last executing test programs: 1.729833519s ago: executing program 1 (id=2402): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='ext4_get_implied_cluster_alloc_exit\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fd, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr") 1.729347709s ago: executing program 2 (id=2404): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.577798781s ago: executing program 2 (id=2407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x50, r1, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}}, 0x0) 1.565681462s ago: executing program 2 (id=2409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r1, 0x7f5f, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.417667044s ago: executing program 3 (id=2411): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xd}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010010850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) prlimit64(r2, 0xd, &(0x7f0000000140)={0x9, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) 1.414834055s ago: executing program 0 (id=2421): prctl$PR_SET_MM_AUXV(0x3d, 0xc, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b8100f8b2c0c9afce61638124223e8d00850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket(0xa, 0x6, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f0000000340)={&(0x7f00000000c0)="10", 0x6fffff9}}, 0xfeffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000380)={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x15}]}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0x9, 0x2) openat(r7, &(0x7f0000000080)='./file0\x00', 0x18b501, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) unshare(0x4000400) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1\x00'}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003bc0)={'sit0\x00', &(0x7f0000003ac0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x10, 0x29, 0x0, @remote, @loopback}}}}) socket(0x23, 0x1, 0x0) 1.194322672s ago: executing program 1 (id=2412): getresgid(&(0x7f0000000140), &(0x7f0000000580)=0x0, &(0x7f0000000180)) syz_mount_image$msdos(&(0x7f00000004c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000001900)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRES64=r0, @ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRESOCT=r0], 0x1, 0x1fe, &(0x7f0000000240)="$eJzs28FqE10UB/Azbdpv8nVhF65EccCNq6A+gUEqiAEhkoWuDFQ3rQjpJgpin8e1D+HLuOlCsotMZmibaQuNYzISfz8Y7iH/GTizSM5d3Ly5/f5g/8PRu63PJ5EmWWxEPI5JxG5elZJyTWf1dsxJoo6ftZ4GAH5Lvz/sNt0DyzUadYc3I2LnQjL42khDAAAAAAAAAAAA1LbI+f+NiC/V8//HK+4XAKjP+f/11S7X0ag7vFPs3yqc/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACaM5lOb0zzKy3X8vovItKIaEfE/xHRioj886b7BQDqm0zn5/5V8z8ikogw/wFgDbx89fp5t9fb62dZGvHjeDwYD4q1yJ8+6+09yGZ2z546GY8Hm6f5wyLP5vOt2b4hzx9dmm/H/XtFnmdPXvQq+U7sL//1AeCf1MlOnZvvm+UV0elclufzuajO7Q8q87sVt1orew0AYAFHHz8dDA8P347+eJEs9lS7bOjqe761ltWq4lrF9+SvaENRt0ivc3PDP0zA0p196atJ2kxDAAAAAAAAAAAAAADABav4y1FE3G36PQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWC+/AgAA//8VPFFq") 1.140613307s ago: executing program 1 (id=2413): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2a4e5de3182b2081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x32f, &(0x7f00000008c0)="$eJzs3c9LI2cYwPEnP4xJxEwOpaWF4kt7aXsYNO25EIpCaaCiplQLhVEnbcg0kUywpJRqT72W/ge99CAevQnd/Qe87G33spe9eVnYw8oiO0vmhyYxie6YbHT9fkDmnTzvM3lfEsPzhpnJ8fd//1Ip2XrJaEg0qSQiInIikpWoBCL+Nuq2E9JuVz6devbww+XVtW/yhcL8klIL+ZXPc0qpzMz/v/6e8rsdTspR9sfjp7knR+8evX/8cuXnsq3KtqrWGspQ67XHDWPdMtVm2a7oSi1apmGbqly1zboXr3nxklXb2moqo7o5nd6qm7atjGpTVcymatRUo95Uxk9Guap0XVfTaekl0fPRu6q4t7Rk5EMmbwx5MAjrheM4A8JOJG/ERCR1IVLcG+m4AADAjdRV/8fckj5U/S8Zt/5vdT6v//c/ut+Y+u4g49f/h4le9f8Xj7xjddT/SREZav2f7DH7ixXRrbfzOp2vVf/jZpi5uKaNdOxF63kj7f//uv78YX/WbVD/AwAAAAAAAAAAAAAAAAAAAABwG5w4juY4jhZs/b/Pznt4j41zjBidPq+/NulfMRXsj3ucGI3l1TVJuhfuxTMi1l/bxe2it/XjQcdZ0eTUfT/4Wu3gyiPVkpV71o6fv7NdjLmRfEnKYokpc6JJtjvfcRa+LszPKY+ff3ahXro9PyeavNM7P9eZ7z9/Qj75uC1fF00ebEhNLNlsva9PnbP8P+aU+urbQld+yu0HAAAAAMDbQFeqtQzuu37XdRXoinv5Z+vrzu8HRNrW57M91+dx7YP4eOcOAAAAAMBdYTd/qxiWZdYHNFJyeZ/wjXi49IlBfWJtM+wIyW7fKSf8OwSPbqYDGsGJFJVEWygp//pn4YQ5cjD/0Yw5KmGyZsSZ9EZ1nWcPvjbq10cWR/16xfuE3vvnv+fhjhzx79rbHvryIHnJTEfWmLjSh4cTG8InEAAAAIA3JSj6U7a7G7liWq8f0wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACENuA1YfFi3Exv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICb4lUAAAD//1nfAQ0=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c000780080012400500000005"], 0x58}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) capset(0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x4000000}}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000080)=0x800002, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780040"], 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, 0x0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) perf_event_open(0x0, 0x0, 0x5, r4, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x1512, 0x0, 0x0, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) mount$tmpfs(0x0, 0x0, 0x0, 0x181000, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x7dba4221469a49d3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000075000/0x4000)=nil, 0x4000, 0x17) 992.331159ms ago: executing program 1 (id=2414): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x400000, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098ee0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4e5531c9f4c7a4d53914e100"/167], 0x1, 0x149, &(0x7f0000000680)="$eJzs27Fq20AYB/DPreu67eK5dBB06WTaPkFLcaFU0NLiIZkScLLYwRAvSiY/Sl4wEDx5u+AosY2Jhwy2IPr9Fn3cn4O7Qfo4wR19OBsOxpPT8d9ZtBuNaH6LLOaN6MSLeBmlaQAAz8k8pbhJKaXX03hzFSmlqlcEAOya/g8A9aP/A0D96P8AUD//Dw5/f8/z3r8sa0dcT4t+0S+fZf7zV977nN3pPMxprc1f5F/KPFuNzoqi/yre3udfH81b8eljmS+yH3/yjfxdDHa7dQAAAKiNbrbUWY0uzt/l7b9ud1teVmv/BzbO781439zbNgCAJ5hcXA6PR6OTc4VCoVgWVX+ZgF1bvfRVrwQAAAAAAAAAAAAAANhmH9eJqt4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbLoNAAD//76CT/U=") open(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0) open(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0) 892.220327ms ago: executing program 1 (id=2416): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) 890.536777ms ago: executing program 4 (id=2417): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x8000000, 0x268, 0x100, 0x720d, 0x148, 0x100, 0x148, 0x1d0, 0x240, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x5, 0x2], 0x1}}]}, @common=@SET={0x60}}, {{@ip={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'ip6tnl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x32, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/net\x00') socket$kcm(0x29, 0xf, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$binfmt_script(r4, 0x0, 0xfffffe5d) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r5, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r7 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r8, @ANYBLOB="008104000000000008000a00", @ANYRES32=r6], 0x28}}, 0x0) set_mempolicy(0x0, &(0x7f0000000000)=0x7e, 0x0) 826.996792ms ago: executing program 2 (id=2418): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) 826.746342ms ago: executing program 2 (id=2419): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2ffffa103000008000000b7040000000000008500000001000000950000000000000000000000005e779bc651e6301552816c29f3a8445bec2701216553b6a3f2830cff42101a3a7d8b3f5a0f41ffe9c8bb726f6c63619840775216e6c279f67306d57ecbc6c165165c00"/143], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001c80)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f00000007c0), 0x0}, 0x20) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='irq_handler_exit\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x8, {0x2, 0x1000, @remote}, 'veth0\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f0000000040), 0x0, 0xfff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)='`', &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001c00)="189908a3edb686b96f910dcdf85d7e639968e7fc8e4dbd5c31c1ba0f10c4f0c96c06000000a82585d310a7f72e44021368fa56b78ca575e56496380c775fe0581296c875379b1ec5", 0x1, r3}, 0x38) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x6c02, 0x41}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) 826.360392ms ago: executing program 1 (id=2420): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb7"], 0x0}, 0x90) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x0) splice(r6, 0x0, r5, 0x0, 0x7f, 0xe) write(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r8 = memfd_create(&(0x7f0000000540)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0x0) r10 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x3000)=nil, 0x0, &(0x7f0000000240)=[{}], 0x1, 0x300}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev}, 0x10) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 664.960136ms ago: executing program 4 (id=2422): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x38}}, 0x40) 604.236681ms ago: executing program 4 (id=2423): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(0x0, r0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') 603.786251ms ago: executing program 2 (id=2424): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x2b, 0xe, [@chsw_timing={0x68, 0x4}, @ht={0x2d, 0x1a}, @measure_req={0x26, 0x3, {0x0, 0x3e}}]}]]}, 0x48}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f00000002c0)=0xa7e2, 0x4) sendmmsg$inet(r2, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f00000001c0)) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r7 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) ftruncate(r6, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r7, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000003000/0x2000)=nil) preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x0, 0x0) 540.148946ms ago: executing program 3 (id=2426): socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0007000000000000c20400000000072f"], 0x40) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 536.910656ms ago: executing program 0 (id=2427): socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000000)=@generic={0x1, 0xfffffffffffffffd}) 484.80341ms ago: executing program 3 (id=2428): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socket$pppoe(0x18, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev, 'veth1_to_batadv\x00'}}, 0x1e) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_setup(0x5bbd, &(0x7f00000002c0), 0x0, 0x0) syz_io_uring_setup(0x1485, &(0x7f0000000340), 0x0, 0x0) syz_io_uring_setup(0x1106, &(0x7f0000000740), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x7d09, &(0x7f0000000480), 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) 460.300922ms ago: executing program 4 (id=2429): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x74) rmdir(&(0x7f0000000440)='./cgroup/../file0\x00') 440.532534ms ago: executing program 0 (id=2430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val, @void, @eth={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x0, 0x0, 'B'}}}}}}}, 0x15) 332.168543ms ago: executing program 4 (id=2431): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) lseek(r0, 0x0, 0x3) 288.474597ms ago: executing program 0 (id=2432): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018100000", @ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33", 0x0, 0xb94, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55710c64e30cd8655910b3eb2d1451a6bf4b04dc0af703f4c87963ba8f24815f140290fb3f659193ae297fdcd50b6dc8d41d9568a55e58cc6514e272e53a081168e74d7189f0e655f66e08f0e108968d80ea3cac636aa60bea16f5e27d5761f66d99ca89adacf4e13a2013988c4222d7cf1ff8682043d3d6f16b20de6f1ea6691dcee8e86fa2109aa7898fe15f2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=r1], 0x3}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0xb], 0x0, [], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=@newtaction={0xc54, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc40, 0x1, [@m_police={0xc3c, 0x19, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x8, 0x0, 0x100]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x983, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x4e4c, 0x81, 0x4, 0x9, 0x5, 0x3, 0x0, 0xfff, 0x8000, 0x4, 0x5, 0x1, 0x1, 0x3, 0x1000, 0x8618, 0x400, 0x4, 0x7f, 0xef21, 0x10, 0x8, 0x7, 0x0, 0x0, 0x4, 0x80000000, 0x0, 0x8, 0x3, 0x1, 0x0, 0x38, 0x1000, 0x8, 0x1000, 0x5, 0x9c33, 0x7, 0x4, 0x10001, 0x10, 0x5, 0x0, 0xc, 0xb, 0x492f, 0x8, 0xfffffff8, 0x3ff, 0x6, 0x5, 0x5, 0x1, 0x8, 0x8, 0x7, 0x6, 0x800, 0x3, 0x7, 0x0, 0xb, 0x0, 0x0, 0x7, 0x0, 0x8, 0xfb, 0x0, 0x7, 0x3b920415, 0x6, 0x9, 0x0, 0x1, 0xda, 0xae, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0xb, 0x0, 0xffffa8d4, 0x2, 0x9, 0x4, 0x8, 0x2feb7, 0x1000, 0x0, 0x8000, 0x7fff, 0x47, 0x0, 0x8, 0x0, 0x5, 0x1, 0x0, 0x5, 0x10, 0x4, 0x2, 0x0, 0x2, 0xfffffff1, 0x0, 0x8, 0x8, 0xfffffff9, 0x6, 0x0, 0x3, 0x10001, 0x1c9, 0x8001, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x9, 0xe, 0x0, 0x7, 0x0, 0x0, 0x0, 0xef, 0x7, 0x0, 0x5, 0x8, 0xe90, 0x7fff, 0x0, 0x0, 0x4, 0x9, 0x2, 0x0, 0x0, 0x0, 0x6, 0xb92b, 0x0, 0xffffff9e, 0x8315, 0x8, 0x9, 0x1, 0x400, 0x3, 0x0, 0x0, 0xa, 0x9, 0x9, 0x1, 0x4, 0x2, 0x7, 0x4, 0x0, 0x0, 0x707, 0x9, 0x0, 0x326, 0xff, 0x80000001, 0x8e5, 0x0, 0x0, 0x6, 0x7fffffff, 0x4, 0x0, 0xf, 0x6, 0x0, 0x5b404f16, 0x9, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8, 0x5, 0x8, 0x78053458, 0x0, 0x755, 0x1000, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x5, 0x5578, 0x7, 0x81, 0x0, 0xfffffffc, 0x0, 0xfffffff4, 0x80000001, 0x4, 0x400, 0x124, 0x6, 0x7cfd239b, 0x4, 0x4, 0x0, 0x3, 0x7, 0x6, 0x1, 0x5, 0xfffffc01, 0xc, 0x5, 0x7d1, 0x28, 0x9, 0xdc, 0x5647, 0x7, 0x7, 0x80000001, 0x2, 0x2, 0x0, 0x3, 0x0, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0xc54}}, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0xc13d, 0x10}, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [], 0xfc, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}}}]}, 0x88}}, 0x0) 279.261708ms ago: executing program 3 (id=2433): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="10", 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000300), 0x19ffe) 208.326053ms ago: executing program 0 (id=2434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=','], 0x2c}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x301) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue1\x00'}) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x685) close_range(r0, 0xffffffffffffffff, 0x0) 150.045808ms ago: executing program 0 (id=2435): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 91.351742ms ago: executing program 3 (id=2436): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = io_uring_setup(0x63d1, &(0x7f0000000240)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r0, 0x0, 0x0, 0x11, 0x0, 0x0) 340.4µs ago: executing program 4 (id=2437): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, r0, 0x0) 0s ago: executing program 3 (id=2438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000200)='mm_page_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) accept$inet6(r6, 0x0, &(0x7f00000000c0)) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000140)) close_range(r7, r6, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000380), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, r6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="000726bd7000fddbdf25210000000c009900001000004f000000b0008480540006800800050000010000080001000900000008000000ffffff7f080005003f0000000800050000010000080003000008000008000100ffffff7f0800020080000000080005007f00000008000000090000003c0006800800050000fcffff08000000fbffffff0800020001000000080005000000000008000100060d0000080001008000000008000300f9ffffff080002005c0400000b000100c5cd7b2ccb93b70008000200060000000800dc00ffffff7f0800dc00060000000400ff00"], 0xe4}, 0x1, 0x0, 0x0, 0x20040000}, 0x4001) openat(r6, &(0x7f00000005c0)='./file0\x00', 0x80, 0x40) r10 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0xb, 0x7, [@private, @rand_addr]}, @timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x30}, 0x0) ioctl$TIOCGSID(r6, 0x5429, 0x0) r11 = gettid() r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000006c0), 0x3400) kcmp(0x0, r11, 0x2, r8, r12) copy_file_range(r6, &(0x7f00000007c0)=0x1ff, r8, &(0x7f0000000800)=0x8001, 0x7fffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000380)="1f", 0x1, r2) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r13, &(0x7f0000000080)=""/237, 0xed, 0x5) kernel console output (not intermixed with test programs): ath="socket:[26993]" dev="sockfs" ino=26993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.373013][ T8725] chnl_net:caif_netlink_parms(): no params data found [ 140.415552][ T29] audit: type=1400 audit(1723134837.255:1923): avc: denied { mount } for pid=8797 comm="syz.1.1761" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 140.449392][ T8798] devtmpfs: Too few inodes for current use [ 140.498527][ T29] audit: type=1400 audit(1723134837.305:1924): avc: denied { remount } for pid=8797 comm="syz.1.1761" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 140.545870][ T8807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31262 sclass=netlink_route_socket pid=8807 comm=syz.1.1765 [ 140.662803][ T8635] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.698948][ T29] audit: type=1400 audit(1723134837.555:1925): avc: denied { read } for pid=8818 comm="syz.4.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.728998][ T8725] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.736298][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.744607][ T8725] bridge_slave_0: entered allmulticast mode [ 140.751479][ T8725] bridge_slave_0: entered promiscuous mode [ 140.758916][ T8725] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.766046][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.770045][ T8816] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 140.773307][ T8725] bridge_slave_1: entered allmulticast mode [ 140.780838][ T8816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1768'. [ 140.796721][ T8725] bridge_slave_1: entered promiscuous mode [ 140.816741][ T8635] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.851510][ T8725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.853053][ T8725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.894976][ T8635] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.920622][ T8725] team0: Port device team_slave_0 added [ 140.921801][ T8725] team0: Port device team_slave_1 added [ 140.935199][ T8635] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.942887][ T8725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.942903][ T8725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.942955][ T8725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.945002][ T8725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.945063][ T8725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.945151][ T8725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.017185][ T8725] hsr_slave_0: entered promiscuous mode [ 141.017955][ T8725] hsr_slave_1: entered promiscuous mode [ 141.018377][ T8725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.018391][ T8725] Cannot create hsr debugfs directory [ 141.018604][ T11] bridge_slave_1: left allmulticast mode [ 141.018619][ T11] bridge_slave_1: left promiscuous mode [ 141.018770][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.020061][ T11] bridge_slave_0: left allmulticast mode [ 141.020075][ T11] bridge_slave_0: left promiscuous mode [ 141.020164][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.182585][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.190471][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.209302][ T11] bond0 (unregistering): Released all slaves [ 141.280840][ T8635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 141.286837][ T8635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.323910][ T8635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.342544][ T29] audit: type=1400 audit(1723134838.185:1926): avc: denied { read } for pid=8852 comm="syz.4.1780" path="socket:[26233]" dev="sockfs" ino=26233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.381777][ T11] hsr_slave_0: left promiscuous mode [ 141.399386][ T11] hsr_slave_1: left promiscuous mode [ 141.425712][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.433186][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.456033][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.463523][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.488166][ T11] veth1_macvtap: left promiscuous mode [ 141.493704][ T11] veth0_macvtap: left promiscuous mode [ 141.499435][ T11] veth1_vlan: left promiscuous mode [ 141.504745][ T11] veth0_vlan: left promiscuous mode [ 141.700946][ T11] team0 (unregistering): Port device team_slave_1 removed [ 141.719905][ T11] team0 (unregistering): Port device team_slave_0 removed [ 141.769326][ T8635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.904479][ T8635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.954307][ T8871] syzkaller1: entered promiscuous mode [ 141.960252][ T8871] syzkaller1: entered allmulticast mode [ 141.983423][ T8635] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.017522][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.024773][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.039983][ T8874] netlink: 'syz.0.1788': attribute type 28 has an invalid length. [ 142.047909][ T8874] netlink: 'syz.0.1788': attribute type 4 has an invalid length. [ 142.049101][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.055816][ T8874] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1788'. [ 142.062925][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.104410][ T8876] cgroup: name respecified [ 142.156427][ T11] IPVS: stop unused estimator thread 0... [ 142.178614][ T8725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.208044][ T8725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.232537][ T8725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.260163][ T8635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.270609][ T8725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.344483][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1796'. [ 142.369433][ T8725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.392280][ T8725] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.421667][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.428787][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.474122][ T8635] veth0_vlan: entered promiscuous mode [ 142.484354][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.491499][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.514750][ T8725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.525304][ T8725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.542989][ T8635] veth1_vlan: entered promiscuous mode [ 142.567352][ T8635] veth0_macvtap: entered promiscuous mode [ 142.577851][ T8914] dccp_invalid_packet: P.Data Offset(0) too small [ 142.578736][ T8635] veth1_macvtap: entered promiscuous mode [ 142.609446][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.620152][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.630187][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.640751][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.650824][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.661303][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.671369][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.682446][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.694176][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.714664][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.725413][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.735590][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.746033][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.755871][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.766363][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.776219][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.786754][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.798540][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.807839][ T8635] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.816752][ T8635] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.825548][ T8635] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.834348][ T8635] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.869584][ T8725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.956118][ T8937] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.961290][ T8938] loop1: detected capacity change from 0 to 512 [ 142.986780][ T8938] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 142.987363][ T8725] veth0_vlan: entered promiscuous mode [ 143.013578][ T8725] veth1_vlan: entered promiscuous mode [ 143.014503][ T8938] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1804: invalid indirect mapped block 1 (level 1) [ 143.032034][ T8725] veth0_macvtap: entered promiscuous mode [ 143.042414][ T8725] veth1_macvtap: entered promiscuous mode [ 143.049124][ T8938] EXT4-fs (loop1): 1 truncate cleaned up [ 143.054630][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.058479][ T8938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.065411][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.087741][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.098194][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.108135][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.118567][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.128384][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.138857][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.148764][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.159404][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.171364][ T8725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.182091][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.192663][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.202852][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.213437][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.223382][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.234262][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.244250][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.254824][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.264777][ T8725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.275326][ T8725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.287203][ T8725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.300562][ T8725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.309604][ T8725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.318369][ T8725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.327184][ T8725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.398831][ T8367] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.449527][ T8960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1738'. [ 143.573036][ T3338] kernel read not supported for file /vcs (pid: 3338 comm: kworker/0:5) [ 143.591178][ T8984] loop0: detected capacity change from 0 to 128 [ 143.622444][ T8984] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.649515][ T8988] pim6reg: entered allmulticast mode [ 143.658160][ T8984] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.667481][ T8988] pim6reg: left allmulticast mode [ 143.691734][ T8990] loop3: detected capacity change from 0 to 512 [ 143.711496][ T8990] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.757119][ T8990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 143.765067][ T8990] System zones: 1-12 [ 143.773517][ T9000] netlink: 'syz.4.1831': attribute type 4 has an invalid length. [ 143.781341][ T9000] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1831'. [ 143.808526][ T9004] loop0: detected capacity change from 0 to 128 [ 143.815881][ T8990] EXT4-fs (loop3): 1 truncate cleaned up [ 143.821856][ T8990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.871850][ T9004] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 143.917912][ T9004] bio_check_eod: 28 callbacks suppressed [ 143.917926][ T9004] syz.0.1833: attempt to access beyond end of device [ 143.917926][ T9004] loop0: rw=2049, sector=137, nr_sectors = 6 limit=128 [ 143.963482][ T8635] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /7/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 143.985938][ T9004] syz.0.1833: attempt to access beyond end of device [ 143.985938][ T9004] loop0: rw=34817, sector=97, nr_sectors = 46 limit=128 [ 143.994336][ T8635] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 144.022869][ T8635] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /7/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 144.048696][ T8635] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 144.068695][ T28] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 144.080022][ T9020] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1839'. [ 144.092768][ T9020] loop1: detected capacity change from 0 to 128 [ 144.104663][ T8635] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /7/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 144.129423][ T8635] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 144.172128][ T8635] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /7/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 144.203430][ T8635] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 144.226676][ T8635] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /7/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 144.252284][ T9026] veth0_vlan: entered allmulticast mode [ 144.273173][ T8635] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 144.553611][ T9035] syz.1.1848[9035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.553746][ T9035] syz.1.1848[9035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.591891][ T9037] loop4: detected capacity change from 0 to 2048 [ 144.614347][ T9039] loop2: detected capacity change from 0 to 128 [ 144.644055][ T9043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1852'. [ 144.658346][ T9037] loop4: p1 < > p3 [ 144.662629][ T9037] loop4: p3 size 134217728 extends beyond EOD, truncated [ 144.665558][ T9039] loop2: detected capacity change from 128 to 0 [ 144.680148][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 144.680160][ T29] audit: type=1326 audit(1723134841.535:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.4.1849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1c9dd79f9 code=0x0 [ 144.729395][ T67] kworker/u8:5: attempt to access beyond end of device [ 144.729395][ T67] loop2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 144.752633][ T67] FAT-fs (loop2): bread failed in fat_clusters_flush [ 144.766130][ T9049] netlink: 'syz.1.1856': attribute type 4 has an invalid length. [ 144.766810][ T8725] syz-executor: attempt to access beyond end of device [ 144.766810][ T8725] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 144.813345][ T9049] netlink: 'syz.1.1856': attribute type 4 has an invalid length. [ 144.815559][ T8725] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 144.932163][ T9055] loop2: detected capacity change from 0 to 512 [ 144.966270][ T9055] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.979013][ T9055] EXT4-fs (loop2): 1 truncate cleaned up [ 144.985003][ T9055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.090525][ T29] audit: type=1400 audit(1723134841.915:1935): avc: denied { write } for pid=9052 comm="syz.1.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.110097][ T29] audit: type=1400 audit(1723134841.945:1936): avc: denied { setopt } for pid=9052 comm="syz.1.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.321076][ T8725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.469599][ T9069] loop4: detected capacity change from 0 to 128 [ 145.557043][ T9076] netlink: 'syz.2.1864': attribute type 3 has an invalid length. [ 145.593385][ T29] audit: type=1326 audit(1723134842.445:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb367ad79f9 code=0x7ffc0000 [ 145.620104][ T29] audit: type=1326 audit(1723134842.445:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb367ad79f9 code=0x7ffc0000 [ 145.644134][ T29] audit: type=1326 audit(1723134842.475:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb367ad79f9 code=0x7ffc0000 [ 145.668431][ T29] audit: type=1326 audit(1723134842.475:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb367ad79f9 code=0x7ffc0000 [ 145.691847][ T29] audit: type=1326 audit(1723134842.475:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb367ad79f9 code=0x7ffc0000 [ 145.716596][ T29] audit: type=1326 audit(1723134842.475:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fb367ad79f9 code=0x7ffc0000 [ 145.740398][ T29] audit: type=1326 audit(1723134842.475:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.0.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb367ad79f9 code=0x7ffc0000 [ 145.797454][ T9087] loop4: detected capacity change from 0 to 512 [ 145.814155][ T9087] EXT4-fs: Ignoring removed i_version option [ 145.820517][ T9087] ext4: Unknown parameter 'nouser_xattr' [ 145.914397][ T9094] IPv6: NLM_F_REPLACE set, but no existing node found! [ 145.923776][ T9092] loop1: detected capacity change from 0 to 1024 [ 145.948267][ T9092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.989640][ T9084] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1867'. [ 146.007416][ T9084] loop2: detected capacity change from 0 to 128 [ 146.015586][ T9092] loop1: detected capacity change from 1024 to 64 [ 146.023772][ T9092] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #11: lblock 0: comm syz.1.1871: error -12 reading directory block [ 146.055221][ T8367] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 146.085695][ T8367] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 146.100854][ T8367] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 146.125638][ T8367] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 146.139483][ T8367] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 146.153275][ T8367] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 146.159360][ T9112] loop2: detected capacity change from 0 to 512 [ 146.176922][ T8367] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 146.191217][ T9112] EXT4-fs: Ignoring removed i_version option [ 146.200804][ T8367] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 146.207385][ T9112] ext4: Unknown parameter 'nouser_xattr' [ 146.215925][ T8367] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 146.252951][ T9112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1877'. [ 146.365938][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 146.427667][ T8367] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.438658][ T9098] kmmpd-loop1: attempt to access beyond end of device [ 146.438658][ T9098] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 146.453061][ T9098] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 146.659070][ T9121] chnl_net:caif_netlink_parms(): no params data found [ 146.700472][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.707976][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.715600][ T9121] bridge_slave_0: entered allmulticast mode [ 146.723490][ T9121] bridge_slave_0: entered promiscuous mode [ 146.730690][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.737854][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.747489][ T9121] bridge_slave_1: entered allmulticast mode [ 146.754329][ T9121] bridge_slave_1: entered promiscuous mode [ 146.777460][ T9121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.789416][ T9121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.816113][ T9121] team0: Port device team_slave_0 added [ 146.823163][ T9121] team0: Port device team_slave_1 added [ 146.851680][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.858721][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.884885][ T9121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.899352][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.906480][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.932500][ T9121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.939362][ T9140] loop0: detected capacity change from 0 to 4096 [ 146.968172][ T9140] EXT4-fs: Ignoring removed nobh option [ 146.973772][ T9140] EXT4-fs: Ignoring removed i_version option [ 146.988012][ T9140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.007301][ T9121] hsr_slave_0: entered promiscuous mode [ 147.036823][ T9121] hsr_slave_1: entered promiscuous mode [ 147.043706][ T8413] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.057613][ T9121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.065189][ T9121] Cannot create hsr debugfs directory [ 147.122450][ T9153] loop4: detected capacity change from 0 to 2048 [ 147.186499][ T9121] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.253258][ T9121] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.280500][ T9156] loop4: detected capacity change from 0 to 8192 [ 147.291729][ T9156] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.349197][ T9121] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.422906][ T9121] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.501407][ T9121] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.510388][ T9121] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.529149][ T9121] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 147.537992][ T9121] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 147.619915][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.635338][ T9121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.649166][ T9121] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.670536][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.677758][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.688727][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.695917][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.715375][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.735183][ T9121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.745620][ T9121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.781220][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.833766][ T9121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.848807][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.996848][ T28] bridge_slave_1: left allmulticast mode [ 148.002538][ T28] bridge_slave_1: left promiscuous mode [ 148.008289][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.022473][ T28] bridge_slave_0: left allmulticast mode [ 148.028459][ T28] bridge_slave_0: left promiscuous mode [ 148.034223][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.199194][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.210562][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.222603][ T28] bond0 (unregistering): Released all slaves [ 148.256741][ T9184] netlink: 'syz.0.1896': attribute type 4 has an invalid length. [ 148.288025][ T9185] netlink: 'syz.0.1896': attribute type 4 has an invalid length. [ 148.312449][ T9186] netlink: 'syz.0.1896': attribute type 2 has an invalid length. [ 148.327269][ T9186] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 148.364832][ T9121] veth0_vlan: entered promiscuous mode [ 148.391352][ T28] hsr_slave_0: left promiscuous mode [ 148.445889][ T28] hsr_slave_1: left promiscuous mode [ 148.457541][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.465058][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.493057][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.500565][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.511625][ T8635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.537707][ T28] veth1_macvtap: left promiscuous mode [ 148.543276][ T28] veth0_macvtap: left promiscuous mode [ 148.548892][ T28] veth1_vlan: left promiscuous mode [ 148.554244][ T28] veth0_vlan: left promiscuous mode [ 148.698364][ T28] team0 (unregistering): Port device team_slave_1 removed [ 148.709648][ T28] team0 (unregistering): Port device team_slave_0 removed [ 148.750796][ T9199] loop0: detected capacity change from 0 to 1024 [ 148.777278][ T9121] veth1_vlan: entered promiscuous mode [ 148.789703][ T9158] chnl_net:caif_netlink_parms(): no params data found [ 148.806068][ T9199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.825212][ T9121] veth0_macvtap: entered promiscuous mode [ 148.867730][ T9121] veth1_macvtap: entered promiscuous mode [ 148.882075][ T8413] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.910031][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.920548][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.930408][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.940949][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.950811][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.961261][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.971160][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.981749][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.991743][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.002232][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.021314][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.034901][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.042034][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.051833][ T9158] bridge_slave_0: entered allmulticast mode [ 149.058758][ T9158] bridge_slave_0: entered promiscuous mode [ 149.068847][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.079355][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.089220][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.099660][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.109515][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.119958][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.129834][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.140273][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.150186][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.160776][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.206618][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.238872][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.246176][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.258841][ T9158] bridge_slave_1: entered allmulticast mode [ 149.276212][ T9158] bridge_slave_1: entered promiscuous mode [ 149.310359][ T9121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.319164][ T9121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.327990][ T9121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.336764][ T9121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.377854][ T9158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.396864][ T9158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.490960][ T9158] team0: Port device team_slave_0 added [ 149.507752][ T9158] team0: Port device team_slave_1 added [ 149.526486][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.533550][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.559595][ T9158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.620982][ T9227] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9227 comm=syz.0.1907 [ 149.633459][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.640615][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.666588][ T9158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.710613][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.747686][ T9193] chnl_net:caif_netlink_parms(): no params data found [ 149.749333][ T9237] loop2: detected capacity change from 0 to 128 [ 149.772523][ T9235] loop0: detected capacity change from 0 to 2048 [ 149.783584][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.802480][ T9235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.845217][ T9158] hsr_slave_0: entered promiscuous mode [ 149.860744][ T9158] hsr_slave_1: entered promiscuous mode [ 149.892095][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.947140][ T9193] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.954260][ T9193] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.979716][ T9193] bridge_slave_0: entered allmulticast mode [ 149.986573][ T9193] bridge_slave_0: entered promiscuous mode [ 149.996455][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.005579][ T9233] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 150.023478][ T9233] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 150.036094][ T9233] EXT4-fs (loop0): This should not happen!! Data will be lost [ 150.036094][ T9233] [ 150.046028][ T9233] EXT4-fs (loop0): Total free blocks count 0 [ 150.052024][ T9233] EXT4-fs (loop0): Free/Dirty block details [ 150.058074][ T9233] EXT4-fs (loop0): free_blocks=2415919104 [ 150.063830][ T9233] EXT4-fs (loop0): dirty_blocks=2368 [ 150.069161][ T9233] EXT4-fs (loop0): Block reservation details [ 150.075156][ T9233] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 150.088621][ T9193] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.095809][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.105678][ T9193] bridge_slave_1: entered allmulticast mode [ 150.112168][ T9193] bridge_slave_1: entered promiscuous mode [ 150.127205][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 150.185047][ T9250] loop2: detected capacity change from 0 to 2048 [ 150.205319][ T9193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.237115][ T9250] EXT4-fs (loop2): can't mount with commit=116, fs mounted w/o journal [ 150.252406][ T9193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.268933][ T28] bridge_slave_1: left allmulticast mode [ 150.274614][ T28] bridge_slave_1: left promiscuous mode [ 150.274800][ T9255] loop0: detected capacity change from 0 to 128 [ 150.280272][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.297202][ T28] bridge_slave_0: left allmulticast mode [ 150.302960][ T28] bridge_slave_0: left promiscuous mode [ 150.308688][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.323187][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 150.323203][ T29] audit: type=1400 audit(1723134847.175:1952): avc: denied { checkpoint_restore } for pid=9249 comm="syz.2.1914" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.375576][ T9255] loop0: detected capacity change from 128 to 0 [ 150.382571][ C1] I/O error, dev loop0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.391857][ T9257] FAT-fs (loop0): Directory bread(block 3) failed [ 150.401058][ T9257] syz.0.1915: attempt to access beyond end of device [ 150.401058][ T9257] loop0: rw=0, sector=4, nr_sectors = 1 limit=0 [ 150.439132][ T9257] FAT-fs (loop0): Directory bread(block 4) failed [ 150.455603][ T9257] syz.0.1915: attempt to access beyond end of device [ 150.455603][ T9257] loop0: rw=0, sector=5, nr_sectors = 1 limit=0 [ 150.477445][ T9257] FAT-fs (loop0): Directory bread(block 5) failed [ 150.484250][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.493118][ T9257] syz.0.1915: attempt to access beyond end of device [ 150.493118][ T9257] loop0: rw=0, sector=6, nr_sectors = 1 limit=0 [ 150.508259][ T9257] FAT-fs (loop0): Directory bread(block 6) failed [ 150.518829][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.525309][ T8413] syz-executor: attempt to access beyond end of device [ 150.525309][ T8413] loop0: rw=0, sector=3, nr_sectors = 1 limit=0 [ 150.543306][ T8413] FAT-fs (loop0): Directory bread(block 3) failed [ 150.549886][ T8413] syz-executor: attempt to access beyond end of device [ 150.549886][ T8413] loop0: rw=0, sector=4, nr_sectors = 1 limit=0 [ 150.562968][ T8413] FAT-fs (loop0): Directory bread(block 4) failed [ 150.566220][ T28] bond0 (unregistering): Released all slaves [ 150.569963][ T8413] syz-executor: attempt to access beyond end of device [ 150.569963][ T8413] loop0: rw=0, sector=5, nr_sectors = 1 limit=0 [ 150.590997][ T8413] FAT-fs (loop0): Directory bread(block 5) failed [ 150.597938][ T8413] syz-executor: attempt to access beyond end of device [ 150.597938][ T8413] loop0: rw=0, sector=6, nr_sectors = 1 limit=0 [ 150.613095][ T8413] FAT-fs (loop0): Directory bread(block 6) failed [ 150.629349][ T29] audit: type=1326 audit(1723134847.485:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9261 comm="syz.2.1917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9d9b179f9 code=0x0 [ 150.655999][ T8413] syz-executor: attempt to access beyond end of device [ 150.655999][ T8413] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 150.675648][ T8413] FAT-fs (loop0): unable to read boot sector to mark fs as dirty [ 150.685166][ T9264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=9264 comm=syz.2.1917 [ 150.685218][ T9193] team0: Port device team_slave_0 added [ 150.745718][ T9193] team0: Port device team_slave_1 added [ 150.753815][ T28] hsr_slave_0: left promiscuous mode [ 150.761464][ T28] hsr_slave_1: left promiscuous mode [ 150.769144][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.776595][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.784431][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.792207][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.804199][ T28] veth1_macvtap: left promiscuous mode [ 150.809869][ T28] veth0_macvtap: left promiscuous mode [ 150.815466][ T28] veth1_vlan: left promiscuous mode [ 150.820714][ T28] veth0_vlan: left promiscuous mode [ 150.920829][ T28] team0 (unregistering): Port device team_slave_1 removed [ 150.933489][ T28] team0 (unregistering): Port device team_slave_0 removed [ 151.019956][ T9193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.027063][ T9193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.053023][ T9193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.095889][ T9193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.102875][ T9193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.128888][ T9193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.188651][ T9193] hsr_slave_0: entered promiscuous mode [ 151.198053][ T9193] hsr_slave_1: entered promiscuous mode [ 151.215607][ T9193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.223165][ T9193] Cannot create hsr debugfs directory [ 151.306309][ T9158] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.318004][ T29] audit: type=1400 audit(1723134848.165:1954): avc: denied { create } for pid=9278 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 151.339179][ T29] audit: type=1400 audit(1723134848.165:1955): avc: denied { write } for pid=9278 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 151.366352][ T9158] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.385497][ T29] audit: type=1400 audit(1723134848.215:1956): avc: denied { read } for pid=9278 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 151.406607][ T29] audit: type=1400 audit(1723134848.225:1957): avc: denied { create } for pid=9278 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 151.427515][ T29] audit: type=1400 audit(1723134848.225:1958): avc: denied { write } for pid=9278 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 151.448190][ T29] audit: type=1400 audit(1723134848.225:1959): avc: denied { sendto } for pid=9278 comm="syz.1.1921" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 151.469470][ T29] audit: type=1400 audit(1723134848.225:1960): avc: denied { read } for pid=9278 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 151.490091][ T29] audit: type=1400 audit(1723134848.225:1961): avc: denied { create } for pid=9278 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=nfc_socket permissive=1 [ 151.529489][ T9158] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.540398][ T9158] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.703760][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.732741][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.788943][ T9158] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.822981][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.845226][ T9267] chnl_net:caif_netlink_parms(): no params data found [ 151.864434][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.871540][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.943110][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.950267][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.014658][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.054976][ T9158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.065529][ T9158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.087776][ T9193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.240191][ T9193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.358983][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.396509][ T9193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.467663][ T9193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.488028][ T9267] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.495218][ T9267] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.516263][ T9267] bridge_slave_0: entered allmulticast mode [ 152.522726][ T9267] bridge_slave_0: entered promiscuous mode [ 152.563421][ T9267] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.570625][ T9267] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.578142][ T9267] bridge_slave_1: entered allmulticast mode [ 152.584727][ T9267] bridge_slave_1: entered promiscuous mode [ 152.592268][ T9309] loop1: detected capacity change from 0 to 128 [ 152.626450][ T9158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.662329][ T9267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.674580][ T28] bridge_slave_1: left allmulticast mode [ 152.680562][ T28] bridge_slave_1: left promiscuous mode [ 152.686446][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.698637][ T28] bridge_slave_0: left allmulticast mode [ 152.704344][ T28] bridge_slave_0: left promiscuous mode [ 152.710299][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.829793][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.841845][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.852270][ T28] bond0 (unregistering): Released all slaves [ 152.872010][ T9267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.901839][ T9325] loop2: detected capacity change from 0 to 2048 [ 152.927778][ T9267] team0: Port device team_slave_0 added [ 152.948219][ T9193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.966638][ T9267] team0: Port device team_slave_1 added [ 152.980590][ T9193] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.000604][ T9325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.051445][ T28] hsr_slave_0: left promiscuous mode [ 153.058946][ T28] hsr_slave_1: left promiscuous mode [ 153.064774][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.072225][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.092102][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.099609][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.111361][ T9343] loop7: detected capacity change from 0 to 16384 [ 153.124462][ T28] veth1_macvtap: left promiscuous mode [ 153.130013][ T28] veth0_macvtap: left promiscuous mode [ 153.135565][ T28] veth1_vlan: left promiscuous mode [ 153.140867][ T28] veth0_vlan: left promiscuous mode [ 153.165469][ T9345] loop1: detected capacity change from 0 to 1024 [ 153.173039][ T9345] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.185289][ T9345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.352455][ T28] team0 (unregistering): Port device team_slave_1 removed [ 153.378250][ T28] team0 (unregistering): Port device team_slave_0 removed [ 153.432820][ T9343] I/O error, dev loop7, sector 11264 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 153.453157][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.454030][ T9343] I/O error, dev loop7, sector 11520 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 153.460133][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.477662][ T9343] I/O error, dev loop7, sector 11264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.496232][ T9267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.505399][ T9343] Buffer I/O error on dev loop7, logical block 1408, async page read [ 153.533928][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1934'. [ 153.544148][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.551257][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.560801][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.568036][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.598667][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.605722][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.631774][ T9267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.658857][ T9324] I/O error, dev loop7, sector 5632 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 153.668840][ T9324] Buffer I/O error on dev loop7, logical block 704, lost async page write [ 153.677497][ T9324] Buffer I/O error on dev loop7, logical block 705, lost async page write [ 153.686037][ T9324] Buffer I/O error on dev loop7, logical block 706, lost async page write [ 153.694628][ T9324] Buffer I/O error on dev loop7, logical block 707, lost async page write [ 153.703233][ T9324] Buffer I/O error on dev loop7, logical block 708, lost async page write [ 153.711778][ T9324] Buffer I/O error on dev loop7, logical block 709, lost async page write [ 153.720491][ T9324] Buffer I/O error on dev loop7, logical block 710, lost async page write [ 153.729031][ T9324] Buffer I/O error on dev loop7, logical block 711, lost async page write [ 153.737566][ T9324] Buffer I/O error on dev loop7, logical block 712, lost async page write [ 153.753369][ T9121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.757600][ T9324] I/O error, dev loop7, sector 6656 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 153.784422][ T9193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.794809][ T9193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.816945][ T9324] I/O error, dev loop7, sector 7680 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 153.830904][ T9267] hsr_slave_0: entered promiscuous mode [ 153.832423][ T9324] I/O error, dev loop7, sector 8704 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 153.849808][ T9267] hsr_slave_1: entered promiscuous mode [ 153.850255][ T9324] I/O error, dev loop7, sector 9728 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 153.867957][ T9267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.871085][ T9324] I/O error, dev loop7, sector 10752 op 0x1:(WRITE) flags 0x800 phys_seg 64 prio class 0 [ 153.886148][ T9267] Cannot create hsr debugfs directory [ 153.903863][ T9158] veth0_vlan: entered promiscuous mode [ 153.913322][ T9158] veth1_vlan: entered promiscuous mode [ 153.967252][ T9158] veth0_macvtap: entered promiscuous mode [ 154.007587][ T9158] veth1_macvtap: entered promiscuous mode [ 154.034124][ T9193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.059003][ T8725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.069221][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.079814][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.089823][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.100371][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.110306][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.120777][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.130647][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.141081][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.153561][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.162635][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.173346][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.183289][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.193772][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.203693][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.214201][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.224135][ T9158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.234804][ T9158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.246103][ T9158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.258156][ T9158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.267735][ T9158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.276493][ T9158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.285187][ T9158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.376164][ T9377] loop2: detected capacity change from 0 to 128 [ 154.450988][ T9193] veth0_vlan: entered promiscuous mode [ 154.459573][ T9377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1944'. [ 154.477641][ T9193] veth1_vlan: entered promiscuous mode [ 154.505740][ T9193] veth0_macvtap: entered promiscuous mode [ 154.521472][ T9193] veth1_macvtap: entered promiscuous mode [ 154.544961][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.555958][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.565892][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.576335][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.586157][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.596784][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.606722][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.617166][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.627000][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.637458][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.650199][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.662179][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.672899][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.682767][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.693391][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.703325][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.713760][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.723624][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.734157][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.743989][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.754462][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.767421][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.776854][ T9193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.785788][ T9193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.794491][ T9193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.803218][ T9193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.838445][ T9267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.860232][ T9267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.877439][ T9267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.891786][ T9388] loop2: detected capacity change from 0 to 2048 [ 154.910078][ T9267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.936793][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'. [ 154.957253][ T9393] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.036964][ T9267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.056947][ T9402] loop1: detected capacity change from 0 to 1024 [ 155.063704][ T9402] EXT4-fs: Ignoring removed oldalloc option [ 155.075264][ T9267] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.087407][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.094524][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.113480][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.120794][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.131498][ T9402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.162778][ T9267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.173200][ T9267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.201794][ T9413] EXT4-fs (loop1): shut down requested (0) [ 155.230038][ T9121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.333822][ T9267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.361178][ T9427] syzkaller1: entered promiscuous mode [ 155.367013][ T9427] syzkaller1: entered allmulticast mode [ 155.519243][ T9267] veth0_vlan: entered promiscuous mode [ 155.521605][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1960'. [ 155.540164][ T9267] veth1_vlan: entered promiscuous mode [ 155.543578][ T9444] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1961'. [ 155.554814][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1961'. [ 155.563833][ T9444] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1961'. [ 155.571463][ T9267] veth0_macvtap: entered promiscuous mode [ 155.572819][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1961'. [ 155.600743][ T9267] veth1_macvtap: entered promiscuous mode [ 155.660461][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.670992][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.680896][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.691409][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.701293][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.711773][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.721697][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.732160][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.742099][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.752714][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.762588][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.773053][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.804946][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.842415][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.853082][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.857128][ T9450] loop2: detected capacity change from 0 to 8192 [ 155.863062][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.879937][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.889951][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.900404][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.910370][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.920821][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.931060][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.941530][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.951578][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.962053][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.977193][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.986568][ T9267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.995296][ T9267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.004095][ T9267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.012928][ T9267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.013012][ T9450] loop2: p1 p4 < > [ 156.025825][ T9450] loop2: p1 size 8388608 extends beyond EOD, truncated [ 156.149568][ T9474] Invalid architecture in ELF header: 0 [ 156.162904][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 156.162917][ T29] audit: type=1400 audit(1723134853.015:1978): avc: denied { map } for pid=9475 comm="syz.3.1972" path="socket:[30630]" dev="sockfs" ino=30630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 156.195849][ T9472] usb usb8: usbfs: process 9472 (syz.0.1920) did not claim interface 0 before use [ 156.256169][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1977'. [ 156.290473][ T9478] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1974'. [ 156.317541][ T9483] loop1: detected capacity change from 0 to 256 [ 156.393655][ T9499] loop1: detected capacity change from 0 to 512 [ 156.428640][ T9499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.454302][ T9499] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 156.476648][ T9499] System zones: 1-12 [ 156.491306][ T9499] EXT4-fs (loop1): 1 truncate cleaned up [ 156.510265][ T9499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.560560][ T29] audit: type=1400 audit(1723134853.415:1979): avc: denied { bind } for pid=9512 comm="syz.0.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.581085][ T29] audit: type=1400 audit(1723134853.415:1980): avc: denied { setopt } for pid=9512 comm="syz.0.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.626561][ T9499] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #14: comm syz.1.1982: attempt to clear invalid blocks 1886221359 len 1 [ 156.643212][ T29] audit: type=1400 audit(1723134853.475:1981): avc: denied { setattr } for pid=9498 comm="syz.1.1982" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 156.666040][ T29] audit: type=1400 audit(1723134853.485:1982): avc: denied { unlink } for pid=9498 comm="syz.1.1982" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 156.668895][ T9518] can0: slcan on pts1. [ 156.706838][ T9521] loop3: detected capacity change from 0 to 512 [ 156.713438][ T9521] EXT4-fs: Ignoring removed nobh option [ 156.724280][ T9121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.736620][ T9521] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 156.745068][ T9521] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1990: attempt to clear invalid blocks 2 len 1 [ 156.759386][ T9521] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 156.759714][ T9518] can0 (unregistered): slcan off pts1. [ 156.779803][ T9521] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1990: invalid indirect mapped block 1819239214 (level 0) [ 156.808567][ T9521] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1990: invalid indirect mapped block 1819239214 (level 1) [ 156.837053][ T9529] loop4: detected capacity change from 0 to 128 [ 156.854341][ T9521] EXT4-fs (loop3): 1 truncate cleaned up [ 156.861809][ T29] audit: type=1400 audit(1723134853.715:1983): avc: denied { write } for pid=9530 comm="syz.2.2002" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 156.863847][ T9521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.916384][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 157.312291][ T29] audit: type=1400 audit(1723134854.165:1984): avc: denied { ioctl } for pid=9563 comm="syz.0.2006" path="socket:[31396]" dev="sockfs" ino=31396 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.673354][ T9581] Restarting kernel threads ... done. [ 157.673609][ T29] audit: type=1400 audit(1723134854.525:1985): avc: denied { ioctl } for pid=9580 comm="syz.2.2013" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 157.730470][ T9586] loop0: detected capacity change from 0 to 512 [ 157.748477][ T9586] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2011: bg 0: block 5: invalid block bitmap [ 157.815222][ T9586] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 157.858145][ T9586] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2011: attempt to clear invalid blocks 9508352 len 1 [ 157.877324][ T9586] EXT4-fs (loop0): 1 orphan inode deleted [ 157.897706][ T9586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.954027][ T9594] loop4: detected capacity change from 0 to 1764 [ 158.137687][ T9586] Invalid ELF header magic: != ELF [ 158.242600][ T9600] loop1: detected capacity change from 0 to 1024 [ 158.309708][ T9600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.473836][ T9267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.616371][ T9608] 9pnet_rdma: rdma_create_trans (9608): problem binding to privport: 13 [ 158.677083][ T29] audit: type=1400 audit(1723134855.535:1986): avc: denied { map } for pid=9606 comm="syz.0.2021" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 158.770233][ T9613] __nla_validate_parse: 5 callbacks suppressed [ 158.770326][ T9613] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2024'. [ 158.890783][ T29] audit: type=1400 audit(1723134855.745:1987): avc: denied { getopt } for pid=9617 comm="syz.4.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.933085][ T50] tipc: Subscription rejected, illegal request [ 159.137586][ T50] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 159.253887][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 159.266562][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost [ 159.266562][ T50] [ 159.276407][ T50] EXT4-fs (loop1): Total free blocks count 0 [ 159.282612][ T50] EXT4-fs (loop1): Free/Dirty block details [ 159.288735][ T50] EXT4-fs (loop1): free_blocks=68451041280 [ 159.294677][ T50] EXT4-fs (loop1): dirty_blocks=7344 [ 159.300013][ T50] EXT4-fs (loop1): Block reservation details [ 159.306179][ T50] EXT4-fs (loop1): i_reserved_data_blocks=459 [ 159.343410][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2035'. [ 159.412368][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 159.782444][ T9644] loop1: detected capacity change from 0 to 512 [ 159.789289][ T9644] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.797066][ T9644] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.809930][ T9193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.827660][ T9644] EXT4-fs (loop1): 1 truncate cleaned up [ 159.843149][ T9644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.876043][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 159.896621][ T9121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.899367][ C1] vcan0: j1939_session_tx_dat: 0xffff88811045d400: queue data error: -100 [ 159.960134][ T9668] loop1: detected capacity change from 0 to 2048 [ 160.680754][ T9692] loop1: detected capacity change from 0 to 128 [ 160.707008][ T9692] syz.1.2053: attempt to access beyond end of device [ 160.707008][ T9692] loop1: rw=0, sector=121, nr_sectors = 112 limit=128 [ 160.810545][ T9707] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.917780][ T9709] loop1: detected capacity change from 0 to 512 [ 160.932652][ T9709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.955573][ T9709] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.980303][ T9718] loop2: detected capacity change from 0 to 4096 [ 161.019769][ T9718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.073202][ T9121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.089012][ T9734] loop0: detected capacity change from 0 to 1024 [ 161.099317][ T9734] EXT4-fs: Ignoring removed orlov option [ 161.105017][ T9734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.118029][ T8725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.128594][ T9734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.146422][ T9737] loop1: detected capacity change from 0 to 256 [ 161.153103][ T9737] vfat: Bad value for 'uni_xlate' [ 161.164873][ T9267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.192885][ T9742] loop3: detected capacity change from 0 to 256 [ 161.196921][ T9744] loop2: detected capacity change from 0 to 128 [ 161.211864][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 161.217933][ T29] audit: type=1400 audit(1723134858.065:1995): avc: denied { watch watch_reads } for pid=9736 comm="syz.1.2071" path="/36/control" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.308539][ T9744] syz.2.2072: attempt to access beyond end of device [ 161.308539][ T9744] loop2: rw=0, sector=121, nr_sectors = 112 limit=128 [ 161.313712][ T9754] loop0: detected capacity change from 0 to 128 [ 161.343410][ T9754] FAT-fs (loop0): error, clusters badly computed (2 != 0) [ 161.350662][ T9754] FAT-fs (loop0): Filesystem has been set read-only [ 161.357827][ T9754] FAT-fs (loop0): error, clusters badly computed (3 != 1) [ 161.373521][ T9754] FAT-fs (loop0): error, clusters badly computed (4 != 2) [ 161.453996][ T9763] loop2: detected capacity change from 0 to 2048 [ 161.511119][ T29] audit: type=1400 audit(1723134858.365:1996): avc: denied { mounton } for pid=9761 comm="syz.2.2082" path="/" dev="configfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.676719][ T9782] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2091'. [ 161.703128][ T29] audit: type=1400 audit(1723134858.555:1997): avc: denied { watch } for pid=9783 comm="syz.0.2092" path="/proc/95/net/stat" dev="proc" ino=4026533230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 161.770348][ T9787] loop0: detected capacity change from 0 to 1024 [ 161.810637][ T9787] EXT4-fs: Ignoring removed nobh option [ 161.833941][ T9787] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 161.843148][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 161.856108][ T9787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.874884][ T29] audit: type=1400 audit(1723134858.725:1998): avc: denied { write } for pid=9786 comm="syz.0.2093" name="control" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 161.915693][ T9267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.951717][ T29] audit: type=1400 audit(1723134858.805:1999): avc: denied { tracepoint } for pid=9792 comm="syz.0.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 162.041046][ T9803] loop0: detected capacity change from 0 to 512 [ 162.051019][ T9803] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.2100: Parent and EA inode have the same ino 15 [ 162.064122][ T9803] EXT4-fs (loop0): Remounting filesystem read-only [ 162.070946][ T9803] EXT4-fs warning (device loop0): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 162.081317][ T9803] EXT4-fs (loop0): 1 orphan inode deleted [ 162.087564][ T9803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.099690][ T9803] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 162.107694][ T9803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.140742][ T29] audit: type=1400 audit(1723134858.995:2000): avc: denied { execute_no_trans } for pid=9800 comm="syz.3.2099" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=32357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 162.170534][ T9808] xt_l2tp: v2 sid > 0xffff: 16777216 [ 162.239662][ T29] audit: type=1400 audit(1723134859.095:2001): avc: denied { listen } for pid=9817 comm="syz.0.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 162.294591][ T9825] loop3: detected capacity change from 0 to 164 [ 162.306143][ T9825] Unable to read rock-ridge attributes [ 162.344058][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2106'. [ 162.353553][ T9823] loop0: detected capacity change from 0 to 8192 [ 162.366405][ T9830] Unable to read rock-ridge attributes [ 162.416916][ T9823] loop0: p1 p2 p3 p4 [ 162.421171][ T9823] loop0: p1 size 108922248 extends beyond EOD, truncated [ 162.439733][ T9823] loop0: p2 start 861536256 is beyond EOD, truncated [ 162.446526][ T9823] loop0: p3 start 851968 is beyond EOD, truncated [ 162.452963][ T9823] loop0: p4 size 65536 extends beyond EOD, truncated [ 162.460077][ T29] audit: type=1326 audit(1723134859.315:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89610e79f9 code=0x7ffc0000 [ 162.536350][ T9840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 162.538880][ T29] audit: type=1326 audit(1723134859.335:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f89610e79f9 code=0x7ffc0000 [ 162.697246][ T9857] loop1: detected capacity change from 0 to 512 [ 162.719522][ T9857] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 163.511206][ T9869] tipc: Enabling of bearer rejected, failed to enable media [ 163.710855][ T9878] loop2: detected capacity change from 0 to 512 [ 163.739911][ T9878] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2130: corrupted in-inode xattr: invalid ea_ino [ 163.771693][ T9878] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2130: couldn't read orphan inode 15 (err -117) [ 163.820426][ T9878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.019475][ T8725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.102617][ T9891] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2133'. [ 164.164544][ T9897] loop5: detected capacity change from 0 to 16385 [ 164.195615][ T9897] loop5: detected capacity change from 16385 to 16321 [ 164.277948][ T9905] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 164.296064][ T9904] loop4: detected capacity change from 0 to 2048 [ 164.303439][ T9904] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 164.313232][ T9904] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 164.325661][ T9904] EXT4-fs (loop4): failed to initialize system zone (-117) [ 164.332902][ T9904] EXT4-fs (loop4): mount failed [ 164.342877][ T9904] netlink: 'syz.4.2138': attribute type 27 has an invalid length. [ 164.471393][ T9913] loop0: detected capacity change from 0 to 512 [ 164.488452][ T9913] EXT4-fs (loop0): 1 truncate cleaned up [ 164.500435][ T9913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.535952][ T9267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.606870][ T9923] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 164.655456][ T9927] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.664288][ T9927] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.673127][ T9927] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.681899][ T9927] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.717130][ T9927] vxlan0: entered promiscuous mode [ 164.893488][ T9935] loop1: detected capacity change from 0 to 512 [ 164.910999][ T9937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2138'. [ 164.918152][ T9938] loop0: detected capacity change from 0 to 256 [ 164.942001][ T9935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 164.965583][ T9935] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.006593][ T9121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 165.182834][ T9951] loop4: detected capacity change from 0 to 8192 [ 165.197186][ T9951] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.362216][ T9964] loop2: detected capacity change from 0 to 2048 [ 165.408537][ T9964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.424738][ T9964] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 165.440200][ T9964] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 165.452839][ T9964] EXT4-fs (loop2): This should not happen!! Data will be lost [ 165.452839][ T9964] [ 165.463098][ T9964] EXT4-fs (loop2): Total free blocks count 0 [ 165.469275][ T9964] EXT4-fs (loop2): Free/Dirty block details [ 165.475215][ T9964] EXT4-fs (loop2): free_blocks=2415919104 [ 165.481033][ T9964] EXT4-fs (loop2): dirty_blocks=16 [ 165.486194][ T9964] EXT4-fs (loop2): Block reservation details [ 165.492383][ T9964] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 165.516238][ T9979] loop3: detected capacity change from 0 to 2048 [ 165.537861][ T9979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.552989][ T9979] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 165.575671][ T9979] EXT4-fs (loop3): Remounting filesystem read-only [ 165.603542][ T9964] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 165.622785][ T9193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.749185][ T9997] loop4: detected capacity change from 0 to 4096 [ 165.759339][ T9997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.772390][T10001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10001 comm=syz.3.2170 [ 165.797767][ T9158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.799989][T10001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2170'. [ 165.846224][T10003] netlink: 'syz.4.2173': attribute type 27 has an invalid length. [ 166.295542][T10029] loop2: detected capacity change from 0 to 1764 [ 166.318838][T10029] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 166.329268][T10044] loop4: detected capacity change from 0 to 128 [ 166.334874][T10029] ISOFS: unable to read i-node block [ 166.339766][T10044] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 166.340839][T10029] isofs_fill_super: get root inode failed [ 166.434500][T10050] loop2: detected capacity change from 0 to 1024 [ 166.498674][T10050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.513426][T10059] loop0: detected capacity change from 0 to 512 [ 166.682115][ T8725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.714239][T10059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.773221][T10059] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.803351][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 166.803366][ T29] audit: type=1400 audit(1723134863.655:2080): avc: denied { nlmsg_write } for pid=10063 comm="syz.1.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 166.928399][T10059] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.2198: Directory hole found for htree leaf block 0 [ 166.939177][T10068] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2201'. [ 166.982615][ T9267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.026689][T10075] loop0: detected capacity change from 0 to 1764 [ 167.043792][T10075] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 167.043825][T10081] loop1: detected capacity change from 0 to 764 [ 167.043890][T10075] ISOFS: unable to read i-node block [ 167.043901][T10075] isofs_fill_super: get root inode failed [ 167.087550][ T29] audit: type=1326 audit(1723134863.945:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.1.2206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55489e79f9 code=0x0 [ 167.091370][T10067] loop2: detected capacity change from 0 to 128 [ 167.117293][T10067] vfat: Unknown parameter '/dev/snd/seq' [ 167.294348][T10089] loop2: detected capacity change from 0 to 1024 [ 167.308906][T10089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.341794][T10089] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.445247][ T8725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.546263][T10097] loop4: detected capacity change from 0 to 128 [ 167.560925][ T29] audit: type=1326 audit(1723134864.415:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10099 comm="syz.2.2212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9d9b179f9 code=0x0 [ 167.590814][T10102] syzkaller1: entered promiscuous mode [ 167.596355][T10102] syzkaller1: entered allmulticast mode [ 167.631659][T10097] loop4: detected capacity change from 0 to 512 [ 167.657804][T10097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.674149][T10097] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.704374][T10097] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2211: Directory hole found for htree leaf block 0 [ 167.737461][ T29] audit: type=1326 audit(1723134864.595:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.4.2211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60b6e879f9 code=0x0 [ 167.761004][ C1] dccp_invalid_packet: P.Data Offset(0) too small [ 167.817194][T10114] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.860584][T10116] loop3: detected capacity change from 0 to 256 [ 167.867104][T10116] msdos: Unknown parameter 'dotots' [ 168.030106][T10122] autofs4:pid:10122:validate_dev_ioctl: path string terminator missing for cmd(0xc018937c) [ 168.083381][ T29] audit: type=1326 audit(1723134864.935:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10117 comm="syz.1.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55489e79f9 code=0x7fc00000 [ 168.120857][ T29] audit: type=1326 audit(1723134864.975:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10117 comm="syz.1.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55489e79f9 code=0x7fc00000 [ 168.201408][T10130] loop3: detected capacity change from 0 to 256 [ 168.239212][T10132] loop3: detected capacity change from 0 to 1764 [ 168.247665][T10132] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 168.317995][T10137] loop3: detected capacity change from 0 to 512 [ 168.348164][T10137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.370053][T10137] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.390796][T10137] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.2225: Directory hole found for htree leaf block 0 [ 168.430891][ T9193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.463161][T10146] loop3: detected capacity change from 0 to 1024 [ 168.471776][T10146] EXT4-fs: Ignoring removed i_version option [ 168.489052][T10146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.555753][T10146] loop3: detected capacity change from 1024 to 4 [ 168.565598][ T29] audit: type=1400 audit(1723134865.415:2086): avc: denied { mounton } for pid=10152 comm="syz.0.2230" path="/72/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 168.594907][T10155] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 168.616488][T10155] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #18: comm syz.3.2227: mark_inode_dirty error [ 168.629743][T10155] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 168.640389][T10155] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #18: comm syz.3.2227: mark_inode_dirty error [ 168.640599][ T9158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.653582][T10155] syz.3.2227: attempt to access beyond end of device [ 168.653582][T10155] loop3: rw=536576, sector=6, nr_sectors = 2 limit=4 [ 168.676586][T10155] syz.3.2227: attempt to access beyond end of device [ 168.676586][T10155] loop3: rw=12288, sector=6, nr_sectors = 2 limit=4 [ 168.690045][T10155] EXT4-fs error (device loop3): ext4_wait_block_bitmap:584: comm syz.3.2227: Cannot read block bitmap - block_group = 0, block_bitmap = 3 [ 168.712283][T10155] syz.3.2227: attempt to access beyond end of device [ 168.712283][T10155] loop3: rw=12288, sector=6, nr_sectors = 2 limit=4 [ 168.742791][T10155] EXT4-fs error (device loop3): ext4_wait_block_bitmap:584: comm syz.3.2227: Cannot read block bitmap - block_group = 0, block_bitmap = 3 [ 168.771984][ T29] audit: type=1326 audit(1723134865.625:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10117 comm="syz.1.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55489e79f9 code=0x7fc00000 [ 168.806637][T10155] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 168.821215][T10155] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #18: comm syz.3.2227: mark_inode_dirty error [ 168.857146][T10155] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 168.879136][T10155] EXT4-fs error (device loop3): ext4_ext_truncate:4432: inode #18: comm syz.3.2227: mark_inode_dirty error [ 168.965682][ T9193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.993658][T10170] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 169.000254][T10170] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 169.008075][T10170] vhci_hcd vhci_hcd.0: Device attached [ 169.030993][T10149] kmmpd-loop3: attempt to access beyond end of device [ 169.030993][T10149] loop3: rw=14337, sector=128, nr_sectors = 2 limit=4 [ 169.039492][T10171] vhci_hcd: unknown pdu 1 [ 169.044450][T10149] buffer_io_error: 695 callbacks suppressed [ 169.044467][T10149] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 169.072237][ T28] vhci_hcd: stop threads [ 169.076536][ T28] vhci_hcd: release socket [ 169.080954][ T28] vhci_hcd: disconnect device [ 169.117058][T10174] netlink: 'syz.4.2238': attribute type 4 has an invalid length. [ 169.124891][T10174] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2238'. [ 169.163129][T10174] loop4: detected capacity change from 0 to 512 [ 169.181169][T10174] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.202313][T10174] EXT4-fs (loop4): 1 truncate cleaned up [ 169.215020][T10174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.328086][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.338473][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.410024][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.420653][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.450351][ T29] audit: type=1400 audit(1723134866.305:2088): avc: denied { unmount } for pid=9267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 169.480680][T10189] loop2: detected capacity change from 0 to 512 [ 169.500605][T10189] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.506860][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.520929][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.538931][T10189] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2243: corrupted in-inode xattr: e_name out of bounds [ 169.570833][T10195] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 169.579794][T10189] EXT4-fs (loop2): 1 truncate cleaned up [ 169.599613][T10189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.637131][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.647636][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.784246][ T50] bridge_slave_1: left allmulticast mode [ 169.790134][ T50] bridge_slave_1: left promiscuous mode [ 169.795898][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.820069][ T8725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.822666][T10202] loop1: detected capacity change from 0 to 512 [ 169.837769][T10202] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.848231][ T50] bridge_slave_0: left allmulticast mode [ 169.853889][ T50] bridge_slave_0: left promiscuous mode [ 169.859593][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.897487][T10202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.979605][T10208] loop0: detected capacity change from 0 to 1024 [ 169.980612][T10202] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.988817][T10208] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 170.025851][ T9158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.045636][T10210] loop2: detected capacity change from 0 to 512 [ 170.054574][T10210] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.056053][T10208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.105526][T10202] EXT4-fs error (device loop1): __ext4_new_inode:1279: comm syz.1.2246: failed to insert inode 16: doubly allocated? [ 170.128908][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.136387][T10210] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2248: bg 0: block 64: padding at end of block bitmap is not set [ 170.153977][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.164836][ T50] bond0 (unregistering): Released all slaves [ 170.177768][ T9121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.192204][T10219] loop4: detected capacity change from 0 to 1024 [ 170.218208][ T9267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.227461][T10210] Quota error (device loop2): write_blk: dquota write failed [ 170.228418][T10181] chnl_net:caif_netlink_parms(): no params data found [ 170.235139][T10210] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.2248: Failed to acquire dquot type 0 [ 170.255858][T10210] EXT4-fs (loop2): 1 truncate cleaned up [ 170.273335][T10219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.273830][T10210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.306630][T10229] syz.1.2252[10229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.306697][T10229] syz.1.2252[10229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.337588][ T50] hsr_slave_0: left promiscuous mode [ 170.383149][ T50] hsr_slave_1: left promiscuous mode [ 170.407378][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.414818][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.450452][T10236] 9pnet_fd: Insufficient options for proto=fd [ 170.457006][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.464452][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.479526][ T50] veth1_macvtap: left promiscuous mode [ 170.485094][ T50] veth0_macvtap: left promiscuous mode [ 170.490821][ T50] veth1_vlan: left promiscuous mode [ 170.496248][ T50] veth0_vlan: left promiscuous mode [ 170.556701][ T8725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.664559][ T50] team0 (unregistering): Port device team_slave_1 removed [ 170.667082][T10248] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2259'. [ 170.689933][ T50] team0 (unregistering): Port device team_slave_0 removed [ 170.709656][T10248] loop2: detected capacity change from 0 to 512 [ 170.725312][T10248] EXT4-fs (loop2): bad block size 8192 [ 170.795325][T10181] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.802854][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.823913][ T67] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 170.866023][T10181] bridge_slave_0: entered allmulticast mode [ 170.875136][ T67] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 170.887462][ T67] EXT4-fs (loop4): This should not happen!! Data will be lost [ 170.887462][ T67] [ 170.897278][ T67] EXT4-fs (loop4): Total free blocks count 0 [ 170.903308][ T67] EXT4-fs (loop4): Free/Dirty block details [ 170.909345][ T67] EXT4-fs (loop4): free_blocks=68451041280 [ 170.915230][ T67] EXT4-fs (loop4): dirty_blocks=16 [ 170.920440][ T67] EXT4-fs (loop4): Block reservation details [ 170.926479][ T67] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 170.935602][T10181] bridge_slave_0: entered promiscuous mode [ 170.943180][T10181] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.950334][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.962385][T10181] bridge_slave_1: entered allmulticast mode [ 170.971731][ T9158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.986187][T10181] bridge_slave_1: entered promiscuous mode [ 170.996944][T10265] loop2: detected capacity change from 0 to 1024 [ 171.011031][T10258] bond0: option use_carrier: invalid value (4) [ 171.028477][T10271] loop0: detected capacity change from 0 to 256 [ 171.032050][T10265] EXT4-fs: Ignoring removed orlov option [ 171.040665][T10265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.058125][T10181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.087526][T10181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.097243][T10265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.135292][T10181] team0: Port device team_slave_0 added [ 171.146823][T10181] team0: Port device team_slave_1 added [ 171.210849][T10181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.217862][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.243956][T10181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.278675][T10300] loop1: detected capacity change from 0 to 512 [ 171.293844][T10181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.301001][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.327025][T10181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.338456][T10300] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 171.355316][T10300] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2277: corrupted in-inode xattr: e_name out of bounds [ 171.389366][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 171.406558][T10300] EXT4-fs (loop1): 1 truncate cleaned up [ 171.415875][T10300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.436800][T10181] hsr_slave_0: entered promiscuous mode [ 171.443440][T10181] hsr_slave_1: entered promiscuous mode [ 171.451121][T10181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.458760][T10181] Cannot create hsr debugfs directory [ 171.468721][ T9121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.485147][ T8725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.928769][T10356] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2289'. [ 171.945085][T10356] 0ªX¹¦D: renamed from gretap0 (while UP) [ 171.960052][T10356] 0ªX¹¦D: entered allmulticast mode [ 171.976398][T10356] A link change request failed with some changes committed already. Interface 40ªX¹¦D may have been left with an inconsistent configuration, please check. [ 172.003200][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 172.003215][ T29] audit: type=1400 audit(1723134868.855:2091): avc: denied { append } for pid=10352 comm="syz.0.2289" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 172.050924][ T29] audit: type=1400 audit(1723134868.905:2092): avc: denied { lock } for pid=10352 comm="syz.0.2289" path="/newroot/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 172.054140][T10181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.089597][T10181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.115253][T10181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.128220][T10181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.168546][ T29] audit: type=1400 audit(1723134869.015:2093): avc: denied { setopt } for pid=10362 comm="syz.0.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 172.188841][ T29] audit: type=1400 audit(1723134869.015:2094): avc: denied { ioctl } for pid=10362 comm="syz.0.2292" path="socket:[33652]" dev="sockfs" ino=33652 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 172.241416][T10367] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2293'. [ 172.261082][T10181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.284653][T10181] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.295381][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.302508][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.321570][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.329486][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.362628][T10181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.373074][T10181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.399055][ T29] audit: type=1400 audit(1723134869.245:2095): avc: denied { mount } for pid=10369 comm="syz.4.2294" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 172.421451][ T29] audit: type=1400 audit(1723134869.245:2096): avc: denied { mounton } for pid=10369 comm="syz.4.2294" path="/87/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 172.482662][T10373] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 172.490463][T10373] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 172.525698][ T29] audit: type=1400 audit(1723134869.325:2097): avc: denied { unmount } for pid=9158 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 172.566578][T10181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.667683][ T3334] IPVS: starting estimator thread 0... [ 172.720582][T10181] veth0_vlan: entered promiscuous mode [ 172.730497][T10181] veth1_vlan: entered promiscuous mode [ 172.764214][T10181] veth0_macvtap: entered promiscuous mode [ 172.770277][T10387] IPVS: using max 2448 ests per chain, 122400 per kthread [ 172.789383][T10181] veth1_macvtap: entered promiscuous mode [ 172.810085][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.821220][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.831868][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.842581][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.852591][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.863107][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.872957][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.883486][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.893341][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.904263][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.914139][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.924942][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.940611][T10181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.956689][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.967423][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.977526][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.988025][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.998142][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.008602][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.018448][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.029183][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.039391][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.050454][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.060394][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.070847][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.087948][T10181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.191030][T10181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.199993][T10181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.208778][T10181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.217565][T10181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.367531][ T29] audit: type=1326 audit(1723134870.225:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10404 comm="syz.4.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b6e879f9 code=0x7fc00000 [ 173.644308][ T29] audit: type=1326 audit(1723134870.245:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10404 comm="syz.4.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60b6e879f9 code=0x7fc00000 [ 173.668075][ T29] audit: type=1400 audit(1723134870.485:2100): avc: denied { lock } for pid=10417 comm="syz.1.2307" path="socket:[34606]" dev="sockfs" ino=34606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 173.711765][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'. [ 174.005983][T10432] loop2: detected capacity change from 0 to 164 [ 174.013311][T10434] loop0: detected capacity change from 0 to 512 [ 174.026710][T10434] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2313: casefold flag without casefold feature [ 174.039785][T10434] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2313: couldn't read orphan inode 15 (err -117) [ 174.052898][T10434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.088771][ T9267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.149103][T10438] loop4: detected capacity change from 0 to 512 [ 174.151022][T10438] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 174.165984][T10438] loop4: detected capacity change from 0 to 512 [ 174.191898][T10443] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 174.213724][T10438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.213830][T10438] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.214233][T10438] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.296925][T10451] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2320'. [ 174.338381][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'. [ 174.512597][T10462] syzkaller0: entered promiscuous mode [ 174.518549][T10462] syzkaller0: entered allmulticast mode [ 174.747864][T10471] loop1: detected capacity change from 0 to 128 [ 174.767692][T10471] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.803133][T10471] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 175.005760][T10330] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 175.161444][T10494] netlink: 'syz.2.2336': attribute type 13 has an invalid length. [ 175.393567][T10507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2342'. [ 175.647391][T10521] siw: device registration error -23 [ 176.191828][T10537] loop0: detected capacity change from 0 to 128 [ 176.373485][T10544] usb usb9: usbfs: process 10544 (syz.4.2355) did not claim interface 0 before use [ 176.504493][T10550] loop3: detected capacity change from 0 to 1764 [ 176.538118][T10550] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 176.578267][T10550] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 176.936811][T10562] loop2: detected capacity change from 0 to 2048 [ 177.040443][T10562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.119259][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2359'. [ 177.281348][ T8725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.365061][T10580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.499074][T10589] loop2: detected capacity change from 0 to 512 [ 177.520629][T10589] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 177.608961][T10589] EXT4-fs (loop2): 1 orphan inode deleted [ 177.614725][T10589] EXT4-fs (loop2): 1 truncate cleaned up [ 177.620920][T10589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.659185][T10608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10608 comm=syz.0.2379 [ 177.688992][ T8725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.796893][T10617] loop1: detected capacity change from 0 to 128 [ 177.930234][T10625] loop4: detected capacity change from 0 to 1024 [ 177.987658][T10633] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 178.003608][T10633] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 178.012747][T10633] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 178.156224][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2392'. [ 178.204271][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 178.239503][T10641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2394'. [ 178.250920][T10641] xt_cgroup: xt_cgroup: no path or classid specified [ 178.339428][T10660] loop1: detected capacity change from 0 to 1024 [ 178.344953][T10662] loop3: detected capacity change from 0 to 2048 [ 178.352708][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2400'. [ 178.362700][T10660] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 178.374381][T10662] EXT4-fs (loop3): inodes count not valid: 8 vs 32 [ 178.386601][T10660] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2402: Invalid block bitmap block 0 in block_group 0 [ 178.415295][T10660] __quota_error: 10 callbacks suppressed [ 178.415321][T10660] Quota error (device loop1): write_blk: dquota write failed [ 178.428569][T10660] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 178.487281][T10660] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.2402: Failed to acquire dquot type 0 [ 178.527252][T10660] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.2402: Freeing blocks not in datazone - block = 0, count = 4096 [ 178.574821][T10660] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2402: Invalid inode bitmap blk 0 in block_group 0 [ 178.605536][T10329] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 178.614548][T10329] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u8:8: Failed to release dquot type 0 [ 178.636557][T10660] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 178.655591][T10660] EXT4-fs (loop1): 1 orphan inode deleted [ 178.673579][ T29] audit: type=1326 audit(1723134875.525:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c14cb79f9 code=0x7ffc0000 [ 178.710706][ T29] audit: type=1326 audit(1723134875.555:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c14cb79f9 code=0x7ffc0000 [ 178.734418][ T29] audit: type=1326 audit(1723134875.555:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c14cb79f9 code=0x7ffc0000 [ 178.758015][ T29] audit: type=1326 audit(1723134875.555:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c14cb79f9 code=0x7ffc0000 [ 178.781794][ T29] audit: type=1326 audit(1723134875.565:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c14cb79f9 code=0x7ffc0000 [ 178.805531][ T29] audit: type=1326 audit(1723134875.565:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c14cb79f9 code=0x7ffc0000 [ 178.829081][ T29] audit: type=1326 audit(1723134875.565:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c14cb79f9 code=0x7ffc0000 [ 178.904725][T10688] loop1: detected capacity change from 0 to 256 [ 178.911460][T10688] msdos: Bad value for 'gid' [ 178.916299][T10688] msdos: Bad value for 'gid' [ 178.944452][T10691] loop1: detected capacity change from 0 to 128 [ 178.966256][T10691] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 179.046141][T10351] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 179.094386][T10694] loop1: detected capacity change from 0 to 128 [ 179.108724][T10694] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 179.116358][T10694] FAT-fs (loop1): Filesystem has been set read-only [ 179.139908][T10694] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 179.202237][T10699] loop4: detected capacity change from 0 to 512 [ 179.247782][T10699] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.285895][T10699] netlink: 'syz.4.2417': attribute type 1 has an invalid length. [ 179.311133][T10699] bond1: entered promiscuous mode [ 179.322247][T10699] lo: entered promiscuous mode [ 179.337288][T10699] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 179.374012][T10699] bond1: (slave lo): making interface the new active one [ 179.383963][T10699] bond1: (slave lo): Enslaving as an active interface with an up link [ 179.448949][T10716] loop4: detected capacity change from 0 to 512 [ 179.479048][T10716] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.637355][T10727] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 179.644841][T10727] team0: Device ipvlan2 failed to register rx_handler [ 179.763099][T10739] loop4: detected capacity change from 0 to 512 [ 179.827195][T10739] EXT4-fs: Ignoring removed bh option [ 179.871528][T10739] EXT4-fs error (device loop4): __ext4_iget:4985: inode #15: block 1803188595: comm syz.4.2431: invalid block [ 179.927241][T10725] chnl_net:caif_netlink_parms(): no params data found [ 179.945601][T10739] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2431: couldn't read orphan inode 15 (err -117) [ 180.026065][T10329] ================================================================== [ 180.034187][T10329] BUG: KCSAN: data-race in io_sq_thread / io_sq_thread_park [ 180.041519][T10329] [ 180.043856][T10329] write to 0xffff888111459638 of 8 bytes by task 10761 on cpu 1: [ 180.051591][T10329] io_sq_thread+0xdab/0xff0 [ 180.056120][T10329] ret_from_fork+0x4b/0x60 [ 180.060561][T10329] ret_from_fork_asm+0x1a/0x30 [ 180.065347][T10329] [ 180.067680][T10329] read to 0xffff888111459638 of 8 bytes by task 10329 on cpu 0: [ 180.075313][T10329] io_sq_thread_park+0x1b/0x80 [ 180.080094][T10329] io_ring_exit_work+0x197/0x500 [ 180.085038][T10329] process_scheduled_works+0x483/0x9a0 [ 180.090517][T10329] worker_thread+0x526/0x700 [ 180.095129][T10329] kthread+0x1d1/0x210 [ 180.099224][T10329] ret_from_fork+0x4b/0x60 [ 180.103683][T10329] ret_from_fork_asm+0x1a/0x30 [ 180.108471][T10329] [ 180.110793][T10329] value changed: 0xffff8881223d0000 -> 0x0000000000000000 [ 180.117915][T10329] [ 180.120246][T10329] Reported by Kernel Concurrency Sanitizer on: [ 180.126411][T10329] CPU: 0 UID: 0 PID: 10329 Comm: kworker/u8:8 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 180.137455][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 180.147528][T10329] Workqueue: iou_exit io_ring_exit_work [ 180.153109][T10329] ================================================================== [ 180.215622][T10725] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.222763][T10725] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.231926][T10725] bridge_slave_0: entered allmulticast mode [ 180.242698][T10725] bridge_slave_0: entered promiscuous mode [ 180.251505][T10725] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.258692][T10725] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.267764][T10725] bridge_slave_1: entered allmulticast mode [ 180.274324][T10725] bridge_slave_1: entered promiscuous mode [ 180.295799][T10725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.309452][T10725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.332536][T10725] team0: Port device team_slave_0 added [ 180.339344][T10725] team0: Port device team_slave_1 added [ 180.365446][T10725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.372533][T10725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.398469][T10725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.411721][T10725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.418735][T10725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.444724][T10725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.478498][T10725] hsr_slave_0: entered promiscuous mode [ 180.484689][T10725] hsr_slave_1: entered promiscuous mode [ 180.490618][T10725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.498224][T10725] Cannot create hsr debugfs directory [ 180.583887][T10725] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.636667][T10725] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.718875][T10725] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.778857][T10725] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.880022][T10725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.897669][T10725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.907540][T10725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.919183][T10725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.936916][T10725] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.944049][T10725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.951389][T10725] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.958503][T10725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.001139][T10725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.012359][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.022966][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.038984][T10725] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.053060][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.060222][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.084222][T10725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.094719][T10725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.108237][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.115334][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.182460][T10725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.289336][T10725] veth0_vlan: entered promiscuous mode [ 181.298929][T10725] veth1_vlan: entered promiscuous mode [ 181.321834][T10725] veth0_macvtap: entered promiscuous mode [ 181.330898][T10725] veth1_macvtap: entered promiscuous mode [ 181.346290][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.356989][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.366934][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.377550][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.387462][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.398547][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.408425][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.419131][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.429028][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.439494][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.449364][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.460134][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.470494][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.481289][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.493397][T10725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.508613][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.519111][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.529176][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.539761][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.549729][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.560313][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.570451][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.581085][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.591040][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.601471][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.611486][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.621977][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.631858][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.642368][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.654794][T10725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.665735][T10725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.674468][T10725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.683289][T10725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.692121][T10725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0