last executing test programs: 2m43.679424637s ago: executing program 32 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000009"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r0], 0x50) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 2m21.660560761s ago: executing program 33 (id=601): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) 2m5.061925591s ago: executing program 0 (id=1051): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2m5.038970233s ago: executing program 34 (id=1051): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040), &(0x7f0000000080)=0x8) 39.320753563s ago: executing program 6 (id=2984): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_submit(0x0, 0x0, 0x0) sync() 39.209831103s ago: executing program 6 (id=2991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x3, 0x0, 0xfff9}}}}}}, 0x0) 39.096395743s ago: executing program 6 (id=2993): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000080)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x1, 0x1}, 0x4) 38.962444776s ago: executing program 6 (id=3000): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x1) 38.828522777s ago: executing program 6 (id=3001): r0 = inotify_init1(0x800) creat(&(0x7f0000000000)='./file0\x00', 0x40) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x60000804) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x860001b1) acct(&(0x7f0000000100)='./file0\x00') 38.600428837s ago: executing program 6 (id=3005): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") 38.600278617s ago: executing program 35 (id=3005): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") 30.026489016s ago: executing program 8 (id=3150): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302c0063d8af718bcf415fdbe7738459b2505a970a797ffb91c512eea569dd7c831a6113a6ee0bd49b784390248925bbb2849b3b2aab64ac5b417724266ff8ad412a9df8f076f9b986f083627c14bdb8bedc399d98e8a4d631a1655c48e53cd217be340dec484c676f1c7f4ed45a7591befb0c9189b91b1a95d81ca5a99287e59ccb6e1ac4894b79da8496352f77577f0cd8816d032e896ce1880bbc9004f268fc2749bfb9cf3245289e82db0fc7b1b8703894f140"]) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRES16, @ANYRES64=r0], 0x15) 29.918212106s ago: executing program 8 (id=3151): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000200), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) 29.842488952s ago: executing program 8 (id=3152): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 28.003452323s ago: executing program 8 (id=3154): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xb9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000002c0), 0x2}, 0x1160bb, 0x10000, 0x0, 0x8, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) truncate(&(0x7f00000001c0)='./file1\x00', 0x800) 27.827419688s ago: executing program 8 (id=3157): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], 0x0}, 0x94) r0 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 27.472456339s ago: executing program 8 (id=3167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 27.472266979s ago: executing program 36 (id=3167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 26.238194077s ago: executing program 7 (id=3193): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302c0063d8af718bcf415fdbe7738459b2505a970a797ffb91c512eea569dd7c831a6113a6ee0bd49b784390248925bbb2849b3b2aab64ac5b417724266ff8ad412a9df8f076f9b986f083627c14bdb8bedc399d98e8a4d631a1655c48e53cd217be340dec484c676f1c7f4ed45a7591befb0c9189b91b1a95d81ca5a99287e59ccb6e1ac4894b79da8496352f77577f0cd8816d032e896ce1880bbc9004f268fc2749bfb9cf3245289e82db0fc7b1b8703894f140"]) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRES16, @ANYRES64=r0], 0x15) 26.065481682s ago: executing program 7 (id=3198): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 25.117773365s ago: executing program 7 (id=3199): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x1, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x8, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@cipso={0x86, 0xb, 0x2, [{0x7, 0x5, "b0d893"}]}]}}}}}}}, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x6c000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) lsm_list_modules(0x0, 0x0, 0x10000000) 24.274064109s ago: executing program 7 (id=3211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xfd09, 0x1000, 0x2, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 23.966734676s ago: executing program 7 (id=3215): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, 0x0, 0x4040050) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2010871, 0x0) 23.493169277s ago: executing program 7 (id=3220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 19.998182293s ago: executing program 1 (id=3287): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 19.946343307s ago: executing program 1 (id=3289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xfd09, 0x1000, 0x2, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 19.7976116s ago: executing program 1 (id=3291): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 19.652954703s ago: executing program 1 (id=3293): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1a8) close_range(r0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000006c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c0}, 0x24000840) recvmmsg$unix(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x162, 0x0) sendmmsg$inet6(r0, &(0x7f0000008ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44041) 19.609451476s ago: executing program 1 (id=3295): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 19.351761269s ago: executing program 1 (id=3299): r0 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 19.317776482s ago: executing program 3 (id=3301): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 19.059237265s ago: executing program 3 (id=3305): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 18.976518412s ago: executing program 3 (id=3307): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2}, 0x8) 18.167392043s ago: executing program 3 (id=3319): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200404, &(0x7f0000000280)={[{@noblock_validity}, {@nodelalloc}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000700)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") creat(&(0x7f0000000380)='./bus\x00', 0x4a) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]}) 17.797778475s ago: executing program 3 (id=3324): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0x40b, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 17.220654525s ago: executing program 3 (id=3339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x34}}, 0x0) 17.220539675s ago: executing program 37 (id=3339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x34}}, 0x0) 13.184420968s ago: executing program 2 (id=3361): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.755626045s ago: executing program 2 (id=3363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000ff03000000000000000000000000000000000000fcffffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fe652f06997f400002000000000000080000000000000000010000000400000044000500000000de010300000000000000000000fffffffc3c00000002000000ac1414aa000000000000000000000000060000000403"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c) 12.739339647s ago: executing program 2 (id=3364): r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x41, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x30d080, 0x10, 0x1}, 0x0, 0x18, 0x0, 0x12345}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x1e75, 0x82ffff, 0xe, 0x0, 0xe) 12.616060217s ago: executing program 2 (id=3366): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x2000000009, 0x8, 0x3) mbind(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x3) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 12.178572106s ago: executing program 2 (id=3367): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, 0x0, 0x4040050) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2010871, 0x0) 8.372559919s ago: executing program 38 (id=3220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 8.366944819s ago: executing program 2 (id=3372): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/24, 0x18}, 0x5}], 0x1, 0x2, 0x0) socket$inet6(0xa, 0x805, 0x0) 4.192179534s ago: executing program 39 (id=3299): r0 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 1.429644845s ago: executing program 5 (id=3454): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x3, @mcast1, 0x400}}, 0x0, 0x0, 0x2, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb9887200"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) 1.294485077s ago: executing program 5 (id=3458): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_io_uring_setup(0x88d, &(0x7f0000000680)={0x0, 0xf903, 0x80, 0xfff7ffdf, 0x8000206}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) 1.163161138s ago: executing program 5 (id=3462): mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0xff, 0xa08, &(0x7f0000008280)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 1.081802686s ago: executing program 9 (id=3463): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x845}, 0x804) 944.997818ms ago: executing program 5 (id=3465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) 908.741431ms ago: executing program 5 (id=3466): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b80)=""/4072, 0xfe8}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}], 0x1, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 898.827252ms ago: executing program 9 (id=3467): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x29e, &(0x7f0000000140)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = eventfd2(0x100004, 0x800) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000000)='^\x00', 0x2, 0x0, 0x0, 0x971a2bbfb5f4c835, r2}]) 592.789488ms ago: executing program 0 (id=3393): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074e204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="deb9505f8e54018ec300000008000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) 569.39789ms ago: executing program 0 (id=3471): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) 554.868652ms ago: executing program 4 (id=3472): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c80)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\b\x00\x00\x00\x00\x00\x00\x00\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf3\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000680)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe4IH\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\x96\x9ch\xbc\xedi\x99\xf8\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) 456.77483ms ago: executing program 4 (id=3475): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "17178f4231c724fb", "91f4de83e53c642c05b4749fd769714a", "444794e1", "9ea50ccfc03368a8"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x3c) 435.191192ms ago: executing program 0 (id=3476): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20001a, &(0x7f0000000180)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x7ffe}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x3, 0x416, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000001080)=ANY=[], 0x361, 0x0) 336.34243ms ago: executing program 9 (id=3477): r0 = socket$rxrpc(0x21, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0x4) listen(r1, 0x4de29d29) 314.842533ms ago: executing program 4 (id=3478): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) futex(0x0, 0x7, 0x2, 0x0, 0x0, 0x0) 289.753325ms ago: executing program 9 (id=3479): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0xc000000b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 272.014166ms ago: executing program 4 (id=3480): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000000c0)={0x0, 0x0}) 237.103039ms ago: executing program 9 (id=3481): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) pread64(r0, &(0x7f0000000240)=""/152, 0x98, 0xe1) 181.766414ms ago: executing program 4 (id=3482): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x7, 0x8000001}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x129, 0x2000000000800001, 0x622, 0x2, 0x7, 0x5, 0xfffffffffffffffd, 0x107fe}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 181.598644ms ago: executing program 9 (id=3483): socket$netlink(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 14.189369ms ago: executing program 5 (id=3484): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008050) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/101, 0x65}}], 0x1, 0x1000400000de, 0x0) 0s ago: executing program 0 (id=3485): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x21) kernel console output (not intermixed with test programs): 2.641340][ T9944] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2405: bg 0: block 465: padding at end of block bitmap is not set [ 132.656731][ T9944] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6686: Corrupt filesystem [ 132.670941][ T9943] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 132.710169][ T9943] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.2407: corrupted in-inode xattr: e_value size too large [ 132.724804][ T9943] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 132.725210][ T9943] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2407: couldn't read orphan inode 15 (err -117) [ 132.727083][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.734367][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 132.761528][ C1] EXT4-fs (loop7): initial error at time 1771721366: ext4_iget_extra_inode:5025: inode 15 [ 132.771460][ C1] EXT4-fs (loop7): last error at time 1771721366: ext4_iget_extra_inode:5025: inode 15 [ 132.821629][ T9943] loop7: lost filesystem error report for type 5 error -117 [ 132.822451][ T9943] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.874101][ T28] audit: type=1400 audit(1771721366.784:3395): avc: denied { setattr } for pid=9942 comm="syz.7.2407" path="/220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/pids.current" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.932311][ T9958] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 132.949700][ T6504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.994490][ T28] audit: type=1400 audit(1771721366.904:3396): avc: denied { getopt } for pid=9963 comm="syz.7.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.060934][ T28] audit: type=1400 audit(1771721366.974:3397): avc: denied { bind } for pid=9972 comm="syz.7.2419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.479863][T10014] veth1_to_bond: entered allmulticast mode [ 133.492549][T10014] veth1_to_bond: entered promiscuous mode [ 133.506032][T10013] veth1_to_bond: left promiscuous mode [ 133.517293][T10013] veth1_to_bond: left allmulticast mode [ 133.850150][T10027] netlink: 'syz.3.2443': attribute type 10 has an invalid length. [ 133.864890][T10027] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 134.402124][T10090] loop1: detected capacity change from 0 to 1024 [ 134.421821][T10090] /dev/loop1: Can't open blockdev [ 134.577952][ T4860] Bluetooth: hci0: Frame reassembly failed (-84) [ 134.811435][T10117] veth0: entered promiscuous mode [ 134.831221][T10117] veth0: left promiscuous mode [ 134.964737][T10131] bond0: option arp_validate: invalid value (18446744072759227714) [ 134.994372][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 134.994460][ T28] audit: type=1326 audit(1771721368.904:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="syz.7.2501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd37953c629 code=0x0 [ 135.392179][T10169] __nla_validate_parse: 6 callbacks suppressed [ 135.392190][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2505'. [ 135.407690][T10169] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2505'. [ 135.685093][ T28] audit: type=1326 audit(1771721369.604:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10194 comm="syz.3.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f1f7c629 code=0x7ffc0000 [ 135.717379][ T28] audit: type=1326 audit(1771721369.604:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10194 comm="syz.3.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f1f7c629 code=0x7ffc0000 [ 135.742415][ T28] audit: type=1326 audit(1771721369.604:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10194 comm="syz.3.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f42f1f7c629 code=0x7ffc0000 [ 135.768013][ T28] audit: type=1326 audit(1771721369.604:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10194 comm="syz.3.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f1f7c629 code=0x7ffc0000 [ 135.802673][ T28] audit: type=1326 audit(1771721369.604:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10194 comm="syz.3.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f1f7c629 code=0x7ffc0000 [ 135.833766][T10206] loop3: detected capacity change from 0 to 256 [ 136.287669][T10244] veth0: entered promiscuous mode [ 136.294823][T10244] veth0: left promiscuous mode [ 136.604363][ T4128] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.606470][ T3692] Bluetooth: hci0: command 0x1003 tx timeout [ 137.114883][T10290] sctp: [Deprecated]: syz.3.2561 (pid 10290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.114883][T10290] Use struct sctp_sack_info instead [ 137.238745][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2570'. [ 137.450785][ T28] audit: type=1326 audit(1771721371.364:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9925d3c629 code=0x7ffc0000 [ 137.474564][ T28] audit: type=1326 audit(1771721371.364:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9925d3c629 code=0x7ffc0000 [ 137.499042][ T28] audit: type=1326 audit(1771721371.364:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f9925d3c629 code=0x7ffc0000 [ 137.522987][ T28] audit: type=1326 audit(1771721371.364:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9925d3c629 code=0x7ffc0000 [ 137.886315][T10368] loop3: detected capacity change from 0 to 1024 [ 137.906421][T10368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.925201][T10368] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.945847][T10368] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.2593: lblock 0 mapped to illegal pblock 0 (length 1) [ 137.959645][T10368] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 137.972073][T10368] EXT4-fs (loop3): This should not happen!! Data will be lost [ 137.972073][T10368] [ 138.007068][T10384] loop6: detected capacity change from 0 to 128 [ 138.021286][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.093605][T10391] syz.6.2599: attempt to access beyond end of device [ 138.093605][T10391] loop6: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 138.185776][T10390] loop3: detected capacity change from 0 to 512 [ 138.212318][T10390] EXT4-fs: Ignoring removed nobh option [ 138.276237][ T4860] kworker/u8:11: attempt to access beyond end of device [ 138.276237][ T4860] loop6: rw=8388609, sector=171, nr_sectors = 1 limit=128 [ 138.294101][T10390] EXT4-fs (loop3): orphan cleanup on readonly fs [ 138.301569][ T4860] Buffer I/O error on dev loop6, logical block 171, lost async page write [ 138.317175][T10394] veth0: entered promiscuous mode [ 138.332413][T10394] veth0: left promiscuous mode [ 138.340923][T10390] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2602: EA inode hash validation failed [ 138.373200][T10390] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 138.387872][T10390] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2602: corrupted inode contents [ 138.411710][T10390] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.413700][T10390] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.2602: mark_inode_dirty error [ 138.414361][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 138.414929][ C0] EXT4-fs (loop3): initial error at time 1771721372: ext4_do_update_inode:5569: inode 15 [ 138.415401][ C0] EXT4-fs (loop3): last error at time 1771721372: ext4_do_update_inode:5569: inode 15 [ 138.483823][T10390] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.485960][T10390] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2602: corrupted inode contents [ 138.528949][T10390] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.530428][T10390] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.2602: mark_inode_dirty error [ 138.573660][T10390] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.574730][T10390] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.2602: mark inode dirty (error -117) [ 138.624567][T10390] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.625315][T10390] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 138.695690][T10390] EXT4-fs (loop3): 1 orphan inode deleted [ 138.741272][T10390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 138.825533][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.645267][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 139.818968][T10451] loop1: detected capacity change from 0 to 2048 [ 139.984501][T10451] EXT4-fs error (device loop1): __ext4_fill_super:5563: inode #2: comm syz.1.2625: inode has both inline data and extents flags [ 140.022656][T10451] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 140.022844][T10451] EXT4-fs (loop1): get root inode failed [ 140.032014][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 140.032033][ C0] EXT4-fs (loop1): initial error at time 1771721373: __ext4_fill_super:5563: inode 2 [ 140.032063][ C0] EXT4-fs (loop1): last error at time 1771721373: __ext4_fill_super:5563: inode 2 [ 140.100659][T10451] EXT4-fs (loop1): mount failed [ 140.333060][T10496] loop1: detected capacity change from 0 to 512 [ 140.376614][T10496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.392718][T10496] ext4 filesystem being mounted at /537/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.431999][T10496] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 140.483649][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.538372][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2654'. [ 140.934886][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2669'. [ 140.949780][T10552] loop7: detected capacity change from 0 to 1024 [ 140.976830][T10552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 140.989172][T10552] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.006215][T10552] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.2665: lblock 3 mapped to illegal pblock 3 (length 3) [ 141.034379][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'. [ 141.043505][T10552] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 141.070387][T10552] EXT4-fs (loop7): This should not happen!! Data will be lost [ 141.070387][T10552] [ 141.083998][T10559] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2665: bg 0: block 112: padding at end of block bitmap is not set [ 141.101498][T10559] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 68 with error 117 [ 141.115950][T10559] EXT4-fs (loop7): This should not happen!! Data will be lost [ 141.115950][T10559] [ 141.144186][ T30] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 141.164150][ T30] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 141.176568][ T30] EXT4-fs (loop7): This should not happen!! Data will be lost [ 141.176568][ T30] [ 141.187272][ T6504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 141.253380][T10570] syzkaller1: entered promiscuous mode [ 141.259301][T10570] syzkaller1: entered allmulticast mode [ 141.515805][T10585] macsec0: entered promiscuous mode [ 141.521989][T10585] macsec0: entered allmulticast mode [ 141.534592][T10585] veth1_macvtap: entered allmulticast mode [ 141.688013][T10598] loop6: detected capacity change from 0 to 512 [ 141.734033][T10598] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2684: inode has both inline data and extents flags [ 141.787558][T10598] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.788014][T10598] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2684: couldn't read orphan inode 15 (err -117) [ 141.797367][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 141.797397][ C0] EXT4-fs (loop6): initial error at time 1771721375: ext4_orphan_get:1391: inode 15 [ 141.797433][ C0] EXT4-fs (loop6): last error at time 1771721375: ext4_orphan_get:1391: inode 15 [ 141.886523][T10598] loop6: lost filesystem error report for type 5 error -117 [ 141.889304][T10598] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.225014][ T5282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.265594][T10619] program syz.6.2688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.270791][T10617] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2692'. [ 142.304406][T10617] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2692'. [ 142.323657][T10617] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2692'. [ 142.409326][T10623] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2697'. [ 142.463759][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2699'. [ 142.475649][T10634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2699'. [ 142.501741][T10634] geneve2: entered promiscuous mode [ 142.507811][T10634] geneve2: entered allmulticast mode [ 142.513862][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.523390][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.541416][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.565618][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.153347][T10665] random: crng reseeded on system resumption [ 143.164286][ T7847] hid_parser_main: 218 callbacks suppressed [ 143.170573][ T7847] hid-generic 0009:0800:0004.0006: unknown main item tag 0x0 [ 143.178712][ T7847] hid-generic 0009:0800:0004.0006: unknown main item tag 0x0 [ 143.186393][ T7847] hid-generic 0009:0800:0004.0006: unknown main item tag 0x0 [ 143.202582][ T7847] hid-generic 0009:0800:0004.0006: unknown main item tag 0x0 [ 143.210946][ T7847] hid-generic 0009:0800:0004.0006: unknown main item tag 0x0 [ 143.218566][ T7847] hid-generic 0009:0800:0004.0006: unknown main item tag 0x0 [ 143.226163][ T7847] hid-generic 0009:0800:0004.0006: unknown main item tag 0x0 [ 143.233796][ T7847] hid-generic 0009:0800:0004.0006: unknown main item tag 0x0 [ 143.242176][ T7847] hid-generic 0009:0800:0004.0006: unknown main item tag 0x0 [ 143.249913][ T7847] hid-generic 0009:0800:0004.0006: unknown main item tag 0x0 [ 143.259812][ T7847] hid-generic 0009:0800:0004.0006: hidraw0: HID v0.02 Device [syz0] on syz1 [ 143.323420][T10668] fido_id[10668]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.737297][T10693] loop1: detected capacity change from 0 to 1024 [ 143.780450][T10693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.803161][T10693] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.818670][T10693] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.2726: lblock 3 mapped to illegal pblock 3 (length 3) [ 143.833210][T10693] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 143.847656][T10693] EXT4-fs (loop1): This should not happen!! Data will be lost [ 143.847656][T10693] [ 143.860535][T10693] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2726: bg 0: block 112: padding at end of block bitmap is not set [ 143.875757][T10693] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 68 with error 117 [ 143.889970][T10693] EXT4-fs (loop1): This should not happen!! Data will be lost [ 143.889970][T10693] [ 143.918283][ T4860] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 143.946986][ T4860] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 143.972619][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 143.972630][ T28] audit: type=1326 audit(1771721377.884:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9925d3c629 code=0x7ffc0000 [ 144.004996][ T4860] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.004996][ T4860] [ 144.015952][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.025323][ T28] audit: type=1326 audit(1771721377.884:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9925d3c629 code=0x7ffc0000 [ 144.049591][ T28] audit: type=1326 audit(1771721377.884:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f9925d3c629 code=0x7ffc0000 [ 144.091054][ T28] audit: type=1326 audit(1771721377.884:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9925d3c629 code=0x7ffc0000 [ 144.117654][ T28] audit: type=1326 audit(1771721377.884:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9925d3c629 code=0x7ffc0000 [ 144.570730][T10742] loop3: detected capacity change from 0 to 1024 [ 144.600499][T10742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.621928][T10744] loop6: detected capacity change from 0 to 1024 [ 144.691205][T10744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.703433][T10744] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.727597][T10744] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 3: comm syz.6.2745: lblock 3 mapped to illegal pblock 3 (length 3) [ 144.751675][T10744] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 144.764715][T10744] EXT4-fs (loop6): This should not happen!! Data will be lost [ 144.764715][T10744] [ 144.810665][T10760] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 144.828117][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.846007][T10744] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2745: bg 0: block 112: padding at end of block bitmap is not set [ 144.914329][T10744] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 68 with error 117 [ 144.944439][T10744] EXT4-fs (loop6): This should not happen!! Data will be lost [ 144.944439][T10744] [ 144.992137][T10770] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2754'. [ 145.044679][ T30] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 145.079138][ T30] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 145.092324][ T30] EXT4-fs (loop6): This should not happen!! Data will be lost [ 145.092324][ T30] [ 145.114574][ T5282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 145.667162][T10812] loop6: detected capacity change from 0 to 512 [ 145.678036][T10806] loop7: detected capacity change from 0 to 512 [ 145.684671][T10812] EXT4-fs: Ignoring removed bh option [ 145.684694][T10812] EXT4-fs: inline encryption not supported [ 145.711102][T10814] loop3: detected capacity change from 0 to 512 [ 145.718704][ T28] audit: type=1326 audit(1771721379.624:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f1f7c629 code=0x7ffc0000 [ 145.743936][T10806] EXT4-fs: Ignoring removed nobh option [ 145.747207][T10812] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.752487][ T28] audit: type=1326 audit(1771721379.624:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f1f7c629 code=0x7ffc0000 [ 145.752519][ T28] audit: type=1326 audit(1771721379.624:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f42f1f7c629 code=0x7ffc0000 [ 145.752642][ T28] audit: type=1326 audit(1771721379.624:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f42f1f7c392 code=0x7ffc0000 [ 145.752673][ T28] audit: type=1326 audit(1771721379.624:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f42f1f3cece code=0x7ffc0000 [ 145.867549][T10814] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.909986][T10806] EXT4-fs (loop7): orphan cleanup on readonly fs [ 145.912363][T10812] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 145.925452][T10806] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.2772: EA inode hash validation failed [ 145.957746][T10806] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.2772: corrupted inode contents [ 145.970243][T10812] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2776: bg 0: block 248: padding at end of block bitmap is not set [ 145.972229][T10806] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.992968][T10806] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #15: comm syz.7.2772: mark_inode_dirty error [ 146.002827][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 146.003100][ C0] EXT4-fs (loop7): initial error at time 1771721379: ext4_do_update_inode:5569: inode 15 [ 146.003395][ C0] EXT4-fs (loop7): last error at time 1771721379: ext4_do_update_inode:5569: inode 15 [ 146.017892][T10812] loop6: lost filesystem error report for type 5 error -117 [ 146.018069][T10812] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2776: Failed to acquire dquot type 1 [ 146.018158][T10812] loop6: lost filesystem error report for type 5 error -117 [ 146.018627][T10812] EXT4-fs (loop6): 1 truncate cleaned up [ 146.019035][T10812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 146.127159][T10806] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.128234][T10806] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.2772: corrupted inode contents [ 146.138014][ T5282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 146.150754][T10806] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.168287][ T30] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 146.188919][ T30] loop6: lost filesystem error report for type 5 error -117 [ 146.200026][T10806] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm syz.7.2772: mark_inode_dirty error [ 146.239415][T10806] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.242497][T10806] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3002: inode #15: comm syz.7.2772: mark inode dirty (error -117) [ 146.320861][T10806] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.323283][T10806] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -117) [ 146.376998][T10806] EXT4-fs (loop7): 1 orphan inode deleted [ 146.387521][T10828] bridge_slave_0: left allmulticast mode [ 146.389665][T10806] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 146.400858][T10828] bridge_slave_0: left promiscuous mode [ 146.424671][T10828] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.445791][T10828] bridge_slave_1: left allmulticast mode [ 146.466916][ T6504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.476517][T10828] bridge_slave_1: left promiscuous mode [ 146.482151][T10828] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.523240][T10828] bond0: (slave bond_slave_0): Releasing backup interface [ 146.535072][T10828] bond0: (slave bond_slave_1): Releasing backup interface [ 146.549548][T10828] team0: Port device team_slave_0 removed [ 146.555748][ T3372] IPVS: starting estimator thread 0... [ 146.575856][T10828] team0: Port device team_slave_1 removed [ 146.576000][ T4874] tipc: Subscription rejected, illegal request [ 146.582594][T10828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.598062][T10828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.620900][T10828] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.668890][T10849] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2788'. [ 146.675892][T10835] IPVS: using max 2064 ests per chain, 103200 per kthread [ 146.694413][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2788'. [ 146.703468][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2788'. [ 147.376844][T10883] bridge_slave_0: left allmulticast mode [ 147.382589][T10883] bridge_slave_0: left promiscuous mode [ 147.390009][T10875] loop1: detected capacity change from 0 to 512 [ 147.397297][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.412018][T10875] EXT4-fs: Ignoring removed nobh option [ 147.424158][T10883] bridge_slave_1: left allmulticast mode [ 147.439861][T10883] bridge_slave_1: left promiscuous mode [ 147.447732][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.457349][T10883] bond0: (slave bond_slave_0): Releasing backup interface [ 147.465027][T10875] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.472738][T10883] bond0: (slave bond_slave_1): Releasing backup interface [ 147.481230][T10883] team0: Port device team_slave_0 removed [ 147.482540][T10875] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2798: EA inode hash validation failed [ 147.511460][T10883] team0: Port device team_slave_1 removed [ 147.512981][T10875] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.2798: corrupted inode contents [ 147.518261][T10883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.531121][T10875] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 147.543477][T10883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.545698][T10875] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.2798: mark_inode_dirty error [ 147.560317][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 147.560438][ C0] EXT4-fs (loop1): initial error at time 1771721381: ext4_do_update_inode:5569: inode 15 [ 147.560816][ C0] EXT4-fs (loop1): last error at time 1771721381: ext4_do_update_inode:5569: inode 15 [ 147.616713][T10875] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 147.617124][T10883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.627104][T10875] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.2798: corrupted inode contents [ 147.662148][T10875] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 147.666431][T10875] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.2798: mark_inode_dirty error [ 147.702090][T10875] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 147.703775][T10875] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.2798: mark inode dirty (error -117) [ 147.739954][T10875] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 147.740563][T10875] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 147.764275][T10875] EXT4-fs (loop1): 1 orphan inode deleted [ 147.782295][T10875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 147.830379][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.499794][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2823'. [ 148.512596][T10929] loop6: detected capacity change from 0 to 512 [ 148.521969][T10935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.536043][T10929] EXT4-fs: Ignoring removed nobh option [ 148.597746][T10929] EXT4-fs (loop6): orphan cleanup on readonly fs [ 148.634373][T10929] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.2819: EA inode hash validation failed [ 148.665983][T10929] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2819: corrupted inode contents [ 148.694860][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 148.701569][ C0] EXT4-fs (loop6): initial error at time 1771721382: ext4_do_update_inode:5569: inode 15 [ 148.712290][ C0] EXT4-fs (loop6): last error at time 1771721382: ext4_do_update_inode:5569: inode 15 [ 148.768105][T10929] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.2819: mark_inode_dirty error [ 148.782152][T10929] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2819: corrupted inode contents [ 148.803757][T10929] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.2819: mark_inode_dirty error [ 148.820118][T10929] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #15: comm syz.6.2819: mark inode dirty (error -117) [ 148.843502][T10929] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 148.853673][T10929] EXT4-fs (loop6): 1 orphan inode deleted [ 148.868462][T10929] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 148.934831][ T5282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.344267][T10954] syzkaller1: entered promiscuous mode [ 149.363504][T10954] syzkaller1: entered allmulticast mode [ 149.593933][T10961] loop1: detected capacity change from 0 to 512 [ 149.603681][T10961] EXT4-fs: Ignoring removed bh option [ 149.609391][T10961] EXT4-fs: inline encryption not supported [ 149.617762][T10961] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.669805][T10961] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 149.697482][T10961] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2833: bg 0: block 248: padding at end of block bitmap is not set [ 149.724439][T10961] loop1: lost filesystem error report for type 5 error -117 [ 149.724646][T10961] __quota_error: 20 callbacks suppressed [ 149.724657][T10961] Quota error (device loop1): write_blk: dquota write failed [ 149.737665][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 149.737698][ C1] EXT4-fs (loop1): last error at time 1771721383: ext4_validate_block_bitmap:441 [ 149.761021][T10961] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 149.771381][T10961] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.2833: Failed to acquire dquot type 1 [ 149.782812][T10961] loop1: lost filesystem error report for type 5 error -117 [ 149.783257][T10961] EXT4-fs (loop1): 1 truncate cleaned up [ 149.806175][T10961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 149.840920][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 149.850451][ T4860] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 149.860372][ T4860] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 1 [ 149.872015][ T4860] loop1: lost filesystem error report for type 5 error -117 [ 149.884809][T10983] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2841'. [ 150.702526][T11004] bridge_slave_0: left allmulticast mode [ 150.709815][T11004] bridge_slave_0: left promiscuous mode [ 150.716185][T11004] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.724111][T11004] bridge_slave_1: left allmulticast mode [ 150.729966][T11004] bridge_slave_1: left promiscuous mode [ 150.735816][T11004] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.744270][T11004] bond0: (slave bond_slave_0): Releasing backup interface [ 150.754081][T11004] bond_slave_0: left promiscuous mode [ 150.759983][T11004] bond_slave_0: left allmulticast mode [ 150.767045][T11004] bond0: (slave bond_slave_1): Releasing backup interface [ 150.775345][T11004] bond_slave_1: left promiscuous mode [ 150.780834][T11004] bond_slave_1: left allmulticast mode [ 150.786840][T11004] team_slave_0: left promiscuous mode [ 150.792305][T11004] team_slave_0: left allmulticast mode [ 150.798542][T11004] team0: Port device team_slave_0 removed [ 150.805827][T11004] team_slave_1: left promiscuous mode [ 150.811405][T11004] team_slave_1: left allmulticast mode [ 150.818178][T11004] team0: Port device team_slave_1 removed [ 150.824273][T11004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.836600][T11004] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.956816][T11025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 151.037089][T11033] loop3: detected capacity change from 0 to 128 [ 151.175943][T11045] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 152.191372][T11123] loop6: detected capacity change from 0 to 1024 [ 152.278155][T11123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.451745][T11172] sctp: [Deprecated]: syz.5.2891 (pid 11172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.451745][T11172] Use struct sctp_sack_info instead [ 152.760269][T11189] loop7: detected capacity change from 0 to 1024 [ 152.783536][ T5282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.826538][T11189] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.866932][ T6504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.061456][T11206] loop3: detected capacity change from 0 to 512 [ 153.101796][T11206] EXT4-fs: Ignoring removed nobh option [ 153.133607][T11206] EXT4-fs (loop3): orphan cleanup on readonly fs [ 153.159399][T11206] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2911: EA inode hash validation failed [ 153.174997][T11206] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2911: corrupted inode contents [ 153.193506][T11206] fserror_report: 5 callbacks suppressed [ 153.193547][T11206] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.204349][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 153.220097][ C0] EXT4-fs (loop3): initial error at time 1771721387: ext4_do_update_inode:5569: inode 15 [ 153.229947][ C0] EXT4-fs (loop3): last error at time 1771721387: ext4_do_update_inode:5569: inode 15 [ 153.240150][T11206] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.2911: mark_inode_dirty error [ 153.252697][T11206] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.253396][T11206] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2911: corrupted inode contents [ 153.284588][T11206] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.286636][T11206] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.2911: mark_inode_dirty error [ 153.328981][T11206] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.330026][T11206] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.2911: mark inode dirty (error -117) [ 153.354549][T11206] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.358553][T11206] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 153.405276][T11206] EXT4-fs (loop3): 1 orphan inode deleted [ 153.433935][T11222] loop7: detected capacity change from 0 to 1024 [ 153.440835][T11206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 153.477735][T11222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.516890][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.876624][T11228] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.887792][ T6504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.055865][T11228] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.115397][T11228] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.165457][T11228] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.200453][ T28] audit: type=1326 audit(1771721388.114:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.224245][T11237] loop3: detected capacity change from 0 to 1024 [ 154.232596][ T28] audit: type=1326 audit(1771721388.114:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.257015][ T28] audit: type=1326 audit(1771721388.114:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.280828][ T28] audit: type=1326 audit(1771721388.114:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.304923][ T28] audit: type=1326 audit(1771721388.114:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.305360][T11241] batadv_slave_1: entered promiscuous mode [ 154.328819][ T28] audit: type=1326 audit(1771721388.114:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.357897][ T28] audit: type=1326 audit(1771721388.114:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.373206][ T4853] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.394393][T11237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.408820][T11240] batadv_slave_1: left promiscuous mode [ 154.463271][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.475579][ T4853] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.489553][ T4853] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.518314][ T4872] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.734611][ T28] kauditd_printk_skb: 1918 callbacks suppressed [ 154.734625][ T28] audit: type=1326 audit(1771721388.654:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.782037][ T28] audit: type=1326 audit(1771721388.684:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.805834][ T28] audit: type=1326 audit(1771721388.684:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.829654][ T28] audit: type=1326 audit(1771721388.684:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.861650][ T28] audit: type=1326 audit(1771721388.684:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.885786][ T28] audit: type=1326 audit(1771721388.684:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.909568][ T28] audit: type=1326 audit(1771721388.684:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.943497][ T28] audit: type=1326 audit(1771721388.684:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.974889][ T28] audit: type=1326 audit(1771721388.684:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 154.993875][T11262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2922'. [ 155.001044][ T28] audit: type=1326 audit(1771721388.684:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.5.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9925cdda19 code=0x7ffc0000 [ 155.145108][T11262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2922'. [ 155.329178][T11283] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2932'. [ 155.454527][T11293] netlink: 'syz.7.2946': attribute type 9 has an invalid length. [ 155.462368][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2946'. [ 155.471581][T11293] netlink: 'syz.7.2946': attribute type 9 has an invalid length. [ 155.480931][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2946'. [ 156.012205][T11374] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2940'. [ 156.083670][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2941'. [ 156.137584][ T4866] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.137611][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2941'. [ 156.150549][ T4866] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.186731][ T4866] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.209445][ T4866] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.795922][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2948'. [ 159.668171][T11462] netlink: 'syz.6.2956': attribute type 1 has an invalid length. [ 159.683391][T11462] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2956'. [ 160.156159][T11538] loop6: detected capacity change from 0 to 128 [ 160.220165][T11538] syz.6.2974: attempt to access beyond end of device [ 160.220165][T11538] loop6: rw=0, sector=125, nr_sectors = 916 limit=128 [ 160.627709][T11599] loop7: detected capacity change from 0 to 512 [ 160.665659][ T28] kauditd_printk_skb: 1771 callbacks suppressed [ 160.665704][ T28] audit: type=1400 audit(1771721394.574:7152): avc: denied { module_load } for pid=11601 comm="syz.5.2978" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=31674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 160.710195][T11605] Invalid ELF header magic: != ELF [ 160.716655][T11608] vlan2: entered promiscuous mode [ 160.728075][T11599] EXT4-fs (loop7): 1 truncate cleaned up [ 160.734161][T11599] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.781174][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2983'. [ 160.797345][T11612] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2983'. [ 160.881297][T11623] loop1: detected capacity change from 0 to 256 [ 160.897965][T11599] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2980: bg 0: block 465: padding at end of block bitmap is not set [ 160.924406][ T28] audit: type=1400 audit(1771721394.834:7153): avc: denied { load_policy } for pid=11620 comm="syz.3.2990" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 160.931201][T11621] SELinux: failed to load policy [ 160.954716][T11599] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6686: Corrupt filesystem [ 161.039909][ T6504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.083311][ T28] audit: type=1400 audit(1771721394.994:7154): avc: denied { map } for pid=11639 comm="syz.3.2997" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.129490][T11643] loop7: detected capacity change from 0 to 256 [ 161.144543][T11649] loop1: detected capacity change from 0 to 128 [ 161.147926][T11647] loop3: detected capacity change from 0 to 1024 [ 161.158594][T11647] EXT4-fs: Ignoring removed orlov option [ 161.172652][T11649] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.193756][T11647] EXT4-fs: Ignoring removed nobh option [ 161.234999][T11649] ext4 filesystem being mounted at /596/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.292211][T11647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.330657][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.350641][ T28] audit: type=1400 audit(1771721395.264:7155): avc: denied { execute } for pid=11642 comm="syz.3.2998" path="/579/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 161.408088][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.420607][T11658] netlink: 'syz.1.3004': attribute type 1 has an invalid length. [ 161.452127][T11658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.463961][ T4872] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.554458][ T4872] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.638051][T11670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11670 comm=syz.7.3008 [ 161.684896][ T4872] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.784166][ T4872] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.858932][ T28] audit: type=1400 audit(1771721395.774:7156): avc: denied { bind } for pid=11687 comm="syz.5.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.917700][T11693] loop7: detected capacity change from 0 to 128 [ 161.958537][ T28] audit: type=1400 audit(1771721395.774:7157): avc: denied { node_bind } for pid=11687 comm="syz.5.3014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 161.974175][T11693] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.013822][ T28] audit: type=1400 audit(1771721395.914:7158): avc: denied { read } for pid=11696 comm="syz.3.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.045562][T11693] ext4 filesystem being mounted at /351/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.189287][ T6504] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.216364][ T4872] bond0 (unregistering): Released all slaves [ 162.230312][T11667] chnl_net:caif_netlink_parms(): no params data found [ 162.286357][T11667] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.293508][T11667] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.300997][T11667] bridge_slave_0: entered allmulticast mode [ 162.308089][T11667] bridge_slave_0: entered promiscuous mode [ 162.315413][T11667] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.322487][T11667] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.329843][T11667] bridge_slave_1: entered allmulticast mode [ 162.336428][T11667] bridge_slave_1: entered promiscuous mode [ 162.350996][ T4872] hsr_slave_0: left promiscuous mode [ 162.356882][ T4872] hsr_slave_1: left promiscuous mode [ 162.362828][ T4872] veth1_macvtap: left allmulticast mode [ 162.439625][T11667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.449988][T11667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.469746][T11667] team0: Port device team_slave_0 added [ 162.476885][T11667] team0: Port device team_slave_1 added [ 162.492204][T11667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.499283][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.525310][T11667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.536471][T11667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.543445][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.570051][T11667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.596284][T11667] hsr_slave_0: entered promiscuous mode [ 162.602271][T11667] hsr_slave_1: entered promiscuous mode [ 162.608216][T11667] debugfs: 'hsr0' already exists in 'hsr' [ 162.613931][T11667] Cannot create hsr debugfs directory [ 162.686055][T11667] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 162.695319][T11667] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 162.705590][T11667] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 162.714684][T11667] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 162.738522][T11667] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.745619][T11667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.753019][T11667] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.760194][T11667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.803157][T11667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.828088][T11667] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.837142][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.847266][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.866110][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.873173][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.882892][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.889995][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.916736][T11667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.927857][T11667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.995243][T11667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.124063][T11667] veth0_vlan: entered promiscuous mode [ 163.133475][T11667] veth1_vlan: entered promiscuous mode [ 163.151198][T11667] veth0_macvtap: entered promiscuous mode [ 163.161425][T11667] veth1_macvtap: entered promiscuous mode [ 163.173049][T11667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.182586][T11667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.197283][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.207259][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.218110][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.226882][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.287430][T11796] loop8: detected capacity change from 0 to 512 [ 163.311086][T11796] EXT4-fs (loop8): 1 truncate cleaned up [ 163.317375][T11796] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.428252][T11796] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3006: bg 0: block 465: padding at end of block bitmap is not set [ 163.442882][T11796] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6686: Corrupt filesystem [ 163.456101][ T12] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.469464][T11667] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.565487][ T12] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.618925][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3027'. [ 163.640940][ T12] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.711755][T11833] SELinux: failed to load policy [ 163.717612][T11836] loop8: detected capacity change from 0 to 128 [ 163.761524][T11836] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.777661][T11845] loop1: detected capacity change from 0 to 512 [ 163.790133][T11836] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.811710][T11845] EXT4-fs (loop1): 1 truncate cleaned up [ 163.820059][T11845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.833135][ T12] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.889576][T11667] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.963074][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3038'. [ 163.994553][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3038'. [ 164.007976][T11822] chnl_net:caif_netlink_parms(): no params data found [ 164.030109][T11845] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3036: bg 0: block 465: padding at end of block bitmap is not set [ 164.045578][T11845] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6686: Corrupt filesystem [ 164.046944][T11853] netlink: 'syz.8.3038': attribute type 6 has an invalid length. [ 164.075244][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.079827][T11857] team0: entered promiscuous mode [ 164.089675][T11857] team_slave_0: entered promiscuous mode [ 164.095548][T11857] team_slave_1: entered promiscuous mode [ 164.120671][ T4866] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.120700][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3038'. [ 164.140675][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3038'. [ 164.149747][T11853] netlink: 'syz.8.3038': attribute type 6 has an invalid length. [ 164.163924][ T4866] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.187119][ T4866] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.216229][T11856] team0: left promiscuous mode [ 164.221705][T11856] team_slave_0: left promiscuous mode [ 164.227904][T11856] team_slave_1: left promiscuous mode [ 164.243973][ T4866] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.356464][T11887] EXT4-fs: Ignoring removed orlov option [ 164.362946][T11887] EXT4-fs: Ignoring removed nobh option [ 164.387327][ T12] bond0 (unregistering): Released all slaves [ 164.396778][T11887] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.397394][T11822] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.416395][T11822] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.423559][T11822] bridge_slave_0: entered allmulticast mode [ 164.430470][T11822] bridge_slave_0: entered promiscuous mode [ 164.437333][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3046'. [ 164.447544][T11822] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.454716][T11822] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.456973][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3046'. [ 164.462307][T11822] bridge_slave_1: entered allmulticast mode [ 164.478173][T11822] bridge_slave_1: entered promiscuous mode [ 164.496580][T11822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.526024][T11822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.556443][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3046'. [ 164.556661][T11822] team0: Port device team_slave_0 added [ 164.576221][T11822] team0: Port device team_slave_1 added [ 164.585652][T11667] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.632464][ T12] hsr_slave_0: left promiscuous mode [ 164.658781][ T12] hsr_slave_1: left promiscuous mode [ 164.683683][T11902] EXT4-fs (loop1): 1 truncate cleaned up [ 164.705396][T11902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.783218][T11909] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3052: bg 0: block 465: padding at end of block bitmap is not set [ 164.813084][T11909] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6686: Corrupt filesystem [ 164.832935][T11822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.840315][T11822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.898710][T11822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.914748][T11822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.921770][T11822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.948124][T11822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.989108][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.074050][T11822] hsr_slave_0: entered promiscuous mode [ 165.083219][ T28] audit: type=1326 audit(1771721398.994:7159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f1f7c629 code=0x7ffc0000 [ 165.097530][T11928] EXT4-fs: Ignoring removed orlov option [ 165.124607][T11822] hsr_slave_1: entered promiscuous mode [ 165.130771][T11928] EXT4-fs: Ignoring removed nobh option [ 165.137562][T11822] debugfs: 'hsr0' already exists in 'hsr' [ 165.147765][T11822] Cannot create hsr debugfs directory [ 165.169897][T11928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.171312][ T28] audit: type=1326 audit(1771721398.994:7160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f42f1f7c629 code=0x7ffc0000 [ 165.307790][ T28] audit: type=1326 audit(1771721398.994:7161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.3.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f1f7c629 code=0x7ffc0000 [ 165.343976][ T12] IPVS: stop unused estimator thread 0... [ 165.365879][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.671890][T11822] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 165.702685][T11822] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 165.736620][T11822] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 165.762216][T11822] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 165.862605][T11822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.878710][T11822] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.894926][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.902017][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.914523][ T4850] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.921585][ T4850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.990988][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 165.991005][ T28] audit: type=1400 audit(1771721399.904:7165): avc: denied { name_bind } for pid=12016 comm="syz.8.3077" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 166.023914][T11822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.125223][T12027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12027 comm=syz.5.3080 [ 166.151971][T11822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.280691][T12044] netlink: 'syz.5.3084': attribute type 1 has an invalid length. [ 166.314680][T12044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.417708][T11822] veth0_vlan: entered promiscuous mode [ 166.425846][T11822] veth1_vlan: entered promiscuous mode [ 166.451967][T11822] veth0_macvtap: entered promiscuous mode [ 166.459584][T11822] veth1_macvtap: entered promiscuous mode [ 166.486740][T11822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.501205][T11822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.515700][ T4850] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.547112][ T4850] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.584564][ T4850] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.623817][T12062] set_capacity_and_notify: 4 callbacks suppressed [ 166.623870][T12062] loop3: detected capacity change from 0 to 512 [ 166.727265][T12062] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.752687][ T4850] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.800710][T12062] EXT4-fs (loop3): 1 truncate cleaned up [ 166.832371][T12062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.875328][T12071] loop1: detected capacity change from 0 to 128 [ 166.893413][T12071] syz.1.3092: attempt to access beyond end of device [ 166.893413][T12071] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 166.934650][T12071] syz.1.3092: attempt to access beyond end of device [ 166.934650][T12071] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 166.949100][T12071] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 166.958029][T12071] syz.1.3092: attempt to access beyond end of device [ 166.958029][T12071] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 166.985971][T12071] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 167.018358][T12071] syz.1.3092: attempt to access beyond end of device [ 167.018358][T12071] loop1: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 167.049090][T12074] SELinux: failed to load policy [ 167.064509][T12071] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 167.074485][T12071] syz.1.3092: attempt to access beyond end of device [ 167.074485][T12071] loop1: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 167.097604][T12071] Buffer I/O error on dev loop1, logical block 78, lost async page write [ 167.116686][T12071] syz.1.3092: attempt to access beyond end of device [ 167.116686][T12071] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 167.148048][T12071] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 167.181439][T12071] syz.1.3092: attempt to access beyond end of device [ 167.181439][T12071] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 167.218972][T12071] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 167.241987][T12075] syz.1.3092: attempt to access beyond end of device [ 167.241987][T12075] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 167.262756][T12083] loop7: detected capacity change from 0 to 512 [ 167.274932][T12075] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 167.299650][T12083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.344384][ T28] audit: type=1400 audit(1771721401.254:7166): avc: denied { unlink } for pid=11822 comm="syz-executor" name="file1" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 167.384504][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.439357][T12088] loop8: detected capacity change from 0 to 128 [ 167.449377][T12090] loop3: detected capacity change from 0 to 512 [ 167.480169][T12088] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.530968][T12090] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3099: iget: bad i_size value: 38620345925642 [ 167.575448][T12090] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.575551][T12088] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.584880][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 167.584897][ C1] EXT4-fs (loop3): initial error at time 1771721401: ext4_orphan_get:1391: inode 15 [ 167.584925][ C1] EXT4-fs (loop3): last error at time 1771721401: ext4_orphan_get:1391: inode 15 [ 167.617261][T12090] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3099: couldn't read orphan inode 15 (err -117) [ 167.643006][T12090] loop3: lost filesystem error report for type 5 error -117 [ 167.643663][T12090] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.679330][T12099] __nla_validate_parse: 4 callbacks suppressed [ 167.679344][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3104'. [ 167.695958][T12090] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3099: bg 0: block 5: invalid block bitmap [ 167.714373][T12090] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 483 with error 28 [ 167.730221][T12090] EXT4-fs (loop3): This should not happen!! Data will be lost [ 167.730221][T12090] [ 167.742106][T12090] EXT4-fs (loop3): Total free blocks count 0 [ 167.748369][T12090] EXT4-fs (loop3): Free/Dirty block details [ 167.754603][T12090] EXT4-fs (loop3): free_blocks=0 [ 167.759717][T12090] EXT4-fs (loop3): dirty_blocks=484 [ 167.765354][T12090] EXT4-fs (loop3): Block reservation details [ 167.771532][T12090] EXT4-fs (loop3): i_reserved_data_blocks=484 [ 167.796923][T11667] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.821710][T12104] 9p: Unknown uid 00000000004294967295 [ 167.860773][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 167.909179][T12110] loop3: detected capacity change from 0 to 128 [ 168.136368][T12118] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3112'. [ 168.146595][T12118] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3112'. [ 168.266496][T12132] syz_tun: entered allmulticast mode [ 168.287058][T12131] syz_tun: left allmulticast mode [ 168.465481][ T28] audit: type=1400 audit(1771721402.384:7167): avc: denied { mounton } for pid=12135 comm="syz.8.3119" path="/proc/44/task" dev="proc" ino=33512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 168.594664][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3121'. [ 168.605915][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3121'. [ 168.657622][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3121'. [ 168.668879][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3121'. [ 168.861902][ T4870] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.880138][T12085] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.187398][T12161] chnl_net:caif_netlink_parms(): no params data found [ 169.261713][T12161] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.277877][T12161] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.292920][T12161] bridge_slave_0: entered allmulticast mode [ 169.304032][T12161] bridge_slave_0: entered promiscuous mode [ 169.326181][T12161] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.341377][T12161] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.376802][T12161] bridge_slave_1: entered allmulticast mode [ 169.390322][T12161] bridge_slave_1: entered promiscuous mode [ 169.409760][T12161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.421014][T12161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.447363][T12161] team0: Port device team_slave_0 added [ 169.454579][T12161] team0: Port device team_slave_1 added [ 169.472354][T12161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.479474][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.506045][T12161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.517342][T12161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.532656][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.568483][T12161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.603719][T12161] hsr_slave_0: entered promiscuous mode [ 169.624648][T12194] loop1: detected capacity change from 0 to 128 [ 169.667408][T12194] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.685265][T12161] hsr_slave_1: entered promiscuous mode [ 169.691224][T12161] debugfs: 'hsr0' already exists in 'hsr' [ 169.697044][T12161] Cannot create hsr debugfs directory [ 169.706648][T12197] sd 0:0:1:0: device reset [ 169.711430][T12194] ext4 filesystem being mounted at /625/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.828466][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.854826][T12208] loop1: detected capacity change from 0 to 512 [ 169.867122][T12208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.135551][T12221] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 170.214128][T12211] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.467231][ T4870] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.517334][ T4870] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.567073][ T4870] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.701291][ T4870] bridge_slave_1: left allmulticast mode [ 170.712791][ T4870] bridge_slave_1: left promiscuous mode [ 170.823664][ T4870] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.832306][ T4870] bridge_slave_0: left allmulticast mode [ 170.841871][ T4870] bridge_slave_0: left promiscuous mode [ 170.855002][ T4870] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.996603][ T4870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.010897][ T4870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.021843][ T4870] bond0 (unregistering): Released all slaves [ 171.078039][ T4870] hsr_slave_0: left promiscuous mode [ 171.085565][ T4870] hsr_slave_1: left promiscuous mode [ 171.091201][ T4870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.099475][ T4870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.107128][ T4870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.115311][ T4870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.127824][ T4870] veth1_macvtap: left promiscuous mode [ 171.133411][ T4870] veth0_macvtap: left promiscuous mode [ 171.139227][ T4870] veth1_vlan: left promiscuous mode [ 171.144558][ T4870] veth0_vlan: left promiscuous mode [ 171.218658][ T4870] team0 (unregistering): Port device team_slave_1 removed [ 171.230472][ T4870] team0 (unregistering): Port device team_slave_0 removed [ 171.566364][ T4874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.577173][ T4874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.619322][T12161] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 171.628316][T12161] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 171.637958][ T4874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.648794][ T4874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.659942][T12161] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 171.668815][T12161] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 171.702238][T12161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.710281][ T4874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.720943][ T4874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.736606][T12161] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.745782][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.752871][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.763402][ T4866] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.770513][ T4866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.779015][ T4874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.790775][ T4874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.896580][ T4874] bond0 (unregistering): Released all slaves [ 171.903994][ T4874] bond1 (unregistering): Released all slaves [ 171.916004][T12161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.956877][ T4874] hsr_slave_0: left promiscuous mode [ 171.962395][ T4874] hsr_slave_1: left promiscuous mode [ 171.974869][ T4874] veth1_macvtap: left allmulticast mode [ 172.044336][ T3692] Bluetooth: hci0: command 0x1003 tx timeout [ 172.044586][ T4128] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 172.098867][T12321] loop8: detected capacity change from 0 to 512 [ 172.140658][T12329] loop3: detected capacity change from 0 to 128 [ 172.154729][T12321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.177499][T12329] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.202425][T12329] ext4 filesystem being mounted at /614/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.291368][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.321397][T12161] veth0_vlan: entered promiscuous mode [ 172.331314][T12161] veth1_vlan: entered promiscuous mode [ 172.353510][T12161] veth0_macvtap: entered promiscuous mode [ 172.379109][T12161] veth1_macvtap: entered promiscuous mode [ 172.405360][ T4874] IPVS: stop unused estimator thread 0... [ 172.423761][T12161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.450763][T12161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.469692][ T4866] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.494811][ T4866] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.503600][ T4866] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.522669][T12338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.530591][T12374] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.545066][ T4862] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.556208][ T4862] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.585181][ T4866] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.643571][ T4862] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.672124][ T4862] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.766437][ T4862] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.790677][ T4862] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.848356][ T4862] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.861599][ T4862] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.878642][T12331] chnl_net:caif_netlink_parms(): no params data found [ 173.090438][ T4862] bridge_slave_1: left allmulticast mode [ 173.100779][ T4862] bridge_slave_1: left promiscuous mode [ 173.118327][ T4862] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.133873][ T4862] bridge_slave_0: left allmulticast mode [ 173.147220][ T4862] bridge_slave_0: left promiscuous mode [ 173.158448][ T4862] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.287321][ T4862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.298875][ T4862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.308300][ T4862] bond0 (unregistering): Released all slaves [ 173.318064][T12331] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.325330][T12331] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.332415][T12331] bridge_slave_0: entered allmulticast mode [ 173.339369][T12331] bridge_slave_0: entered promiscuous mode [ 173.346735][T12331] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.353838][T12331] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.361580][T12331] bridge_slave_1: entered allmulticast mode [ 173.368254][T12331] bridge_slave_1: entered promiscuous mode [ 173.431314][ T4862] hsr_slave_0: left promiscuous mode [ 173.442446][ T4862] hsr_slave_1: left promiscuous mode [ 173.448952][ T4862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.465953][ T4862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.510683][ T4862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.528335][ T4862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.550761][ T4862] veth1_macvtap: left promiscuous mode [ 173.557102][ T4862] veth0_macvtap: left promiscuous mode [ 173.564371][ T4862] veth1_vlan: left promiscuous mode [ 173.573894][ T4862] veth0_vlan: left promiscuous mode [ 173.580425][ T28] audit: type=1400 audit(1771721407.498:7168): avc: denied { mount } for pid=12473 comm="syz.3.3190" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 173.616575][T12475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3189'. [ 173.643240][T12467] loop7: detected capacity change from 0 to 512 [ 173.662240][T12467] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 173.731079][T12467] EXT4-fs (loop7): 1 truncate cleaned up [ 173.742489][T12467] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.776797][ T4862] team0 (unregistering): Port device team_slave_1 removed [ 173.787709][ T4862] team0 (unregistering): Port device team_slave_0 removed [ 173.850783][T12161] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.864960][T12331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.900708][T12331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.913945][T12382] chnl_net:caif_netlink_parms(): no params data found [ 173.968287][T12331] team0: Port device team_slave_0 added [ 173.980559][T12493] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 173.985968][T12331] team0: Port device team_slave_1 added [ 174.034962][T12331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.044113][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.070373][T12331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.088014][T12331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.095366][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.122010][T12331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.133346][T12382] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.140619][T12382] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.147871][T12382] bridge_slave_0: entered allmulticast mode [ 174.154932][T12382] bridge_slave_0: entered promiscuous mode [ 174.189260][T12382] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.196693][T12382] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.203815][T12382] bridge_slave_1: entered allmulticast mode [ 174.210924][T12382] bridge_slave_1: entered promiscuous mode [ 174.219550][T12331] hsr_slave_0: entered promiscuous mode [ 174.227856][T12331] hsr_slave_1: entered promiscuous mode [ 174.233751][T12331] debugfs: 'hsr0' already exists in 'hsr' [ 174.240177][T12331] Cannot create hsr debugfs directory [ 174.280298][T12382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.302184][T12382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.368295][T12382] team0: Port device team_slave_0 added [ 174.385259][T12382] team0: Port device team_slave_1 added [ 174.436996][T12382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.444048][T12382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.515113][T12382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.557951][T12382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.565059][T12382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.622440][T12382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.673349][T12382] hsr_slave_0: entered promiscuous mode [ 174.680627][T12382] hsr_slave_1: entered promiscuous mode [ 174.686902][T12382] debugfs: 'hsr0' already exists in 'hsr' [ 174.692658][T12382] Cannot create hsr debugfs directory [ 174.815982][T12331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.828799][T12331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.841788][T12382] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 174.855131][T12331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.875054][T12382] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 174.896185][T12331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.906536][T12382] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 174.944438][T12382] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 175.074071][T12331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.112159][T12331] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.125375][T12382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.133116][ T4862] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.140229][ T4862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.163406][T12382] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.172265][ T4866] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.179382][ T4866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.207159][ T4866] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.214263][ T4866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.237514][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.244633][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.275926][T12331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.287977][T12331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.380120][T12382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.423688][T12331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.552440][T12331] veth0_vlan: entered promiscuous mode [ 175.561296][T12331] veth1_vlan: entered promiscuous mode [ 175.598338][T12331] veth0_macvtap: entered promiscuous mode [ 175.623863][T12382] veth0_vlan: entered promiscuous mode [ 175.637325][T12331] veth1_macvtap: entered promiscuous mode [ 175.649134][T12331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.658074][T12331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.672427][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.685117][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.706649][T12382] veth1_vlan: entered promiscuous mode [ 175.712710][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.721479][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.758718][T12382] veth0_macvtap: entered promiscuous mode [ 175.770865][T12382] veth1_macvtap: entered promiscuous mode [ 175.788034][T12382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.868401][ T28] audit: type=1400 audit(1771721409.765:7169): avc: denied { ioctl } for pid=12632 comm="syz.3.3213" path="socket:[35378]" dev="sockfs" ino=35378 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.887473][T12382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.960561][ T4850] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.977730][ T4850] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.055370][ T4850] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.085293][ T4862] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.160609][ T28] audit: type=1400 audit(1771721410.075:7170): avc: denied { remount } for pid=12652 comm="syz.7.3215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 176.228899][ T28] audit: type=1400 audit(1771721410.135:7171): avc: denied { name_bind } for pid=12659 comm="syz.5.3216" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 176.232164][ T7792] IPVS: starting estimator thread 0... [ 176.327828][T12655] loop9: detected capacity change from 0 to 512 [ 176.373005][T12655] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 176.384554][T12665] IPVS: using max 2640 ests per chain, 132000 per kthread [ 176.422438][T12655] EXT4-fs (loop9): 1 truncate cleaned up [ 176.453867][T12655] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.598103][ T28] audit: type=1400 audit(1771721410.515:7172): avc: denied { unmount } for pid=12161 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 176.684092][T12707] loop3: detected capacity change from 0 to 512 [ 176.712096][T12707] EXT4-fs: Ignoring removed orlov option [ 176.731807][T12707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.763127][T12707] EXT4-fs (loop3): orphan cleanup on readonly fs [ 176.776405][ T28] audit: type=1400 audit(1771721410.695:7173): avc: denied { unmount } for pid=12161 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 176.776932][T12382] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.807517][T12707] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3222: bg 0: block 248: padding at end of block bitmap is not set [ 176.831275][T12707] loop3: lost filesystem error report for type 5 error -117 [ 176.831477][T12707] Quota error (device loop3): write_blk: dquota write failed [ 176.838862][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 176.838880][ C1] EXT4-fs (loop3): last error at time 1771721410: ext4_validate_block_bitmap:441 [ 176.873536][T12707] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 176.880011][T12722] tipc: Started in network mode [ 176.891042][T12707] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.3222: Failed to acquire dquot type 1 [ 176.902520][T12707] loop3: lost filesystem error report for type 5 error -117 [ 176.905727][T12722] tipc: Node identity ac1414aa, cluster identity 4711 [ 176.921075][T12707] EXT4-fs (loop3): 1 truncate cleaned up [ 176.934689][T12707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.953777][T12725] loop9: detected capacity change from 0 to 512 [ 176.965117][T12722] tipc: Enabled bearer , priority 10 [ 176.993644][T12725] FAT-fs (loop9): Directory bread(block 199916) failed [ 177.002886][T12707] EXT4-fs error (device loop3): __ext4_remount:6804: comm syz.3.3222: Abort forced by user [ 177.030124][T12725] FAT-fs (loop9): Directory bread(block 199917) failed [ 177.034973][T12707] EXT4-fs (loop3): Remounting filesystem read-only [ 177.039764][T12725] FAT-fs (loop9): Directory bread(block 199918) failed [ 177.050589][T12725] FAT-fs (loop9): Directory bread(block 199919) failed [ 177.058242][ T28] audit: type=1400 audit(1771721410.975:7174): avc: denied { unmount } for pid=12161 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 177.080352][T12707] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 177.102193][T12725] FAT-fs (loop9): Directory bread(block 199920) failed [ 177.114325][T12725] FAT-fs (loop9): Directory bread(block 199921) failed [ 177.146087][T12725] FAT-fs (loop9): Directory bread(block 199922) failed [ 177.153194][T12725] FAT-fs (loop9): Directory bread(block 199923) failed [ 177.211265][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.262908][T12725] FAT-fs (loop9): FAT read failed (blocknr 128) [ 177.284019][T12759] 9p: Bad value for 'rfdno' [ 177.578468][T12795] loop9: detected capacity change from 0 to 512 [ 177.611482][T12795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.655070][T12795] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.675215][T12802] netlink: 'syz.5.3242': attribute type 12 has an invalid length. [ 177.703574][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3242'. [ 177.712889][T12795] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.3241: corrupted xattr block 33: overlapping e_value [ 177.735963][T12802] netlink: 'syz.5.3242': attribute type 12 has an invalid length. [ 177.796673][T12795] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 177.806062][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3242'. [ 177.815594][T12806] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.3241: corrupted xattr block 33: overlapping e_value [ 177.843923][T12795] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.3241: corrupted xattr block 33: overlapping e_value [ 177.932464][T12806] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 177.942578][ T28] audit: type=1400 audit(1771721411.855:7175): avc: denied { listen } for pid=12810 comm="syz.5.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.963026][T12795] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 178.044911][T12382] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.094356][ T7845] tipc: Node number set to 2886997162 [ 178.353747][T12842] loop1: detected capacity change from 0 to 2048 [ 178.409883][T12842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.534167][T12331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.617915][T12872] loop9: detected capacity change from 0 to 128 [ 178.652747][T12872] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.719097][T12872] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.789503][T12889] af_packet: tpacket_rcv: packet too big, clamped from 2902 to 4294967280. macoff=96 [ 178.817635][T12872] EXT4-fs error (device loop9): dx_make_map:1296: inode #2: block 20: comm syz.9.3257: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=0 [ 178.862760][T12896] loop1: detected capacity change from 0 to 128 [ 178.874828][T12872] EXT4-fs error (device loop9) in do_split:2027: Corrupt filesystem [ 178.906499][T12896] syz.1.3264: attempt to access beyond end of device [ 178.906499][T12896] loop1: rw=1, sector=145, nr_sectors = 65 limit=128 [ 178.948326][T12382] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.987753][T12903] loop1: detected capacity change from 0 to 512 [ 179.021982][T12901] netlink: 'syz.9.3265': attribute type 4 has an invalid length. [ 179.031544][T12903] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.076078][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 179.076092][ T28] audit: type=1400 audit(1771721412.985:7177): avc: denied { setopt } for pid=12905 comm="syz.5.3267" lport=46713 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 179.122732][T12911] netlink: 'syz.9.3265': attribute type 4 has an invalid length. [ 179.613010][T12927] syzkaller1: entered promiscuous mode [ 179.622496][T12927] syzkaller1: entered allmulticast mode [ 180.033768][T12949] IPv4: Oversized IP packet from 127.202.26.0 [ 180.383653][T12968] xt_hashlimit: size too large, truncated to 1048576 [ 180.491651][ T28] audit: type=1326 audit(1771721414.405:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12973 comm="syz.5.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9925d3c629 code=0x7ffc0000 [ 180.568619][ T28] audit: type=1326 audit(1771721414.435:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12973 comm="syz.5.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9925d3c629 code=0x7ffc0000 [ 180.583235][T12974] loop1: detected capacity change from 0 to 2048 [ 180.602903][ T28] audit: type=1326 audit(1771721414.435:7180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12973 comm="syz.5.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9925d3c629 code=0x7ffc0000 [ 180.674847][T12974] Alternate GPT is invalid, using primary GPT. [ 180.681306][T12974] loop1: p2 p3 p7 [ 180.685837][ T28] audit: type=1326 audit(1771721414.435:7181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12973 comm="syz.5.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9925d3c629 code=0x7ffc0000 [ 181.751644][T13022] loop9: detected capacity change from 0 to 2048 [ 181.777438][T13022] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.821612][T12382] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.937506][T13029] loop3: detected capacity change from 0 to 1024 [ 181.955575][T13029] EXT4-fs: Ignoring removed orlov option [ 181.985081][T13029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.010802][T13029] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c118, mo2=0002] [ 182.045380][T13029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.081423][ T28] audit: type=1400 audit(1771721415.995:7182): avc: denied { mounton } for pid=13028 comm="syz.3.3319" path="/648/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 182.134967][T13029] loop3: detected capacity change from 1024 to 64 [ 182.198110][ T3310] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /648/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 182.261345][ T28] audit: type=1400 audit(1771721416.175:7183): avc: denied { getopt } for pid=13043 comm="syz.5.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.662496][T10804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.683687][T13032] kmmpd-loop3: attempt to access beyond end of device [ 182.683687][T13032] loop3: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 182.721956][T13032] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 182.817518][ T4853] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.836634][ T4853] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.917627][ T4853] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.963048][ T4853] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.065841][ T4853] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.090700][ T4853] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.215671][ T4853] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.232599][ T4853] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.374420][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3341'. [ 183.487355][ T4853] bond0 (unregistering): Released all slaves [ 183.543385][T13076] chnl_net:caif_netlink_parms(): no params data found [ 183.567174][ T4853] tipc: Disabling bearer [ 183.577580][ T4853] tipc: Left network mode [ 183.656292][ T4853] hsr_slave_0: left promiscuous mode [ 183.677419][ T4853] hsr_slave_1: left promiscuous mode [ 183.744777][T13112] netlink: 'syz.5.3345': attribute type 4 has an invalid length. [ 183.797729][T13117] netlink: 'syz.5.3345': attribute type 4 has an invalid length. [ 183.886918][T13076] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.896260][T13076] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.914444][T13076] bridge_slave_0: entered allmulticast mode [ 183.920850][T13076] bridge_slave_0: entered promiscuous mode [ 183.938083][T13076] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.954364][T13076] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.971620][T13076] bridge_slave_1: entered allmulticast mode [ 183.982233][T13076] bridge_slave_1: entered promiscuous mode [ 184.049031][T13076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.084157][T13076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.135749][T13076] team0: Port device team_slave_0 added [ 184.150860][T13076] team0: Port device team_slave_1 added [ 184.202707][T13076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.220365][T13076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.281625][T13076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.304981][T13076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.322650][T13076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.363940][T13076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.387837][ T4853] IPVS: stop unused estimator thread 0... [ 184.440721][T13076] hsr_slave_0: entered promiscuous mode [ 184.446938][T13076] hsr_slave_1: entered promiscuous mode [ 184.452776][T13076] debugfs: 'hsr0' already exists in 'hsr' [ 184.458623][T13076] Cannot create hsr debugfs directory [ 184.689514][T13076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.723648][T13076] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.754813][ T4850] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.762008][ T4850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.833083][ T4850] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.840272][ T4850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.035498][T13076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.390950][T13076] veth0_vlan: entered promiscuous mode [ 185.416681][T13076] veth1_vlan: entered promiscuous mode [ 185.452422][T13076] veth0_macvtap: entered promiscuous mode [ 185.476311][T13076] veth1_macvtap: entered promiscuous mode [ 185.495721][T13076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.515786][T13076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.692521][T13225] loop9: detected capacity change from 0 to 1024 [ 186.035022][T13225] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.627404][T13238] netlink: 'syz.2.3358': attribute type 4 has an invalid length. [ 186.648310][T13238] netlink: 'syz.2.3358': attribute type 4 has an invalid length. [ 187.127125][T13241] No such timeout policy "syz1" [ 188.710772][T12382] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.792961][T13331] loop9: detected capacity change from 0 to 8192 [ 191.864031][T12382] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 191.886028][T12382] FAT-fs (loop9): Filesystem has been set read-only [ 191.970034][ T4850] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.037891][ T4850] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.102159][ T4850] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.159157][T13334] chnl_net:caif_netlink_parms(): no params data found [ 192.178987][ T4850] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.254632][T13334] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.271864][T13334] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.284578][T13334] bridge_slave_0: entered allmulticast mode [ 192.291381][T13334] bridge_slave_0: entered promiscuous mode [ 192.298300][T13334] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.305620][T13334] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.313059][T13334] bridge_slave_1: entered allmulticast mode [ 192.319662][T13334] bridge_slave_1: entered promiscuous mode [ 192.337454][T13334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.373269][T13334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.411079][T13334] team0: Port device team_slave_0 added [ 192.418478][T13334] team0: Port device team_slave_1 added [ 192.475492][ T4850] bridge_slave_1: left allmulticast mode [ 192.481345][ T4850] bridge_slave_1: left promiscuous mode [ 192.504429][ T4850] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.515227][ T4850] bridge_slave_0: left allmulticast mode [ 192.520893][ T4850] bridge_slave_0: left promiscuous mode [ 192.533035][ T4850] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.772284][ T4850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.804756][ T4850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.945184][ T4850] bond0 (unregistering): Released all slaves [ 192.958028][T13334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.974345][T13334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.034344][T13334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.055504][T13334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.062676][T13334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.154321][T13334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.192098][ T4850] hsr_slave_0: left promiscuous mode [ 193.205120][ T4850] hsr_slave_1: left promiscuous mode [ 193.210762][ T4850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.234377][ T4850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.249299][ T4850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.265555][ T4850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.287502][ T4850] veth1_macvtap: left promiscuous mode [ 193.293088][ T4850] veth0_macvtap: left promiscuous mode [ 193.314439][ T4850] veth1_vlan: left promiscuous mode [ 193.319764][ T4850] veth0_vlan: left promiscuous mode [ 193.480238][ T4850] team0 (unregistering): Port device team_slave_1 removed [ 193.497102][ T4850] team0 (unregistering): Port device team_slave_0 removed [ 193.656424][T13334] hsr_slave_0: entered promiscuous mode [ 193.663240][T13334] hsr_slave_1: entered promiscuous mode [ 193.674960][T13334] debugfs: 'hsr0' already exists in 'hsr' [ 193.680814][T13334] Cannot create hsr debugfs directory [ 194.002388][T13334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.049298][T13334] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.098102][ T4850] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.104498][ T28] audit: type=1400 audit(1771721428.005:7184): avc: denied { setopt } for pid=13412 comm="syz.5.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 194.105374][ T4850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.134001][ T4850] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.141096][ T4850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.301863][T13334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.596043][T13334] veth0_vlan: entered promiscuous mode [ 194.604004][T13334] veth1_vlan: entered promiscuous mode [ 194.637630][T13334] veth0_macvtap: entered promiscuous mode [ 194.655118][T13334] veth1_macvtap: entered promiscuous mode [ 194.680812][T13334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.709268][T13334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.718318][T13478] loop9: detected capacity change from 0 to 1024 [ 195.774822][T13478] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 195.797040][T13478] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.814975][T13478] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: block 3: comm syz.9.3392: lblock 3 mapped to illegal pblock 3 (length 3) [ 195.830384][T13478] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 195.842858][T13478] EXT4-fs (loop9): This should not happen!! Data will be lost [ 195.842858][T13478] [ 195.855230][T13478] EXT4-fs error (device loop9): ext4_ext_remove_space:2954: inode #15: comm syz.9.3392: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 195.874777][T13478] EXT4-fs error (device loop9) in ext4_setattr:5983: Corrupt filesystem [ 195.891012][T13478] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: comm syz.9.3392: lblock 0 mapped to illegal pblock 0 (length 1) [ 195.917841][T13481] loop4: detected capacity change from 0 to 512 [ 195.941196][T12382] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.950282][T13481] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.971713][T13481] EXT4-fs (loop4): 1 truncate cleaned up [ 196.020518][ T28] audit: type=1400 audit(1771721429.925:7185): avc: denied { read } for pid=13488 comm="syz.9.3395" path="socket:[38883]" dev="sockfs" ino=38883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 196.056722][T13481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.249481][ T4853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.261257][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3396'. [ 196.278408][T13334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.396365][ T4853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.452748][ T4853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.487842][T13521] loop4: detected capacity change from 0 to 512 [ 196.522616][T13521] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3405: inode has both inline data and extents flags [ 196.544728][T13521] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 196.545136][T13521] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3405: couldn't read orphan inode 15 (err -117) [ 196.554413][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 196.554427][ C1] EXT4-fs (loop4): initial error at time 1771721430: ext4_orphan_get:1391: inode 15 [ 196.554453][ C1] EXT4-fs (loop4): last error at time 1771721430: ext4_orphan_get:1391: inode 15 [ 196.630229][T13521] loop4: lost filesystem error report for type 5 error -117 [ 196.630886][T13521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 196.654357][ T4853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.727494][T13490] chnl_net:caif_netlink_parms(): no params data found [ 196.841894][T13490] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.863409][T13490] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.871682][T13334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 196.882737][T13490] bridge_slave_0: entered allmulticast mode [ 196.918554][T13490] bridge_slave_0: entered promiscuous mode [ 196.918723][ T28] audit: type=1400 audit(1771721430.835:7186): avc: denied { watch watch_reads } for pid=13566 comm="syz.4.3415" path="/7/file1" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 196.926330][T13490] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.955154][T13490] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.964140][T13490] bridge_slave_1: entered allmulticast mode [ 196.970544][T13490] bridge_slave_1: entered promiscuous mode [ 197.032197][T13490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.098633][T13490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.123260][ T28] audit: type=1400 audit(1771721431.035:7187): avc: denied { ioctl } for pid=13588 comm="syz.5.3422" path="socket:[39195]" dev="sockfs" ino=39195 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 197.178622][T13490] team0: Port device team_slave_0 added [ 197.195393][T13490] team0: Port device team_slave_1 added [ 197.228733][T13490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.254346][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.322474][T13490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.392933][T13490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.411178][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.506282][T13490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.530961][T13628] loop9: detected capacity change from 0 to 764 [ 197.555223][T13628] Symlink component flag not implemented [ 197.561219][T13628] Symlink component flag not implemented (129) [ 197.581916][T13628] rock: directory entry would overflow storage [ 197.591160][T13628] rock: sig=0x4f50, size=4, remaining=3 [ 197.599291][T13628] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 197.612537][T13490] hsr_slave_0: entered promiscuous mode [ 197.625632][T13490] hsr_slave_1: entered promiscuous mode [ 197.635987][T13490] debugfs: 'hsr0' already exists in 'hsr' [ 197.647618][T13490] Cannot create hsr debugfs directory [ 197.830814][T13490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.861381][T13490] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.870455][T13667] loop9: detected capacity change from 0 to 512 [ 197.880959][ T4860] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.888060][ T4860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.915586][ T28] audit: type=1400 audit(1771721431.835:7188): avc: denied { remount } for pid=13665 comm="syz.9.3442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 197.951944][ T4860] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.959091][ T4860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.008474][T13490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.025002][T13490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.087836][T13490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.216550][ T4853] bridge_slave_1: left allmulticast mode [ 198.231735][ T4853] bridge_slave_1: left promiscuous mode [ 198.244519][ T4853] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.254592][ T4853] bridge_slave_0: left allmulticast mode [ 198.260308][ T4853] bridge_slave_0: left promiscuous mode [ 198.275701][ T4853] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.479067][ T4853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.489887][ T4853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.520374][ T4853] bond0 (unregistering): Released all slaves [ 198.586852][ T4853] hsr_slave_0: left promiscuous mode [ 198.615092][ T4853] hsr_slave_1: left promiscuous mode [ 198.620838][ T4853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.644359][ T4853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.694801][ T4853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.702335][ T4853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.747635][ T4853] veth1_macvtap: left promiscuous mode [ 198.753181][ T4853] veth0_macvtap: left promiscuous mode [ 198.764763][ T4853] veth1_vlan: left promiscuous mode [ 198.770020][ T4853] veth0_vlan: left promiscuous mode [ 198.873564][T13737] loop4: detected capacity change from 0 to 512 [ 198.909522][T13737] EXT4-fs (loop4): orphan cleanup on readonly fs [ 198.927691][T13737] EXT4-fs (loop4): 1 orphan inode deleted [ 198.934041][T13737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 198.952291][ T28] audit: type=1400 audit(1771721432.865:7189): avc: denied { watch watch_reads } for pid=13736 comm="syz.4.3460" path="/16/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.022684][ T4853] team0 (unregistering): Port device team_slave_1 removed [ 199.030076][T13334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.045719][ T4853] team0 (unregistering): Port device team_slave_0 removed [ 199.151001][T13746] pimreg: entered allmulticast mode [ 199.163178][T13749] pimreg: left allmulticast mode [ 199.243180][T13490] veth0_vlan: entered promiscuous mode [ 199.265900][T13490] veth1_vlan: entered promiscuous mode [ 199.298460][T13490] veth0_macvtap: entered promiscuous mode [ 199.318767][T13490] veth1_macvtap: entered promiscuous mode [ 199.342484][T13490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.366799][T13490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.430614][ T4853] IPVS: stop unused estimator thread 0... [ 199.668673][T13807] loop0: detected capacity change from 0 to 512 [ 199.714386][T13807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.946622][T13841] loop4: detected capacity change from 0 to 512 [ 199.981909][T13841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.025172][T13841] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.087075][T13490] ================================================================== [ 200.095195][T13490] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 200.102590][T13490] [ 200.104924][T13490] read-write to 0xffff88811b168478 of 8 bytes by interrupt on cpu 1: [ 200.113000][T13490] __xa_clear_mark+0xf5/0x1e0 [ 200.117685][T13490] __folio_end_writeback+0xf4/0x360 [ 200.122898][T13490] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 200.129159][T13490] folio_end_writeback+0x1c/0x70 [ 200.134105][T13490] ext4_finish_bio+0x459/0x8b0 [ 200.138885][T13490] ext4_end_bio+0x27b/0x380 [ 200.143397][T13490] bio_endio+0x38a/0x420 [ 200.147655][T13490] blk_update_request+0x338/0x740 [ 200.152699][T13490] blk_mq_end_request+0x26/0x50 [ 200.157583][T13490] lo_complete_rq+0x98/0x140 [ 200.162193][T13490] blk_done_softirq+0x77/0xb0 [ 200.166878][T13490] handle_softirqs+0xb9/0x2a0 [ 200.171560][T13490] run_ksoftirqd+0x1c/0x30 [ 200.175992][T13490] smpboot_thread_fn+0x32a/0x510 [ 200.180941][T13490] kthread+0x22a/0x280 [ 200.185030][T13490] ret_from_fork+0x150/0x360 [ 200.189637][T13490] ret_from_fork_asm+0x1a/0x30 [ 200.194421][T13490] [ 200.196759][T13490] read to 0xffff88811b168478 of 8 bytes by task 13490 on cpu 0: [ 200.204398][T13490] xas_find_marked+0x213/0x620 [ 200.209185][T13490] filemap_get_folios_tag+0xfa/0x510 [ 200.214474][T13490] filemap_fdatawait_keep_errors+0x6c/0x190 [ 200.220408][T13490] sync_inodes_sb+0x40e/0x4c0 [ 200.225117][T13490] sync_filesystem+0x102/0x190 [ 200.229895][T13490] generic_shutdown_super+0x4c/0x220 [ 200.235200][T13490] kill_block_super+0x2a/0x70 [ 200.239893][T13490] ext4_kill_sb+0x42/0x80 [ 200.244248][T13490] deactivate_locked_super+0x75/0x1c0 [ 200.249642][T13490] deactivate_super+0x97/0xa0 [ 200.254329][T13490] cleanup_mnt+0x2bb/0x330 [ 200.258760][T13490] __cleanup_mnt+0x19/0x20 [ 200.263189][T13490] task_work_run+0x130/0x1a0 [ 200.267789][T13490] exit_to_user_mode_loop+0x1f4/0x6f0 [ 200.273165][T13490] do_syscall_64+0x249/0x370 [ 200.277773][T13490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.283675][T13490] [ 200.286005][T13490] value changed: 0x03fff80000000000 -> 0x0380000000000000 [ 200.293113][T13490] [ 200.295442][T13490] Reported by Kernel Concurrency Sanitizer on: [ 200.301625][T13490] CPU: 0 UID: 0 PID: 13490 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 200.312740][T13490] Tainted: [W]=WARN [ 200.316550][T13490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.326626][T13490] ================================================================== [ 200.362716][T13490] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.393048][T13334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.431671][ T28] audit: type=1326 audit(1771721434.345:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a8b8c629 code=0x7ffc0000 [ 200.485563][ T28] audit: type=1326 audit(1771721434.345:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a8b8c629 code=0x7ffc0000 [ 200.513184][ T28] audit: type=1326 audit(1771721434.345:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f88a8b8c629 code=0x7ffc0000 [ 200.541288][ T28] audit: type=1326 audit(1771721434.345:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88a8b4cece code=0x7ffc0000 [ 200.576991][ T28] audit: type=1326 audit(1771721434.345:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a8b8c629 code=0x7ffc0000 [ 200.600974][ T28] audit: type=1326 audit(1771721434.345:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f88a8b8c629 code=0x7ffc0000 [ 200.624898][ T28] audit: type=1326 audit(1771721434.345:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a8b8c629 code=0x7ffc0000 [ 200.648599][ T28] audit: type=1326 audit(1771721434.345:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a8b8c629 code=0x7ffc0000