last executing test programs: 23.139290061s ago: executing program 3 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x29, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0xfff2}, {0x0, 0x13}}}, 0x24}}, 0x0) socket(0x23, 0x5, 0x0) 23.019366031s ago: executing program 3 (id=593): syz_open_dev$loop(&(0x7f0000000f80), 0x2, 0xa8002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) socket$kcm(0x29, 0xf, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfc}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x4e24, 0x20, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x108a, 0x80000000, 0x20, 0x842, 0xfffffffffffffffd}, {0xffffffffffffffff, 0x0, 0x2}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000009000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 22.957255877s ago: executing program 3 (id=594): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000200)=[{r1, 0x80}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x46, 0xd, 0x2, 0x4}) listen(r1, 0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x8, 0x0, 0x0, 0xfd, 0x1, 0x3100}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x46}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x2f}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f00000000000000036cbbbd18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf090000000000005509010000000080950000000000000045000400010000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1001, &(0x7f0000000780)=""/4097, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001800)=ANY=[@ANYBLOB="020200030f0000002cbd7040fedbdf25030009"], 0x78}, 0x1, 0x7}, 0x8000) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r7, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000009000000040000000000000000020000001c00048018000180080001006c6f67000c00028008000540000003fc0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a28ee0e2b667e2f3aaee263"], 0x70}}, 0x0) getdents64(r7, &(0x7f0000003440)=""/92, 0x5c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000034c0)=ANY=[@ANYBLOB="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"], 0xeb0}, 0x1, 0x0, 0x0, 0x48000}, 0x48001) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="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", @ANYRES8=r7, @ANYRES8=r6, @ANYRES8=r7, @ANYRESDEC=r7, @ANYRESDEC=0x0, @ANYRESOCT=r5, @ANYRES64=r7, @ANYRESHEX=0x0, @ANYRES64, @ANYRESHEX=r2, @ANYRESDEC], 0x0, 0x307, &(0x7f0000000880)="$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") 22.081238065s ago: executing program 3 (id=609): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000006000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00"], 0x3c}}, 0x8000) 21.977125704s ago: executing program 3 (id=613): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="83", 0x1}, {0x0}], 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49, 0x0}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x61c4, 0x2, 0x800003, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000400)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x800, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x401, 0xf, 0x3, 0x13, 0x4, 0x20}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', r3, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x5319, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x7f) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) dup2(r5, r7) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r7, @ANYRESHEX=r1, @ANYRESOCT], 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c7408001000378ae76e620eebeb180000000000", @ANYRES32=0x0, @ANYBLOB="8b040400234e000020001280080001006774700014000280050005000100000008000700e0000002"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 20.727506865s ago: executing program 3 (id=626): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x100, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008800) 5.749008028s ago: executing program 32 (id=626): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x100, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008800) 3.249257291s ago: executing program 4 (id=951): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000c3ffff", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00"], 0x3c}}, 0x8000) 3.025439101s ago: executing program 4 (id=954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000020000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a"], 0x254}}, 0x0) 3.025313451s ago: executing program 4 (id=955): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) read(r0, 0x0, 0x0) close(r0) 2.897685902s ago: executing program 4 (id=958): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x18}, 0x28) 2.823906839s ago: executing program 4 (id=959): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x10000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 1.889507432s ago: executing program 4 (id=969): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xafe}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432", 0x30}], 0x2}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x28) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0xa000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0xffffff7f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.161234436s ago: executing program 1 (id=981): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.098203052s ago: executing program 1 (id=983): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) rt_sigprocmask(0x2, &(0x7f00000004c0)={[0xffffff7ffffffff9]}, 0x0, 0x8) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 1.029405588s ago: executing program 0 (id=984): r0 = socket(0x6, 0x3, 0xc) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) (async) sendto$inet(r0, &(0x7f00000000c0)="72b43c21a57279b54e8f017a80ab917b4827a70326f91719f54bbe395e1ed1f3c6e8ab3ecd23162ccf58f9d5216651c4c149cdf032cf657b28c28f2b409bcac04e1ed86da3a8809fe003a82b0e82a1d22ee3f4751d8bceb04fc9fe57bdbb733a8267885dbc42be7f7b7354d4fd1c98d767f00299f209e218472eb76c8e08fdb23b7bb4149312b1e11f98c4ea5b4764394d8aa3b07e", 0x95, 0x200000c0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0xb6}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) ioctl$VT_SETMODE(r1, 0x80085610, &(0x7f0000001180)={0x1, 0x5, 0x9, 0x4bb, 0x3}) (async) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 977.945653ms ago: executing program 0 (id=985): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000995"], &(0x7f0000000000)='GPL\x00'}, 0x94) 966.936554ms ago: executing program 1 (id=986): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e24, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe80000000000000000000f5ffffffbbfe8000000000000000000000000000aa4e200e22"], 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 892.872061ms ago: executing program 0 (id=987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)={{}, {0x20}}, 0x24, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000180), 0xd5, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000580), &(0x7f0000000240)=""/255}, 0x20) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000070a010100000000000000aba376db7114105d90406187de0b0000000009"], 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x20008000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$eJzs3c9vHFcdAPDvTLxufji1SzlAJUqBoqSCrOOathaHEiQEp0qIcg/G3lhW1t7IXrexFQnnL0BCCBCc4MIFiT8ACUXiwhEhRYIzSEUgBA4ckIBMNbNjx3VmN5t0s+sfn480mTdvfnzfm82M5808zQRwYr0UEVci4n6WZa9ExGSZn5ZDbHeGfLl7O7cW8iGJLHv7H0kkZd7utpJyfK5c7XREfONrEd9OHo67vrl1fb7ZbKyV09PtlRvT65tbl5ZX5pcaS43V2dmZ1+femHtt7vJA6nk+It78yl9+8N2ff/XNX3/+3T9f/dvFvNoxUc7fX4/HkO+isV4LdKpeK/bFrnyFtScIdliNFTUsnalaIsuy7H6W7su5PZSSAQBwUH5N9pGI+HREvBKTcar35SwAAABwBGVfmoj/JZ0nNBXGu+QDAAAAR0ha9IFN0nrZF2Ai0rRe7/Th/WicTZut9fbnrrU2Vhfv/ngiIqaill5bbjYul32Fp6KW5NMzRfrB9KsHpmcj4rmI+P7kmWK6vtBqLo765gcAAACcEOcOtP//Pdlp/wMAAADHzNTDWekoygEAAAA8PRXtfwAAAOCY0f4HAACAY+3rb72VD9nu968X39ncuN5659JiY/16fWVjob7QWrtRX2q1lop39q3sX/dUxfaardaNL8Tqxs3pdmO9Pb2+uXV1pbWx2r66/IFPYAMAAABD9Nwn7/wxiYjtL54phtz4qAsFDMXYXiopxxVH/5+e7YzfG1KhgKGouod/0HvPDKEgwNCNPdFaWT+nDeCQq426AMDIJY+Y37Xzzu/K8acGWx4AAGDwLny8+/P/3t8A2PaJADjiHMRwch14kJdNjqogwNAVz//77fDrYgGOlVpfPQCB4+xDP/9/pCx7rAIBAAADN1EMSVovb+9NRJrW6xHni88C1JJry83G5Yh4NiL+MFl7Jp+eKdZMHtlmAAAAAAAAAAAAAAAAAAAAAAAAAAA6siyJrJcrPecCAAAAR0BE+tfkN513+V+YfHni4P2B8eQ/xSeBxyPi3Z+8/cOb8+322kye/8+9/PaPyvxXR3EHAwAAADhot52+244HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEG6t3Nr4d7Orey/O7cWhhn371+OiKm9+MXQmTMWp4vx6ahFxNl/JTG2b70kIk4NIP727Yj4WFX8JC/WXsiq+GeefvyYKvdCVfxzA4gPJ9md/Pxzper4S+OlYlx9/I1FfGD6SXU//8Xe+e9Ul+P/fJ8xXrj7y+mu8W9HvDBWff7ZjZ88FD8px2lf8b/1za2tbvOyn0ZciOr4+6NNt1duTK9vbl1aXplfaiw1VmdnZ16fe2PutbnL09eWm43y38oY3/vEr+73qv/ZLvGnuta/U6aX+6p9xP/v3tx5vsvfqzz+xc9UxP/tz8olHo6fltv6bJnO51/YTW930vu9+Ivfv9ir/osP6l/r7/fvxLzYu9oPfsBBHCgAwMCsb25dn282G2tHIVF7krXyVnrVrOfLPfDhCzZ+WPaPxGMmvjPQDWZZlnX5H3UnIvrZThKHYbcUidGelwAAgMF7cNE/6pIAAAAAAAAAAAAAAAAAAADAyTXAd4aNV75mr+LNAtt7qcSbgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQ+P9AAAA//+57Nvr") 892.67185ms ago: executing program 1 (id=988): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) mount$nfs(&(0x7f0000000080)='/dev/mISDNtimer\x00', &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000200), 0x1, &(0x7f0000000280)={[{'\x00'}]}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xfff2, 0xffff}, {0xf1ff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) 892.026181ms ago: executing program 2 (id=989): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x11}], {0x95, 0x0, 0x4100}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 739.463744ms ago: executing program 1 (id=990): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="c0c2b45dbd24", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000088a8", 0xc}, {&(0x7f0000000140)="a230892fe3f9", 0x6}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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"/4195, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r7 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r7, 0x2007ffc) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000000700)) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000000)={r11, 0xfffffffe}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000000c0)={r11, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xd, 0xffff, 0x3, 0xbfbc7312, 0x48, 0x7ff, 0x7f}, 0x9c) sendfile(r7, r7, 0x0, 0x2000000000006) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) io_uring_enter(0xffffffffffffffff, 0x238e, 0xc1040000, 0x43, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) 632.507914ms ago: executing program 5 (id=898): r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x0}, 0x68) sendmsg$key(r0, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e00000000000000ff800000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 622.144315ms ago: executing program 2 (id=991): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x42758, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6(0xa, 0x2, 0xa) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000ac0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x82, 0x2}]}}}], 0x18}}], 0x1, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x0, @void}, 0x10) sendmsg$xdp(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x2c, 0x3, r2, 0x11}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="e95cc15de9b9135e5ed41f9519162be87e0ffba8cf37680842fcde10cd133bcd17a16f5ffd4eaf7d829bdb1ede23751e223d4625b46f1dcb4d3bbd8b8c15dd1e526c88d0221522349a80aabaa0f68b72d950b9b8f19ebbbb362aed053bc5904bb109e752232a5723161d3b8659", 0x6d}, {&(0x7f00000003c0)="11fc3033e3efbe8dc6aa9d54009d8910e11ceb4502afede1dfd6ea4d2e47974095a4e719de0dcc4de6b37ff182ac8ae0b264c6b476c5d7110d4d6b574c10951a6e38dde1c966b36a", 0x48}, {&(0x7f0000000440)="3bb84efb3f8ddc1ba96f601305b6a260039826932c802a24e9516cf65c4fac1423465d034caa75e15827175b79cb66e62723985ddd2e21e900073f4e1c2e8271b624069f0015786e53debb19fb1e57155359ed0289dbec8a81a93b5f7844205836048d8da4c3ce27615447823f2f73c0abdb51f4b14b5ae8fc9265ba05f4b91dc54c0d1564fa832b49eba5be67ecaf7fa29e72e21299097364bc2440aba965", 0xffffffffffffffdb}], 0x3, 0x0, 0x0, 0x4004004}, 0x2000c0c0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 536.223332ms ago: executing program 5 (id=992): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a0300ffff0f00000000000013"], 0x0, 0x56}, 0x28) 477.729007ms ago: executing program 0 (id=993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="94010000100001002bbd700000000000fc0100000000000000000000000000000a01010100000000000000001f0000000000ecdf001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x4050) 449.69237ms ago: executing program 5 (id=994): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffa}]}) munlock(&(0x7f0000f1e000/0x1000)=nil, 0x1000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2d, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x237d09386f993f39}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*', 0x1}], 0x1}}], 0x1, 0x0) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r4) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) (async) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r10, r10, 0x0, 0xe3aa6ea) (async) sendfile(r10, r10, 0x0, 0xe3aa6ea) 377.388296ms ago: executing program 2 (id=995): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x800000000000000}}, {0x28, '\x00', 0x7}}}}, 0x510) 333.29954ms ago: executing program 0 (id=996): syz_clone(0x80898200, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="1903379487678c62b958656cf37fdafe98ccf8f24e89b57e92258788994a3d8deae280114762167a49e1a11826b7b35e0e5c08266902978d46293480f2de44a37e669317a805e3dbdb93d50b57a8d7eb75fd7e87e41ef5d9399d1adab33ee8a0f63e7148f009a8162d5375d3f436868dd171b34d6c658c5927e5d99b35b9a9ae899942467611a51d4c477a147bbc0393d23e5aaa9bd4a111dea82228829ddc62a6811fe8aa250a281cc59b77ebf981f39cc2d728eb4b32f3b7e40912a6b3e7e2dde19264f27296f46738e9f89443e8b3324c353d1fbc3f8f6b67c4b93ff23fc432bf66b2") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a003fff000000000000ffffffffffffff8000000000000000000000000000000800"], 0xa0}}, 0x0) 301.486093ms ago: executing program 2 (id=997): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1f, &(0x7f0000001340)=ANY=[@ANYBLOB="180000008b000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000180100002020732500000040002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018010000646c6c2500000000a30000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000046000000bf91000000000000b702000000000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 249.346958ms ago: executing program 0 (id=998): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0x5c}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYRES32=r0], 0x12b4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 227.88721ms ago: executing program 2 (id=999): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfc, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500000000000000a7ffffff00", @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000002005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 58.527784ms ago: executing program 1 (id=1000): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001"], 0x28}, 0x1, 0xffa1}, 0x40000) 0s ago: executing program 2 (id=1001): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x100, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008800) kernel console output (not intermixed with test programs): annot create hsr debugfs directory [ 27.055620][ T3310] hsr_slave_0: entered promiscuous mode [ 27.061789][ T3310] hsr_slave_1: entered promiscuous mode [ 27.067775][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 27.073582][ T3310] Cannot create hsr debugfs directory [ 27.087804][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.094806][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.120728][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.136053][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.143204][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.169153][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.185279][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.192499][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.218776][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.249166][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.256138][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.282393][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.341467][ T3316] hsr_slave_0: entered promiscuous mode [ 27.347557][ T3316] hsr_slave_1: entered promiscuous mode [ 27.353517][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 27.359699][ T3316] Cannot create hsr debugfs directory [ 27.410612][ T3311] hsr_slave_0: entered promiscuous mode [ 27.416693][ T3311] hsr_slave_1: entered promiscuous mode [ 27.422793][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.428585][ T3311] Cannot create hsr debugfs directory [ 27.505582][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.514460][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.532023][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.540460][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.576428][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.587060][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.596127][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.604891][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.644998][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.661994][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.670798][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.681123][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.706089][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.717369][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.726661][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.736759][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.766800][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.777706][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.790227][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.799032][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.807609][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.832776][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.853973][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.861055][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.875648][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.882718][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.900302][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.930583][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.943063][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.955776][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.972703][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.982331][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.003748][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.010925][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.020200][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.027306][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.035752][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.042950][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.051529][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.058580][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.077113][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.089422][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.096493][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.109201][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.116244][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.143751][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.157708][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.164810][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.174503][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.181671][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.227833][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.252543][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.263674][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.305367][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.328052][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.344340][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.416834][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.429057][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.526760][ T3309] veth0_vlan: entered promiscuous mode [ 28.564477][ T3309] veth1_vlan: entered promiscuous mode [ 28.575482][ T3311] veth0_vlan: entered promiscuous mode [ 28.584138][ T3318] veth0_vlan: entered promiscuous mode [ 28.595526][ T3311] veth1_vlan: entered promiscuous mode [ 28.616620][ T3309] veth0_macvtap: entered promiscuous mode [ 28.624722][ T3309] veth1_macvtap: entered promiscuous mode [ 28.632201][ T3318] veth1_vlan: entered promiscuous mode [ 28.646552][ T3316] veth0_vlan: entered promiscuous mode [ 28.660563][ T3310] veth0_vlan: entered promiscuous mode [ 28.675001][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.682927][ T3316] veth1_vlan: entered promiscuous mode [ 28.689521][ T3311] veth0_macvtap: entered promiscuous mode [ 28.696427][ T3310] veth1_vlan: entered promiscuous mode [ 28.707842][ T3311] veth1_macvtap: entered promiscuous mode [ 28.719790][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.730317][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.745759][ T3318] veth0_macvtap: entered promiscuous mode [ 28.755808][ T3318] veth1_macvtap: entered promiscuous mode [ 28.763715][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.774094][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.783160][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.793723][ T3310] veth0_macvtap: entered promiscuous mode [ 28.802970][ T3310] veth1_macvtap: entered promiscuous mode [ 28.811956][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.820974][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.830811][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.845685][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.854904][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.869881][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.881805][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.891347][ T3316] veth0_macvtap: entered promiscuous mode [ 28.900873][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.916674][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.927834][ T3316] veth1_macvtap: entered promiscuous mode [ 28.936289][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.953122][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.970214][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.979587][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.989090][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.997828][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.006956][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.020364][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.029348][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.044136][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.064807][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.095348][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.126775][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.138989][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.152770][ T3490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6'. [ 29.171025][ T268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.180144][ T268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.205782][ T3490] ipvlan2: entered promiscuous mode [ 29.252475][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 29.252493][ T28] audit: type=1400 audit(1771373747.962:107): avc: denied { name_bind } for pid=3492 comm="syz.0.7" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 29.290107][ T3500] netlink: 'syz.4.8': attribute type 1 has an invalid length. [ 29.309279][ T28] audit: type=1400 audit(1771373748.022:108): avc: denied { prog_load } for pid=3494 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.335933][ T3500] loop4: detected capacity change from 0 to 512 [ 29.369890][ T3504] xt_connbytes: Forcing CT accounting to be enabled [ 29.375323][ T28] audit: type=1400 audit(1771373748.022:109): avc: denied { bpf } for pid=3494 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.436715][ T3500] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.8: inode has both inline data and extents flags [ 29.441054][ C1] hrtimer: interrupt took 45977 ns [ 29.456033][ T28] audit: type=1400 audit(1771373748.032:110): avc: denied { create } for pid=3499 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 29.470967][ T3500] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 29.476235][ T3500] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.8: couldn't read orphan inode 15 (err -117) [ 29.485492][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 29.485513][ C0] EXT4-fs (loop4): initial error at time 1771373748: ext4_orphan_get:1391: inode 15 [ 29.485546][ C0] EXT4-fs (loop4): last error at time 1771373748: ext4_orphan_get:1391: inode 15 [ 29.523091][ T28] audit: type=1400 audit(1771373748.032:111): avc: denied { ioctl } for pid=3499 comm="syz.4.8" path="socket:[4645]" dev="sockfs" ino=4645 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 29.536575][ T3500] loop4: lost filesystem error report for type 5 error -117 [ 29.547859][ T3500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.549087][ T28] audit: type=1400 audit(1771373748.042:112): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.591955][ T3521] Zero length message leads to an empty skb [ 29.607017][ T3500] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 29.607390][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.627166][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.637939][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.640945][ T28] audit: type=1400 audit(1771373748.042:113): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.671864][ T28] audit: type=1400 audit(1771373748.042:114): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.698848][ T28] audit: type=1400 audit(1771373748.062:115): avc: denied { open } for pid=3502 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.738421][ T3530] loop4: detected capacity change from 0 to 164 [ 29.745485][ T28] audit: type=1400 audit(1771373748.062:116): avc: denied { perfmon } for pid=3502 comm="syz.1.9" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.796211][ T3533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 29.843221][ T3535] loop1: detected capacity change from 0 to 2048 [ 29.884157][ T3535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.987614][ T3554] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.071928][ T3557] loop2: detected capacity change from 0 to 512 [ 30.080820][ T3557] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.321350][ T3557] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 30.456955][ T3557] EXT4-fs (loop2): 1 truncate cleaned up [ 30.522753][ T3557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.629215][ T3535] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.645531][ T3535] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 544 with error 28 [ 30.658812][ T3535] EXT4-fs (loop1): This should not happen!! Data will be lost [ 30.658812][ T3535] [ 30.677192][ T3535] EXT4-fs (loop1): Total free blocks count 0 [ 30.684211][ T3535] EXT4-fs (loop1): Free/Dirty block details [ 30.690464][ T3535] EXT4-fs (loop1): free_blocks=2415919504 [ 30.691433][ T3571] SELinux: failed to load policy [ 30.696236][ T3535] EXT4-fs (loop1): dirty_blocks=544 [ 30.711959][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.712150][ T3535] EXT4-fs (loop1): Block reservation details [ 30.727450][ T3535] EXT4-fs (loop1): i_reserved_data_blocks=34 [ 30.744794][ T3535] syz.1.16 (3535) used greatest stack depth: 10144 bytes left [ 30.765327][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.255032][ T3593] bridge_slave_0: left allmulticast mode [ 31.282047][ T3593] bridge_slave_0: left promiscuous mode [ 31.318196][ T3593] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.356008][ T3604] loop2: detected capacity change from 0 to 512 [ 31.367738][ T3593] bridge_slave_1: left allmulticast mode [ 31.391649][ T3604] ======================================================= [ 31.391649][ T3604] WARNING: The mand mount option has been deprecated and [ 31.391649][ T3604] and is ignored by this kernel. Remove the mand [ 31.391649][ T3604] option from the mount to silence this warning. [ 31.391649][ T3604] ======================================================= [ 31.408335][ T3593] bridge_slave_1: left promiscuous mode [ 31.435958][ T3604] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 31.439397][ T3593] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.447844][ T3604] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 31.464056][ T3604] EXT4-fs (loop2): group descriptors corrupted! [ 31.472650][ T3593] bond0: (slave bond_slave_0): Releasing backup interface [ 31.503211][ T3593] bond0: (slave bond_slave_1): Releasing backup interface [ 31.507048][ T3606] netlink: 300 bytes leftover after parsing attributes in process `syz.3.39'. [ 31.527056][ T3593] team0: Port device team_slave_0 removed [ 31.579044][ T3593] team0: Port device team_slave_1 removed [ 31.589588][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.606227][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.638535][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.639080][ T3616] loop4: detected capacity change from 0 to 164 [ 31.645988][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.666426][ T3593] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 31.717761][ T3618] team_slave_0: entered promiscuous mode [ 31.723486][ T3618] team_slave_1: entered promiscuous mode [ 31.748273][ T3618] vlan2: entered promiscuous mode [ 31.761002][ T3618] team0: entered promiscuous mode [ 31.851256][ T3634] netlink: 44 bytes leftover after parsing attributes in process `syz.2.52'. [ 31.855457][ T3635] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.895011][ T3638] random: crng reseeded on system resumption [ 31.931621][ T3638] loop1: detected capacity change from 0 to 512 [ 31.952027][ T3638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.023630][ T3638] Restarting kernel threads ... [ 32.041116][ T3650] loop4: detected capacity change from 0 to 512 [ 32.047805][ T3651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 32.063006][ T3638] Done restarting kernel threads. [ 32.196083][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.196773][ T3627] syz.0.49 (3627) used greatest stack depth: 9800 bytes left [ 32.210971][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.229571][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.239309][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.248618][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.267436][ T3657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 32.423959][ T3675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.66'. [ 32.638342][ T3697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 32.644348][ T3694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 32.656202][ T3697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 32.728573][ T3694] netlink: 'syz.0.69': attribute type 6 has an invalid length. [ 32.785539][ T3705] loop0: detected capacity change from 0 to 512 [ 32.804000][ T3705] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.815299][ T3705] EXT4-fs: test_dummy_encryption option not supported [ 32.896334][ T3714] loop3: detected capacity change from 0 to 512 [ 32.907456][ T3714] EXT4-fs: Ignoring removed i_version option [ 32.947347][ T3714] EXT4-fs: Ignoring removed bh option [ 32.983779][ T3714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.001302][ T3714] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.055720][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.305753][ T3756] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 33.325212][ T3756] EXT4-fs (loop3): group descriptors corrupted! [ 34.377102][ T3789] __nla_validate_parse: 14 callbacks suppressed [ 34.377120][ T3789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 34.391190][ T28] kauditd_printk_skb: 182 callbacks suppressed [ 34.391273][ T28] audit: type=1400 audit(1771373753.092:299): avc: denied { bind } for pid=3788 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.420365][ T28] audit: type=1400 audit(1771373753.122:300): avc: denied { listen } for pid=3788 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.504888][ T28] audit: type=1400 audit(1771373753.152:301): avc: denied { connect } for pid=3788 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.525406][ T28] audit: type=1400 audit(1771373753.152:302): avc: denied { write } for pid=3788 comm="syz.0.98" path="socket:[5013]" dev="sockfs" ino=5013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.589336][ T3797] bond1: Removing last ns target with arp_interval on [ 34.782062][ T3814] set_capacity_and_notify: 1 callbacks suppressed [ 34.782083][ T3814] loop4: detected capacity change from 0 to 512 [ 34.907787][ T3814] EXT4-fs: Ignoring removed orlov option [ 34.930855][ T3814] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 34.932269][ T3814] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 34.932682][ T3814] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.101: corrupted in-inode xattr: e_value size too large [ 34.932708][ T3814] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.933134][ T3814] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.101: couldn't read orphan inode 15 (err -117) [ 34.933163][ T3814] loop4: lost filesystem error report for type 5 error -117 [ 34.933692][ T3814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.013053][ T3817] FAULT_INJECTION: forcing a failure. [ 35.013053][ T3817] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.013081][ T3817] CPU: 0 UID: 0 PID: 3817 Comm: syz.3.104 Not tainted syzkaller #0 PREEMPT(full) [ 35.013140][ T3817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 35.013159][ T3817] Call Trace: [ 35.013167][ T3817] [ 35.013176][ T3817] __dump_stack+0x1d/0x30 [ 35.013204][ T3817] dump_stack_lvl+0x95/0xd0 [ 35.013255][ T3817] dump_stack+0x15/0x1b [ 35.013274][ T3817] should_fail_ex+0x263/0x280 [ 35.013301][ T3817] should_fail+0xb/0x20 [ 35.013396][ T3817] should_fail_usercopy+0x1a/0x20 [ 35.013420][ T3817] _copy_from_user+0x1c/0xb0 [ 35.013452][ T3817] ___sys_sendmsg+0xc1/0x1e0 [ 35.013551][ T3817] __x64_sys_sendmsg+0xd4/0x160 [ 35.013584][ T3817] x64_sys_call+0x194c/0x3020 [ 35.013626][ T3817] do_syscall_64+0x12c/0x370 [ 35.013660][ T3817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.013685][ T3817] RIP: 0033:0x7f2136c3c629 [ 35.013700][ T3817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.013788][ T3817] RSP: 002b:00007f2135697028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.013809][ T3817] RAX: ffffffffffffffda RBX: 00007f2136eb5fa0 RCX: 00007f2136c3c629 [ 35.013823][ T3817] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 35.013836][ T3817] RBP: 00007f2135697090 R08: 0000000000000000 R09: 0000000000000000 [ 35.013848][ T3817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.013896][ T3817] R13: 00007f2136eb6038 R14: 00007f2136eb5fa0 R15: 00007ffe4349d718 [ 35.013913][ T3817] [ 35.237267][ T3829] netlink: 56 bytes leftover after parsing attributes in process `syz.3.109'. [ 35.291450][ T3835] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 35.295660][ T28] audit: type=1400 audit(1771373754.002:303): avc: denied { bind } for pid=3828 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.295743][ T28] audit: type=1400 audit(1771373754.002:304): avc: denied { name_bind } for pid=3828 comm="syz.3.109" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 35.295766][ T28] audit: type=1400 audit(1771373754.002:305): avc: denied { node_bind } for pid=3828 comm="syz.3.109" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 35.339324][ T3841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'. [ 35.372589][ T3842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 35.641785][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.647912][ T3847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'. [ 35.720726][ T28] audit: type=1400 audit(1771373754.432:306): avc: denied { create } for pid=3852 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 35.746538][ T3855] vlan2: entered allmulticast mode [ 35.760720][ T3858] loop4: detected capacity change from 0 to 512 [ 35.767371][ T3855] macsec0: entered allmulticast mode [ 35.774670][ T28] audit: type=1400 audit(1771373754.482:307): avc: denied { remount } for pid=3856 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.775201][ T3859] cgroup2: Unknown parameter 'devices' [ 35.798790][ T3855] veth1_macvtap: entered allmulticast mode [ 35.819718][ T3858] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 35.819751][ T3858] EXT4-fs: failed to create workqueue [ 35.826869][ T28] audit: type=1400 audit(1771373754.532:308): avc: denied { setopt } for pid=3852 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 35.854253][ T3858] EXT4-fs (loop4): mount failed [ 35.879120][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 36.028768][ T3881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'. [ 36.699019][ T3925] netlink: 296 bytes leftover after parsing attributes in process `syz.1.139'. [ 36.794383][ T3932] netlink: 14 bytes leftover after parsing attributes in process `syz.1.139'. [ 37.141243][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.198171][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.230452][ T3932] bond0 (unregistering): Released all slaves [ 37.623777][ T3959] netlink: 300 bytes leftover after parsing attributes in process `syz.0.149'. [ 37.787202][ T3965] loop0: detected capacity change from 0 to 512 [ 37.824068][ T3965] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.152: corrupted in-inode xattr: bad e_name length [ 37.850099][ T3965] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.858234][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 37.873860][ C0] EXT4-fs (loop0): initial error at time 1771373756: ext4_iget_extra_inode:5025: inode 15 [ 37.883865][ C0] EXT4-fs (loop0): last error at time 1771373756: ext4_iget_extra_inode:5025: inode 15 [ 37.903935][ T3965] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.152: couldn't read orphan inode 15 (err -117) [ 37.915801][ T3965] loop0: lost filesystem error report for type 5 error -117 [ 37.917274][ T3965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.023974][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.161451][ T3990] loop3: detected capacity change from 0 to 2048 [ 38.226586][ T3990] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.247712][ T3990] EXT4-fs (loop3): group descriptors corrupted! [ 38.500306][ T4005] loop0: detected capacity change from 0 to 512 [ 38.555257][ T4005] msdos: Unknown parameter 'ceŒyi5«Fæheck' [ 38.559694][ T4010] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 38.572272][ T4010] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 38.603128][ T4007] loop1: detected capacity change from 0 to 8192 [ 38.653545][ T4019] macvlan2: entered promiscuous mode [ 38.659382][ T4019] macvlan2: entered allmulticast mode [ 38.665175][ T4019] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 38.693124][ T4018] Invalid ELF header magic: != ELF [ 38.702365][ T4018] loop0: detected capacity change from 0 to 512 [ 38.917467][ T4024] loop1: detected capacity change from 0 to 512 [ 38.949932][ T4024] EXT4-fs: Ignoring removed i_version option [ 39.002153][ T4024] EXT4-fs: Ignoring removed bh option [ 39.072827][ T4024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.114386][ T4024] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.187006][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.357260][ T4052] Illegal XDP return value 4294967274 on prog (id 43) dev N/A, expect packet loss! [ 39.381632][ T3373] hid-generic 0000:0000:0095.0001: unknown main item tag 0x0 [ 39.399430][ T28] kauditd_printk_skb: 120 callbacks suppressed [ 39.399447][ T28] audit: type=1326 audit(1771373758.102:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629c7c629 code=0x7ffc0000 [ 39.438596][ T3373] hid-generic 0000:0000:0095.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.498051][ T28] audit: type=1326 audit(1771373758.102:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629c7c629 code=0x7ffc0000 [ 39.547518][ T28] audit: type=1326 audit(1771373758.102:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb629c7c629 code=0x7ffc0000 [ 39.609729][ T4071] loop3: detected capacity change from 0 to 512 [ 39.651279][ T4071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.687736][ T28] audit: type=1326 audit(1771373758.382:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629c7c629 code=0x7ffc0000 [ 39.724418][ T4084] loop4: detected capacity change from 0 to 512 [ 39.727574][ T4071] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.742601][ T4084] EXT4-fs: Ignoring removed i_version option [ 39.745159][ T28] audit: type=1326 audit(1771373758.392:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629c7c629 code=0x7ffc0000 [ 39.772369][ T28] audit: type=1400 audit(1771373758.392:434): avc: denied { ioctl } for pid=4049 comm="syz.1.184" path="/dev/uhid" dev="devtmpfs" ino=253 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.778483][ T4083] bond3: Removing last ns target with arp_interval on [ 39.798025][ T28] audit: type=1400 audit(1771373758.432:435): avc: denied { egress } for pid=35 comm="kworker/1:1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 39.839027][ T28] audit: type=1400 audit(1771373758.432:436): avc: denied { sendto } for pid=35 comm="kworker/1:1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 39.864795][ T28] audit: type=1326 audit(1771373758.442:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb629c7c629 code=0x7ffc0000 [ 39.888223][ T28] audit: type=1326 audit(1771373758.442:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629c7c629 code=0x7ffc0000 [ 39.948574][ T4084] EXT4-fs: Ignoring removed bh option [ 40.019703][ T4084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.032691][ T4084] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.314038][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.400575][ T4108] __nla_validate_parse: 5 callbacks suppressed [ 40.400594][ T4108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.200'. [ 40.459936][ T4120] netlink: 56 bytes leftover after parsing attributes in process `syz.0.205'. [ 40.502046][ T4118] bond1: (slave ip6gretap1): making interface the new active one [ 40.511850][ T4122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 40.561314][ T4118] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 40.593792][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.684162][ T4140] netlink: 'syz.1.210': attribute type 4 has an invalid length. [ 40.793905][ T4148] netlink: 80 bytes leftover after parsing attributes in process `syz.0.212'. [ 40.840919][ T4153] syz.0.216 uses obsolete (PF_INET,SOCK_PACKET) [ 40.973796][ T4161] netlink: 'syz.4.218': attribute type 21 has an invalid length. [ 41.020242][ T4161] netlink: 156 bytes leftover after parsing attributes in process `syz.4.218'. [ 41.062336][ T4161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.218'. [ 41.081470][ T4164] netlink: 300 bytes leftover after parsing attributes in process `syz.1.219'. [ 41.224981][ T4167] netlink: 'syz.4.220': attribute type 1 has an invalid length. [ 41.287184][ T4169] bridge1: entered promiscuous mode [ 41.310573][ T4169] bridge1: entered allmulticast mode [ 41.337978][ T4171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 41.355313][ T4171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 41.411907][ T4170] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 41.424088][ T4180] loop1: detected capacity change from 0 to 512 [ 41.426592][ T4170] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 41.457337][ T4180] loop1: detected capacity change from 0 to 512 [ 41.497325][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.504554][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.537011][ T4189] netlink: 80 bytes leftover after parsing attributes in process `syz.3.226'. [ 41.558119][ T4180] loop1: detected capacity change from 0 to 512 [ 41.573745][ T4167] bond2: entered promiscuous mode [ 41.579350][ T4167] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 41.608391][ T4167] bond2: left promiscuous mode [ 41.638116][ T4180] loop1: detected capacity change from 0 to 512 [ 41.999450][ T4201] ------------[ cut here ]------------ [ 42.005062][ T4201] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 42.029704][ T4201] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.2.228/4201 [ 42.040583][ T4201] Modules linked in: [ 42.044496][ T4201] CPU: 1 UID: 0 PID: 4201 Comm: syz.2.228 Not tainted syzkaller #0 PREEMPT(full) [ 42.053746][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 42.064021][ T4201] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 42.070380][ T4201] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 42.090099][ T4201] RSP: 0018:ffffc900110ef368 EFLAGS: 00010246 [ 42.096219][ T4201] RAX: ffff888104c0dcf8 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 42.104380][ T4201] RDX: ffffffff86813914 RSI: ffffffff866d567d RDI: ffffffff871d3590 [ 42.112404][ T4201] RBP: ffff88811a96aa70 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 42.120526][ T4201] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811a96aa30 [ 42.128561][ T4201] R13: 00000000ffffdfcc R14: ffff88811a96aa7c R15: ffff88811a96aa68 [ 42.136594][ T4201] FS: 00007f37b855d6c0(0000) GS:ffff8882ae9e3000(0000) knlGS:0000000000000000 [ 42.145601][ T4201] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.152284][ T4201] CR2: 00007f5beae54ff8 CR3: 000000011b72a000 CR4: 00000000003506f0 [ 42.160349][ T4201] Call Trace: [ 42.163823][ T4201] [ 42.166815][ T4201] reg_set_min_max+0x1c8/0x260 [ 42.171697][ T4201] check_cond_jmp_op+0x13b0/0x1ab0 [ 42.176950][ T4201] do_check+0x4a9b/0x9860 [ 42.181441][ T4201] do_check_common+0xd0b/0x1630 [ 42.186332][ T4201] bpf_check+0x2f6d/0xcc10 [ 42.190813][ T4201] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 42.196987][ T4201] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 42.202805][ T4201] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 42.208855][ T4201] ? css_rstat_updated+0xbb/0x280 [ 42.213943][ T4201] ? try_charge_memcg+0x215/0xa10 [ 42.219011][ T4201] ? pcpu_block_update+0x24e/0x3b0 [ 42.224209][ T4201] ? _find_next_zero_bit+0x64/0xa0 [ 42.229433][ T4201] ? pcpu_block_refresh_hint+0x157/0x170 [ 42.235177][ T4201] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 42.241353][ T4201] ? css_rstat_updated+0xbb/0x280 [ 42.246451][ T4201] ? mod_memcg_state+0x182/0x270 [ 42.251451][ T4201] ? __rcu_read_unlock+0x4e/0x70 [ 42.256441][ T4201] ? avc_has_perm_noaudit+0xab/0x130 [ 42.261784][ T4201] ? avc_has_perm+0x101/0x190 [ 42.266492][ T4201] ? selinux_bpf_prog_load+0x197/0x1c0 [ 42.272094][ T4201] ? security_bpf_prog_load+0x9e/0x140 [ 42.277663][ T4201] bpf_prog_load+0xf76/0x1140 [ 42.282380][ T4201] ? security_bpf+0x2b/0x90 [ 42.286950][ T4201] __sys_bpf+0x505/0x7e0 [ 42.291291][ T4201] __x64_sys_bpf+0x41/0x50 [ 42.295754][ T4201] x64_sys_call+0x10cb/0x3020 [ 42.300481][ T4201] do_syscall_64+0x12c/0x370 [ 42.305180][ T4201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.311132][ T4201] RIP: 0033:0x7f37b9b4c629 [ 42.315573][ T4201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.335231][ T4201] RSP: 002b:00007f37b855d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.343702][ T4201] RAX: ffffffffffffffda RBX: 00007f37b9dc6180 RCX: 00007f37b9b4c629 [ 42.351848][ T4201] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 42.359852][ T4201] RBP: 00007f37b9be2b39 R08: 0000000000000000 R09: 0000000000000000 [ 42.367840][ T4201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.375931][ T4201] R13: 00007f37b9dc6218 R14: 00007f37b9dc6180 R15: 00007ffc88fcd138 [ 42.384152][ T4201] [ 42.387285][ T4201] ---[ end trace 0000000000000000 ]--- [ 42.694804][ T4218] ipvlan2: entered promiscuous mode [ 42.737422][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.826546][ T4243] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 42.855816][ T4243] syzkaller0: entered promiscuous mode [ 42.865910][ T4243] syzkaller0: entered allmulticast mode [ 42.888514][ T4250] program syz.4.246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.905880][ T4252] bond4: Removing last ns target with arp_interval on [ 43.072014][ T4267] xt_connbytes: Forcing CT accounting to be enabled [ 43.085606][ T4268] bridge1: entered promiscuous mode [ 43.097716][ T4268] bridge1: entered allmulticast mode [ 43.104858][ T4268] team0: Port device bridge1 added [ 43.116018][ T4268] bridge0: port 3(team0) entered blocking state [ 43.122450][ T4268] bridge0: port 3(team0) entered disabled state [ 43.129611][ T4268] team0: entered allmulticast mode [ 43.134802][ T4268] team_slave_0: entered allmulticast mode [ 43.141713][ T4268] team_slave_1: entered allmulticast mode [ 43.962810][ T4339] syz_tun: entered promiscuous mode [ 43.969693][ T4339] syz_tun: left promiscuous mode [ 44.071404][ T4346] loop2: detected capacity change from 0 to 8192 [ 44.738354][ T3719] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.744718][ T4231] Bluetooth: hci0: command 0x1003 tx timeout [ 44.851490][ T28] kauditd_printk_skb: 180 callbacks suppressed [ 44.851507][ T28] audit: type=1400 audit(1771373763.562:619): avc: denied { firmware_load } for pid=4369 comm="syz.3.289" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 44.917850][ T4370] loop3: detected capacity change from 0 to 512 [ 44.969213][ T4370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.992043][ T4370] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.005545][ T28] audit: type=1400 audit(1771373763.712:620): avc: denied { setattr } for pid=4369 comm="syz.3.289" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.076799][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 45.292318][ T28] audit: type=1400 audit(1771373763.992:621): avc: denied { read } for pid=4406 comm="syz.0.300" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.336288][ T28] audit: type=1400 audit(1771373764.002:622): avc: denied { open } for pid=4406 comm="syz.0.300" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.374565][ T28] audit: type=1400 audit(1771373764.032:623): avc: denied { shutdown } for pid=4388 comm="syz.1.293" lport=33552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.463550][ T4433] __nla_validate_parse: 23 callbacks suppressed [ 45.463569][ T4433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.310'. [ 45.465380][ T28] audit: type=1400 audit(1771373764.172:624): avc: denied { create } for pid=4406 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 45.500525][ T4417] loop0: detected capacity change from 0 to 128 [ 45.514670][ T28] audit: type=1400 audit(1771373764.212:625): avc: denied { read } for pid=4406 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 45.549318][ T4439] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 45.566455][ T28] audit: type=1400 audit(1771373764.212:626): avc: denied { write } for pid=4424 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 45.586884][ T4439] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 45.643043][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 45.657296][ T4433] macvlan2: entered promiscuous mode [ 45.662977][ T4433] macvlan2: entered allmulticast mode [ 45.668897][ T4433] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 45.683314][ T4445] syz_tun: entered promiscuous mode [ 45.690048][ T4445] syz_tun: left promiscuous mode [ 45.743176][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 45.800857][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 45.831478][ T4455] syzkaller0: entered promiscuous mode [ 45.837602][ T4455] syzkaller0: refused to change device tx_queue_len [ 45.939792][ T4468] bond5: Removing last ns target with arp_interval on [ 45.959659][ T4471] loop4: detected capacity change from 0 to 2048 [ 45.975282][ T4471] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.988926][ T4471] EXT4-fs (loop4): group descriptors corrupted! [ 46.056555][ T4479] loop1: detected capacity change from 0 to 164 [ 46.153730][ T28] audit: type=1400 audit(1771373764.862:627): avc: denied { create } for pid=4488 comm="syz.1.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 46.225611][ T28] audit: type=1400 audit(1771373764.862:628): avc: denied { setopt } for pid=4488 comm="syz.1.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 46.254413][ T4499] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 46.269749][ T4499] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 46.605260][ T4518] dummy0: entered promiscuous mode [ 46.621292][ T4518] vlan3: entered promiscuous mode [ 46.752085][ T4520] loop0: detected capacity change from 0 to 256 [ 46.792488][ T4520] FAT-fs (loop0): Directory bread(block 64) failed [ 46.807447][ T4520] FAT-fs (loop0): Directory bread(block 65) failed [ 46.828823][ T4520] FAT-fs (loop0): Directory bread(block 66) failed [ 46.835636][ T4520] FAT-fs (loop0): Directory bread(block 67) failed [ 46.845791][ T4520] FAT-fs (loop0): Directory bread(block 68) failed [ 46.852778][ T4520] FAT-fs (loop0): Directory bread(block 69) failed [ 46.859746][ T4520] FAT-fs (loop0): Directory bread(block 70) failed [ 46.888370][ T4520] FAT-fs (loop0): Directory bread(block 71) failed [ 46.899832][ T4520] FAT-fs (loop0): Directory bread(block 72) failed [ 46.916549][ T4520] FAT-fs (loop0): Directory bread(block 73) failed [ 46.949720][ T4520] syz.0.340: attempt to access beyond end of device [ 46.949720][ T4520] loop0: rw=8388608, sector=1736, nr_sectors = 4 limit=256 [ 46.980781][ T4520] syz.0.340: attempt to access beyond end of device [ 46.980781][ T4520] loop0: rw=8388608, sector=1736, nr_sectors = 4 limit=256 [ 47.013614][ T4520] Buffer I/O error on dev loop0, logical block 434, async page read [ 47.022553][ T4520] syz.0.340: attempt to access beyond end of device [ 47.022553][ T4520] loop0: rw=8388608, sector=1740, nr_sectors = 4 limit=256 [ 47.036698][ T4520] Buffer I/O error on dev loop0, logical block 435, async page read [ 47.185441][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 47.236606][ T4543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 47.280976][ T4547] netlink: 'syz.1.350': attribute type 3 has an invalid length. [ 47.438721][ T4547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.350'. [ 47.532240][ T4547] netlink: 'syz.1.350': attribute type 3 has an invalid length. [ 47.675997][ T4547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.350'. [ 48.041780][ T4574] loop3: detected capacity change from 0 to 512 [ 48.054291][ T4574] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 48.060357][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 48.271445][ T3477] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 48.418422][ T4624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.373'. [ 48.698359][ T3818] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 48.799310][ T4666] ipvlan3: entered promiscuous mode [ 48.844540][ T4674] loop0: detected capacity change from 0 to 512 [ 48.852617][ T4674] EXT4-fs: Ignoring removed i_version option [ 48.868493][ T3818] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 48.886301][ T4674] EXT4-fs: Ignoring removed bh option [ 48.917330][ T4674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.966424][ T4674] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.967456][ T4677] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 48.989260][ T4677] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 49.013301][ T4685] macvlan2: entered promiscuous mode [ 49.018754][ T4685] macvlan2: entered allmulticast mode [ 49.024447][ T4685] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 49.036339][ T268] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 49.058941][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.379692][ T4700] bond1: Removing last ns target with arp_interval on [ 49.540046][ T268] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 49.705764][ T4703] loop0: detected capacity change from 0 to 32768 [ 49.858389][ T3373] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 49.920619][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 49.920638][ T28] audit: type=1400 audit(1771373768.622:686): avc: denied { ioctl } for pid=4724 comm="syz.2.406" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 50.073200][ T4734] loop2: detected capacity change from 0 to 128 [ 50.098719][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 50.108378][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 50.116258][ T28] audit: type=1326 audit(1771373768.822:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb629c7c629 code=0x0 [ 50.267250][ T28] audit: type=1400 audit(1771373768.972:688): avc: denied { create } for pid=4750 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 50.388292][ T4754] loop1: detected capacity change from 0 to 1024 [ 50.439532][ T4754] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 50.460452][ T28] audit: type=1326 audit(1771373769.172:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2136c3c629 code=0x7fc00000 [ 50.508841][ T4765] __nla_validate_parse: 5 callbacks suppressed [ 50.508859][ T4765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 50.524356][ T4754] System zones: 0-1, 3-36 [ 50.529374][ T4754] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.409: bad orphan inode 134217728 [ 50.540296][ T4754] loop1: lost filesystem error report for type 5 error -117 [ 50.541009][ T4754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.571374][ T28] audit: type=1400 audit(1771373769.262:690): avc: denied { read } for pid=4766 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.593403][ T28] audit: type=1400 audit(1771373769.272:691): avc: denied { add_name } for pid=4732 comm="syz.1.409" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.599477][ T4765] syz_tun: entered promiscuous mode [ 50.620660][ T28] audit: type=1400 audit(1771373769.332:692): avc: denied { create } for pid=4732 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 50.717276][ T28] audit: type=1400 audit(1771373769.352:693): avc: denied { ioctl } for pid=4732 comm="syz.1.409" path="socket:[8962]" dev="sockfs" ino=8962 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 50.718176][ T4765] syz_tun: left promiscuous mode [ 50.761685][ T4781] loop0: detected capacity change from 0 to 164 [ 50.806997][ T28] audit: type=1400 audit(1771373769.382:694): avc: denied { read } for pid=4732 comm="syz.1.409" path="/92/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.833322][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 50.841487][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 50.881469][ T4786] dvmrp1: tun_chr_ioctl cmd 2148038145 [ 51.003153][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 51.019529][ T4803] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 51.120100][ T28] audit: type=1326 audit(1771373769.832:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4815 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bec43c629 code=0x7ffc0000 [ 51.136325][ T4816] vlan2: entered promiscuous mode [ 51.169574][ T4816] dummy0: entered promiscuous mode [ 51.475759][ T4817] loop2: detected capacity change from 0 to 512 [ 51.513531][ T4817] EXT4-fs: Ignoring removed bh option [ 51.527881][ T4817] EXT4-fs: inline encryption not supported [ 51.557187][ T4817] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.622051][ T4817] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 51.685522][ T4817] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.435: bg 0: block 248: padding at end of block bitmap is not set [ 51.748463][ T4817] loop2: lost filesystem error report for type 5 error -117 [ 51.748735][ T4817] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.435: Failed to acquire dquot type 1 [ 51.767503][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 51.767526][ C0] EXT4-fs (loop2): last error at time 1771373770: ext4_validate_block_bitmap:441 [ 51.786979][ T4817] loop2: lost filesystem error report for type 5 error -117 [ 51.787614][ T4817] EXT4-fs (loop2): 1 truncate cleaned up [ 51.788164][ T4855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=4855 comm=syz.0.448 [ 51.809514][ T4817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 51.873010][ T4862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.451'. [ 51.885165][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 52.036847][ T4812] syz.2.435 (4812) used greatest stack depth: 8976 bytes left [ 52.184378][ T4817] syz.2.435 (4817) used greatest stack depth: 8184 bytes left [ 52.280360][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 52.566062][ T4874] loop3: detected capacity change from 0 to 512 [ 52.583778][ T4876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 52.606269][ T4878] netlink: 300 bytes leftover after parsing attributes in process `syz.2.456'. [ 52.628744][ T4874] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.454: corrupted inode contents [ 52.673599][ T4874] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.673924][ T4874] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 52.683105][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 52.683126][ C1] EXT4-fs (loop3): initial error at time 1771373771: ext4_do_update_inode:5569: inode 15 [ 52.683174][ C1] EXT4-fs (loop3): last error at time 1771373771: ext4_do_update_inode:5569: inode 15 [ 52.779606][ T4874] loop3: lost filesystem error report for type 5 error -117 [ 52.779856][ T4874] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.454: corrupted inode contents [ 52.826719][ T4884] loop2: detected capacity change from 0 to 2048 [ 52.838129][ T4874] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.838485][ T4874] EXT4-fs error (device loop3): ext4_evict_inode:303: inode #15: comm syz.3.454: mark_inode_dirty error [ 52.873707][ T4889] netlink: 'syz.4.463': attribute type 21 has an invalid length. [ 52.876046][ T4874] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.886173][ T4889] netlink: 132 bytes leftover after parsing attributes in process `syz.4.463'. [ 52.906870][ T4884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.919630][ T4874] EXT4-fs (loop3): 1 orphan inode deleted [ 52.925809][ T4874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.939537][ T4889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.463'. [ 52.972592][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.034016][ T4898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 53.074064][ T4898] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 53.079194][ T4902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.468'. [ 53.128386][ T4902] ipvlan3: entered promiscuous mode [ 53.394179][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.424305][ T4926] loop0: detected capacity change from 0 to 2048 [ 53.446651][ T4926] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.488618][ T4926] EXT4-fs (loop0): group descriptors corrupted! [ 53.601111][ T4938] loop4: detected capacity change from 0 to 512 [ 53.631262][ T4938] EXT4-fs: Ignoring removed i_version option [ 53.679592][ T4938] EXT4-fs: Ignoring removed bh option [ 53.722734][ T4938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.737095][ T4944] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 53.747748][ T4938] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.748008][ T4944] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 53.791390][ T4941] macvlan2: entered promiscuous mode [ 53.819987][ T4941] macvlan2: entered allmulticast mode [ 53.856403][ T4941] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 53.872191][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.902500][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.175046][ T4961] loop0: detected capacity change from 0 to 764 [ 54.189310][ T4962] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 54.270515][ T4962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.306727][ T4964] bond4: Removing last ns target with arp_interval on [ 54.338303][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 54.338325][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 54.629783][ T4987] loop4: detected capacity change from 0 to 128 [ 54.668359][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 54.747173][ T4987] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.903293][ T4987] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.010060][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 55.010078][ T28] audit: type=1400 audit(1771373773.722:767): avc: denied { create } for pid=4991 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.115722][ T28] audit: type=1400 audit(1771373773.752:768): avc: denied { setopt } for pid=4991 comm="syz.0.495" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.181155][ T5001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.229009][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.290868][ T28] audit: type=1326 audit(1771373773.992:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9b4c629 code=0x7ffc0000 [ 55.328425][ T5001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.399970][ T5009] vlan2: entered promiscuous mode [ 55.405179][ T5009] dummy0: entered promiscuous mode [ 55.417551][ T28] audit: type=1326 audit(1771373774.022:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9b4c629 code=0x7ffc0000 [ 55.450728][ T28] audit: type=1326 audit(1771373774.022:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37b9b4c629 code=0x7ffc0000 [ 55.475143][ T28] audit: type=1326 audit(1771373774.022:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9b4c629 code=0x7ffc0000 [ 55.501034][ T28] audit: type=1326 audit(1771373774.022:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9b4c629 code=0x7ffc0000 [ 55.503564][ T5014] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 55.536773][ T28] audit: type=1326 audit(1771373774.022:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37b9b4c629 code=0x7ffc0000 [ 55.560688][ T28] audit: type=1326 audit(1771373774.022:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b9b4c629 code=0x7ffc0000 [ 55.560735][ T5016] __nla_validate_parse: 7 callbacks suppressed [ 55.560826][ T5016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 55.584279][ T28] audit: type=1326 audit(1771373774.022:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37b9b4c629 code=0x7ffc0000 [ 55.637312][ T5020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 55.650110][ T5001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.675720][ T5022] loop2: detected capacity change from 0 to 128 [ 55.716462][ T5022] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.741440][ T5022] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.756599][ T5001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.799521][ T5029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 55.817779][ T4302] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.838799][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.849026][ T5031] loop0: detected capacity change from 0 to 1024 [ 55.855854][ T5031] EXT4-fs: Ignoring removed bh option [ 55.861350][ T4302] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.883709][ T4302] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.918556][ T5031] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 55.947302][ T5029] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 55.977105][ T5031] loop0: detected capacity change from 0 to 256 [ 56.022104][ T5029] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 56.079874][ T5038] macvlan2: entered promiscuous mode [ 56.085320][ T5038] macvlan2: entered allmulticast mode [ 56.103631][ T5038] bond5: (slave macvlan2): Error -98 calling set_mac_address [ 56.141953][ T5045] loop0: detected capacity change from 0 to 164 [ 56.261093][ T5051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 56.290847][ T5055] netlink: 56 bytes leftover after parsing attributes in process `syz.2.518'. [ 56.431489][ T5057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.447153][ T5057] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 56.502888][ T3392] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 56.510669][ T5061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 56.645394][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 56.655258][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 56.670989][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 56.688467][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 56.762847][ T5078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'. [ 56.832573][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 56.841834][ T5079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.528'. [ 56.939373][ T5087] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.077854][ T5087] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 57.125493][ T5087] EXT4-fs (loop0): 1 truncate cleaned up [ 57.138384][ T268] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 57.152684][ T5087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.217659][ T5087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.532'. [ 57.333499][ T5096] process 'syz.3.535' launched '/dev/fd/5' with NULL argv: empty string added [ 57.381523][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.438785][ T3303] loop3: p1 < > p2 p4 < p5 > [ 57.443690][ T3303] loop3: partition table partially beyond EOD, truncated [ 57.453717][ T3303] loop3: p1 start 134217728 is beyond EOD, truncated [ 57.467633][ T3303] loop3: p2 size 591360 extends beyond EOD, truncated [ 57.468341][ T3392] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 57.476397][ T3303] loop3: p5 size 591360 extends beyond EOD, truncated [ 57.499135][ T5096] loop3: p1 < > p2 p4 < p5 > [ 57.510535][ T5002] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.528875][ T5096] loop3: partition table partially beyond EOD, truncated [ 57.536038][ T5096] loop3: p1 start 134217728 is beyond EOD, truncated [ 57.553138][ T5096] loop3: p2 size 591360 extends beyond EOD, truncated [ 57.563066][ T5101] Unsupported ieee802154 address type: 0 [ 57.578402][ T5101] hsr0: entered promiscuous mode [ 57.584146][ T5100] hsr0: left promiscuous mode [ 57.589751][ T5096] loop3: p5 size 591360 extends beyond EOD, truncated [ 57.597971][ T5002] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.634980][ T5002] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.705335][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 57.705719][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 57.726598][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 57.744113][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 57.755993][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 57.767422][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 57.826722][ T5122] syz_tun: entered promiscuous mode [ 57.834760][ T5122] syz_tun: left promiscuous mode [ 57.872306][ T5124] bond6: Removing last ns target with arp_interval on [ 58.178652][ T4302] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 58.188892][ T4302] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 58.798363][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 59.158020][ T5172] set_capacity_and_notify: 4 callbacks suppressed [ 59.158040][ T5172] loop0: detected capacity change from 0 to 4096 [ 59.327069][ T5176] loop0: detected capacity change from 0 to 512 [ 59.373253][ T5176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.432791][ T5176] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.510349][ T5176] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 59.548696][ T5176] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 59.628717][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.638905][ T5182] loop2: detected capacity change from 0 to 1024 [ 59.692247][ T5182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.718792][ T5187] loop0: detected capacity change from 0 to 512 [ 59.748844][ T5187] EXT4-fs: Ignoring removed i_version option [ 59.773822][ T5187] EXT4-fs: Mount option(s) incompatible with ext2 [ 59.813885][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.994714][ T5197] loop0: detected capacity change from 0 to 512 [ 60.034072][ T5199] syz_tun: entered promiscuous mode [ 60.049589][ T5197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.065442][ T5199] syz_tun: left promiscuous mode [ 60.080197][ T5197] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.107492][ T406] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.148440][ T406] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.193132][ T406] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.225695][ T406] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.239368][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 60.239387][ T28] audit: type=1400 audit(1771373778.952:910): avc: denied { ioctl } for pid=5196 comm="syz.0.569" path="socket:[9994]" dev="sockfs" ino=9994 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.281050][ T5202] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #18: comm syz.0.569: corrupted inode contents [ 60.354320][ T5202] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 60.354433][ T5202] EXT4-fs (loop0): Remounting filesystem read-only [ 60.438161][ T5202] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -30) [ 60.484166][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.509994][ T5220] loop0: detected capacity change from 0 to 164 [ 60.625125][ T5221] loop2: detected capacity change from 0 to 1764 [ 60.650282][ T5226] __nla_validate_parse: 7 callbacks suppressed [ 60.650300][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 60.738414][ T28] audit: type=1400 audit(1771373779.442:911): avc: denied { getopt } for pid=5233 comm="syz.0.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.758510][ T5235] loop1: detected capacity change from 0 to 512 [ 60.782975][ T5235] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.794471][ T5238] netlink: 56 bytes leftover after parsing attributes in process `syz.4.584'. [ 60.808315][ T28] audit: type=1400 audit(1771373779.442:912): avc: denied { getopt } for pid=5233 comm="syz.0.583" lport=24351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.835941][ T5235] EXT4-fs (loop1): 1 truncate cleaned up [ 60.842505][ T5235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.897432][ T28] audit: type=1400 audit(1771373779.582:913): avc: denied { append } for pid=5215 comm="syz.1.575" path="/97/file1/memory.events.local" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.944968][ T28] audit: type=1400 audit(1771373779.642:914): avc: denied { map } for pid=5215 comm="syz.1.575" path="/97/file1/memory.events.local" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.990732][ T5249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 60.999867][ T28] audit: type=1400 audit(1771373779.702:915): avc: denied { write } for pid=5247 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.016180][ T5244] loop4: detected capacity change from 0 to 4096 [ 61.027280][ T28] audit: type=1400 audit(1771373779.732:916): avc: denied { ioctl } for pid=5215 comm="syz.1.575" path="/97/file1/memory.events.local" dev="loop1" ino=18 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.094643][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.106931][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 61.179138][ T9] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 61.234692][ T28] audit: type=1400 audit(1771373779.932:917): avc: denied { write } for pid=5273 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.255394][ T5285] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 61.282134][ T5285] loop3: detected capacity change from 0 to 128 [ 61.296178][ T28] audit: type=1400 audit(1771373779.932:918): avc: denied { read } for pid=5273 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.401909][ T5284] FAT-fs (loop4): Directory bread(block 32) failed [ 61.414548][ T5296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 61.419581][ T5294] vlan2: entered promiscuous mode [ 61.424618][ T5284] FAT-fs (loop4): Directory bread(block 33) failed [ 61.431430][ T28] audit: type=1326 audit(1771373780.122:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bec43c629 code=0x7ffc0000 [ 61.435512][ T5284] FAT-fs (loop4): Directory bread(block 34) failed [ 61.468179][ T5284] FAT-fs (loop4): Directory bread(block 35) failed [ 61.480940][ T5284] FAT-fs (loop4): Directory bread(block 36) failed [ 61.487612][ T5284] FAT-fs (loop4): Directory bread(block 37) failed [ 61.494387][ T5284] FAT-fs (loop4): Directory bread(block 38) failed [ 61.503178][ T5284] FAT-fs (loop4): Directory bread(block 39) failed [ 61.604476][ T406] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 61.683815][ T5284] FAT-fs (loop4): Directory bread(block 40) failed [ 61.692958][ T5284] FAT-fs (loop4): Directory bread(block 41) failed [ 61.814125][ T5300] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.936573][ T9] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 61.944633][ T5300] EXT4-fs (loop2): 1 truncate cleaned up [ 61.962953][ T5300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.982416][ T5308] netlink: 300 bytes leftover after parsing attributes in process `syz.0.607'. [ 62.073987][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.208838][ T5325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'. [ 62.217994][ T5321] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 62.578300][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 62.658787][ T268] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 62.756602][ T268] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 62.775196][ T5337] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.617: inode has both inline data and extents flags [ 63.025038][ T5337] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.026122][ T5337] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.617: couldn't read orphan inode 15 (err -117) [ 63.035810][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 63.035827][ C0] EXT4-fs (loop4): initial error at time 1771373781: ext4_orphan_get:1391: inode 15 [ 63.035868][ C0] EXT4-fs (loop4): last error at time 1771373781: ext4_orphan_get:1391: inode 15 [ 63.068274][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 63.073170][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 63.089573][ T9] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 63.109456][ T5337] loop4: lost filesystem error report for type 5 error -117 [ 63.110033][ T5337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.190243][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.319572][ T5356] bond8: Removing last ns target with arp_interval on [ 63.458795][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 63.488640][ T5372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.631'. [ 63.525107][ T5373] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.579993][ T5373] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.629: inode has both inline data and extents flags [ 63.599015][ T5373] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.600240][ T5373] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.629: couldn't read orphan inode 15 (err -117) [ 63.609626][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 63.609646][ C0] EXT4-fs (loop4): initial error at time 1771373782: ext4_orphan_get:1391: inode 15 [ 63.609673][ C0] EXT4-fs (loop4): last error at time 1771373782: ext4_orphan_get:1391: inode 15 [ 63.647746][ T5373] loop4: lost filesystem error report for type 5 error -117 [ 63.656403][ T5373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.659362][ T5382] EXT4-fs: quotafile must be on filesystem root [ 63.716029][ T5384] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.757400][ T5384] SELinux: failed to load policy [ 63.758607][ T5373] team0: Port device syz_tun added [ 64.058047][ T5362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.623'. [ 64.075343][ T5391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.155218][ T5391] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 64.223885][ T5396] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 64.231563][ T5353] syz.2.623 (5353) used greatest stack depth: 5984 bytes left [ 64.293113][ T5387] syzkaller1: entered promiscuous mode [ 64.308773][ T5387] syzkaller1: entered allmulticast mode [ 64.332023][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.406788][ T5400] xt_connbytes: Forcing CT accounting to be enabled [ 64.688574][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.244025][ T5444] set_capacity_and_notify: 6 callbacks suppressed [ 65.244647][ T5444] loop1: detected capacity change from 0 to 128 [ 65.313718][ T5446] netlink: 'syz.0.654': attribute type 1 has an invalid length. [ 65.542050][ T5446] bond2: entered promiscuous mode [ 65.547428][ T5446] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 65.569514][ T5446] bond2: left promiscuous mode [ 65.670624][ T5451] loop1: detected capacity change from 0 to 512 [ 65.697939][ T5451] EXT4-fs: Ignoring removed i_version option [ 65.727848][ T5451] EXT4-fs: Ignoring removed bh option [ 65.770679][ T5451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.808126][ T5457] loop4: detected capacity change from 0 to 512 [ 65.818491][ T5451] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.840538][ T5451] __nla_validate_parse: 2 callbacks suppressed [ 65.840555][ T5451] netlink: 32 bytes leftover after parsing attributes in process `syz.1.655'. [ 65.875490][ T5457] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 65.888334][ T5457] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.912752][ T5457] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 65.938172][ T5457] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 65.945629][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.955112][ T5457] EXT4-fs error (device loop4): __ext4_iget:5378: inode #16: block 127754: comm syz.4.657: invalid block [ 65.987236][ T5457] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.989797][ T5457] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.657: couldn't read orphan inode 16 (err -117) [ 65.998979][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 65.999005][ C1] EXT4-fs (loop4): initial error at time 1771373784: __ext4_iget:5378: inode 16: block 127754 [ 65.999047][ C1] EXT4-fs (loop4): last error at time 1771373784: __ext4_iget:5378: inode 16: block 127754 [ 66.088348][ T5457] loop4: lost filesystem error report for type 5 error -117 [ 66.091779][ T5457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.121898][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 66.166946][ T5465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.660'. [ 66.261129][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.345947][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 66.345965][ T28] audit: type=1400 audit(1771373785.052:957): avc: denied { mounton } for pid=5477 comm="syz.0.664" path="/file0" dev="ramfs" ino=11418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 66.425728][ T5482] loop2: detected capacity change from 0 to 1024 [ 66.439220][ T5482] EXT4-fs: dax option not supported [ 66.487424][ T5482] 9p: Bad value for 'rfdno' [ 66.542160][ T28] audit: type=1326 audit(1771373785.252:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa890ec629 code=0x7ffc0000 [ 66.558281][ T5493] vlan2: entered promiscuous mode [ 66.598252][ T5493] dummy0: entered promiscuous mode [ 66.620925][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'. [ 66.632966][ T28] audit: type=1326 audit(1771373785.252:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa890ec629 code=0x7ffc0000 [ 66.683892][ T5505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.674'. [ 66.688387][ T5502] bond3: Removing last ns target with arp_interval on [ 66.695900][ T5505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.674'. [ 66.709412][ T28] audit: type=1326 audit(1771373785.252:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa890ec629 code=0x7ffc0000 [ 66.738283][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 66.756163][ T28] audit: type=1326 audit(1771373785.252:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa890ec629 code=0x7ffc0000 [ 66.779883][ T28] audit: type=1326 audit(1771373785.252:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa890ec629 code=0x7ffc0000 [ 66.803472][ T28] audit: type=1326 audit(1771373785.252:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa890ec629 code=0x7ffc0000 [ 66.826842][ T28] audit: type=1326 audit(1771373785.252:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa890ec629 code=0x7ffc0000 [ 66.864958][ T28] audit: type=1326 audit(1771373785.252:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa890ec629 code=0x7ffc0000 [ 66.889906][ T5514] loop4: detected capacity change from 0 to 164 [ 66.938285][ T28] audit: type=1326 audit(1771373785.252:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa890ec629 code=0x7ffc0000 [ 67.024424][ T5522] loop1: detected capacity change from 0 to 2048 [ 67.058801][ T5522] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 67.077143][ T5530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 67.120933][ T5530] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 67.202954][ T5541] loop2: detected capacity change from 0 to 512 [ 67.238132][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 67.247175][ T5514] netlink: 36 bytes leftover after parsing attributes in process `syz.4.677'. [ 67.259302][ T5514] vlan2: entered allmulticast mode [ 67.264472][ T5514] vlan0: entered allmulticast mode [ 67.271949][ T5514] veth0_vlan: entered allmulticast mode [ 67.436452][ T5551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'. [ 67.648078][ T5574] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 67.675283][ T5567] loop2: detected capacity change from 0 to 256 [ 67.714355][ T5574] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 67.749752][ T5574] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 67.819681][ T5584] bond9: entered promiscuous mode [ 67.826405][ T5567] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 67.852555][ T5584] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.885320][ T5567] FAT-fs (loop2): Filesystem has been set read-only [ 67.895068][ T5584] bond9: left promiscuous mode [ 67.914479][ T5567] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 67.935009][ T5567] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 67.954265][ T5567] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 67.965977][ T5567] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 67.977154][ T5567] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 67.988048][ T5567] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 67.998653][ T5567] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 68.027988][ T5567] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 68.050472][ T5567] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 68.119971][ T5601] loop1: detected capacity change from 0 to 1024 [ 68.152568][ T5601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.210481][ T5601] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4224: comm syz.1.706: Allocating blocks 385-513 which overlap fs metadata [ 68.334353][ T4302] EXT4-fs (loop1): pa ffff888107e6d3f0: logic 16, phys. 129, len 24 [ 68.342484][ T4302] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5467: group 0, free 0, pa_free 8 [ 68.399098][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.636558][ T5617] bond6: Removing last ns target with arp_interval on [ 69.411856][ T5683] FAT-fs (loop9): unable to read boot sector [ 69.599584][ T5695] vlan3: entered promiscuous mode [ 69.642680][ T5701] loop1: detected capacity change from 0 to 512 [ 69.643439][ T5701] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.645918][ T5701] EXT4-fs (loop1): 1 truncate cleaned up [ 69.674087][ T5701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.861612][ T5723] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 69.935615][ T5727] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 69.946852][ T5727] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 69.991837][ T5723] bond4: entered promiscuous mode [ 69.997123][ T5723] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 70.006347][ T5723] bond4: left promiscuous mode [ 70.609299][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.958855][ T5750] netem: change failed [ 71.104764][ T5766] __nla_validate_parse: 19 callbacks suppressed [ 71.104781][ T5766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'. [ 71.155530][ T5764] set_capacity_and_notify: 1 callbacks suppressed [ 71.155663][ T5764] loop1: detected capacity change from 0 to 128 [ 71.201143][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.208392][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.219740][ T5771] netlink: 44 bytes leftover after parsing attributes in process `syz.0.764'. [ 71.237228][ T5770] bridge0: entered allmulticast mode [ 71.388268][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 71.540789][ T5790] loop0: detected capacity change from 0 to 256 [ 71.726045][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 71.726069][ T28] audit: type=1400 audit(1771373790.432:1032): avc: denied { write } for pid=5763 comm="syz.1.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.034155][ T30] kworker/u8:1: attempt to access beyond end of device [ 72.034155][ T30] loop1: rw=1, sector=145, nr_sectors = 792 limit=128 [ 72.074863][ T5803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63484 sclass=netlink_route_socket pid=5803 comm=syz.1.773 [ 72.140082][ T5810] loop0: detected capacity change from 0 to 512 [ 72.158884][ T5810] EXT4-fs: Ignoring removed i_version option [ 72.168689][ T5810] EXT4-fs: Ignoring removed bh option [ 72.295600][ T5810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.338522][ T5810] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.365858][ T5830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.781'. [ 72.439243][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.475927][ T5837] loop2: detected capacity change from 0 to 512 [ 72.503738][ T5839] loop0: detected capacity change from 0 to 512 [ 72.526226][ T5837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 72.556478][ T5837] ext4 filesystem being mounted at /172/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.579630][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 72.595181][ T5839] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.783: corrupted inode contents [ 72.608546][ T5839] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.609087][ T5839] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 72.617631][ T5837] 9p: Bad value for 'rfdno' [ 72.618525][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 72.637979][ C0] EXT4-fs (loop0): initial error at time 1771373791: ext4_do_update_inode:5569: inode 15 [ 72.640404][ T28] audit: type=1400 audit(1771373791.322:1033): avc: denied { mounton } for pid=5836 comm="syz.2.785" path="/172/file2/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.647849][ C0] EXT4-fs (loop0): last error at time 1771373791: ext4_do_update_inode:5569: inode 15 [ 72.710602][ T5839] loop0: lost filesystem error report for type 5 error -117 [ 72.710844][ T5839] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.783: corrupted inode contents [ 72.731575][ T5839] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.732144][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 72.750683][ T5839] EXT4-fs error (device loop0): ext4_evict_inode:303: inode #15: comm syz.0.783: mark_inode_dirty error [ 72.762874][ T5839] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.763090][ T5839] EXT4-fs (loop0): 1 orphan inode deleted [ 72.784140][ T5839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.808399][ T28] audit: type=1400 audit(1771373791.512:1034): avc: denied { write } for pid=5838 comm="syz.0.783" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.812896][ T5856] loop4: detected capacity change from 0 to 512 [ 72.848764][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.858488][ T28] audit: type=1400 audit(1771373791.572:1035): avc: denied { write } for pid=5857 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.911555][ T28] audit: type=1400 audit(1771373791.572:1036): avc: denied { read } for pid=5857 comm="syz.2.790" name="file0" dev="tmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.958325][ T28] audit: type=1400 audit(1771373791.572:1037): avc: denied { open } for pid=5857 comm="syz.2.790" path="/173/file0" dev="tmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.007621][ T5856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.028396][ T5856] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.047955][ T28] audit: type=1400 audit(1771373791.752:1038): avc: denied { create } for pid=5855 comm="syz.4.792" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 73.091765][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 73.111271][ T5856] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz.4.792: invalid size [ 73.121769][ T28] audit: type=1400 audit(1771373791.822:1039): avc: denied { remove_name } for pid=5855 comm="syz.4.792" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.229402][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.287056][ T28] audit: type=1400 audit(1771373791.822:1040): avc: denied { rename } for pid=5855 comm="syz.4.792" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 73.378360][ T28] audit: type=1400 audit(1771373791.822:1041): avc: denied { rmdir } for pid=5855 comm="syz.4.792" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.530973][ T5878] vlan1: entered promiscuous mode [ 73.569083][ T5882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.798'. [ 73.589015][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.799'. [ 73.598025][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.799'. [ 73.629682][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.799'. [ 73.686222][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.799'. [ 73.766879][ T5892] loop0: detected capacity change from 0 to 512 [ 73.802940][ T5892] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.893140][ T5904] loop4: detected capacity change from 0 to 512 [ 73.906176][ T5902] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 73.920969][ T5902] bond3 (unregistering): Released all slaves [ 73.947622][ T5904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.968524][ T5904] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.989509][ T5905] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 74.027858][ T5905] bond3 (unregistering): Released all slaves [ 74.177530][ T5920] loop1: detected capacity change from 0 to 512 [ 74.199878][ T5920] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 74.212488][ T5920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 74.221454][ T5920] System zones: 1-12 [ 74.225704][ T5920] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.243074][ T5920] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.809: bg 0: block 361: padding at end of block bitmap is not set [ 74.273976][ T5920] loop1: lost filesystem error report for type 5 error -117 [ 74.277549][ T5920] EXT4-fs (loop1): Remounting filesystem read-only [ 74.284915][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 74.284947][ C1] EXT4-fs (loop1): initial error at time 1771373792: ext4_validate_block_bitmap:441 [ 74.284974][ C1] EXT4-fs (loop1): last error at time 1771373792: ext4_validate_block_bitmap:441 [ 74.339605][ T5927] mmap: syz.4.806 (5927) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.391806][ T5920] EXT4-fs (loop1): 1 truncate cleaned up [ 74.400401][ T5920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 74.448704][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 74.533870][ T5944] loop1: detected capacity change from 0 to 164 [ 74.684324][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.752786][ T5959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.752854][ T5959] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.756761][ T5959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.127444][ T6001] Set syz1 is full, maxelem 65536 reached [ 75.218285][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 75.296801][ T6021] syzkaller0: entered promiscuous mode [ 75.308380][ T6021] syzkaller0: entered allmulticast mode [ 75.334114][ T6025] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.350183][ T6025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.366498][ T6025] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.392708][ T6025] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.844: lblock 0 mapped to illegal pblock 0 (length 1) [ 75.418653][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.461868][ T6033] EXT4-fs: Ignoring removed i_version option [ 75.488242][ T6033] EXT4-fs: Ignoring removed bh option [ 75.510655][ T6037] EXT4-fs: Ignoring removed orlov option [ 75.522920][ T6037] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 75.534487][ T6033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.552069][ T6033] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.564757][ T6037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.598642][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.765384][ T6051] SELinux: policydb version -178360742 does not match my version range 15-35 [ 75.789101][ T6051] SELinux: failed to load policy [ 75.819887][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.982096][ T6070] capability: warning: `syz.0.859' uses deprecated v2 capabilities in a way that may be insecure [ 76.017338][ T6071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.125886][ T6064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.164131][ T6081] set_capacity_and_notify: 5 callbacks suppressed [ 76.164231][ T6081] loop0: detected capacity change from 0 to 164 [ 76.173308][ T6064] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 76.199864][ T6081] __nla_validate_parse: 29 callbacks suppressed [ 76.199890][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.862'. [ 76.232047][ T6064] bond3: (slave xfrm1): Error -95 calling set_mac_address [ 76.948970][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.868'. [ 77.181286][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'. [ 77.202731][ T6119] loop0: detected capacity change from 0 to 1024 [ 77.224878][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 77.224898][ T28] audit: type=1400 audit(1771373795.932:1074): avc: denied { create } for pid=6122 comm="syz.4.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.254925][ T6124] netlink: 'syz.4.876': attribute type 1 has an invalid length. [ 77.258660][ T6119] EXT4-fs: Ignoring removed orlov option [ 77.263028][ T6124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.876'. [ 77.278568][ T6124] netlink: 'syz.4.876': attribute type 1 has an invalid length. [ 77.286827][ T6124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.876'. [ 77.318305][ T6119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.364145][ T6130] netlink: 'syz.2.878': attribute type 1 has an invalid length. [ 77.461245][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 77.471448][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 77.501125][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.512609][ T6137] loop4: detected capacity change from 0 to 4096 [ 77.517856][ T6130] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 77.539462][ T6130] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 77.563300][ T6142] loop4: detected capacity change from 0 to 1024 [ 77.582080][ T6142] EXT4-fs: Ignoring removed orlov option [ 77.631755][ T6145] loop0: detected capacity change from 0 to 1024 [ 77.642318][ T6142] EXT4-fs: error -4 creating inode table initialization thread [ 77.655024][ T6145] /dev/loop0: Can't open blockdev [ 77.670492][ T6142] EXT4-fs (loop4): mount failed [ 77.672254][ T6139] bond7: entered promiscuous mode [ 77.718865][ T6139] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.736951][ T6139] bond7: left promiscuous mode [ 77.769702][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 77.817674][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 77.826921][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 77.940896][ T6160] loop4: detected capacity change from 0 to 764 [ 77.954775][ T6160] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 77.994994][ T6160] Symlink component flag not implemented [ 78.002466][ T6160] Symlink component flag not implemented (7) [ 78.638141][ T6226] syz_tun: entered promiscuous mode [ 78.645740][ T6227] loop4: detected capacity change from 0 to 256 [ 78.661344][ T6226] syz_tun: left promiscuous mode [ 78.677312][ T6227] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.694877][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.753222][ T28] audit: type=1400 audit(1771373797.442:1075): avc: denied { write } for pid=6229 comm="syz.0.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.805144][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.878474][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.915760][ T6205] chnl_net:caif_netlink_parms(): no params data found [ 78.978916][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.981075][ T6260] loop1: detected capacity change from 0 to 4096 [ 78.986614][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.024065][ T6205] bridge_slave_0: entered allmulticast mode [ 79.034582][ T6205] bridge_slave_0: entered promiscuous mode [ 79.071221][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.087631][ T6270] loop4: detected capacity change from 0 to 128 [ 79.100868][ T6273] loop1: detected capacity change from 0 to 256 [ 79.129820][ T28] audit: type=1400 audit(1771373797.842:1076): avc: denied { ioctl } for pid=6276 comm="syz.0.924" path="socket:[13697]" dev="sockfs" ino=13697 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.159035][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.175281][ T6273] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 79.196942][ T6283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.202726][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.207709][ T28] audit: type=1400 audit(1771373797.902:1077): avc: denied { append } for pid=6280 comm="syz.0.926" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.223911][ T6205] bridge_slave_1: entered allmulticast mode [ 79.248806][ T6205] bridge_slave_1: entered promiscuous mode [ 79.255090][ T6283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.264227][ T28] audit: type=1400 audit(1771373797.902:1078): avc: denied { write } for pid=6280 comm="syz.0.926" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.316260][ T28] audit: type=1400 audit(1771373797.902:1079): avc: denied { ioctl } for pid=6280 comm="syz.0.926" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.356384][ T6205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.372246][ T6292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.386549][ T6292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.387738][ T6205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.418857][ T28] audit: type=1326 audit(1771373798.082:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629c7c629 code=0x7ffc0000 [ 79.467718][ T28] audit: type=1326 audit(1771373798.082:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fb629c7c629 code=0x7ffc0000 [ 79.491733][ T6297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.515215][ T6205] team0: Port device team_slave_0 added [ 79.524528][ T12] bridge_slave_1: left allmulticast mode [ 79.530550][ T12] bridge_slave_1: left promiscuous mode [ 79.543045][ T6297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.552060][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.560315][ T12] bridge_slave_0: left allmulticast mode [ 79.574586][ T6292] EXT4-fs: Ignoring removed orlov option [ 79.578238][ T28] audit: type=1326 audit(1771373798.082:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629c7c629 code=0x7ffc0000 [ 79.580638][ T12] bridge_slave_0: left promiscuous mode [ 79.623648][ T6292] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 79.642927][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.651012][ T6292] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 79.659412][ T6292] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 79.668236][ T28] audit: type=1326 audit(1771373798.082:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.1.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb629c7c629 code=0x7ffc0000 [ 79.696093][ T6292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.708578][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 79.941406][ T6319] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 80.019279][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.033705][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.047107][ T12] bond0 (unregistering): Released all slaves [ 80.066154][ T6205] team0: Port device team_slave_1 added [ 80.222617][ T12] hsr_slave_0: left promiscuous mode [ 80.259231][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.272207][ T12] hsr_slave_1: left promiscuous mode [ 80.332042][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.338266][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 80.376021][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.438625][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.472710][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.544751][ T12] veth1_macvtap: left promiscuous mode [ 80.585148][ T12] veth0_macvtap: left promiscuous mode [ 80.622515][ T6334] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.639520][ T12] veth1_vlan: left promiscuous mode [ 80.649969][ T6334] EXT4-fs (loop2): group descriptors corrupted! [ 80.676788][ T12] veth0_vlan: left promiscuous mode [ 80.892241][ T12] team0 (unregistering): Port device team_slave_1 removed [ 80.918881][ T12] team0 (unregistering): Port device team_slave_0 removed [ 80.953001][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.960296][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.986844][ T6205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.998962][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.005996][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.032694][ T6205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.110554][ T6350] pim6reg1: entered promiscuous mode [ 81.116592][ T6350] pim6reg1: entered allmulticast mode [ 81.134004][ T6205] hsr_slave_0: entered promiscuous mode [ 81.140731][ T6205] hsr_slave_1: entered promiscuous mode [ 81.147656][ T6205] debugfs: 'hsr0' already exists in 'hsr' [ 81.153625][ T6205] Cannot create hsr debugfs directory [ 81.286928][ T6395] netlink: 'syz.4.959': attribute type 1 has an invalid length. [ 81.353337][ T6395] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 81.383459][ T6395] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 81.400293][ T6407] __nla_validate_parse: 30 callbacks suppressed [ 81.400365][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 81.418519][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 81.475484][ T6205] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 81.496867][ T6407] bond10: entered promiscuous mode [ 81.502464][ T6407] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 81.511992][ T6407] bond10: left promiscuous mode [ 81.588705][ T6205] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 81.597823][ T6205] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 81.630316][ T6205] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 81.723193][ T6432] set_capacity_and_notify: 4 callbacks suppressed [ 81.723211][ T6432] loop0: detected capacity change from 0 to 512 [ 81.737737][ T6432] EXT4-fs: Ignoring removed i_version option [ 81.744302][ T6432] EXT4-fs: Ignoring removed bh option [ 81.792455][ T6432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.820233][ T6432] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.927729][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.999315][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.046360][ T6205] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.074365][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.081476][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.157434][ T6205] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.177665][ T6205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.193336][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.200435][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.377595][ T6460] Set syz1 is full, maxelem 65536 reached [ 82.400384][ T6467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.972'. [ 82.442762][ T6205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.467306][ T6467] ipvlan2: entered promiscuous mode [ 82.622072][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 82.699058][ T6499] tipc: Started in network mode [ 82.718447][ T6499] tipc: Node identity , cluster identity 4711 [ 82.724615][ T6499] tipc: Failed to set node id, please configure manually [ 82.748874][ T6499] tipc: Enabling of bearer rejected, failed to enable media [ 82.764927][ T6498] tipc: Started in network mode [ 82.792998][ T6498] tipc: Node identity , cluster identity 4711 [ 82.799189][ T6498] tipc: Failed to set node id, please configure manually [ 82.806228][ T6498] tipc: Enabling of bearer rejected, failed to enable media [ 82.863669][ T6205] veth0_vlan: entered promiscuous mode [ 82.895198][ T6205] veth1_vlan: entered promiscuous mode [ 82.945817][ T6205] veth0_macvtap: entered promiscuous mode [ 82.952362][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 82.952380][ T28] audit: type=1326 audit(1771373801.652:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bec43c629 code=0x7ffc0000 [ 82.984984][ T6205] veth1_macvtap: entered promiscuous mode [ 82.993223][ T28] audit: type=1326 audit(1771373801.652:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f5bec43c629 code=0x7ffc0000 [ 83.036402][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.063503][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.078479][ T28] audit: type=1326 audit(1771373801.652:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bec43c629 code=0x7ffc0000 [ 83.125081][ T262] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.134431][ T262] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.155865][ T28] audit: type=1326 audit(1771373801.652:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bec43c629 code=0x7ffc0000 [ 83.181922][ T28] audit: type=1326 audit(1771373801.652:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bec43c629 code=0x7ffc0000 [ 83.233693][ T28] audit: type=1326 audit(1771373801.652:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bec43c629 code=0x7ffc0000 [ 83.259577][ T262] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.270477][ T28] audit: type=1326 audit(1771373801.652:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bec43c629 code=0x7ffc0000 [ 83.298995][ T28] audit: type=1326 audit(1771373801.652:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f5bec43c629 code=0x7ffc0000 [ 83.322275][ T262] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.333157][ T28] audit: type=1326 audit(1771373801.652:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bec43c629 code=0x7ffc0000 [ 83.363795][ T6556] loop0: detected capacity change from 0 to 512 [ 83.372218][ T6556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.398269][ T28] audit: type=1326 audit(1771373801.652:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bec43c629 code=0x7ffc0000 [ 83.429478][ T6556] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.436613][ T6556] EXT4-fs error (device loop0): ext4_quota_enable:7190: comm syz.0.987: Bad quota inum: 2, type: 2 [ 83.448274][ T6556] loop0: lost filesystem error report for type 5 error -117 [ 83.448732][ T6556] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 83.470788][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 83.470807][ C1] EXT4-fs (loop0): last error at time 1771373802: ext4_quota_enable:7190 [ 83.548940][ T6556] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 83.567878][ T6559] loop1: detected capacity change from 0 to 128 [ 83.576194][ T6556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.646788][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.744178][ T6576] xt_connbytes: Forcing CT accounting to be enabled [ 83.861726][ T70] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.141602][ T6575] ================================================================== [ 84.149738][ T6575] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 84.157909][ T6575] [ 84.160258][ T6575] write to 0xffff8881050c0828 of 8 bytes by task 6573 on cpu 0: [ 84.167908][ T6575] filemap_splice_read+0x523/0x780 [ 84.173047][ T6575] splice_direct_to_actor+0x26e/0x670 [ 84.178700][ T6575] do_splice_direct+0x119/0x1a0 [ 84.183748][ T6575] do_sendfile+0x382/0x650 [ 84.188165][ T6575] __x64_sys_sendfile64+0x105/0x150 [ 84.193370][ T6575] x64_sys_call+0x2dc4/0x3020 [ 84.198055][ T6575] do_syscall_64+0x12c/0x370 [ 84.202649][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.208544][ T6575] [ 84.210882][ T6575] write to 0xffff8881050c0828 of 8 bytes by task 6575 on cpu 1: [ 84.218514][ T6575] filemap_splice_read+0x523/0x780 [ 84.223646][ T6575] splice_direct_to_actor+0x26e/0x670 [ 84.229071][ T6575] do_splice_direct+0x119/0x1a0 [ 84.233936][ T6575] do_sendfile+0x382/0x650 [ 84.238353][ T6575] __x64_sys_sendfile64+0x105/0x150 [ 84.243562][ T6575] x64_sys_call+0x2dc4/0x3020 [ 84.248250][ T6575] do_syscall_64+0x12c/0x370 [ 84.252850][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.258841][ T6575] [ 84.261188][ T6575] value changed: 0x0000000002a39000 -> 0x0000000002cf2000 [ 84.268294][ T6575] [ 84.270614][ T6575] Reported by Kernel Concurrency Sanitizer on: [ 84.276766][ T6575] CPU: 1 UID: 0 PID: 6575 Comm: syz.5.994 Tainted: G W syzkaller #0 PREEMPT(full) [ 84.287588][ T6575] Tainted: [W]=WARN [ 84.291396][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.301451][ T6575] ================================================================== [ 85.938331][ T4231] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.938932][ T3719] Bluetooth: hci0: command 0x1003 tx timeout [ 88.668307][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 91.218278][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!