208.301937][T12154] loop2: detected capacity change from 0 to 512 [ 208.533624][T12154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.568722][T12195] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3082'. [ 208.654285][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.938336][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 208.947412][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 209.044509][T12216] macvtap1: entered promiscuous mode [ 209.051388][T12216] bridge0: entered promiscuous mode [ 209.059241][T12216] macvtap1: entered allmulticast mode [ 209.065191][T12216] bridge0: entered allmulticast mode [ 209.121995][T12216] bridge0: port 1(macvtap1) entered blocking state [ 209.131169][T12216] bridge0: port 1(macvtap1) entered disabled state [ 209.174699][T12216] bridge0: left allmulticast mode [ 209.181169][T12216] bridge0: left promiscuous mode [ 209.197223][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3092'. [ 209.206251][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3092'. [ 209.260534][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3095'. [ 209.487352][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 209.487452][ T29] audit: type=1400 audit(1769981600.792:1716): avc: denied { bind } for pid=12245 comm="syz.7.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.531048][T12252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3102'. [ 209.540217][T12252] netlink: 'syz.4.3102': attribute type 7 has an invalid length. [ 209.548028][T12252] netlink: 'syz.4.3102': attribute type 8 has an invalid length. [ 209.555845][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3102'. [ 209.771879][T12271] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3108'. [ 209.809635][T12276] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3110'. [ 209.957691][ T29] audit: type=1400 audit(1769981601.262:1717): avc: denied { getopt } for pid=12287 comm="syz.2.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.414696][T12334] loop7: detected capacity change from 0 to 128 [ 210.524504][T12344] syz.7.3131: attempt to access beyond end of device [ 210.524504][T12344] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 210.557209][T12344] syz.7.3131: attempt to access beyond end of device [ 210.557209][T12344] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 210.576489][T12344] syz.7.3131: attempt to access beyond end of device [ 210.576489][T12344] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 210.590198][T12344] syz.7.3131: attempt to access beyond end of device [ 210.590198][T12344] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 210.829620][T12363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.845151][T12363] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 210.855784][T12363] bond2: entered allmulticast mode [ 210.861080][T12363] dummy0: entered allmulticast mode [ 211.186831][T12384] loop2: detected capacity change from 0 to 512 [ 211.216527][T12384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.230267][T12384] ext4 filesystem being mounted at /621/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.270009][T12390] tunl0: Caught tx_queue_len zero misconfig [ 211.350114][T12393] netlink: 'syz.3.3153': attribute type 1 has an invalid length. [ 211.366037][T12393] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.384144][T12393] dummy0: left allmulticast mode [ 211.408308][T12393] bond4: (slave dummy0): making interface the new active one [ 211.426327][T12393] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 211.447252][T12393] bond4: entered promiscuous mode [ 211.458803][T12396] lo speed is unknown, defaulting to 1000 [ 211.622744][ T29] audit: type=1326 audit(1769981602.922:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12406 comm="syz.3.3159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x0 [ 212.143413][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.176384][T12474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.238150][T12490] lo speed is unknown, defaulting to 1000 [ 213.250483][T12490] lo speed is unknown, defaulting to 1000 [ 213.263664][T12490] lo speed is unknown, defaulting to 1000 [ 213.305506][T12490] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 213.338094][T12490] lo speed is unknown, defaulting to 1000 [ 213.356579][T12490] lo speed is unknown, defaulting to 1000 [ 213.366848][T12490] lo speed is unknown, defaulting to 1000 [ 213.385780][T12490] lo speed is unknown, defaulting to 1000 [ 213.391968][T12490] lo speed is unknown, defaulting to 1000 [ 213.398146][T12490] lo speed is unknown, defaulting to 1000 [ 213.410356][T12490] lo speed is unknown, defaulting to 1000 [ 213.577639][T12516] xt_hashlimit: size too large, truncated to 1048576 [ 213.907645][T12533] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 213.952616][T12525] IPv6: sit1: Disabled Multicast RS [ 214.198331][T12553] __nla_validate_parse: 7 callbacks suppressed [ 214.198353][T12553] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.3209'. [ 214.336050][T12559] netlink: 'syz.7.3212': attribute type 1 has an invalid length. [ 214.350985][T12559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.367756][T12559] bond2: (slave dummy0): Releasing backup interface [ 214.381093][T12559] dummy0: left allmulticast mode [ 214.399950][T12559] bond3: (slave dummy0): making interface the new active one [ 214.411155][T12559] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 214.423488][T12561] bond3: entered promiscuous mode [ 214.428761][T12561] dummy0: entered promiscuous mode [ 215.031479][T12593] loop6: detected capacity change from 0 to 128 [ 215.207224][ T29] audit: type=1326 audit(1769981606.512:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.4.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 215.265843][ T29] audit: type=1326 audit(1769981606.512:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.4.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 215.289473][ T29] audit: type=1326 audit(1769981606.512:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.4.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 215.313093][ T29] audit: type=1326 audit(1769981606.512:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.4.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 215.336782][ T29] audit: type=1326 audit(1769981606.512:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.4.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 215.360327][ T29] audit: type=1326 audit(1769981606.512:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.4.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 215.384039][ T29] audit: type=1326 audit(1769981606.512:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.4.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 215.407718][ T29] audit: type=1326 audit(1769981606.512:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.4.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 215.431211][ T29] audit: type=1326 audit(1769981606.512:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.4.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 215.454822][ T29] audit: type=1326 audit(1769981606.512:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.4.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f3d14efaeb9 code=0x7ffc0000 [ 216.146735][T12625] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3237'. [ 216.703309][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'. [ 216.745377][T12647] netlink: 'syz.6.3244': attribute type 1 has an invalid length. [ 216.826472][ T7505] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.835079][ T7505] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.864794][ T7505] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.883332][ T7505] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.933434][T12654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.269102][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3256'. [ 218.502421][T12703] loop2: detected capacity change from 0 to 256 [ 218.517207][T12703] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 218.604500][T12703] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.847923][T12718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.893890][T12718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.151678][T12762] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 220.780845][T12786] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3295'. [ 220.927871][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 220.927889][ T29] audit: type=1400 audit(1769981612.232:1792): avc: denied { create } for pid=12790 comm="syz.7.3298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 221.051170][ T29] audit: type=1326 audit(1769981612.352:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.7.3301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb95f6e4cd7 code=0x0 [ 221.739068][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'. [ 221.901252][ T29] audit: type=1400 audit(1769981613.182:1794): avc: denied { write } for pid=12837 comm="syz.6.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 222.015693][T12855] macvlan2: entered promiscuous mode [ 222.021777][T12855] batman_adv: batadv0: Adding interface: macvlan2 [ 222.028558][T12855] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.054153][T12855] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 222.084663][T12858] lo speed is unknown, defaulting to 1000 [ 222.259541][ T29] audit: type=1400 audit(1769981613.562:1795): avc: denied { connect } for pid=12863 comm="syz.2.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 222.412950][T12869] loop2: detected capacity change from 0 to 8192 [ 222.486806][ T3320] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 222.494913][ T3320] FAT-fs (loop2): Filesystem has been set read-only [ 222.593753][T12875] netlink: 'syz.6.3333': attribute type 4 has an invalid length. [ 222.617301][T12875] netlink: 'syz.6.3333': attribute type 4 has an invalid length. [ 222.637922][T10686] lo speed is unknown, defaulting to 1000 [ 222.643732][T10686] syz2: Port: 1 Link ACTIVE [ 222.653289][T10686] lo speed is unknown, defaulting to 1000 [ 222.659199][T10686] syz2: Port: 1 Link DOWN [ 223.071581][T12911] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3346'. [ 223.128408][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3349'. [ 223.141763][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3349'. [ 223.165622][T12915] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 223.426512][T12930] loop2: detected capacity change from 0 to 764 [ 223.633979][T12938] loop6: detected capacity change from 0 to 128 [ 223.642482][T12938] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.667221][T12938] ext4 filesystem being mounted at /590/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.722234][ T4223] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.780135][ T29] audit: type=1400 audit(1769981615.082:1796): avc: denied { read } for pid=12949 comm="syz.2.3361" path="socket:[38771]" dev="sockfs" ino=38771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 224.030783][T12967] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.099895][T12975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.117715][T12967] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.149753][T12975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.163260][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3374'. [ 224.207323][T12975] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.278293][T12967] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.326578][T12975] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.363908][T12967] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.408677][T12975] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.451702][ T7505] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.465318][ T7505] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.487632][ T7505] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.510929][T12975] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.543613][T10686] page_pool_release_retry() stalled pool shutdown: id 91, 1 inflight 60 sec [ 224.559727][ T5383] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.728148][ T31] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.826181][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3382'. [ 224.842669][ T31] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.920694][ T5383] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.004239][ T7505] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.058597][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3385'. [ 225.072104][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3385'. [ 225.115598][ T29] audit: type=1400 audit(1769981616.422:1797): avc: denied { create } for pid=13017 comm="syz.3.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 225.144231][ T29] audit: type=1400 audit(1769981616.442:1798): avc: denied { read } for pid=13017 comm="syz.3.3387" path="socket:[39964]" dev="sockfs" ino=39964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 225.168561][ T29] audit: type=1400 audit(1769981616.442:1799): avc: denied { setopt } for pid=13017 comm="syz.3.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 225.269897][T13027] loop6: detected capacity change from 0 to 128 [ 225.286007][T13027] FAT-fs (loop6): Directory bread(block 32) failed [ 225.293254][T13027] FAT-fs (loop6): Directory bread(block 33) failed [ 225.309346][T13027] FAT-fs (loop6): Directory bread(block 34) failed [ 225.316032][T13027] FAT-fs (loop6): Directory bread(block 35) failed [ 225.322673][T13027] FAT-fs (loop6): Directory bread(block 36) failed [ 225.329588][T13027] FAT-fs (loop6): Directory bread(block 37) failed [ 225.347355][T13027] FAT-fs (loop6): Directory bread(block 38) failed [ 225.361701][T13027] FAT-fs (loop6): Directory bread(block 39) failed [ 225.368405][T13027] FAT-fs (loop6): Directory bread(block 40) failed [ 225.375497][T13027] FAT-fs (loop6): Directory bread(block 41) failed [ 225.385860][ T29] audit: type=1326 audit(1769981616.692:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13028 comm="syz.7.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 225.409464][ T29] audit: type=1326 audit(1769981616.692:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13028 comm="syz.7.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 225.481262][T13027] bio_check_eod: 66 callbacks suppressed [ 225.481280][T13027] syz.6.3391: attempt to access beyond end of device [ 225.481280][T13027] loop6: rw=8388608, sector=4108, nr_sectors = 4 limit=128 [ 225.490530][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3393'. [ 225.500915][T13027] FAT-fs (loop6): Filesystem has been set read-only [ 225.516707][T13027] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 225.853821][T13059] __nla_validate_parse: 1 callbacks suppressed [ 225.853841][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3406'. [ 225.983504][T13061] vlan1: entered allmulticast mode [ 225.988732][T13061] bond7: entered allmulticast mode [ 226.168502][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3410'. [ 226.826960][T13095] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3418'. [ 227.155499][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 227.155519][ T29] audit: type=1326 audit(1769981618.422:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cabaeb9 code=0x7fc00000 [ 227.751375][ T29] audit: type=1326 audit(1769981619.002:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff62ca5c2d9 code=0x7fc00000 [ 227.775367][ T29] audit: type=1326 audit(1769981619.002:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff62ca5c39d code=0x7fc00000 [ 227.799314][ T29] audit: type=1326 audit(1769981619.002:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff62cabaeb9 code=0x7fc00000 [ 228.231717][T13149] lo speed is unknown, defaulting to 1000 [ 228.355792][T13156] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 228.403767][T13161] xt_CT: No such helper "pptp" [ 228.498083][ T29] audit: type=1400 audit(1769981619.802:1813): avc: denied { shutdown } for pid=13167 comm="syz.4.3448" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.531194][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3449'. [ 228.617893][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 228.626997][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 228.670695][ T29] audit: type=1326 audit(1769981619.972:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13183 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 228.694365][ T29] audit: type=1326 audit(1769981619.972:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13183 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 228.718058][ T29] audit: type=1326 audit(1769981619.972:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13183 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 228.741765][ T29] audit: type=1326 audit(1769981619.972:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13183 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 228.765395][ T29] audit: type=1326 audit(1769981619.972:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13183 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 228.827509][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3457'. [ 228.836776][T13188] netlink: 'syz.2.3457': attribute type 12 has an invalid length. [ 228.845092][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3457'. [ 228.854129][T13188] netlink: 'syz.2.3457': attribute type 12 has an invalid length. [ 229.014564][T13197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3460'. [ 229.350139][T13212] loop2: detected capacity change from 0 to 1024 [ 229.361523][T13212] EXT4-fs: Ignoring removed orlov option [ 229.368617][T13212] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 229.417763][T13212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.499904][T13221] netlink: 'syz.4.3469': attribute type 2 has an invalid length. [ 229.541056][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.610233][ T8200] IPVS: starting estimator thread 0... [ 229.627271][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3470'. [ 229.705118][T13233] IPVS: using max 2208 ests per chain, 110400 per kthread [ 230.237020][T13264] lo speed is unknown, defaulting to 1000 [ 230.582217][T13274] loop7: detected capacity change from 0 to 1024 [ 230.743391][T13274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.415700][T11145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.561699][T13282] lo speed is unknown, defaulting to 1000 [ 231.907766][T13299] loop2: detected capacity change from 0 to 512 [ 231.915222][T13299] EXT4-fs: Ignoring removed oldalloc option [ 231.940597][T13299] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.3495: Parent and EA inode have the same ino 15 [ 231.971021][T13299] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.3495: Parent and EA inode have the same ino 15 [ 231.985054][T13299] EXT4-fs (loop2): 1 orphan inode deleted [ 231.991336][T13299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.005771][T13299] __nla_validate_parse: 1 callbacks suppressed [ 232.005790][T13299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3495'. [ 232.195931][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.278958][T13313] netlink: 'syz.3.3502': attribute type 4 has an invalid length. [ 232.329287][T13316] netlink: 'syz.3.3502': attribute type 4 has an invalid length. [ 232.512682][T13325] netlink: 'syz.7.3505': attribute type 10 has an invalid length. [ 232.548607][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 232.548631][ T29] audit: type=1400 audit(1769981623.852:1867): avc: denied { bind } for pid=13321 comm="syz.3.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 232.585652][T13325] bond3: (slave dummy0): Releasing active interface [ 232.594914][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3509'. [ 232.625086][T13334] netlink: 'syz.7.3505': attribute type 10 has an invalid length. [ 232.645916][T13325] dummy0: left promiscuous mode [ 232.663121][T13325] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 232.683016][T13325] team0: Failed to send options change via netlink (err -105) [ 232.690708][T13325] team0: Port device dummy0 added [ 232.696965][ T29] audit: type=1326 audit(1769981624.002:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13337 comm="syz.3.3512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 232.717536][T13334] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 232.720869][ T29] audit: type=1326 audit(1769981624.002:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13337 comm="syz.3.3512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 232.752805][ T29] audit: type=1326 audit(1769981624.002:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13337 comm="syz.3.3512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 232.781468][T13334] team0: Failed to send options change via netlink (err -105) [ 232.812055][T13334] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 232.828852][T13334] team0: Port device dummy0 removed [ 232.841749][T13334] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 232.856871][ T29] audit: type=1326 audit(1769981624.082:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13337 comm="syz.3.3512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 232.880512][ T29] audit: type=1326 audit(1769981624.082:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13337 comm="syz.3.3512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 232.904221][ T29] audit: type=1326 audit(1769981624.082:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13337 comm="syz.3.3512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 232.927993][ T29] audit: type=1326 audit(1769981624.082:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13337 comm="syz.3.3512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 232.951726][ T29] audit: type=1326 audit(1769981624.082:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13337 comm="syz.3.3512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 232.975358][ T29] audit: type=1326 audit(1769981624.082:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13337 comm="syz.3.3512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 233.097718][T13357] loop7: detected capacity change from 0 to 512 [ 233.104570][T13357] EXT4-fs: Ignoring removed orlov option [ 233.126719][T13357] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 233.139470][T13357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 233.163469][T13357] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3518: corrupted in-inode xattr: e_value size too large [ 233.186063][T13357] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3518: couldn't read orphan inode 15 (err -117) [ 233.210384][T13357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.407149][T11145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.557504][T13377] netlink: 'syz.6.3527': attribute type 27 has an invalid length. [ 233.649055][T13377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.707104][T13377] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.716124][T13377] batman_adv: batadv0: Interface activated: dummy0 [ 233.722701][T13377] batadv0: mtu less than device minimum [ 233.729051][T13377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.740152][T13377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.751082][T13377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.762223][T13377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.773377][T13377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.784486][T13377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.795852][T13377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.806921][T13377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.817739][T13377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.890063][ T8200] lo speed is unknown, defaulting to 1000 [ 233.895976][ T8200] syz2: Port: 1 Link ACTIVE [ 234.358046][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3542'. [ 234.375320][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3542'. [ 235.266823][T13452] 8021q: adding VLAN 0 to HW filter on device bond8 [ 235.310284][T13455] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 235.672088][T13477] loop7: detected capacity change from 0 to 1024 [ 235.688311][T13477] EXT4-fs: Ignoring removed oldalloc option [ 235.694328][T13477] EXT4-fs: Ignoring removed bh option [ 235.730229][T13477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.399327][T13491] loop6: detected capacity change from 0 to 512 [ 236.416084][T13491] EXT4-fs: Ignoring removed oldalloc option [ 236.447181][T13491] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.3563: Parent and EA inode have the same ino 15 [ 236.473353][T13491] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.3563: Parent and EA inode have the same ino 15 [ 236.491530][T13491] EXT4-fs (loop6): 1 orphan inode deleted [ 236.498264][T13491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.535194][T13491] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3563'. [ 236.571019][T11145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.618456][ T4223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.841005][T13511] lo speed is unknown, defaulting to 1000 [ 237.215886][T13511] loop7: detected capacity change from 0 to 1024 [ 237.225445][T13511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.240552][T13511] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 237.274286][T13511] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 237.294814][T13511] EXT4-fs error (device loop7): ext4_get_journal_inode:5849: comm syz.7.3571: inode #1: comm syz.7.3571: iget: illegal inode # [ 237.315167][T13511] EXT4-fs (loop7): no journal found [ 237.320638][T13511] EXT4-fs (loop7): can't get journal size [ 237.335938][T13511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 237.345067][T13511] EXT4-fs (loop7): failed to initialize system zone (-22) [ 237.445642][T13511] EXT4-fs (loop7): mount failed [ 237.943598][T13549] netlink: 'syz.3.3585': attribute type 27 has an invalid length. [ 237.981895][T13549] vlan2: left promiscuous mode [ 238.069037][T13549] gtp0: left promiscuous mode [ 238.313024][T13549] bond3: left allmulticast mode [ 238.317983][T13549] bond3: left promiscuous mode [ 238.332579][T13549] macsec1: left promiscuous mode [ 238.337663][T13549] macsec1: left allmulticast mode [ 238.347542][T13549] bond4: left promiscuous mode [ 238.366707][T13549] dummy0: left promiscuous mode [ 238.495061][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 238.495078][ T29] audit: type=1400 audit(1769981629.742:1882): avc: denied { read } for pid=13554 comm="syz.6.3588" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 238.524609][ T29] audit: type=1400 audit(1769981629.742:1883): avc: denied { open } for pid=13554 comm="syz.6.3588" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 238.545765][T13550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.556924][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3588'. [ 238.594910][T13550] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.724319][T13568] loop6: detected capacity change from 0 to 512 [ 238.757776][ T29] audit: type=1400 audit(1769981630.062:1884): avc: denied { map } for pid=13567 comm="syz.6.3594" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.795445][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3595'. [ 238.845633][T13576] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=13576 comm=syz.6.3597 [ 238.869487][T13576] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3597'. [ 238.913133][T13580] tipc: Started in network mode [ 238.918198][T13580] tipc: Node identity 5a80ecd2244b, cluster identity 4711 [ 238.925510][T13580] tipc: Enabled bearer , priority 0 [ 238.985641][T13580] syzkaller0: entered promiscuous mode [ 238.991206][T13580] syzkaller0: entered allmulticast mode [ 238.997686][T13580] tipc: Resetting bearer [ 239.021502][T13579] tipc: Resetting bearer [ 239.040419][T13579] tipc: Disabling bearer [ 239.225697][T13593] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3602' sets config #1 [ 239.482965][T13604] netlink: 'syz.2.3607': attribute type 27 has an invalid length. [ 239.497388][T13604] ip6gre1: left promiscuous mode [ 239.502409][T13604] ip6gre1: left allmulticast mode [ 239.550341][T13604] macvlan2: left promiscuous mode [ 239.578103][T13609] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.588923][T13609] net_ratelimit: 14 callbacks suppressed [ 239.588934][T13609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.610743][ T3451] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.621245][ T3451] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.632201][ T3451] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.650895][ T3451] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.883152][T13626] ref_ctr increment failed for inode: 0x313 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888126ae86c0 [ 239.896111][T13625] uprobe: syz.7.3614:13625 failed to unregister, leaking uprobe [ 240.103548][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3619'. [ 240.112590][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3619'. [ 240.163397][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3620'. [ 240.433060][T13644] netlink: 'syz.4.3623': attribute type 27 has an invalid length. [ 240.448256][T13648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.479288][T13648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.480580][T13642] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 240.585476][T13654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.594274][T13654] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.603758][T13654] bridge0: port 1(dummy0) entered blocking state [ 240.610216][T13654] bridge0: port 1(dummy0) entered forwarding state [ 240.621224][T13654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.644190][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3630'. [ 240.662345][T13648] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.707372][ T29] audit: type=1326 audit(1769981632.012:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13666 comm="syz.3.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 240.731441][ T29] audit: type=1326 audit(1769981632.012:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13666 comm="syz.3.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 240.755135][ T29] audit: type=1326 audit(1769981632.012:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13666 comm="syz.3.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 240.778806][ T29] audit: type=1326 audit(1769981632.012:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13666 comm="syz.3.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 240.802272][ T29] audit: type=1326 audit(1769981632.012:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13666 comm="syz.3.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 240.826226][ T29] audit: type=1326 audit(1769981632.062:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13666 comm="syz.3.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 240.849795][ T29] audit: type=1326 audit(1769981632.062:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13666 comm="syz.3.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f0f4aeb9 code=0x7ffc0000 [ 240.905868][T13670] netlink: 'syz.4.3633': attribute type 39 has an invalid length. [ 240.916704][T13648] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.001566][T13648] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.045693][T13682] loop2: detected capacity change from 0 to 512 [ 241.061929][T13682] EXT4-fs (loop2): 1 truncate cleaned up [ 241.068741][T13682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.099479][T13648] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.130592][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.200709][T13687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.210702][T13687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.323205][ T7505] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.379160][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3640'. [ 241.422187][ T3451] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.558416][ T31] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.689189][ T3451] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.806228][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'. [ 241.832759][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'. [ 241.958966][T13711] sch_fq: defrate 7 ignored. [ 242.045022][T13727] netlink: 'syz.2.3655': attribute type 10 has an invalid length. [ 242.063328][T13727] team0: Failed to send options change via netlink (err -105) [ 242.071068][T13727] team0: Port device dummy0 added [ 242.094273][T13727] netlink: 'syz.2.3655': attribute type 10 has an invalid length. [ 242.102864][T13727] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 242.125111][T13727] team0: Failed to send options change via netlink (err -105) [ 242.140009][T13727] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 242.172131][T13727] team0: Port device dummy0 removed [ 242.308810][T13742] lo speed is unknown, defaulting to 1000 [ 242.343114][T13745] netlink: 'syz.7.3660': attribute type 27 has an invalid length. [ 242.733169][T13747] loop6: detected capacity change from 0 to 1024 [ 242.754120][T13747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.764002][T13747] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 242.777899][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.785206][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.794787][T13747] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 242.805399][T13747] EXT4-fs error (device loop6): ext4_get_journal_inode:5849: comm syz.6.3669: inode #1: comm syz.6.3669: iget: illegal inode # [ 242.819621][T13747] EXT4-fs (loop6): no journal found [ 242.825090][T13747] EXT4-fs (loop6): can't get journal size [ 242.854330][T13747] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 242.896533][T13745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.909094][T13747] EXT4-fs (loop6): failed to initialize system zone (-22) [ 242.932556][T13747] EXT4-fs (loop6): mount failed [ 242.997755][T13745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.073407][T13745] bond3: left promiscuous mode [ 243.126367][T13748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.136359][T13748] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.148017][T13748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.186351][ T7505] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.213217][ T7505] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.242251][ T7505] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.258172][T13767] netlink: 'syz.4.3668': attribute type 10 has an invalid length. [ 243.262919][ T7505] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.287583][T13767] bridge0: port 1(dummy0) entered disabled state [ 243.303213][T13767] dummy0: left allmulticast mode [ 243.319171][T13769] netlink: 'syz.4.3668': attribute type 10 has an invalid length. [ 243.330062][T13767] dummy0: left promiscuous mode [ 243.335245][T13767] bridge0: port 1(dummy0) entered disabled state [ 243.346739][T13767] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 243.356552][T13767] team0: Failed to send options change via netlink (err -105) [ 243.364077][T13767] team0: Port device dummy0 added [ 243.377317][T13769] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 243.402346][T13769] team0: Failed to send options change via netlink (err -105) [ 243.416614][T13769] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 243.439898][T13774] loop7: detected capacity change from 0 to 1024 [ 243.448716][T13774] EXT4-fs: Ignoring removed orlov option [ 243.456078][T13769] team0: Port device dummy0 removed [ 243.485427][T13774] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.606755][T13790] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 243.665874][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 243.665892][ T29] audit: type=1326 audit(1769981634.972:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.6.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cabaeb9 code=0x7ffc0000 [ 243.669575][T13795] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 243.682556][ T29] audit: type=1326 audit(1769981634.972:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.6.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff62cabaeb9 code=0x7ffc0000 [ 243.730846][ T29] audit: type=1326 audit(1769981634.972:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.6.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff62cabac22 code=0x7ffc0000 [ 243.754186][ T29] audit: type=1326 audit(1769981634.972:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.6.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff62ca7b78e code=0x7ffc0000 [ 243.778983][T13796] loop6: detected capacity change from 0 to 512 [ 243.800757][T13796] EXT4-fs (loop6): 1 truncate cleaned up [ 243.808485][T13796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.832889][ T29] audit: type=1326 audit(1769981635.082:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.6.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff62cabace7 code=0x7ffc0000 [ 243.856873][ T29] audit: type=1326 audit(1769981635.082:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.6.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff62ca7b78e code=0x7ffc0000 [ 243.880545][ T29] audit: type=1326 audit(1769981635.082:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.6.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff62cabab4b code=0x7ffc0000 [ 243.904016][ T29] audit: type=1326 audit(1769981635.092:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.6.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff62ca7b78e code=0x7ffc0000 [ 243.927487][ T29] audit: type=1326 audit(1769981635.092:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.6.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff62ca7b78e code=0x7ffc0000 [ 243.951025][ T29] audit: type=1326 audit(1769981635.092:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.6.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff62cab9d97 code=0x7ffc0000 [ 243.988173][ T4223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.021725][T13804] netlink: 'syz.3.3683': attribute type 27 has an invalid length. [ 244.032629][T13802] loop2: detected capacity change from 0 to 1024 [ 244.068610][T13802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 244.133525][T13812] __nla_validate_parse: 1 callbacks suppressed [ 244.133547][T13812] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3684'. [ 244.167205][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 244.283310][T11145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.456756][T13809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.466573][T13809] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.502536][T13809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.579843][T13817] lo speed is unknown, defaulting to 1000 [ 244.823422][T13838] lo speed is unknown, defaulting to 1000 [ 244.846089][T13843] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3692'. [ 244.855319][T13843] netlink: 35 bytes leftover after parsing attributes in process `syz.7.3692'. [ 244.864453][T13843] netlink: 'syz.7.3692': attribute type 5 has an invalid length. [ 244.872467][T13843] netlink: 'syz.7.3692': attribute type 6 has an invalid length. [ 244.880361][T13843] netlink: 35 bytes leftover after parsing attributes in process `syz.7.3692'. [ 245.308061][T13859] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3701'. [ 245.684486][T13863] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3703'. [ 247.464532][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3716'. [ 247.918707][T13925] loop7: detected capacity change from 0 to 512 [ 247.948749][T13927] loop2: detected capacity change from 0 to 1024 [ 247.969272][T13925] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.982658][T13927] EXT4-fs: Ignoring removed orlov option [ 247.988797][T13925] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.125469][T13927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.832998][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.895874][T11145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.937657][T13952] openvswitch: netlink: Missing key (keys=40, expected=100) [ 249.274176][T13980] loop2: detected capacity change from 0 to 4096 [ 249.294029][T13980] EXT4-fs: Ignoring removed bh option [ 249.299601][T13980] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.313364][T13980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.368803][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.450275][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 249.450294][ T29] audit: type=1400 audit(1769981640.752:2106): avc: denied { create } for pid=13992 comm="syz.2.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 249.490582][ T29] audit: type=1400 audit(1769981640.792:2107): avc: denied { bind } for pid=13992 comm="syz.2.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 249.567423][T13999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3753'. [ 249.580150][T13999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3753'. [ 249.633039][ T23] IPVS: starting estimator thread 0... [ 249.724994][T14010] IPVS: using max 2112 ests per chain, 105600 per kthread [ 249.775094][ T29] audit: type=1400 audit(1769981641.072:2108): avc: denied { bind } for pid=14023 comm="syz.4.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.831385][T14030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.857590][T14030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.983941][T14042] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3773'. [ 250.563822][ T29] audit: type=1400 audit(1769981641.862:2109): avc: denied { shutdown } for pid=14066 comm="syz.3.3782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.676247][T14071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3783'. [ 250.685406][T14071] netlink: 'syz.4.3783': attribute type 7 has an invalid length. [ 250.693173][T14071] netlink: 'syz.4.3783': attribute type 8 has an invalid length. [ 250.701062][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3783'. [ 250.914093][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3793'. [ 250.924414][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3793'. [ 251.050018][T14109] lo speed is unknown, defaulting to 1000 [ 251.083748][T14111] bond3: entered promiscuous mode [ 251.100578][T14111] macvlan3: entered promiscuous mode [ 251.105995][T14111] macvlan3: entered allmulticast mode [ 251.137356][T14111] bond3: (slave macvlan3): Opening slave failed [ 251.322821][ T5383] nci: nci_ntf_packet: unknown ntf opcode 0xe15 [ 251.368959][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3805'. [ 251.377963][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3805'. [ 251.853802][T14147] xt_hashlimit: max too large, truncated to 1048576 [ 251.870143][T14147] No such timeout policy "syz1" [ 252.202861][ T29] audit: type=1400 audit(1769981643.502:2110): avc: denied { map } for pid=14158 comm="syz.2.3815" path="socket:[52243]" dev="sockfs" ino=52243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.226623][ T29] audit: type=1400 audit(1769981643.502:2111): avc: denied { read } for pid=14158 comm="syz.2.3815" path="socket:[52243]" dev="sockfs" ino=52243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.385847][ T29] audit: type=1400 audit(1769981643.692:2112): avc: denied { create } for pid=14169 comm="syz.7.3820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 253.203404][T14174] loop2: detected capacity change from 0 to 1024 [ 253.210653][T14174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.224966][T14174] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 253.242420][T14174] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #3: block 1: comm syz.2.3822: lblock 1 mapped to illegal pblock 1 (length 1) [ 253.258758][T14174] Quota error (device loop2): write_blk: dquota write failed [ 253.266556][T14174] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 253.277029][T14174] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3822: Failed to acquire dquot type 0 [ 253.288707][T14174] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.3822: Freeing blocks not in datazone - block = 0, count = 4096 [ 253.302723][T14174] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3822: Invalid inode bitmap blk 0 in block_group 0 [ 253.315898][ T5383] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 253.319078][T14174] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 253.336868][ T5383] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 253.347280][ T5383] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 253.353351][T14174] EXT4-fs (loop2): 1 orphan inode deleted [ 253.365583][T14174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.405305][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.227620][T14122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.714345][ T29] audit: type=1326 audit(1769981646.012:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.7.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 254.738110][ T29] audit: type=1326 audit(1769981646.012:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.7.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 254.805491][ T29] audit: type=1326 audit(1769981646.062:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.7.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 254.829152][ T29] audit: type=1326 audit(1769981646.062:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.7.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 254.852722][ T29] audit: type=1326 audit(1769981646.062:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.7.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 254.876272][ T29] audit: type=1326 audit(1769981646.072:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.7.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 254.899728][ T29] audit: type=1326 audit(1769981646.072:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.7.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 254.923473][ T29] audit: type=1326 audit(1769981646.072:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.7.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 254.947145][ T29] audit: type=1326 audit(1769981646.072:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.7.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 254.970725][ T29] audit: type=1326 audit(1769981646.072:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.7.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 254.997713][T14229] netlink: 'syz.4.3842': attribute type 3 has an invalid length. [ 255.019927][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3843'. [ 255.038387][T14229] netlink: 'syz.4.3842': attribute type 3 has an invalid length. [ 255.065255][T14229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=14229 comm=syz.4.3842 [ 255.104659][T14237] netlink: 65536 bytes leftover after parsing attributes in process `syz.6.3846'. [ 255.114658][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3846'. [ 255.115540][T14236] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3845'. [ 255.446764][T14273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.507764][T14267] lo speed is unknown, defaulting to 1000 [ 255.514034][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3864'. [ 255.534378][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3864'. [ 255.672850][T14273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.697156][T14284] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3865'. [ 255.722838][T14273] ref_ctr_offset mismatch. inode: 0x3de offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 255.738121][T14288] netlink: 'syz.3.3868': attribute type 1 has an invalid length. [ 255.746273][T14287] loop2: detected capacity change from 0 to 512 [ 255.757127][T14288] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.785163][T14288] bond5: (slave veth17): Enslaving as an active interface with a down link [ 255.813159][T14287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.829146][T14287] ext4 filesystem being mounted at /768/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.851836][T14288] bond4: (slave dummy0): Releasing active interface [ 255.870161][T14288] bond5: (slave dummy0): making interface the new active one [ 255.907771][T14288] dummy0: entered promiscuous mode [ 255.933800][T14288] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 255.954674][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.972815][T14293] bond5 (unregistering): (slave veth17): Releasing active interface [ 256.037662][T14293] bond5 (unregistering): (slave dummy0): Releasing active interface [ 256.062271][T14298] loop6: detected capacity change from 0 to 512 [ 256.084694][T14293] bond5 (unregistering): Released all slaves [ 256.133422][T14298] EXT4-fs (loop6): 1 orphan inode deleted [ 256.144264][T14296] gtp1: entered promiscuous mode [ 256.149701][ T5376] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 1 [ 256.163100][T14298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.177083][T14298] ext4 filesystem being mounted at /698/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.296743][ T4223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.638594][T14338] loop2: detected capacity change from 0 to 8192 [ 256.775382][T14318] macvtap1: entered promiscuous mode [ 256.781809][T14318] team0: entered promiscuous mode [ 256.787514][T14318] team_slave_0: entered promiscuous mode [ 256.796212][T14318] team_slave_1: entered promiscuous mode [ 256.842414][T14318] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 256.956613][T14318] team0: Device macvtap1 is already an upper device of the team interface [ 257.037469][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3885'. [ 257.046432][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3885'. [ 257.061914][T14318] team0: left promiscuous mode [ 257.068954][T14318] team_slave_0: left promiscuous mode [ 257.083524][T14318] team_slave_1: left promiscuous mode [ 257.174599][T14376] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3887'. [ 257.722000][T14448] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14448 comm=syz.7.3905 [ 257.876963][T14471] vlan1: entered allmulticast mode [ 257.882175][T14471] bridge_slave_0: entered allmulticast mode [ 258.784941][T14562] SELinux: failed to load policy [ 258.854226][T14580] loop2: detected capacity change from 0 to 512 [ 258.875780][T14580] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 258.899414][T14580] EXT4-fs (loop2): orphan cleanup on readonly fs [ 258.923126][T14580] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.3933: Bad quota inum: 5, type: 1 [ 258.945198][T14580] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 258.963112][T14580] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 258.970554][T14580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.058795][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.342028][T14600] macvtap1: entered promiscuous mode [ 259.349048][T14600] team0: entered promiscuous mode [ 259.360334][T14600] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 259.393768][T14600] team0: Device macvtap1 is already an upper device of the team interface [ 259.420603][T14600] team0: left promiscuous mode [ 260.432175][T14627] netlink: 'syz.7.3952': attribute type 1 has an invalid length. [ 260.448550][T14627] bond4: entered promiscuous mode [ 260.453840][T14627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.475721][T14627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.478605][T14631] loop6: detected capacity change from 0 to 512 [ 260.483784][T14627] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 260.499384][T14627] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 260.534596][T14627] bond4: (slave wireguard0): making interface the new active one [ 260.542464][T14627] wireguard0: entered promiscuous mode [ 260.550655][T14627] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 260.595292][T14631] EXT4-fs (loop6): filesystem is read-only [ 260.628226][T14631] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 260.684601][T14631] EXT4-fs (loop6): filesystem is read-only [ 260.690701][T14631] EXT4-fs (loop6): orphan cleanup on readonly fs [ 260.832670][T14631] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3953: bg 0: block 64: padding at end of block bitmap is not set [ 260.896603][T14631] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 260.924956][T14631] EXT4-fs (loop6): 1 orphan inode deleted [ 260.945391][T14631] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 260.969645][T14641] __nla_validate_parse: 12 callbacks suppressed [ 260.969665][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3957'. [ 261.037836][ T4223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.202230][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 261.202248][ T29] audit: type=1326 audit(1769981652.502:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.2.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 261.234737][T14674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3968'. [ 261.250022][T14674] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 261.272375][ T29] audit: type=1326 audit(1769981652.532:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.2.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 261.296186][ T29] audit: type=1326 audit(1769981652.532:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.2.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 261.319858][ T29] audit: type=1326 audit(1769981652.532:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.2.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 261.332480][T14669] macvtap1: entered promiscuous mode [ 261.343445][ T29] audit: type=1326 audit(1769981652.532:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.2.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 261.343486][ T29] audit: type=1326 audit(1769981652.532:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.2.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 261.343588][ T29] audit: type=1326 audit(1769981652.532:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.2.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 261.343622][ T29] audit: type=1326 audit(1769981652.532:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.2.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 261.451255][T14669] team0: entered promiscuous mode [ 261.464094][ T29] audit: type=1326 audit(1769981652.762:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.2.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 261.477325][T14672] loop7: detected capacity change from 0 to 8192 [ 261.488262][ T29] audit: type=1326 audit(1769981652.762:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.2.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 261.524281][T14669] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 261.571760][T14669] team0: Device macvtap1 is already an upper device of the team interface [ 261.602264][T14669] team0: left promiscuous mode [ 261.816552][T14695] lo: entered allmulticast mode [ 261.833003][T14689] lo: left allmulticast mode [ 262.254589][T14726] netlink: 'syz.2.3987': attribute type 4 has an invalid length. [ 262.352038][T14733] x_tables: unsorted entry at hook 3 [ 262.692722][T14740] dummy0: entered promiscuous mode [ 262.697987][T14740] dummy0: entered allmulticast mode [ 263.030690][T14761] batman_adv: batadv0: Interface deactivated: dummy0 [ 263.073445][ T3415] lo speed is unknown, defaulting to 1000 [ 263.079385][ T3415] syz2: Port: 1 Link DOWN [ 263.394292][T14776] netlink: 'syz.4.4009': attribute type 13 has an invalid length. [ 263.917921][ T3415] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 263.930843][ T3415] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.955557][T14804] fido_id[14804]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 264.395796][T14833] bridge0: entered allmulticast mode [ 264.411448][T14833] bridge_slave_1: left allmulticast mode [ 264.417307][T14833] bridge_slave_1: left promiscuous mode [ 264.423177][T14833] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.431425][T14833] bridge_slave_0: left allmulticast mode [ 264.437232][T14833] bridge_slave_0: left promiscuous mode [ 264.442993][T14833] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.613410][T14839] loop6: detected capacity change from 0 to 128 [ 264.662403][T14843] loop2: detected capacity change from 0 to 128 [ 264.695367][T14843] FAT-fs (loop2): IO charset cp855 not found [ 264.728729][T14843] loop2: detected capacity change from 0 to 2048 [ 264.759608][T14843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.774418][T14843] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #12: block 2: comm syz.2.4036: lblock 0 mapped to illegal pblock 2 (length 1) [ 264.847302][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.135153][T14862] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 265.306330][T14881] lo: entered allmulticast mode [ 265.318411][T14880] lo: left allmulticast mode [ 265.495965][T14894] loop2: detected capacity change from 0 to 512 [ 265.505956][T14894] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.528722][T14894] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.4057: inode has both inline data and extents flags [ 265.542905][T14894] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4057: couldn't read orphan inode 17 (err -117) [ 265.555595][T14894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.581606][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.619147][T14898] loop2: detected capacity change from 0 to 512 [ 265.625906][T14898] EXT4-fs: Ignoring removed nobh option [ 265.632017][T14898] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 265.646297][T14898] EXT4-fs (loop2): 1 truncate cleaned up [ 265.652883][T14898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.687220][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.911559][T14913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4062'. [ 266.723153][T14951] tipc: Failed to remove unknown binding: 66,0,0/0:1797214144/1797214145 [ 266.732501][T14951] tipc: Failed to remove unknown binding: 66,0,0/0:1797214144/1797214145 [ 266.798113][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 266.798133][ T29] audit: type=1326 audit(1769981658.102:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 266.827937][ T29] audit: type=1326 audit(1769981658.102:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 266.851733][ T29] audit: type=1326 audit(1769981658.102:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 266.875388][ T29] audit: type=1326 audit(1769981658.102:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 266.898985][ T29] audit: type=1326 audit(1769981658.102:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 266.922945][ T29] audit: type=1326 audit(1769981658.202:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 266.946607][ T29] audit: type=1326 audit(1769981658.202:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 266.970303][ T29] audit: type=1326 audit(1769981658.202:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.2.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 267.314369][T14971] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4082'. [ 267.361866][T14971] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14971 comm=syz.7.4082 [ 267.727381][T15005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4093'. [ 267.781154][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4094'. [ 267.812319][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4095'. [ 267.869744][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4096'. [ 268.538280][ T29] audit: type=1400 audit(1769981659.842:2240): avc: denied { read } for pid=15038 comm="syz.4.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.562669][T15034] vlan2: entered promiscuous mode [ 268.568173][T15034] syz_tun: entered promiscuous mode [ 268.595343][ T29] audit: type=1400 audit(1769981659.862:2241): avc: denied { unmount } for pid=15033 comm="syz.2.4104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 268.651555][T15049] netlink: 'syz.7.4111': attribute type 1 has an invalid length. [ 268.716830][T15049] 8021q: adding VLAN 0 to HW filter on device bond5 [ 268.755417][T15057] bond0: (slave dummy0): Releasing backup interface [ 268.778660][T15057] bond5: (slave dummy0): making interface the new active one [ 268.787799][T15057] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 268.818225][T15059] loop6: detected capacity change from 0 to 512 [ 268.877467][T15059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.904989][T15059] ext4 filesystem being mounted at /750/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.327239][ T4223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.381039][T15113] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4132'. [ 269.521850][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4138'. [ 269.559454][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4140'. [ 269.700490][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4144'. [ 269.709478][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4144'. [ 270.429079][T15212] loop6: detected capacity change from 0 to 2048 [ 270.450246][T15212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.593043][ T4223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.635421][T15227] bond8: option mode: unable to set because the bond device has slaves [ 270.982918][T15254] netlink: 'syz.2.4185': attribute type 83 has an invalid length. [ 271.013401][T15256] ref_ctr increment failed for inode: 0x1144 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810a4e21c0 [ 271.213176][T15262] tipc: Failed to remove unknown binding: 66,0,0/4:3471166936/3471166937 [ 271.222770][T15262] tipc: Failed to remove unknown binding: 66,0,0/4:3471166936/3471166937 [ 271.622392][T15272] chnl_net:caif_netlink_parms(): no params data found [ 271.684543][T15274] loop7: detected capacity change from 0 to 512 [ 271.711146][T15274] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 271.720038][T15274] EXT4-fs (loop7): orphan cleanup on readonly fs [ 271.748333][T15274] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.4193: Failed to acquire dquot type 1 [ 271.775202][T15274] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4193: bg 0: block 40: padding at end of block bitmap is not set [ 271.802139][T15274] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 271.813638][T15274] EXT4-fs (loop7): 1 truncate cleaned up [ 271.820188][T15274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.838677][T15274] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #16: comm syz.7.4193: corrupted xattr block 31: invalid header [ 271.861872][T15274] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=16 [ 271.871138][T15274] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #16: comm syz.7.4193: corrupted xattr block 31: invalid header [ 271.885239][T15274] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=16 [ 271.894624][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 271.894759][ T29] audit: type=1400 audit(1769981663.192:2447): avc: denied { read } for pid=15273 comm="syz.7.4193" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 271.924492][T15274] EXT4-fs error (device loop7): ext4_get_link:106: inode #16: comm syz.7.4193: bad symlink. [ 271.977807][T11145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.019036][ T29] audit: type=1326 audit(1769981663.312:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.7.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 272.042852][ T29] audit: type=1326 audit(1769981663.312:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.7.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 272.066551][ T29] audit: type=1326 audit(1769981663.312:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.7.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb95f6eac22 code=0x7ffc0000 [ 272.090113][ T29] audit: type=1326 audit(1769981663.312:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.7.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb95f6eac22 code=0x7ffc0000 [ 272.113556][ T29] audit: type=1326 audit(1769981663.322:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.7.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 272.137530][ T29] audit: type=1326 audit(1769981663.322:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.7.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 272.161255][ T29] audit: type=1326 audit(1769981663.322:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.7.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb95f6eaeb9 code=0x7ffc0000 [ 272.436215][T15307] __nla_validate_parse: 5 callbacks suppressed [ 272.436236][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4205'. [ 272.568010][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4210'. [ 272.656930][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4213'. [ 273.064889][ T29] audit: type=1326 audit(1769981664.362:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15337 comm="syz.2.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 273.088549][ T29] audit: type=1326 audit(1769981664.362:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15337 comm="syz.2.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2fad48aeb9 code=0x7ffc0000 [ 273.256748][T15354] tipc: Cannot configure node identity twice [ 273.287793][T15359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4228'. [ 273.296940][T15359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4228'. [ 273.666646][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4241'. [ 273.986254][T15405] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 274.083802][T15409] bridge_slave_1: Caught tx_queue_len zero misconfig [ 274.211831][T15417] tipc: Enabling of bearer rejected, failed to enable media [ 274.470155][T15426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4256'. [ 274.532475][T15432] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 274.760578][T15442] loop7: detected capacity change from 0 to 256 [ 274.778063][T15442] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.786970][T15442] FAT-fs (loop7): Filesystem has been set read-only [ 274.794404][T15442] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.803805][T15442] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.819373][T15442] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.828977][T15442] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.838914][T15442] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.847834][T15442] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.856754][T15442] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.866207][T15442] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.875298][T15442] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 275.571885][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4274'. [ 275.777558][T15497] syzkaller0: entered promiscuous mode [ 275.783158][T15497] syzkaller0: entered allmulticast mode [ 275.879898][T15497] syzkaller0: create flow: hash 292945446 index 1 [ 275.896340][T15494] syzkaller0: delete flow: hash 292945446 index 1 [ 276.009644][T15519] loop7: detected capacity change from 0 to 1024 [ 276.030737][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4289'. [ 276.038735][T15519] EXT4-fs: Ignoring removed oldalloc option [ 276.046435][T15519] EXT4-fs: Ignoring removed bh option [ 276.077238][T15521] hsr_slave_0: left promiscuous mode [ 276.086908][T15521] hsr_slave_1: left promiscuous mode [ 276.111386][T15519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.184309][T15519] ================================================================== [ 276.192572][T15519] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 276.200087][T15519] [ 276.202436][T15519] write to 0xffff88815688142c of 4 bytes by task 15531 on cpu 0: [ 276.210209][T15519] xas_set_mark+0x12b/0x140 [ 276.214773][T15519] __folio_start_writeback+0x17b/0x370 [ 276.220288][T15519] ext4_bio_write_folio+0x5ad/0x9f0 [ 276.225701][T15519] mpage_process_page_bufs+0x4a1/0x620 [ 276.231204][T15519] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 276.237047][T15519] ext4_do_writepages+0x9f6/0x2800 [ 276.242205][T15519] ext4_writepages+0x18f/0x320 [ 276.247006][T15519] do_writepages+0x1c6/0x310 [ 276.251639][T15519] file_write_and_wait_range+0x178/0x2f0 [ 276.257305][T15519] generic_buffers_fsync_noflush+0x45/0x130 [ 276.263313][T15519] ext4_sync_file+0x1aa/0x680 [ 276.268011][T15519] vfs_fsync_range+0x10d/0x130 [ 276.272816][T15519] ext4_buffered_write_iter+0x34f/0x3c0 [ 276.278404][T15519] ext4_file_write_iter+0x380/0xf70 [ 276.283636][T15519] iter_file_splice_write+0x6bc/0xa80 [ 276.289045][T15519] direct_splice_actor+0x156/0x2a0 [ 276.294271][T15519] splice_direct_to_actor+0x311/0x670 [ 276.299670][T15519] do_splice_direct+0x119/0x1a0 [ 276.304639][T15519] do_sendfile+0x382/0x650 [ 276.309095][T15519] __x64_sys_sendfile64+0x105/0x150 [ 276.314326][T15519] x64_sys_call+0x2db1/0x3000 [ 276.319121][T15519] do_syscall_64+0xc0/0x2a0 [ 276.323662][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.329585][T15519] [ 276.331928][T15519] read to 0xffff88815688142c of 4 bytes by task 15519 on cpu 1: [ 276.339578][T15519] xas_find_marked+0x5d7/0x620 [ 276.344380][T15519] filemap_get_folios_tag+0xfa/0x510 [ 276.349700][T15519] filemap_fdatawait_range+0x88/0x1e0 [ 276.355106][T15519] __writeback_single_inode+0xdb/0x7b0 [ 276.360605][T15519] writeback_single_inode+0x16d/0x3f0 [ 276.366032][T15519] sync_inode_metadata+0x6e/0xa0 [ 276.371000][T15519] generic_buffers_fsync_noflush+0xee/0x130 [ 276.377009][T15519] ext4_sync_file+0x1aa/0x680 [ 276.381710][T15519] vfs_fsync_range+0x10d/0x130 [ 276.386535][T15519] ext4_buffered_write_iter+0x34f/0x3c0 [ 276.392122][T15519] ext4_file_write_iter+0x380/0xf70 [ 276.397361][T15519] iter_file_splice_write+0x6bc/0xa80 [ 276.402755][T15519] direct_splice_actor+0x156/0x2a0 [ 276.407884][T15519] splice_direct_to_actor+0x311/0x670 [ 276.413281][T15519] do_splice_direct+0x119/0x1a0 [ 276.418158][T15519] do_sendfile+0x382/0x650 [ 276.422623][T15519] __x64_sys_sendfile64+0x105/0x150 [ 276.427860][T15519] x64_sys_call+0x2db1/0x3000 [ 276.432584][T15519] do_syscall_64+0xc0/0x2a0 [ 276.437134][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.443073][T15519] [ 276.445415][T15519] value changed: 0x0a000021 -> 0x04000021 [ 276.451149][T15519] [ 276.453486][T15519] Reported by Kernel Concurrency Sanitizer on: [ 276.459666][T15519] CPU: 1 UID: 0 PID: 15519 Comm: syz.7.4288 Not tainted syzkaller #0 PREEMPT(voluntary) [ 276.469510][T15519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.479592][T15519] ================================================================== [ 276.888830][T11145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.