last executing test programs: 12.432642481s ago: executing program 2 (id=2103): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) keyctl$session_to_parent(0x12) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r3, r2}}, 0x18) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000240)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001f000701000000000000000002"], 0x18}}, 0x0) 12.30966504s ago: executing program 2 (id=2108): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRES8=0x0], 0x48}, 0x1, 0x0, 0x0, 0x20004064}, 0x4000) socket$qrtr(0x2a, 0x2, 0x0) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x3695, &(0x7f0000000080)={0x0, 0x0, 0x13790}, &(0x7f00000004c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001900)=@IORING_OP_SEND={0x1a, 0x2e, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="e6", 0x1}) io_uring_enter(r4, 0x6256, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 12.24355782s ago: executing program 2 (id=2111): r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000}, 0x14) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000007c0)={{}, 0x0, 0xc, @unused=[0x1, 0x84c, 0x742, 0x1], @devid}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x80000}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x0, 0x0, 0x114}) 12.159950954s ago: executing program 2 (id=2114): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) io_setup(0x7f, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, r0}]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) r4 = accept$inet(r2, &(0x7f0000000140)={0x2, 0x0, @private}, &(0x7f00000001c0)=0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x0, 0x0, 0xe0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'bond0\x00', 'vlan0\x00'}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9f78fc648d7258fd8a8259763563246f05ba6100c94aa82ea45fa15dd7a0"}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) open(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='!=u&\'\'\t|\t') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008811}, 0x4) 12.070363887s ago: executing program 2 (id=2120): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x496, &(0x7f0000000f40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffa702000008000000b70300000000ec"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000004c0)='ext4_error\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 11.863797519s ago: executing program 2 (id=2130): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300081a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0xd, 0x2a0, &(0x7f0000000840)="$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") ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x11, r1, 0x0, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000000000008400000008000000fe8000000000004000000000000000bb180000000000000084000000"], 0x38}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="20000000000000008400000002000000000000000000000000000000ceafa308ac9bbc51d00e1a7fd74dec9154665386775460a423f1e6d95aeea63d74531e787bd1038f872c0260a73c38fe5166b19f1ce8c3a275f6ba965a", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r4 = memfd_create(&(0x7f00000002c0)='system.skckpr\x02\x13otonam', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x4000051, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000079109000000000006300000000000000950000000000000021e0311f5496d85f2dae4d09b4b8b167164a080cb24850d3b7708365a91054dbc3a1ad1e2e57a41720490d8570e50577e928bcaaad65cf1fdd6e9d41488cfe33ac9785ed2fa694ef77dbc599ded5348b005c657eea3ff547022d54e75949ff9fc9c36adc68fcf261bcfa661f64b57792d23ce41cfe38ec3fdedb5226897a0cba56982e9bc90531aeb41f85b9fb8a5272bfc9e06f36"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_misc(r4, &(0x7f0000000a00)=ANY=[@ANYRESHEX, @ANYRES8, @ANYBLOB="6aaabe2acede90216f6f7cbc28f8e32613f41ae6a2eabf4dbbd21cb5137fda5705946dbabc90cd5cb72c14021e22626e2cb88e26c4a4aff78ac0d09badd6", @ANYBLOB="d9b6c5cf0c703768681c901ef953cb5e1afc1903e4af091caef73b57b932130ed229e03c860b485aa605f3a59415c5"], 0x100) symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1.95292693s ago: executing program 3 (id=2333): r0 = creat(&(0x7f0000000000)='./file1\x00', 0x100) signalfd4(r0, &(0x7f0000000100)={[0x6]}, 0x8, 0x800) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x2000012, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcba170b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52d6d99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2", @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES8=r0, @ANYRES8, @ANYRESOCT, @ANYRES32, @ANYBLOB="c5c52941a9eacffa0b431af409dfbeb2db5c161e5c6e82e2d0d596cc5c556407e8da8bc3b5848e4e650bd1261a5f9c182652ca463adc1b0fd75c7e4e8a91"], 0x1, 0x2a7, &(0x7f0000000740)="$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") (async) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x2000012, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES8=r0, @ANYRES8, @ANYRESOCT, @ANYRES32, @ANYBLOB="c5c52941a9eacffa0b431af409dfbeb2db5c161e5c6e82e2d0d596cc5c556407e8da8bc3b5848e4e650bd1261a5f9c182652ca463adc1b0fd75c7e4e8a91"], 0x1, 0x2a7, &(0x7f0000000740)="$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") r1 = memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xf) r2 = fcntl$dupfd(r1, 0x0, r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000005, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x120, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf0, 0x2, {{0x2, 0x0, 0x2, 0x4, 0x80000001, 0xffffffff}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x319066248503038}, @TCA_NETEM_LOSS={0xbc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x20, 0x3, 0x7, 0xfff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x9, 0x2, 0x3, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x8, 0x0, 0x8000, 0xffffff5b}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0x7, 0x800, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0xc00000, 0x3ff, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x0, 0x80000000, 0xffff, 0x200}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x0, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0x40000000, 0x4, 0xfff, 0x6, 0x50000000}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x3f, 0x7ff}}]}}}]}, 0x120}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x120, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf0, 0x2, {{0x2, 0x0, 0x2, 0x4, 0x80000001, 0xffffffff}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x319066248503038}, @TCA_NETEM_LOSS={0xbc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x20, 0x3, 0x7, 0xfff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x9, 0x2, 0x3, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x8, 0x0, 0x8000, 0xffffff5b}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0x7, 0x800, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0xc00000, 0x3ff, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x0, 0x80000000, 0xffff, 0x200}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x0, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0x40000000, 0x4, 0xfff, 0x6, 0x50000000}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x3f, 0x7ff}}]}}}]}, 0x120}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a500000023"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r5}, 0x10) migrate_pages(0x0, 0x6, &(0x7f0000001300), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) fgetxattr(r6, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000180)=""/42, 0x2a) (async) fgetxattr(r6, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000180)=""/42, 0x2a) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x48101, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r10, 0x0, 0x0) getdents64(r10, 0x0, 0x18) (async) getdents64(r10, 0x0, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchdir(r8) (async) fchdir(r8) close_range(r9, 0xffffffffffffffff, 0x0) (async) close_range(r9, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x400000) (async) ftruncate(r1, 0x400000) 1.848873176s ago: executing program 3 (id=2337): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140e, 0x46ae4a4ee254eb43, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x1) getpgid(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, r3, 0x0) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000980)="90098191c709ef69e66627d05d25baf97c97e371b8eb48e07439c5af6ab3f2a6debf34d91d47154ae432d84352ac", 0x2e}], 0x1}}], 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000d40)="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", 0x185}, {0x0}, {&(0x7f00000002c0)="f90c74c50c2a3d01d9f7380ef3641da5a3162524dc9a42e2f9f9e551eb62bf7e71b8c067472bd69f725384599dcaacd05afd", 0x32}, {&(0x7f0000000140)="55606d8b6f115d05986e005681e23356f64ef32a778649574417205c9a8748cfd22274375ad54b2aafffe603da2ac69980435235b07c8324c9af5f93f19b591c3db14b3f9c64aad891715c5a96c50d4fe7ad480fc2db7ae8234febe287d8", 0x5e}, {&(0x7f0000000540)}], 0x5}, 0x44) getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000800)={{}, {}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x0, 0xee01}, {}], {0x4, 0x1}, [{0x8, 0x1, 0xee01}, {0x8, 0x4, 0xee01}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x2, 0xee00}], {0x10, 0x3}, {0x20, 0x4}}, 0x6c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000060000000000000802000000000000000000000d00000000000000006f6100337ccfd5ff6ab6a3d521e9f48d8c314ce42d374922f8fcf762ac72e8571d62118e293d692e063730cb82a07048cf30cf63724d1cdfc867f8485894f813650e91d5dc1dd8b4a488e84c9423c7e06854e09b3f2c1134d5a00ff263c9d085265783fbed071d68ae7e67674357f17bfca82a9c62a9e5f2581ba0f3d6c9b773e403a1622ad858049b2a8f57c1e214036b97942ba635a95cf8617b751381a92dd066891454457db925eeecdeee"], 0x0, 0x37, 0x0, 0x1}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x2, 0x6}, 0xfffffffffffffdd9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r6, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x20}}, 0x0) dup3(r8, r9, 0x0) 1.610413793s ago: executing program 3 (id=2347): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x640481, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x413, &(0x7f0000000100)={[{@bh}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfshat}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") r2 = getpgrp(0x0) rt_sigqueueinfo(r2, 0x7, &(0x7f0000000000)={0x2, 0xb8a6, 0x4}) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="5b37182347bc130c937beae886dd609d008000183aff20010000000000000000000000000001ff0200287b000000000000000004000187009078fe8045de000000000000000000e9cfb09f0d935dd60000aa00007ca783a619517ee3ae5d13d17837ad9af19ca9c9def7b2183e1b7bd4425fdf95c76233a18a278cd92e7ac27bacec2580737dc1771cf447f03643c94939881a333d2b889d93f7ef"], 0x0) sendmsg(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d00)="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", 0xfff}, {&(0x7f0000000300)}, {&(0x7f0000001d00)="2f73ad73f90e384c966d33e475c915f4e0b2fdc488b1f43004da1132a3c0d9916f667cadb9419c1591f44c94c0a1c9fb2acae95cb1583b76c3e70a1b8fdb1e7fce444fa1005e1530e114b9cc301bd0afe473577b3bac37174beeffa34daa5d1853651ca5ce55b824e762488b80f3b316379fa17e33ce27b300370fa63e7ed3b3fd99e375f7a2f0335a35612781f5540a584117c6fce7e05eddcc876c5b530ea7e8c988172696efe642ec", 0xaa}, {&(0x7f0000001dc0)="5480db5dd2a9142e4d13ccfcdc1bb9f6b1d66280dafa700e6e0815ac01609d20a6e9acf815e0f4c5e0f84c282ccf0288caf456b9a960d3f1301dc369e86ea6", 0x3f}, {&(0x7f0000001e00)="596ef1c30cc2f56effdcbe149e4aaebd6ee5c9e4c644730c20a23427d3c4f87c17bd6e4075456b24b940d75737fee5e355c23569876bdfeb195643f80932999271ba66cf2ed1186c33830cc56a45a911cde028677a85f3965e1f3ecad77a73f07e9c7f9f16f7bcae25f67d830757f95a0d5342dfe3ab47d8e30f64b60169935fd937b8477c1ec0a9681e4c74c11ccd850813ce285b15da081126274eccda7d95924b1e814e52d9e4b572462f39aed51f6f799d3c10d46f397c91b6263164b9903505b3129e6bf14797adf2", 0xcb}, {&(0x7f0000001f00)="abfd6a9f9a802e3e149e7c52b40d89c869f353ce6d8c003d8330641b25829a1a82b2a94e6747792d82b2e94b5c67b2dd9b5abc92220bf89924c7f917c3ade75d031ea6c6391ef3f8a40ad9e87297ff939eda5bc60b274ad65c882fc29cca45c01b7776200a", 0x65}], 0x6}, 0x810) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8993, &(0x7f0000000080)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8917, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @local}}) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0xfffe, @multicast2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$KDFONTOP_COPY(r6, 0x4b72, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={r9, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x0, 0x2}, &(0x7f0000000240)=0x90) 1.374261009s ago: executing program 3 (id=2351): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x1405, 0x100, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0xc040) lsetxattr$system_posix_acl(0x0, &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x2c, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16], 0x1c}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}, 0x1, 0xe}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.293442781s ago: executing program 3 (id=2352): mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x114, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x1000000) open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000300)="10", 0x1}], 0x1, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x8000042, 0x3, 0x2}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 905.231171ms ago: executing program 4 (id=2357): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 803.850286ms ago: executing program 1 (id=2358): fcntl$notify(0xffffffffffffffff, 0x402, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x5) 689.376124ms ago: executing program 0 (id=2359): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0xfecc) fcntl$dupfd(r2, 0x0, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000ff031f", @ANYRES32=0x0, @ANYBLOB="0000000086410000200012800b00010067656e65766500001000028005000a000100000004000e00"], 0x40}}, 0x0) 568.274673ms ago: executing program 4 (id=2360): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a00100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000000800)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x2, 0x7fe1, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{r4}, &(0x7f00000015c0), &(0x7f0000001600)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000002c0)={r4, &(0x7f0000000000), &(0x7f00000001c0)=""/249}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72da61742f3078303030303030303030303030303030302c70726976706f7274"]) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', @random='\a\x00\x00 \x00'}) pselect6(0x29, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) 553.645725ms ago: executing program 0 (id=2361): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x1405, 0x100, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0xc040) lsetxattr$system_posix_acl(0x0, &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x2c, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16], 0x1c}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}, 0x1, 0xe}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 510.955492ms ago: executing program 1 (id=2362): socket(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="70000000150001002bbd700000000000ac1e00010000000000000000000000000000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x70}}, 0x0) 510.446882ms ago: executing program 0 (id=2363): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) lsm_get_self_attr(0x67, 0xffffffffffffffff, &(0x7f0000000040)=0x38, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) 509.945482ms ago: executing program 1 (id=2364): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 371.714213ms ago: executing program 0 (id=2365): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) accept(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) r1 = socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d80000001e0081054e81f782db4cb904021d0800fe007c05e8fe55a10a00150002", 0x21}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000340)=""/187, &(0x7f0000000200), &(0x7f0000000180)="23a9c3326fade008ec32a544a75ddbcb569f0dbe0ed7dd810876ea9e5613848470346803a7a520ac2ca3da22b23c842918ce13ce76e945bdbbf9", 0x9, r2}, 0x38) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000580)={0x1, 0x7e69}, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000260000001c002b8005000200000000000800010000000000050002000000000008000300", @ANYRES32=r5, @ANYBLOB="64002b80"], 0x9c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) 321.689901ms ago: executing program 3 (id=2366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xfffffffffffffffa) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) lseek(0xffffffffffffffff, 0x73, 0x0) lseek(0xffffffffffffffff, 0xf53, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="000429bd7000fbdbdf251f00000008000300036d71cb0889a6fb68efb0a5a5b4dffb629f706a7d4523a516f4126af61dc70ae5126bc6cc3110603ebb582e12da58676e3d97ef2e69b52bd3cf90d9be366f2a5957635052f3eebfb0d9394d948902410de464f9ca6eef4a9270dd252d329e677d7c9c0167f50891ffe0c568fd95923cba6f617ee0dad99eff5ba112815797d7ef4bfd1c4b045f46167251d8e2ee9300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x800) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000000000000200000008000100", @ANYRES32=r4, @ANYRESOCT=r6], 0x1c}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 317.746911ms ago: executing program 1 (id=2367): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) (async) r0 = memfd_secret(0x0) (async) syz_open_dev$usbmon(&(0x7f0000000100), 0x3f, 0x0) ftruncate(r0, 0x5) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x1, 0x1, 0x6, 0x80, r0, 0x0, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0xc}, 0x48) (async) mlock2(&(0x7f00005e3000/0x1000)=nil, 0x1000, 0x0) 300.909824ms ago: executing program 1 (id=2368): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018004e284e220500160000000000080017"], 0x34}}, 0x0) 300.534464ms ago: executing program 0 (id=2369): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 257.06333ms ago: executing program 4 (id=2370): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0xfecc) fcntl$dupfd(r2, 0x0, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000ff031f", @ANYRES32=0x0, @ANYBLOB="0000000086410000200012800b00010067656e65766500001000028005000a000100000004000e00"], 0x40}}, 0x0) 242.597923ms ago: executing program 0 (id=2371): socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x13, 0x18, 0x21, 0x0, 0x0, {}, [@IFAL_LABEL]}, 0x30}}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x1000}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = io_uring_setup(0x30d3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0xc9c) listen(r3, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r4 = syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1004408, &(0x7f0000000200), 0xfd, 0x775, &(0x7f0000000f00)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@journal_path}, {@noauto_da_alloc}]}, 0x3, 0x4cc, &(0x7f0000000b40)="$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") ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8993, &(0x7f0000000080)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x1b, 0x20, 0xfffffffc, &(0x7f0000000880)="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"}) 242.327762ms ago: executing program 1 (id=2372): r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) io_setup(0x6, &(0x7f0000000000)=0x0) io_getevents(r2, 0x2, 0x2, &(0x7f0000001880)=[{}, {}], 0x0) r3 = socket$rds(0x15, 0x5, 0x0) io_submit(r2, 0x1, &(0x7f0000001340)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@noquota}, {@noblock_validity}, {@jqfmt_vfsv0}, {@grpquota}, {@debug}, {@debug}, {@nogrpid}]}, 0x80, 0x557, &(0x7f0000001cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 204.451939ms ago: executing program 4 (id=2373): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x1405, 0x100, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0xc040) lsetxattr$system_posix_acl(0x0, &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x2c, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16], 0x1c}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}, 0x1, 0xe}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 136.322319ms ago: executing program 4 (id=2374): socket$kcm(0x10, 0x0, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x4788, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0) 0s ago: executing program 4 (id=2375): mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x114, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x1000000) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(r4, 0x0, 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x8000042, 0x3, 0x2}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): eric 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.241465][ T3157] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.248934][ T3157] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.256399][ T3157] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.263817][ T3157] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.271244][ T3157] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.278687][ T3157] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.286309][ T3157] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.293746][ T3157] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.301220][ T3157] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.309574][ T8490] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 112.309911][ T3157] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 112.406243][ T29] audit: type=1400 audit(1719604749.830:12767): avc: denied { search } for pid=8501 comm="syz.0.1311" name="/" dev="configfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 112.408118][ T8502] loop0: detected capacity change from 0 to 136 [ 112.607608][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x7 [ 112.615158][ T3160] hid-generic 0000:0000:0000.0006: ignoring exceeding usage max [ 112.628021][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.639974][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 112.651955][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.659427][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.666934][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.674459][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.681906][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.689322][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.696729][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.704150][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.711573][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.719080][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.726578][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.733993][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.741443][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.748845][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.756376][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.763785][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.771202][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.778651][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.786074][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.793586][ T3160] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 112.801928][ T3160] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 112.879152][ T29] audit: type=1400 audit(1719604750.300:12768): avc: denied { tracepoint } for pid=8533 comm="syz.3.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.910095][ T8532] loop4: detected capacity change from 0 to 1024 [ 112.943656][ T8532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.004400][ T287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.050028][ T8545] loop3: detected capacity change from 0 to 256 [ 113.062533][ T287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.073902][ T8545] FAT-fs (loop3): Unrecognized mount option "O‹“L ÎÆûçç€rumask=00000000000000000000000" or missing value [ 113.118400][ T287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.135707][ T8558] loop1: detected capacity change from 0 to 256 [ 113.155419][ T287] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.219009][ T8542] chnl_net:caif_netlink_parms(): no params data found [ 113.233605][ T287] bridge_slave_1: left allmulticast mode [ 113.239355][ T287] bridge_slave_1: left promiscuous mode [ 113.245113][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.253361][ T287] bridge_slave_0: left allmulticast mode [ 113.259072][ T287] bridge_slave_0: left promiscuous mode [ 113.264969][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.282099][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x7 [ 113.289661][ T3144] hid-generic 0000:0000:0000.0007: ignoring exceeding usage max [ 113.301483][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.309059][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.316561][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.323995][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.331485][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.338859][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.346262][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.353751][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.361277][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.368780][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.376209][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.383662][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.391121][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.398591][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.405997][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.413414][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.420901][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.428311][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.435828][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.443263][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.450682][ T3144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.459087][ T3144] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 113.533747][ T287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.544291][ T287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.554651][ T287] bond0 (unregistering): Released all slaves [ 113.570735][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'. [ 113.622906][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.630009][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.637890][ T8542] bridge_slave_0: entered allmulticast mode [ 113.644640][ T8542] bridge_slave_0: entered promiscuous mode [ 113.652071][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.659247][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.666496][ T8542] bridge_slave_1: entered allmulticast mode [ 113.673128][ T8542] bridge_slave_1: entered promiscuous mode [ 113.707696][ T287] hsr_slave_0: left promiscuous mode [ 113.716291][ T8593] loop1: detected capacity change from 0 to 256 [ 113.723747][ T287] hsr_slave_1: left promiscuous mode [ 113.725120][ T3753] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.742621][ T287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.750091][ T287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.760358][ T287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.767827][ T287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.777429][ T287] veth1_macvtap: left promiscuous mode [ 113.782942][ T287] veth0_macvtap: left promiscuous mode [ 113.788454][ T287] veth1_vlan: left promiscuous mode [ 113.793860][ T287] veth0_vlan: left promiscuous mode [ 113.805423][ T8596] dccp_invalid_packet: invalid packet type [ 113.907923][ T287] team0 (unregistering): Port device team_slave_1 removed [ 113.919812][ T287] team0 (unregistering): Port device team_slave_0 removed [ 113.928107][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 113.969614][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.990240][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.036807][ T8542] team0: Port device team_slave_0 added [ 114.048190][ T8542] team0: Port device team_slave_1 added [ 114.086455][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.093482][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.119690][ T8542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.156338][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.163367][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.189474][ T8542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.271187][ T8542] hsr_slave_0: entered promiscuous mode [ 114.278118][ T972] usb 7-1: enqueue for inactive port 0 [ 114.287180][ T8542] hsr_slave_1: entered promiscuous mode [ 114.293953][ T972] usb 7-1: enqueue for inactive port 0 [ 114.301965][ T8542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.313795][ T8542] Cannot create hsr debugfs directory [ 114.385783][ T972] vhci_hcd: vhci_device speed not set [ 114.601564][ T8628] loop1: detected capacity change from 0 to 256 [ 114.782478][ T8542] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.794684][ T8542] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.811973][ T8542] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.825862][ T8542] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.951511][ T8542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.965021][ T8542] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.978250][ T3144] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.985418][ T3144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.012593][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.019750][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.105732][ T8542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.233348][ T8542] veth0_vlan: entered promiscuous mode [ 115.242817][ T8542] veth1_vlan: entered promiscuous mode [ 115.267490][ T8542] veth0_macvtap: entered promiscuous mode [ 115.277744][ T8542] veth1_macvtap: entered promiscuous mode [ 115.288926][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.299455][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.309543][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.320045][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.329906][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.340474][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.356170][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.367642][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.378221][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.388089][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.398604][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.408555][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.419034][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.429992][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.441276][ T8542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.450011][ T8542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.458784][ T8542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.467552][ T8542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.829165][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 115.829183][ T29] audit: type=1326 audit(1719604753.250:12825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 115.863143][ T8742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.873457][ T8741] loop3: detected capacity change from 0 to 512 [ 115.889211][ T29] audit: type=1326 audit(1719604753.250:12826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 115.912827][ T29] audit: type=1326 audit(1719604753.280:12827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 115.936378][ T29] audit: type=1326 audit(1719604753.290:12828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 115.960151][ T29] audit: type=1326 audit(1719604753.290:12829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 115.983709][ T29] audit: type=1326 audit(1719604753.290:12830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 116.007313][ T29] audit: type=1326 audit(1719604753.300:12831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 116.030879][ T29] audit: type=1326 audit(1719604753.300:12832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa04cb7abe7 code=0x7ffc0000 [ 116.054370][ T29] audit: type=1326 audit(1719604753.300:12833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa04cb1f5b9 code=0x7ffc0000 [ 116.077857][ T29] audit: type=1326 audit(1719604753.300:12834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 116.112320][ T8741] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.1387: bad orphan inode 4 [ 116.143464][ T8741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.174132][ T8748] netlink: 'syz.2.1388': attribute type 10 has an invalid length. [ 116.195676][ T8741] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.1387: Logical block already allocated [ 116.238391][ T8748] batman_adv: batadv0: Adding interface: team0 [ 116.244619][ T8748] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.269844][ T8748] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 116.289336][ T6979] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.318749][ T8752] loop4: detected capacity change from 0 to 256 [ 116.326101][ T8748] netlink: 'syz.2.1388': attribute type 10 has an invalid length. [ 116.334052][ T8748] __nla_validate_parse: 6 callbacks suppressed [ 116.334069][ T8748] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1388'. [ 116.351496][ T8748] team0: entered promiscuous mode [ 116.356550][ T8748] team_slave_0: entered promiscuous mode [ 116.362876][ T8748] team_slave_1: entered promiscuous mode [ 116.373293][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.381257][ T8748] batman_adv: batadv0: Interface activated: team0 [ 116.387792][ T8748] batman_adv: batadv0: Interface deactivated: team0 [ 116.394493][ T8748] batman_adv: batadv0: Removing interface: team0 [ 116.402586][ T8748] bridge0: port 3(team0) entered blocking state [ 116.408912][ T8748] bridge0: port 3(team0) entered disabled state [ 116.423588][ T8748] team0: entered allmulticast mode [ 116.428755][ T8748] team_slave_0: entered allmulticast mode [ 116.434569][ T8748] team_slave_1: entered allmulticast mode [ 116.445295][ T8748] bridge0: port 3(team0) entered blocking state [ 116.451735][ T8748] bridge0: port 3(team0) entered forwarding state [ 116.592636][ T8769] loop4: detected capacity change from 0 to 512 [ 116.613284][ T8769] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.620136][ T8769] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1395: Parent and EA inode have the same ino 15 [ 116.640603][ T8769] EXT4-fs (loop4): 1 orphan inode deleted [ 116.646776][ T8769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 116.986875][ T8782] loop3: detected capacity change from 0 to 2048 [ 117.004661][ T8782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.047593][ T3753] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.066795][ T8781] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.097554][ T8781] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.109902][ T8781] EXT4-fs (loop3): This should not happen!! Data will be lost [ 117.109902][ T8781] [ 117.119696][ T8781] EXT4-fs (loop3): Total free blocks count 0 [ 117.125730][ T8781] EXT4-fs (loop3): Free/Dirty block details [ 117.131721][ T8781] EXT4-fs (loop3): free_blocks=2415919104 [ 117.137587][ T8781] EXT4-fs (loop3): dirty_blocks=16 [ 117.142792][ T8781] EXT4-fs (loop3): Block reservation details [ 117.148782][ T8781] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 117.206159][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.255268][ T8790] loop4: detected capacity change from 0 to 256 [ 117.310127][ T8792] loop3: detected capacity change from 0 to 512 [ 117.331516][ T8794] tmpfs: Bad value for 'mpol' [ 117.336810][ T8794] netlink: 'syz.0.1401': attribute type 10 has an invalid length. [ 117.352022][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.359451][ T8794] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.399059][ T8794] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.406223][ T8794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.413539][ T8794] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.420716][ T8794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.430985][ T8794] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 117.446130][ T8794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1401'. [ 117.528476][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1413'. [ 117.537468][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.544933][ T8825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.556409][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.563950][ T8825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.573978][ T8829] loop4: detected capacity change from 0 to 256 [ 117.626006][ T3144] hid-generic 0000:0000:0000.0008: item fetching failed at offset 0/2 [ 117.634542][ T3144] hid-generic 0000:0000:0000.0008: probe with driver hid-generic failed with error -22 [ 118.279546][ T8868] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 118.336453][ T8873] loop1: detected capacity change from 0 to 512 [ 118.352891][ T8873] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 118.364726][ T8874] netlink: 'syz.2.1424': attribute type 32 has an invalid length. [ 118.372735][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 118.387618][ T8874] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 118.405008][ T8873] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.1426: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 118.425197][ T8873] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1426: couldn't read orphan inode 15 (err -117) [ 118.438013][ T8873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.450280][ T8873] ext2 filesystem being mounted at /root/syzkaller.zejAQG/318/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.484737][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.497286][ T8883] loop4: detected capacity change from 0 to 256 [ 118.538925][ T8886] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1429'. [ 118.567577][ T8890] IPVS: set_ctl: invalid protocol: 255 172.30.0.2:20001 [ 118.568392][ T8891] loop4: detected capacity change from 0 to 128 [ 118.635828][ T8898] loop1: detected capacity change from 0 to 512 [ 118.652311][ T8898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.665021][ T8898] ext4 filesystem being mounted at /root/syzkaller.zejAQG/322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.680271][ T8898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8898 comm=syz.1.1437 [ 118.693836][ T8898] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1437'. [ 118.705427][ T8898] bridge0: port 1(vlan0) entered blocking state [ 118.711807][ T8898] bridge0: port 1(vlan0) entered disabled state [ 118.713521][ T8907] loop4: detected capacity change from 0 to 512 [ 118.718298][ T8898] vlan0: entered allmulticast mode [ 118.729721][ T8907] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 118.739443][ T8898] vlan0: left allmulticast mode [ 118.812383][ T8898] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.1437: corrupted inode contents [ 118.824476][ T8898] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.1437: mark_inode_dirty error [ 118.836331][ T8898] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.1437: corrupted inode contents [ 118.848801][ T8898] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.1437: mark_inode_dirty error [ 118.899026][ T8916] loop4: detected capacity change from 0 to 256 [ 118.999862][ T8918] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1443'. [ 119.005976][ T8920] loop2: detected capacity change from 0 to 512 [ 119.016875][ T8920] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.028684][ T8920] EXT4-fs (loop2): 1 orphan inode deleted [ 119.034550][ T8920] EXT4-fs (loop2): 1 truncate cleaned up [ 119.040674][ T8920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.055173][ T8920] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 119.069694][ T8920] EXT4-fs (loop2): Remounting filesystem read-only [ 119.083861][ T6400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.143605][ T8929] loop4: detected capacity change from 0 to 2048 [ 119.196452][ T8929] loop4: detected capacity change from 0 to 512 [ 119.478716][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.480242][ T8943] loop3: detected capacity change from 0 to 256 [ 119.567850][ T8947] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1455'. [ 119.604666][ T8949] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1456'. [ 119.742691][ T8952] netlink: 'syz.1.1454': attribute type 32 has an invalid length. [ 119.751878][ T8952] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 119.825732][ T8965] mmap: syz.3.1461 (8965): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 120.158692][ T8975] loop4: detected capacity change from 0 to 256 [ 121.016809][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 121.016824][ T29] audit: type=1326 audit(1719604758.440:12952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 121.070580][ T29] audit: type=1326 audit(1719604758.440:12953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 121.094210][ T29] audit: type=1326 audit(1719604758.440:12954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 121.112303][ T9027] loop3: detected capacity change from 0 to 512 [ 121.117644][ T29] audit: type=1326 audit(1719604758.440:12955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 121.147506][ T29] audit: type=1326 audit(1719604758.440:12956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 121.170943][ T29] audit: type=1326 audit(1719604758.440:12957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 121.194447][ T29] audit: type=1326 audit(1719604758.440:12958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.2.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04cb83b99 code=0x7ffc0000 [ 121.197211][ T9027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.231547][ T9027] ext4 filesystem being mounted at /root/syzkaller.J3DMEK/127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.274430][ T9034] loop4: detected capacity change from 0 to 512 [ 121.275384][ T9027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9027 comm=syz.3.1482 [ 121.300069][ T9027] bridge0: port 1(vlan2) entered blocking state [ 121.304082][ T9036] loop2: detected capacity change from 0 to 164 [ 121.306421][ T9027] bridge0: port 1(vlan2) entered disabled state [ 121.313867][ T9034] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.319174][ T9027] vlan2: entered allmulticast mode [ 121.334919][ T9027] vlan2: left allmulticast mode [ 121.341191][ T9036] __nla_validate_parse: 8 callbacks suppressed [ 121.341205][ T9036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1485'. [ 121.353295][ T9040] loop1: detected capacity change from 0 to 512 [ 121.364170][ T9034] EXT4-fs (loop4): 1 truncate cleaned up [ 121.368788][ T9040] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.370278][ T9034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.376889][ T9036] bio_check_eod: 2144 callbacks suppressed [ 121.376907][ T9036] syz.2.1485: attempt to access beyond end of device [ 121.376907][ T9036] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 121.408788][ T9040] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1486: bg 0: block 5: invalid block bitmap [ 121.410630][ T9036] syz.2.1485: attempt to access beyond end of device [ 121.410630][ T9036] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.422601][ T9040] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 121.435094][ T9036] syz.2.1485: attempt to access beyond end of device [ 121.435094][ T9036] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.457219][ T9036] syz.2.1485: attempt to access beyond end of device [ 121.457219][ T9036] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.468031][ T9034] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.1484: corrupted in-inode xattr: overlapping e_value [ 121.470732][ T29] audit: type=1400 audit(1719604758.890:12959): avc: denied { read } for pid=9032 comm="syz.4.1484" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.484700][ T9043] syz.2.1485: attempt to access beyond end of device [ 121.484700][ T9043] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.506728][ T29] audit: type=1400 audit(1719604758.890:12960): avc: denied { open } for pid=9032 comm="syz.4.1484" path="/root/syzkaller.wbVkXy/275/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.545374][ T9040] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1486: invalid indirect mapped block 3 (level 2) [ 121.545667][ T9036] syz.2.1485: attempt to access beyond end of device [ 121.545667][ T9036] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.572602][ T9040] EXT4-fs (loop1): 1 orphan inode deleted [ 121.572698][ T9034] EXT4-fs (loop4): Remounting filesystem read-only [ 121.578345][ T9040] EXT4-fs (loop1): 1 truncate cleaned up [ 121.584899][ T9034] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1766: inode #15: comm syz.4.1484: unable to update i_inline_off [ 121.587492][ T9044] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.1482: corrupted inode contents [ 121.615388][ T9040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.617700][ T9044] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz.3.1482: mark_inode_dirty error [ 121.639935][ T9036] syz.2.1485: attempt to access beyond end of device [ 121.639935][ T9036] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.653549][ T9044] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.1482: corrupted inode contents [ 121.666883][ T9043] syz.2.1485: attempt to access beyond end of device [ 121.666883][ T9043] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.669486][ T29] audit: type=1400 audit(1719604759.090:12961): avc: denied { ioctl } for pid=9039 comm="syz.1.1486" path="socket:[24740]" dev="sockfs" ino=24740 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.685720][ T9036] syz.2.1485: attempt to access beyond end of device [ 121.685720][ T9036] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.705848][ T9044] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1482: mark_inode_dirty error [ 121.729015][ T9043] syz.2.1485: attempt to access beyond end of device [ 121.729015][ T9043] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.744647][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.772752][ T3753] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.913226][ T9061] loop4: detected capacity change from 0 to 512 [ 121.922350][ T9062] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1489'. [ 121.940408][ T9061] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.1490: corrupted in-inode xattr: e_name out of bounds [ 121.941481][ T6979] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.965771][ T9061] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1490: couldn't read orphan inode 15 (err -117) [ 121.979755][ T9061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.014797][ T3753] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.202948][ T9089] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1502'. [ 122.225615][ T9091] loop3: detected capacity change from 0 to 512 [ 122.233758][ T9091] EXT4-fs: Mount option(s) incompatible with ext3 [ 122.307007][ T9091] loop3: detected capacity change from 0 to 764 [ 122.315324][ T9091] iso9660: Unknown parameter 'ext3' [ 122.342394][ T9104] team0: Port device vlan2 added [ 122.378406][ T9091] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 122.634550][ T9136] loop0: detected capacity change from 0 to 256 [ 122.668794][ T9143] netem: change failed [ 122.919031][ T9178] loop0: detected capacity change from 0 to 256 [ 123.137897][ T9206] loop0: detected capacity change from 0 to 2048 [ 123.163666][ T9206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.201421][ T9217] loop1: detected capacity change from 0 to 256 [ 123.228125][ T8542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.261184][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 123.309348][ T9226] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 123.415929][ T9235] loop3: detected capacity change from 0 to 1024 [ 123.548963][ T9235] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.589400][ T9235] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f04cc01c, mo2=0002] [ 123.608937][ T9235] System zones: 0-1, 3-36 [ 123.618337][ T9242] infiniband syz1: set down [ 123.619812][ T9235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.623007][ T9242] infiniband syz1: added syzkaller0 [ 123.653222][ T9242] RDS/IB: syz1: added [ 123.665132][ T9242] smc: adding ib device syz1 with port count 1 [ 123.680893][ T9242] smc: ib device syz1 port 1 has pnetid [ 123.721518][ T9268] loop1: detected capacity change from 0 to 2048 [ 123.736818][ T9268] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.747717][ T6979] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.762481][ T9268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.792640][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.810881][ T9279] loop3: detected capacity change from 0 to 512 [ 123.818873][ T9279] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.832234][ T9279] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 123.847004][ T9279] EXT4-fs (loop3): 1 truncate cleaned up [ 123.853828][ T9279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.876430][ T6979] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.963405][ T11] smc: removing ib device syz1 [ 124.083021][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1570'. [ 124.092013][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1570'. [ 124.315011][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 124.327146][ T9317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'. [ 124.400135][ T9328] veth1_vlan: entered allmulticast mode [ 124.619674][ T9368] loop0: detected capacity change from 0 to 1024 [ 124.867818][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 125.253703][ T9436] loop1: detected capacity change from 0 to 512 [ 125.260221][ T9436] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.281655][ T9436] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.311465][ T9436] EXT4-fs (loop1): 1 truncate cleaned up [ 125.617799][ T9480] loop2: detected capacity change from 0 to 256 [ 125.632499][ T9478] loop1: detected capacity change from 0 to 512 [ 125.638961][ T9478] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.645831][ T9478] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.668602][ T9478] EXT4-fs (loop1): 1 truncate cleaned up [ 125.690702][ T9484] dummy0: entered promiscuous mode [ 125.696459][ T9484] macsec1: entered promiscuous mode [ 125.701843][ T9484] macsec1: entered allmulticast mode [ 125.707242][ T9484] dummy0: entered allmulticast mode [ 125.873951][ T9489] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 125.888934][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1628'. [ 126.279911][ T9526] loop1: detected capacity change from 0 to 512 [ 126.303640][ T9526] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.312169][ T9526] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.325715][ T9526] EXT4-fs (loop1): 1 truncate cleaned up [ 126.469484][ T9556] 9pnet_fd: Insufficient options for proto=fd [ 126.525787][ T9556] loop1: detected capacity change from 0 to 8192 [ 126.533355][ T9556] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 126.695301][ T9565] __nla_validate_parse: 1 callbacks suppressed [ 126.695316][ T9565] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1649'. [ 126.710910][ T9565] tc_dump_action: action bad kind [ 126.743923][ T3144] kernel write not supported for file /sysvipc/shm (pid: 3144 comm: kworker/1:2) [ 126.790016][ T9581] loop3: detected capacity change from 0 to 512 [ 126.796803][ T9581] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.804136][ T9581] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.817003][ T9581] EXT4-fs (loop3): 1 truncate cleaned up [ 127.252909][ T9606] loop0: detected capacity change from 0 to 1024 [ 127.704363][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'. [ 127.716522][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 127.716537][ T29] audit: type=1326 audit(1719604765.140:13153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.3.1669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8d2264b99 code=0x0 [ 127.762429][ T9627] loop2: detected capacity change from 0 to 512 [ 127.769002][ T9627] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.775917][ T9627] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.787299][ T9627] EXT4-fs (loop2): 1 truncate cleaned up [ 128.148190][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 128.198539][ T9659] loop1: detected capacity change from 0 to 512 [ 128.206742][ T9659] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.210520][ T9667] netlink: 'syz.4.1682': attribute type 29 has an invalid length. [ 128.213763][ T9659] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.232877][ T9659] EXT4-fs (loop1): 1 truncate cleaned up [ 128.281745][ T9667] netlink: 'syz.4.1682': attribute type 29 has an invalid length. [ 128.289991][ T9670] netlink: 'syz.4.1682': attribute type 29 has an invalid length. [ 128.299298][ T9667] netlink: 'syz.4.1682': attribute type 29 has an invalid length. [ 128.307839][ T9667] netlink: 'syz.4.1682': attribute type 29 has an invalid length. [ 128.316440][ T9667] netlink: 'syz.4.1682': attribute type 29 has an invalid length. [ 128.325214][ T9667] netlink: 'syz.4.1682': attribute type 29 has an invalid length. [ 128.368453][ T29] audit: type=1400 audit(1719604765.790:13154): avc: denied { setopt } for pid=9678 comm="syz.1.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 128.372852][ T9677] loop0: detected capacity change from 0 to 2048 [ 128.388237][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'. [ 128.429435][ T9685] loop4: detected capacity change from 0 to 1024 [ 128.431097][ T9686] loop1: detected capacity change from 0 to 512 [ 128.443294][ T9686] EXT4-fs: Ignoring removed oldalloc option [ 128.449474][ T9686] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 128.495855][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 128.547842][ T9697] ALSA: seq fatal error: cannot create timer (-22) [ 128.593899][ T9703] loop0: detected capacity change from 0 to 512 [ 128.611722][ T9704] loop3: detected capacity change from 0 to 512 [ 128.618253][ T9704] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.625421][ T9704] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.636933][ T9704] EXT4-fs (loop3): 1 truncate cleaned up [ 128.832539][ T9715] loop0: detected capacity change from 0 to 512 [ 128.839541][ T9715] EXT4-fs: Ignoring removed oldalloc option [ 128.847515][ T9715] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 129.001976][ T9732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1705'. [ 129.054147][ T3157] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.067020][ T9734] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1706'. [ 129.170500][ T9740] loop0: detected capacity change from 0 to 512 [ 129.177425][ T9740] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.184527][ T9740] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.211389][ T9740] EXT4-fs (loop0): 1 truncate cleaned up [ 129.456690][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1717'. [ 129.538671][ T9778] loop1: detected capacity change from 0 to 1024 [ 129.552049][ T9778] EXT4-fs mount: 24 callbacks suppressed [ 129.552061][ T9778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.578113][ T9782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1719'. [ 129.588116][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1719'. [ 129.597911][ T29] audit: type=1326 audit(1719604767.020:13155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.3.1719" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8d2264b99 code=0x0 [ 129.863054][ T9788] loop2: detected capacity change from 0 to 512 [ 129.872065][ T9788] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.1721: bad orphan inode 17 [ 129.882336][ T9788] ext4_test_bit(bit=16, block=4) = 1 [ 129.887649][ T9788] is_bad_inode(inode)=0 [ 129.891861][ T9788] NEXT_ORPHAN(inode)=0 [ 129.895953][ T9788] max_ino=32 [ 129.899140][ T9788] i_nlink=1 [ 129.903125][ T9788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.917658][ T9788] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1721: bg 0: block 7: invalid block bitmap [ 129.936890][ T6400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.169631][ T9808] netlink: 'syz.2.1729': attribute type 1 has an invalid length. [ 130.177432][ T9808] netlink: 'syz.2.1729': attribute type 2 has an invalid length. [ 130.186394][ T9807] netlink: 'syz.2.1729': attribute type 1 has an invalid length. [ 130.246434][ T9814] loop2: detected capacity change from 0 to 8192 [ 130.254905][ T9814] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.266344][ T9814] syz.2.1732[9814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.266410][ T9814] syz.2.1732[9814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.281242][ T9814] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 130.301515][ T9814] FAT-fs (loop2): Filesystem has been set read-only [ 130.308238][ T9814] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 130.317434][ T9814] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 130.326591][ T9814] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 130.335589][ T9814] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 130.345027][ T9820] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 130.363678][ T29] audit: type=1326 audit(1719604767.790:13156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.2.1732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa04cb83b99 code=0x0 [ 130.408016][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.126342][ T9855] loop0: detected capacity change from 0 to 1024 [ 131.142444][ T9855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.220925][ T29] audit: type=1400 audit(1719604768.650:13157): avc: denied { bind } for pid=9863 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 131.485892][ T29] audit: type=1400 audit(1719604768.910:13158): avc: denied { setattr } for pid=9894 comm="syz.2.1756" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 131.519499][ T9896] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 131.823603][ T9918] __nla_validate_parse: 10 callbacks suppressed [ 131.823619][ T9918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1765'. [ 131.839085][ T9918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1765'. [ 131.957185][ T9925] loop2: detected capacity change from 0 to 128 [ 131.965075][ T9925] FAT-fs (loop2): Unrecognized mount option "\úZ—7M 5£Q2½!~^A+" or missing value [ 131.981104][ T8542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.049149][ T29] audit: type=1326 audit(1719604769.470:13159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.0.1769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe71a7a1b99 code=0x0 [ 132.162325][ T9939] loop0: detected capacity change from 0 to 764 [ 132.174563][ T29] audit: type=1400 audit(1719604769.600:13160): avc: denied { setattr } for pid=9940 comm="syz.4.1772" name="PACKET" dev="sockfs" ino=28093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.333610][ T9939] loop0: detected capacity change from 0 to 8192 [ 132.345502][ T9954] loop4: detected capacity change from 0 to 512 [ 132.354029][ T9939] FAT-fs (loop0): Unrecognized mount option "iso9660" or missing value [ 132.365362][ T9954] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.1775: bad orphan inode 17 [ 132.376437][ T9954] ext4_test_bit(bit=16, block=4) = 1 [ 132.381809][ T9954] is_bad_inode(inode)=0 [ 132.385999][ T9954] NEXT_ORPHAN(inode)=0 [ 132.390094][ T9954] max_ino=32 [ 132.393337][ T9954] i_nlink=1 [ 132.397696][ T9954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.411871][ T9954] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1775: bg 0: block 7: invalid block bitmap [ 132.456100][ T3753] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.502577][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1778'. [ 132.533052][ T9964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1776'. [ 132.542722][ T9964] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1776'. [ 132.789037][ T9997] loop2: detected capacity change from 0 to 512 [ 132.798694][ T9997] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.1787: bad orphan inode 17 [ 132.809001][ T9997] ext4_test_bit(bit=16, block=4) = 1 [ 132.814391][ T9997] is_bad_inode(inode)=0 [ 132.818579][ T9997] NEXT_ORPHAN(inode)=0 [ 132.822732][ T9997] max_ino=32 [ 132.825940][ T9997] i_nlink=1 [ 132.829448][ T9997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.844100][ T9997] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1787: bg 0: block 7: invalid block bitmap [ 132.863349][ T6400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.926640][T10006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1790'. [ 132.936452][T10006] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1790'. [ 132.955206][T10008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1791'. [ 132.964324][ T29] audit: type=1400 audit(1719604770.380:13161): avc: denied { nlmsg_read } for pid=10007 comm="syz.0.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.090315][ C1] sched: RT throttling activated [ 135.239642][T10032] loop4: detected capacity change from 0 to 8192 [ 135.248256][T10032] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.259751][T10032] syz.4.1800[10032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.259818][T10032] syz.4.1800[10032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.274269][T10032] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.294693][T10032] FAT-fs (loop4): Filesystem has been set read-only [ 135.301478][T10032] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.310359][T10032] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.319941][T10032] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.329075][T10032] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.339523][T10045] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 135.363272][ T29] audit: type=1326 audit(1719604772.790:13162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.4.1800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1363cfb99 code=0x0 [ 135.401014][ T29] audit: type=1400 audit(1719604772.830:13163): avc: denied { write } for pid=10053 comm="syz.3.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.438900][ T29] audit: type=1400 audit(1719604772.860:13164): avc: denied { write } for pid=10055 comm="syz.3.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.446373][T10056] bond1: entered allmulticast mode [ 136.015441][T10071] 9pnet_fd: Insufficient options for proto=fd [ 136.088945][T10071] loop0: detected capacity change from 0 to 8192 [ 136.098157][T10071] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 136.127290][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 136.138661][T10081] loop4: detected capacity change from 0 to 512 [ 136.152857][T10081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.165614][T10081] ext4 filesystem being mounted at /root/syzkaller.wbVkXy/326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.193236][T10081] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 136.205787][T10088] loop1: detected capacity change from 0 to 1024 [ 136.227242][T10088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.243398][ T3753] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.255539][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.304278][ T29] audit: type=1400 audit(1719604773.730:13165): avc: denied { mounton } for pid=10098 comm="syz.2.1819" path="/root/syzkaller.bvzMnP/200/file0" dev="ramfs" ino=28294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 136.380045][T10099] syz.2.1819[10099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.380155][T10099] syz.2.1819[10099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.465345][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1825'. [ 136.532259][T10128] program syz.4.1828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.570820][ T29] audit: type=1400 audit(1719604774.000:13166): avc: denied { read } for pid=10135 comm="syz.2.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.640669][T10145] loop4: detected capacity change from 0 to 512 [ 136.647300][T10145] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.654835][T10145] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.668286][T10145] EXT4-fs (loop4): 1 truncate cleaned up [ 136.668964][T10149] loop3: detected capacity change from 0 to 512 [ 136.674551][T10145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.682354][T10153] validate_nla: 3 callbacks suppressed [ 136.682368][T10153] netlink: 'syz.2.1834': attribute type 29 has an invalid length. [ 136.697322][T10145] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.698609][T10153] netlink: 'syz.2.1834': attribute type 29 has an invalid length. [ 136.708434][T10149] EXT4-fs (loop3): 1 truncate cleaned up [ 136.718846][T10153] netlink: 'syz.2.1834': attribute type 29 has an invalid length. [ 136.729237][T10149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.758675][ T6979] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.031494][T10169] loop4: detected capacity change from 0 to 256 [ 137.039441][T10169] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.391021][T10193] __nla_validate_parse: 2 callbacks suppressed [ 137.391047][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'. [ 137.417397][T10194] 9pnet_fd: Insufficient options for proto=fd [ 137.862223][ T29] audit: type=1400 audit(1719604775.290:13167): avc: denied { create } for pid=10222 comm="syz.2.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.011009][T10235] IPv6: addrconf: prefix option has invalid lifetime [ 138.017785][T10235] IPv6: addrconf: prefix option has invalid lifetime [ 138.114240][T10236] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1859'. [ 138.259810][T10241] loop1: detected capacity change from 0 to 2048 [ 138.267451][T10241] EXT4-fs: Ignoring removed orlov option [ 138.273247][T10241] EXT4-fs: dax option not supported [ 138.348974][T10245] loop3: detected capacity change from 0 to 1024 [ 138.362498][T10245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.395588][T10245] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 138.414759][ T6979] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.433245][T10252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1865'. [ 138.442312][T10252] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1865'. [ 138.471289][T10258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1867'. [ 138.527465][T10264] 9pnet_fd: Insufficient options for proto=fd [ 138.595599][T10270] 9pnet_virtio: no channels available for device [ 138.658781][T10276] loop4: detected capacity change from 0 to 1764 [ 138.704018][T10278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10278 comm=syz.3.1875 [ 138.717855][ T29] audit: type=1400 audit(1719604776.150:13168): avc: denied { ioctl } for pid=10274 comm="syz.3.1875" path="socket:[28581]" dev="sockfs" ino=28581 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.724908][T10284] No such timeout policy "syz1" [ 138.968416][T10295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1881'. [ 139.129959][T10308] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 139.234628][T10300] chnl_net:caif_netlink_parms(): no params data found [ 139.255913][ T29] audit: type=1400 audit(1719604776.640:13169): avc: denied { create } for pid=10306 comm="syz.0.1886" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 139.276820][ T29] audit: type=1400 audit(1719604776.640:13170): avc: denied { write } for pid=10306 comm="syz.0.1886" name="file0" dev="sda1" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 139.299275][ T29] audit: type=1400 audit(1719604776.640:13171): avc: denied { open } for pid=10306 comm="syz.0.1886" path="/root/syzkaller.wdk7Su/73/file0" dev="sda1" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 139.346516][T10300] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.353675][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.361996][T10300] bridge_slave_0: entered allmulticast mode [ 139.368495][T10300] bridge_slave_0: entered promiscuous mode [ 139.375496][T10300] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.379102][ T29] audit: type=1400 audit(1719604776.800:13172): avc: denied { unlink } for pid=8542 comm="syz-executor" name="file0" dev="sda1" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 139.382660][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.382875][T10300] bridge_slave_1: entered allmulticast mode [ 139.420900][T10300] bridge_slave_1: entered promiscuous mode [ 139.439493][T10300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.449979][T10300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.471379][T10300] team0: Port device team_slave_0 added [ 139.483031][T10300] team0: Port device team_slave_1 added [ 139.508742][T10300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.515825][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.541806][T10300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.576867][T10300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.583877][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.609912][T10300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.683041][T10300] hsr_slave_0: entered promiscuous mode [ 139.689316][T10300] hsr_slave_1: entered promiscuous mode [ 139.696229][T10300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.697687][T10334] loop1: detected capacity change from 0 to 512 [ 139.703809][T10300] Cannot create hsr debugfs directory [ 139.730412][T10334] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.1892: casefold flag without casefold feature [ 139.745162][T10334] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1892: couldn't read orphan inode 15 (err -117) [ 139.761469][T10334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.792512][ T29] audit: type=1400 audit(1719604777.220:13173): avc: denied { bind } for pid=10333 comm="syz.1.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.813125][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.843548][T10300] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.882419][T10300] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.932167][T10300] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.012930][T10300] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.069568][ T29] audit: type=1400 audit(1719605289.492:13174): avc: denied { ioctl } for pid=10374 comm="syz.1.1904" path="socket:[29021]" dev="sockfs" ino=29021 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 140.100907][T10376] tipc: Started in network mode [ 140.105814][T10376] tipc: Node identity da6bda3419d8, cluster identity 4711 [ 140.113004][T10376] tipc: Enabled bearer , priority 10 [ 140.135018][T10300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 140.149386][T10300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 140.162663][T10300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 140.177750][T10300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 140.259475][T10300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.287295][T10300] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.308891][ T3144] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.316006][ T3144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.353109][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.360470][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.378526][T10300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.388914][T10300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.490415][T10300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.568892][T10403] loop0: detected capacity change from 0 to 512 [ 140.590966][T10403] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.1909: bad orphan inode 17 [ 140.611295][T10403] ext4_test_bit(bit=16, block=4) = 1 [ 140.616654][T10403] is_bad_inode(inode)=0 [ 140.620843][T10403] NEXT_ORPHAN(inode)=0 [ 140.624917][T10403] max_ino=32 [ 140.628125][T10403] i_nlink=1 [ 140.659355][T10300] veth0_vlan: entered promiscuous mode [ 140.679546][T10403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.704919][T10300] veth1_vlan: entered promiscuous mode [ 140.737216][T10403] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1909: bg 0: block 7: invalid block bitmap [ 140.766098][T10300] veth0_macvtap: entered promiscuous mode [ 140.783967][T10300] veth1_macvtap: entered promiscuous mode [ 140.794959][ T8542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.817090][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.827586][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.837513][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.847976][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.857836][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.868342][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.879439][T10300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.907096][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.917698][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.927586][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.938012][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.947889][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.958339][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.970147][T10300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.978975][T10300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.987785][T10300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.996599][T10300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.005467][T10300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.110529][ T3160] tipc: Node number set to 3283343924 [ 141.164623][ T29] audit: type=1326 audit(1719605290.592:13175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10436 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ec5a0b99 code=0x7ffc0000 [ 141.213823][T10441] loop3: detected capacity change from 0 to 512 [ 141.226525][ T29] audit: type=1326 audit(1719605290.612:13176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10436 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7ec5a0b99 code=0x7ffc0000 [ 141.250280][ T29] audit: type=1326 audit(1719605290.612:13177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10436 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7ec59f5d0 code=0x7ffc0000 [ 141.276655][T10439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1919'. [ 141.288577][T10441] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.1920: bad orphan inode 17 [ 141.302130][T10441] ext4_test_bit(bit=16, block=4) = 1 [ 141.307442][T10441] is_bad_inode(inode)=0 [ 141.310816][T10439] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1919'. [ 141.311668][T10441] NEXT_ORPHAN(inode)=0 [ 141.324643][T10441] max_ino=32 [ 141.327861][T10441] i_nlink=1 [ 141.336875][T10441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.363701][T10452] loop2: detected capacity change from 0 to 512 [ 141.366408][T10449] loop4: detected capacity change from 0 to 2048 [ 141.383887][T10441] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1920: bg 0: block 7: invalid block bitmap [ 141.389923][T10452] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1925: bg 0: block 393: padding at end of block bitmap is not set [ 141.414165][T10449] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz.4.1923: iget: bad extended attribute block 281474976710655 [ 141.420935][ T6979] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.429006][T10452] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 141.438816][T10449] EXT4-fs (loop4): get root inode failed [ 141.446155][T10452] EXT4-fs (loop2): 2 truncates cleaned up [ 141.451345][T10449] EXT4-fs (loop4): mount failed [ 141.463094][T10452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.491629][T10300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.509649][T10449] loop4: detected capacity change from 0 to 512 [ 141.526269][T10449] journal_path: Non-blockdev passed as '' [ 141.532072][T10449] EXT4-fs: error: could not find journal device path [ 141.589294][T10482] loop1: detected capacity change from 0 to 512 [ 141.608568][T10482] EXT4-fs (loop1): orphan cleanup on readonly fs [ 141.619928][T10482] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.1933: Failed to acquire dquot type 0 [ 141.632721][T10482] EXT4-fs (loop1): 1 truncate cleaned up [ 141.646249][T10482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.665829][T10494] loop0: detected capacity change from 0 to 512 [ 141.674900][T10494] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.1938: bad orphan inode 17 [ 141.685349][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.686387][T10494] ext4_test_bit(bit=16, block=4) = 1 [ 141.699671][T10494] is_bad_inode(inode)=0 [ 141.703910][T10494] NEXT_ORPHAN(inode)=0 [ 141.708061][T10494] max_ino=32 [ 141.711448][T10494] i_nlink=1 [ 141.714975][T10494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.733540][T10494] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1938: bg 0: block 7: invalid block bitmap [ 141.754193][ T8542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.771471][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 141.880022][T10521] netlink: 'syz.1.1949': attribute type 4 has an invalid length. [ 141.904107][T10519] team0: entered promiscuous mode [ 141.909345][T10519] team_slave_0: entered promiscuous mode [ 141.915099][T10519] team_slave_1: entered promiscuous mode [ 141.923402][T10527] loop1: detected capacity change from 0 to 512 [ 141.924426][T10514] loop3: detected capacity change from 0 to 2048 [ 141.938049][T10519] dummy0: entered promiscuous mode [ 141.950782][T10527] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.1952: bad orphan inode 17 [ 141.970422][T10514] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz.3.1946: iget: bad extended attribute block 281474976710655 [ 141.985280][T10519] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 141.995663][T10527] ext4_test_bit(bit=16, block=4) = 1 [ 142.001093][T10527] is_bad_inode(inode)=0 [ 142.005240][T10527] NEXT_ORPHAN(inode)=0 [ 142.009347][T10527] max_ino=32 [ 142.012595][T10527] i_nlink=1 [ 142.018057][T10519] Cannot create hsr debugfs directory [ 142.030024][T10514] EXT4-fs (loop3): get root inode failed [ 142.035830][T10514] EXT4-fs (loop3): mount failed [ 142.041067][T10527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.074459][T10527] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1952: bg 0: block 7: invalid block bitmap [ 142.103638][T10514] loop3: detected capacity change from 0 to 512 [ 142.133236][T10514] journal_path: Non-blockdev passed as '' [ 142.139259][T10514] EXT4-fs: error: could not find journal device path [ 142.158385][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.201826][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'. [ 142.211677][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.331429][T10573] loop0: detected capacity change from 0 to 512 [ 142.339301][T10573] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 142.438900][T10583] 9pnet_fd: p9_fd_create_tcp (10583): problem connecting socket to 127.0.0.1 [ 142.463848][T10587] team0: entered promiscuous mode [ 142.468956][T10587] team_slave_0: entered promiscuous mode [ 142.474694][T10587] team_slave_1: entered promiscuous mode [ 142.481755][T10586] team0: left promiscuous mode [ 142.486575][T10586] team_slave_0: left promiscuous mode [ 142.491744][T10589] loop0: detected capacity change from 0 to 512 [ 142.492082][T10586] team_slave_1: left promiscuous mode [ 142.501701][T10589] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.1969: bad orphan inode 17 [ 142.515204][T10589] ext4_test_bit(bit=16, block=4) = 1 [ 142.520585][T10589] is_bad_inode(inode)=0 [ 142.524784][T10589] NEXT_ORPHAN(inode)=0 [ 142.528917][T10589] max_ino=32 [ 142.532340][T10589] i_nlink=1 [ 142.536102][T10589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.551894][T10589] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1969: bg 0: block 7: invalid block bitmap [ 142.576398][ T8542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.647319][T10596] loop0: detected capacity change from 0 to 2048 [ 142.661536][T10596] EXT4-fs error (device loop0): __ext4_fill_super:5447: inode #2: comm syz.0.1971: iget: bad extended attribute block 281474976710655 [ 142.676020][T10596] EXT4-fs (loop0): get root inode failed [ 142.681757][T10596] EXT4-fs (loop0): mount failed [ 142.727722][T10596] loop0: detected capacity change from 0 to 512 [ 142.735325][T10596] journal_path: Non-blockdev passed as '' [ 142.741133][T10596] EXT4-fs: error: could not find journal device path [ 142.755838][T10605] bond3: entered allmulticast mode [ 142.842996][T10614] loop1: detected capacity change from 0 to 128 [ 142.941861][T10624] loop0: detected capacity change from 0 to 512 [ 142.951472][T10624] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.1981: bad orphan inode 17 [ 142.962660][T10624] ext4_test_bit(bit=16, block=4) = 1 [ 142.967974][T10624] is_bad_inode(inode)=0 [ 142.972147][T10624] NEXT_ORPHAN(inode)=0 [ 142.976264][T10624] max_ino=32 [ 142.979514][T10624] i_nlink=1 [ 142.984735][T10624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.999266][T10624] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1981: bg 0: block 7: invalid block bitmap [ 143.003320][T10628] 9pnet_fd: Insufficient options for proto=fd [ 143.031653][ T8542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.127217][T10642] bond2: entered allmulticast mode [ 143.155174][T10646] loop2: detected capacity change from 0 to 2048 [ 143.178159][T10646] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz.2.1986: iget: bad extended attribute block 281474976710655 [ 143.248580][T10646] EXT4-fs (loop2): get root inode failed [ 143.254580][T10646] EXT4-fs (loop2): mount failed [ 143.328753][T10646] loop2: detected capacity change from 0 to 512 [ 143.337589][T10646] journal_path: Non-blockdev passed as '' [ 143.343470][T10646] EXT4-fs: error: could not find journal device path [ 143.400016][T10671] loop4: detected capacity change from 0 to 512 [ 143.435009][T10671] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.1993: bad orphan inode 17 [ 143.458832][T10671] ext4_test_bit(bit=16, block=4) = 1 [ 143.464236][T10671] is_bad_inode(inode)=0 [ 143.465580][T10682] __nla_validate_parse: 1 callbacks suppressed [ 143.465593][T10682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1996'. [ 143.468394][T10671] NEXT_ORPHAN(inode)=0 [ 143.477269][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'. [ 143.483619][T10671] max_ino=32 [ 143.499692][T10671] i_nlink=1 [ 143.501261][T10671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.519087][T10671] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1993: bg 0: block 7: invalid block bitmap [ 143.532025][T10684] netlink: 'syz.0.1996': attribute type 10 has an invalid length. [ 143.532807][ T3753] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.543037][T10685] vhci_hcd: default hub control req: 0000 v0000 i0006 l0 [ 143.583688][T10684] veth0_vlan: left promiscuous mode [ 143.598171][T10684] veth0_vlan: entered promiscuous mode [ 143.609751][T10684] team0: Device veth0_vlan failed to register rx_handler [ 143.636328][T10690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1996'. [ 143.648171][T10699] team0: entered promiscuous mode [ 143.653499][T10699] team_slave_0: entered promiscuous mode [ 143.659297][T10699] team_slave_1: entered promiscuous mode [ 143.665052][T10699] vlan2: entered promiscuous mode [ 143.670139][T10699] xfrm0: entered promiscuous mode [ 143.694935][T10698] team0: left promiscuous mode [ 143.699782][T10698] team_slave_0: left promiscuous mode [ 143.705356][T10698] team_slave_1: left promiscuous mode [ 143.711013][T10698] vlan2: left promiscuous mode [ 143.715867][T10698] xfrm0: left promiscuous mode [ 143.756499][T10707] loop4: detected capacity change from 0 to 128 [ 143.764393][T10707] FAT-fs (loop4): Unrecognized mount option "n [ 143.764393][T10707] numtail" or missing value [ 143.766200][T10703] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 143.995311][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 143.995324][ T29] audit: type=1326 audit(1719607853.422:13260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1363cfb99 code=0x7ffc0000 [ 143.996778][T10735] team0: entered promiscuous mode [ 144.002341][ T29] audit: type=1326 audit(1719607853.422:13261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1363cfb99 code=0x7ffc0000 [ 144.025056][T10735] team_slave_0: entered promiscuous mode [ 144.025171][T10735] team_slave_1: entered promiscuous mode [ 144.030104][ T29] audit: type=1326 audit(1719607853.422:13262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1363cfb99 code=0x7ffc0000 [ 144.053942][T10735] vlan2: entered promiscuous mode [ 144.059276][ T29] audit: type=1326 audit(1719607853.422:13263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1363cfb99 code=0x7ffc0000 [ 144.064918][T10735] xfrm0: entered promiscuous mode [ 144.088343][ T29] audit: type=1326 audit(1719607853.422:13264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1363cfb99 code=0x7ffc0000 [ 144.088374][ T29] audit: type=1326 audit(1719607853.422:13265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1363cfb99 code=0x7ffc0000 [ 144.088422][ T29] audit: type=1326 audit(1719607853.422:13266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1363cfb99 code=0x7ffc0000 [ 144.098642][T10734] team0: left promiscuous mode [ 144.117057][ T29] audit: type=1326 audit(1719607853.422:13267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe1363cfb99 code=0x7ffc0000 [ 144.117976][ T29] audit: type=1326 audit(1719607853.522:13268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1363cfb99 code=0x7ffc0000 [ 144.122310][T10734] team_slave_0: left promiscuous mode [ 144.145820][ T29] audit: type=1326 audit(1719607853.522:13269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1363cfb99 code=0x7ffc0000 [ 144.274128][T10734] team_slave_1: left promiscuous mode [ 144.279612][T10734] vlan2: left promiscuous mode [ 144.284396][T10734] xfrm0: left promiscuous mode [ 144.357117][T10745] loop0: detected capacity change from 0 to 1024 [ 144.371114][T10742] loop4: detected capacity change from 0 to 2048 [ 144.392533][T10742] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz.4.2015: iget: bad extended attribute block 281474976710655 [ 144.415531][T10745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.435558][T10742] EXT4-fs (loop4): get root inode failed [ 144.441267][T10742] EXT4-fs (loop4): mount failed [ 144.454711][T10745] ext4 filesystem being mounted at /root/syzkaller.wdk7Su/100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.527685][ T8542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.635975][T10778] bond1: entered allmulticast mode [ 144.731390][T10800] loop0: detected capacity change from 0 to 2048 [ 144.746922][T10803] loop1: detected capacity change from 0 to 512 [ 144.755205][T10800] EXT4-fs error (device loop0): __ext4_fill_super:5447: inode #2: comm syz.0.2035: iget: bad extended attribute block 281474976710655 [ 144.774819][T10800] EXT4-fs (loop0): get root inode failed [ 144.775054][T10803] EXT4-fs (loop1): 1 truncate cleaned up [ 144.780602][T10800] EXT4-fs (loop0): mount failed [ 144.791940][T10803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.825761][T10810] loop2: detected capacity change from 0 to 512 [ 144.837288][T10810] EXT4-fs: Ignoring removed i_version option [ 144.845331][T10810] EXT4-fs (loop2): orphan cleanup on readonly fs [ 144.856427][T10810] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 144.861602][T10813] team0: entered promiscuous mode [ 144.872300][T10810] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 144.876068][T10813] team_slave_0: entered promiscuous mode [ 144.882991][T10810] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.2038: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 144.888450][T10813] team_slave_1: entered promiscuous mode [ 144.912538][T10810] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2038: couldn't read orphan inode 13 (err -117) [ 144.925672][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.931010][T10810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.953442][T10812] team0: left promiscuous mode [ 144.958387][T10812] team_slave_0: left promiscuous mode [ 144.958499][T10812] team_slave_1: left promiscuous mode [ 144.979550][T10300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.160228][T10845] team0: entered promiscuous mode [ 145.165398][T10845] team_slave_0: entered promiscuous mode [ 145.171155][T10845] team_slave_1: entered promiscuous mode [ 145.196007][T10844] team0: left promiscuous mode [ 145.198951][T10846] 9pnet_fd: Insufficient options for proto=fd [ 145.200815][T10844] team_slave_0: left promiscuous mode [ 145.200877][T10844] team_slave_1: left promiscuous mode [ 145.277929][T10846] loop1: detected capacity change from 0 to 8192 [ 145.286070][T10848] loop3: detected capacity change from 0 to 2048 [ 145.288460][T10846] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 145.322069][T10848] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz.3.2053: iget: bad extended attribute block 281474976710655 [ 145.347401][T10848] EXT4-fs (loop3): get root inode failed [ 145.353356][T10848] EXT4-fs (loop3): mount failed [ 145.538467][T10871] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 145.859929][T10905] loop4: detected capacity change from 0 to 512 [ 145.873937][T10905] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.880848][T10905] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.892906][T10905] EXT4-fs (loop4): 1 truncate cleaned up [ 145.898914][T10905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.912350][T10905] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.011231][T10910] loop4: detected capacity change from 0 to 2048 [ 146.021197][T10910] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz.4.2069: iget: bad extended attribute block 281474976710655 [ 146.035750][T10910] EXT4-fs (loop4): get root inode failed [ 146.041559][T10910] EXT4-fs (loop4): mount failed [ 146.114203][T10910] loop4: detected capacity change from 0 to 512 [ 146.123409][T10910] journal_path: Non-blockdev passed as '' [ 146.129170][T10910] EXT4-fs: error: could not find journal device path [ 146.261727][T10926] netlink: 'syz.4.2072': attribute type 3 has an invalid length. [ 146.336684][T10929] netlink: 'syz.4.2073': attribute type 4 has an invalid length. [ 146.553257][T10947] loop0: detected capacity change from 0 to 512 [ 146.563669][T10947] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.571593][T10947] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.572626][T10949] loop3: detected capacity change from 0 to 2048 [ 146.592446][T10947] EXT4-fs (loop0): 1 truncate cleaned up [ 146.598923][T10947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.613635][T10947] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.623905][T10949] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz.3.2080: iget: bad extended attribute block 281474976710655 [ 146.639012][T10949] EXT4-fs (loop3): get root inode failed [ 146.644795][T10949] EXT4-fs (loop3): mount failed [ 146.682428][T10949] loop3: detected capacity change from 0 to 512 [ 146.689879][T10949] journal_path: Non-blockdev passed as '' [ 146.695659][T10949] EXT4-fs: error: could not find journal device path [ 146.741549][T10958] loop0: detected capacity change from 0 to 512 [ 146.749232][T10958] EXT4-fs: Ignoring removed nobh option [ 146.757151][T10958] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.769255][T10958] EXT4-fs (loop0): 1 truncate cleaned up [ 146.775935][T10958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.816997][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2084'. [ 146.995915][ T8542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.079070][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2090'. [ 147.095290][T10985] loop1: detected capacity change from 0 to 512 [ 147.101807][T10985] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.108670][T10985] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.120789][T10985] EXT4-fs (loop1): 1 truncate cleaned up [ 147.126953][T10985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.140420][T10985] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.198744][T10992] loop3: detected capacity change from 0 to 512 [ 147.208006][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2096'. [ 147.217448][T10992] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.240381][T10992] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.273785][T10992] EXT4-fs (loop3): 1 truncate cleaned up [ 147.293199][T10992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.306993][T10992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.356485][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2103'. [ 147.468836][T11022] loop3: detected capacity change from 0 to 512 [ 147.495797][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'. [ 147.515271][T11022] netlink: 'syz.3.2106': attribute type 4 has an invalid length. [ 147.592942][T11022] netlink: 'syz.3.2106': attribute type 4 has an invalid length. [ 147.708489][T11056] loop2: detected capacity change from 0 to 512 [ 147.718074][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2118'. [ 147.737571][T11056] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.2120: bad orphan inode 17 [ 147.747762][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2121'. [ 147.761305][T11056] ext4_test_bit(bit=16, block=4) = 1 [ 147.766608][T11056] is_bad_inode(inode)=0 [ 147.770916][T11056] NEXT_ORPHAN(inode)=0 [ 147.775006][T11056] max_ino=32 [ 147.778211][T11056] i_nlink=1 [ 147.808598][T11056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.835834][T11056] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2120: bg 0: block 7: invalid block bitmap [ 147.869108][T11072] loop4: detected capacity change from 0 to 512 [ 147.894923][T11072] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.2126: bad orphan inode 17 [ 147.913392][T10300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.932857][T11072] ext4_test_bit(bit=16, block=4) = 1 [ 147.938180][T11072] is_bad_inode(inode)=0 [ 147.942374][T11072] NEXT_ORPHAN(inode)=0 [ 147.946553][T11072] max_ino=32 [ 147.949765][T11072] i_nlink=1 [ 147.954429][T11072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.958506][T11085] loop1: detected capacity change from 0 to 512 [ 147.972445][T11072] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2126: bg 0: block 7: invalid block bitmap [ 148.006342][T11083] loop3: detected capacity change from 0 to 512 [ 148.014461][ T3753] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.031036][T11083] journal_path: Non-blockdev passed as '' [ 148.036854][T11083] EXT4-fs: error: could not find journal device path [ 148.047826][T11091] loop2: detected capacity change from 0 to 256 [ 148.055854][T11085] netlink: 'syz.1.2133': attribute type 4 has an invalid length. [ 148.099449][T11085] netlink: 'syz.1.2133': attribute type 4 has an invalid length. [ 148.293490][T11111] loop3: detected capacity change from 0 to 512 [ 148.311934][T11111] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.2142: bad orphan inode 17 [ 148.337705][T11111] ext4_test_bit(bit=16, block=4) = 1 [ 148.343108][T11111] is_bad_inode(inode)=0 [ 148.347273][T11111] NEXT_ORPHAN(inode)=0 [ 148.351419][T11111] max_ino=32 [ 148.354639][T11111] i_nlink=1 [ 148.375526][T11111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.389780][T11111] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2142: bg 0: block 7: invalid block bitmap [ 148.411583][ T6979] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.436719][T11121] loop4: detected capacity change from 0 to 512 [ 148.455932][T11121] journal_path: Non-blockdev passed as '' [ 148.461767][T11121] EXT4-fs: error: could not find journal device path [ 148.498546][T11127] loop3: detected capacity change from 0 to 128 [ 148.525428][T11134] __nla_validate_parse: 6 callbacks suppressed [ 148.525444][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2149'. [ 148.639860][T11156] loop0: detected capacity change from 0 to 512 [ 148.659874][T11156] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.2157: bad orphan inode 17 [ 148.670082][T11156] ext4_test_bit(bit=16, block=4) = 1 [ 148.675497][T11156] is_bad_inode(inode)=0 [ 148.679654][T11156] NEXT_ORPHAN(inode)=0 [ 148.683742][T11156] max_ino=32 [ 148.686924][T11156] i_nlink=1 [ 148.690902][T11156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.704861][T11156] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2157: bg 0: block 7: invalid block bitmap [ 148.724465][ T8542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.773505][T11168] loop4: detected capacity change from 0 to 512 [ 148.787276][T11168] journal_path: Non-blockdev passed as '' [ 148.788798][T11172] loop1: detected capacity change from 0 to 764 [ 148.793049][T11168] EXT4-fs: error: could not find journal device path [ 148.807450][T11172] Symlink component flag not implemented [ 148.814407][T11172] Symlink component flag not implemented (101) [ 148.855858][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2165'. [ 148.885423][T11182] loop4: detected capacity change from 0 to 128 [ 149.014941][T11195] loop0: detected capacity change from 0 to 512 [ 149.024046][T11195] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.2170: bad orphan inode 17 [ 149.034257][T11195] ext4_test_bit(bit=16, block=4) = 1 [ 149.039588][T11195] is_bad_inode(inode)=0 [ 149.043811][T11195] NEXT_ORPHAN(inode)=0 [ 149.047885][T11195] max_ino=32 [ 149.051186][T11195] i_nlink=1 [ 149.056600][T11195] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2170: bg 0: block 7: invalid block bitmap [ 149.277496][T11207] openvswitch: netlink: IP tunnel dst address not specified [ 149.277496][T11206] openvswitch: netlink: IP tunnel dst address not specified [ 149.277828][T11207] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2174'. [ 149.301410][T11208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2174'. [ 149.354095][T11212] loop0: detected capacity change from 0 to 2048 [ 149.372253][T11212] EXT4-fs error (device loop0): __ext4_fill_super:5447: inode #2: comm syz.0.2176: iget: bad extended attribute block 281474976710655 [ 149.386345][T11212] EXT4-fs (loop0): get root inode failed [ 149.392074][T11212] EXT4-fs (loop0): mount failed [ 149.447948][T11212] loop0: detected capacity change from 0 to 512 [ 149.455501][T11212] journal_path: Non-blockdev passed as '' [ 149.461368][T11212] EXT4-fs: error: could not find journal device path [ 149.492947][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2177'. [ 149.606819][T11228] loop3: detected capacity change from 0 to 512 [ 149.617617][T11228] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.2181: bad orphan inode 17 [ 149.628860][T11228] ext4_test_bit(bit=16, block=4) = 1 [ 149.634272][T11228] is_bad_inode(inode)=0 [ 149.637445][T11233] loop0: detected capacity change from 0 to 1024 [ 149.638466][T11228] NEXT_ORPHAN(inode)=0 [ 149.638473][T11228] max_ino=32 [ 149.638478][T11228] i_nlink=1 [ 149.640946][T11228] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2181: bg 0: block 7: invalid block bitmap [ 149.654651][T11233] ext3: Unknown parameter 'obj_user' [ 149.797691][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2189'. [ 149.894994][T11261] netlink: 'syz.1.2193': attribute type 1 has an invalid length. [ 150.005518][T11271] loop4: detected capacity change from 0 to 512 [ 150.013876][T11271] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.2196: bad orphan inode 17 [ 150.023978][T11271] ext4_test_bit(bit=16, block=4) = 1 [ 150.029318][T11271] is_bad_inode(inode)=0 [ 150.033537][T11271] NEXT_ORPHAN(inode)=0 [ 150.037589][T11271] max_ino=32 [ 150.040811][T11271] i_nlink=1 [ 150.046510][T11271] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2196: bg 0: block 7: invalid block bitmap [ 150.480596][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2201'. [ 150.591090][T11298] program syz.0.2204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.634928][T11304] loop4: detected capacity change from 0 to 512 [ 150.644035][T11304] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.2207: bad orphan inode 17 [ 150.654323][T11304] ext4_test_bit(bit=16, block=4) = 1 [ 150.659616][T11304] is_bad_inode(inode)=0 [ 150.663883][T11304] NEXT_ORPHAN(inode)=0 [ 150.667952][T11304] max_ino=32 [ 150.671279][T11304] i_nlink=1 [ 150.681960][T11304] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2207: bg 0: block 7: invalid block bitmap [ 150.797467][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2212'. [ 151.155026][T11341] loop1: detected capacity change from 0 to 128 [ 151.175129][T11341] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 151.258761][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 151.258776][ T29] audit: type=1400 audit(1719608372.684:13299): avc: denied { listen } for pid=11339 comm="syz.1.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.352176][T11341] FAT-fs (loop1): FAT read failed (blocknr 128) [ 151.561096][T11351] loop0: detected capacity change from 0 to 512 [ 151.569932][T11351] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.2220: bad orphan inode 17 [ 151.582752][T11351] ext4_test_bit(bit=16, block=4) = 1 [ 151.588126][T11351] is_bad_inode(inode)=0 [ 151.592317][T11351] NEXT_ORPHAN(inode)=0 [ 151.596436][T11351] max_ino=32 [ 151.599786][T11351] i_nlink=1 [ 151.613194][ T24] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 151.615223][T11351] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2220: bg 0: block 7: invalid block bitmap [ 151.684117][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2225'. [ 151.736783][T11374] loop0: detected capacity change from 0 to 256 [ 151.747913][T11374] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 152.114837][T11403] loop4: detected capacity change from 0 to 8192 [ 152.122748][T11403] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 152.408983][T11409] loop3: detected capacity change from 0 to 512 [ 152.417908][T11409] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.2235: bad orphan inode 17 [ 152.428147][T11409] ext4_test_bit(bit=16, block=4) = 1 [ 152.433480][T11409] is_bad_inode(inode)=0 [ 152.437642][T11409] NEXT_ORPHAN(inode)=0 [ 152.441837][T11409] max_ino=32 [ 152.445027][T11409] i_nlink=1 [ 152.450416][T11409] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2235: bg 0: block 7: invalid block bitmap [ 152.520026][T11412] loop3: detected capacity change from 0 to 512 [ 152.528196][T11412] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.537267][T11412] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 152.546400][T11412] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 152.554561][T11412] System zones: 0-2, 18-18, 34-34 [ 152.559965][T11412] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 152.574968][T11412] EXT4-fs (loop3): 1 truncate cleaned up [ 152.692381][ T29] audit: type=1400 audit(1719608374.124:13300): avc: denied { read } for pid=11411 comm="syz.3.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.712128][ T29] audit: type=1400 audit(1719608374.124:13301): avc: denied { shutdown } for pid=11411 comm="syz.3.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.798933][T11428] loop0: detected capacity change from 0 to 1024 [ 152.806274][T11428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.813094][T11428] EXT4-fs: quotafile must be on filesystem root [ 152.886586][T11437] loop4: detected capacity change from 0 to 512 [ 152.889761][T11439] loop0: detected capacity change from 0 to 512 [ 152.901591][T11439] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.2247: bad orphan inode 17 [ 152.911749][T11437] ext4 filesystem being mounted at /root/syzkaller.wbVkXy/421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.913850][T11439] ext4_test_bit(bit=16, block=4) = 1 [ 152.929502][T11439] is_bad_inode(inode)=0 [ 152.933688][T11439] NEXT_ORPHAN(inode)=0 [ 152.937748][T11439] max_ino=32 [ 152.940968][T11439] i_nlink=1 [ 152.948884][T11439] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2247: bg 0: block 7: invalid block bitmap [ 152.963341][T11437] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.2246: corrupted inode contents [ 152.975321][T11437] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.2246: mark_inode_dirty error [ 152.986769][T11437] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.2246: corrupted inode contents [ 152.999839][T11437] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.2246: mark_inode_dirty error [ 153.053921][T11446] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 153.053921][T11446] program syz.0.2250 not setting count and/or reply_len properly [ 153.081097][T11448] tunl0: entered promiscuous mode [ 153.091779][T11448] netlink: 'syz.4.2249': attribute type 8 has an invalid length. [ 153.417245][T11455] xt_CT: No such helper "netbios-ns" [ 153.440629][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2254'. [ 153.507671][T11467] netlink: 'syz.3.2257': attribute type 8 has an invalid length. [ 154.031540][T11486] syz.1.2265: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 154.046423][T11486] CPU: 1 PID: 11486 Comm: syz.1.2265 Not tainted 6.10.0-rc5-syzkaller-00200-g5bbd9b249880 #0 [ 154.056646][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 154.066717][T11486] Call Trace: [ 154.069998][T11486] [ 154.072939][T11486] dump_stack_lvl+0xf2/0x150 [ 154.077558][T11486] dump_stack+0x15/0x20 [ 154.081737][T11486] warn_alloc+0x145/0x1b0 [ 154.086069][T11486] ? __schedule+0x5e8/0x940 [ 154.090677][T11486] ? __vmalloc_node_range_noprof+0x8c/0xef0 [ 154.096625][T11486] __vmalloc_node_range_noprof+0xac/0xef0 [ 154.102445][T11486] ? __pfx_futex_wake_mark+0x10/0x10 [ 154.107787][T11486] ? avc_has_perm_noaudit+0x1cc/0x210 [ 154.113199][T11486] ? xskq_create+0x36/0xd0 [ 154.117698][T11486] vmalloc_user_noprof+0x59/0x70 [ 154.122717][T11486] ? xskq_create+0x79/0xd0 [ 154.127189][T11486] xskq_create+0x79/0xd0 [ 154.131472][T11486] xsk_init_queue+0x82/0xd0 [ 154.136051][T11486] xsk_setsockopt+0x409/0x520 [ 154.140766][T11486] ? __pfx_xsk_setsockopt+0x10/0x10 [ 154.145989][T11486] __sys_setsockopt+0x1d8/0x250 [ 154.151022][T11486] __x64_sys_setsockopt+0x66/0x80 [ 154.156131][T11486] x64_sys_call+0x1183/0x2d70 [ 154.160876][T11486] do_syscall_64+0xc9/0x1c0 [ 154.165421][T11486] ? clear_bhb_loop+0x55/0xb0 [ 154.170136][T11486] ? clear_bhb_loop+0x55/0xb0 [ 154.174832][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.180748][T11486] RIP: 0033:0x7fdc1cad7b99 [ 154.185192][T11486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.204849][T11486] RSP: 002b:00007fdc1bd59048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.213326][T11486] RAX: ffffffffffffffda RBX: 00007fdc1cc65fa0 RCX: 00007fdc1cad7b99 [ 154.221363][T11486] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 154.229421][T11486] RBP: 00007fdc1cb5877e R08: 0000000000000020 R09: 0000000000000000 [ 154.237392][T11486] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 154.245360][T11486] R13: 000000000000000b R14: 00007fdc1cc65fa0 R15: 00007ffe4ea59428 [ 154.253448][T11486] [ 154.256678][T11486] Mem-Info: [ 154.260272][T11486] active_anon:136 inactive_anon:2579 isolated_anon:0 [ 154.260272][T11486] active_file:16305 inactive_file:18500 isolated_file:0 [ 154.260272][T11486] unevictable:0 dirty:10236 writeback:0 [ 154.260272][T11486] slab_reclaimable:3192 slab_unreclaimable:15212 [ 154.260272][T11486] mapped:22021 shmem:312 pagetables:537 [ 154.260272][T11486] sec_pagetables:0 bounce:0 [ 154.260272][T11486] kernel_misc_reclaimable:0 [ 154.260272][T11486] free:1896852 free_pcp:12927 free_cma:0 [ 154.305831][T11486] Node 0 active_anon:544kB inactive_anon:10316kB active_file:65220kB inactive_file:78060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88084kB dirty:45120kB writeback:0kB shmem:1248kB writeback_tmp:0kB kernel_stack:3088kB pagetables:2148kB sec_pagetables:0kB all_unreclaimable? no [ 154.333922][T11486] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.360815][T11486] lowmem_reserve[]: 0 2874 7852 0 [ 154.365993][T11486] Node 0 DMA32 free:2957060kB boost:0kB min:4144kB low:7084kB high:10024kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2960696kB mlocked:0kB bounce:0kB free_pcp:3636kB local_pcp:3540kB free_cma:0kB [ 154.394686][T11486] lowmem_reserve[]: 0 0 4978 0 [ 154.399594][T11486] Node 0 Normal free:4602964kB boost:0kB min:7180kB low:12276kB high:17372kB reserved_highatomic:0KB active_anon:544kB inactive_anon:10316kB active_file:65220kB inactive_file:84904kB unevictable:0kB writepending:52168kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:48804kB local_pcp:47332kB free_cma:0kB [ 154.430187][T11486] lowmem_reserve[]: 0 0 0 0 [ 154.434841][T11486] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 154.447531][T11486] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 720*4096kB (M) = 2957060kB [ 154.463665][T11486] Node 0 Normal: 152*4kB (UME) 122*8kB (UM) 120*16kB (UME) 195*32kB (UME) 439*64kB (UME) 448*128kB (UME) 243*256kB (UME) 55*512kB (UME) 29*1024kB (UME) 14*2048kB (UME) 1064*4096kB (UM) = 4602064kB [ 154.483304][T11486] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 154.492949][T11486] 38213 total pagecache pages [ 154.497615][T11486] 4 pages in swap cache [ 154.501876][T11486] Free swap = 124476kB [ 154.506095][T11486] Total swap = 124996kB [ 154.510473][T11486] 2097051 pages RAM [ 154.514393][T11486] 0 pages HighMem/MovableOnly [ 154.519098][T11486] 78485 pages reserved [ 155.006605][T11535] loop3: detected capacity change from 0 to 512 [ 155.014301][T11535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.023780][T11535] EXT4-fs (loop3): orphan cleanup on readonly fs [ 155.030731][T11535] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2279: bg 0: block 248: padding at end of block bitmap is not set [ 155.045257][T11535] Quota error (device loop3): write_blk: dquota write failed [ 155.052759][T11535] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 155.062681][T11535] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.2279: Failed to acquire dquot type 1 [ 155.075006][T11535] EXT4-fs (loop3): 1 truncate cleaned up [ 155.084910][T11535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.093383][T11535] EXT4-fs error (device loop3): __ext4_remount:6503: comm syz.3.2279: Abort forced by user [ 155.103571][T11535] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 155.120827][T11535] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 155.131425][T11535] ext4 filesystem being remounted at /root/syzkaller.J3DMEK/303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.199152][T11541] loop3: detected capacity change from 0 to 512 [ 155.207812][T11541] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.2280: bad orphan inode 17 [ 155.217923][T11541] ext4_test_bit(bit=16, block=4) = 1 [ 155.223296][T11541] is_bad_inode(inode)=0 [ 155.227448][T11541] NEXT_ORPHAN(inode)=0 [ 155.232413][T11541] max_ino=32 [ 155.235605][T11541] i_nlink=1 [ 155.240726][T11541] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2280: bg 0: block 7: invalid block bitmap [ 155.308357][T11544] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.433656][ T29] audit: type=1326 audit(1719608376.864:13302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.0.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a7a1b99 code=0x7ffc0000 [ 155.457300][ T29] audit: type=1326 audit(1719608376.864:13303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.0.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe71a7a1b99 code=0x7ffc0000 [ 155.480865][ T29] audit: type=1326 audit(1719608376.864:13304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.0.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a7a1b99 code=0x7ffc0000 [ 155.504507][ T29] audit: type=1326 audit(1719608376.864:13305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.0.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a7a1b99 code=0x7ffc0000 [ 155.545085][T11565] bond0: entered promiscuous mode [ 155.550158][T11565] bond_slave_0: entered promiscuous mode [ 155.556152][T11565] bond_slave_1: entered promiscuous mode [ 155.597254][T11577] loop3: detected capacity change from 0 to 512 [ 155.617642][ T29] audit: type=1400 audit(1719608377.044:13306): avc: denied { execute_no_trans } for pid=11564 comm="syz.4.2288" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.662901][T11577] EXT4-fs: Mount option(s) incompatible with ext2 [ 155.696818][T11585] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2295'. [ 155.716415][T11577] loop3: detected capacity change from 0 to 512 [ 155.728460][T11577] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz.3.2293: corrupted in-inode xattr: invalid ea_ino [ 155.742336][T11577] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.2293: couldn't read orphan inode 12 (err -117) [ 155.836496][T11610] loop3: detected capacity change from 0 to 256 [ 155.995374][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2307'. [ 156.136962][T11638] netlink: 'syz.1.2308': attribute type 3 has an invalid length. [ 156.599055][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 156.599073][ T29] audit: type=1400 audit(1719608378.024:13311): avc: denied { setattr } for pid=11643 comm="syz.4.2312" name="" dev="pipefs" ino=34095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 156.644338][T11650] loop4: detected capacity change from 0 to 512 [ 156.653845][T11650] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 156.661981][T11650] EXT4-fs (loop4): orphan cleanup on readonly fs [ 156.668623][T11650] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 156.685571][T11650] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 156.693311][T11650] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2314: bg 0: block 40: padding at end of block bitmap is not set [ 156.707937][T11650] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 156.717031][T11650] EXT4-fs (loop4): 1 truncate cleaned up [ 156.725805][T11650] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.2314: corrupted xattr block 31: invalid header [ 156.739315][T11650] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 156.749206][T11650] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.2314: corrupted xattr block 31: invalid header [ 156.763761][T11650] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 156.773110][T11650] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.2314: bad symlink. [ 156.775058][ T29] audit: type=1400 audit(1719608378.204:13312): avc: denied { read } for pid=11649 comm="syz.4.2314" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 156.832614][ T29] audit: type=1400 audit(1719608378.264:13313): avc: denied { read } for pid=11664 comm="syz.0.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.857148][T11668] loop3: detected capacity change from 0 to 256 [ 157.780506][T11708] loop3: detected capacity change from 0 to 256 [ 157.822244][T11709] loop3: detected capacity change from 0 to 256 [ 157.974185][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2340'. [ 158.072776][T11747] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 158.179803][T11764] loop3: detected capacity change from 0 to 512 [ 158.183248][T11731] chnl_net:caif_netlink_parms(): no params data found [ 158.188614][T11764] EXT4-fs: Ignoring removed bh option [ 158.203674][T11764] EXT4-fs (loop3): orphan cleanup on readonly fs [ 158.210227][T11764] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 158.219193][T11764] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2347: invalid indirect mapped block 8 (level 2) [ 158.233897][T11764] EXT4-fs (loop3): Remounting filesystem read-only [ 158.240895][T11764] EXT4-fs (loop3): 1 truncate cleaned up [ 158.247225][T11764] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 158.258169][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.282063][T11731] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.289123][T11731] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.296425][T11731] bridge_slave_0: entered allmulticast mode [ 158.304553][T11731] bridge_slave_0: entered promiscuous mode [ 158.315882][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.328399][T11731] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.335502][T11731] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.344134][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 158.344690][T11731] bridge_slave_1: entered allmulticast mode [ 158.357165][T11731] bridge_slave_1: entered promiscuous mode [ 158.376973][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.417602][T11731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.437775][T11731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.455848][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.483512][T11731] team0: Port device team_slave_0 added [ 158.490780][T11731] team0: Port device team_slave_1 added [ 158.508232][T11731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.515265][T11731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.541250][T11731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.553300][T11731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.560266][T11731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.586286][T11731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.619288][T11731] hsr_slave_0: entered promiscuous mode [ 158.625447][T11731] hsr_slave_1: entered promiscuous mode [ 158.633973][T11731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.641750][T11731] Cannot create hsr debugfs directory [ 158.665427][ T28] bridge_slave_1: left allmulticast mode [ 158.671552][ T28] bridge_slave_1: left promiscuous mode [ 158.677262][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.685297][ T28] bridge_slave_0: left allmulticast mode [ 158.691030][ T28] bridge_slave_0: left promiscuous mode [ 158.696741][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.711843][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'. [ 158.725410][T11789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2354'. [ 158.739001][T11789] xt_TPROXY: Can be used only with -p tcp or -p udp [ 158.792634][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.803593][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.813746][ T28] bond0 (unregistering): Released all slaves [ 158.824404][T11789] vlan2: entered promiscuous mode [ 158.829466][T11789] vlan2: entered allmulticast mode [ 158.911358][T11799] team0: entered promiscuous mode [ 158.916454][T11799] team_slave_0: entered promiscuous mode [ 158.922176][T11799] team_slave_1: entered promiscuous mode [ 158.927872][T11799] vlan2: entered promiscuous mode [ 158.932957][T11799] xfrm0: entered promiscuous mode [ 158.941650][ T28] team0: left promiscuous mode [ 158.946459][ T28] team_slave_0: left promiscuous mode [ 158.951934][ T28] team_slave_1: left promiscuous mode [ 158.957995][ T28] dummy0: left promiscuous mode [ 158.966217][ T28] hsr_slave_0: left promiscuous mode [ 158.972670][ T28] hsr_slave_1: left promiscuous mode [ 158.978415][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.985905][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.993927][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.001396][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.010775][ T28] veth1_macvtap: left promiscuous mode [ 159.016314][ T28] veth0_macvtap: left promiscuous mode [ 159.021898][ T28] veth1_vlan: left promiscuous mode [ 159.027166][ T28] veth0_vlan: left promiscuous mode [ 159.116914][ T28] team0 (unregistering): Port device team_slave_1 removed [ 159.127575][ T28] team0 (unregistering): Port device team_slave_0 removed [ 159.166389][T11798] team0: left promiscuous mode [ 159.171327][T11798] team_slave_0: left promiscuous mode [ 159.176830][T11798] team_slave_1: left promiscuous mode [ 159.182316][T11798] vlan2: left promiscuous mode [ 159.187115][T11798] xfrm0: left promiscuous mode [ 159.241808][T11811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2362'. [ 159.268736][ T29] audit: type=1326 audit(1719608380.694:13314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.0.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a7a1b99 code=0x7ffc0000 [ 159.292934][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 159.294228][ T29] audit: type=1326 audit(1719608380.694:13315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.0.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe71a7a1b99 code=0x7ffc0000 [ 159.325505][ T29] audit: type=1326 audit(1719608380.694:13316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.0.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a7a1b99 code=0x7ffc0000 [ 159.349194][ T29] audit: type=1326 audit(1719608380.694:13317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.0.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a7a1b99 code=0x7ffc0000 [ 159.372779][ T29] audit: type=1326 audit(1719608380.694:13318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.0.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe71a7a1b99 code=0x7ffc0000 [ 159.396583][ T29] audit: type=1326 audit(1719608380.694:13319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.0.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a7a1b99 code=0x7ffc0000 [ 159.420211][ T29] audit: type=1326 audit(1719608380.694:13320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.0.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fe71a7a1b99 code=0x7ffc0000 [ 159.485341][T11830] team0: entered promiscuous mode [ 159.490438][T11830] team_slave_0: entered promiscuous mode [ 159.496211][T11830] team_slave_1: entered promiscuous mode [ 159.502324][T11829] team0: left promiscuous mode [ 159.507140][T11829] team_slave_0: left promiscuous mode [ 159.512609][T11829] team_slave_1: left promiscuous mode [ 159.556589][T11837] loop0: detected capacity change from 0 to 2048 [ 159.589650][T11847] loop1: detected capacity change from 0 to 512 [ 159.597630][T11837] EXT4-fs error (device loop0): __ext4_fill_super:5447: inode #2: comm syz.0.2371: iget: bad extended attribute block 281474976710655 [ 159.611335][T11849] team_slave_0: entered promiscuous mode [ 159.617091][T11849] team_slave_1: entered promiscuous mode [ 159.622927][T11847] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 159.632092][T11849] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 159.633966][T11837] EXT4-fs (loop0): get root inode failed [ 159.642206][T11849] macvlan3: entered promiscuous mode [ 159.644770][T11837] EXT4-fs (loop0): mount failed [ 159.650008][T11849] team0: entered promiscuous mode [ 159.650120][T11849] vlan2: entered promiscuous mode [ 159.665064][T11849] xfrm0: entered promiscuous mode [ 159.666517][T11847] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 159.683111][T11849] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 159.722145][T11847] EXT4-fs (loop1): orphan cleanup on readonly fs [ 159.738330][T11847] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 159.759344][T11731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.774375][T11838] ================================================================== [ 159.782472][T11838] BUG: KCSAN: data-race in getrusage / unmap_region [ 159.789070][T11838] [ 159.791392][T11838] write to 0xffff88810cde80e8 of 8 bytes by task 11837 on cpu 1: [ 159.799105][T11838] unmap_region+0x105/0x230 [ 159.803636][T11838] do_vmi_align_munmap+0x6df/0xa60 [ 159.808757][T11838] do_vmi_munmap+0x1fb/0x250 [ 159.813351][T11838] __vm_munmap+0xec/0x210 [ 159.817685][T11838] __x64_sys_munmap+0x36/0x40 [ 159.822368][T11838] x64_sys_call+0xcd3/0x2d70 [ 159.826967][T11838] do_syscall_64+0xc9/0x1c0 [ 159.831481][T11838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.837381][T11838] [ 159.839713][T11838] read to 0xffff88810cde80e8 of 8 bytes by task 11838 on cpu 0: [ 159.847341][T11838] getrusage+0xa35/0xb90 [ 159.851587][T11838] io_sq_thread+0x544/0xff0 [ 159.856126][T11838] ret_from_fork+0x4b/0x60 [ 159.860582][T11838] ret_from_fork_asm+0x1a/0x30 [ 159.865356][T11838] [ 159.867688][T11838] value changed: 0x0000000000000d53 -> 0x0000000000000d94 [ 159.874877][T11838] [ 159.877193][T11838] Reported by Kernel Concurrency Sanitizer on: [ 159.883336][T11838] CPU: 0 PID: 11838 Comm: iou-sqp-11837 Not tainted 6.10.0-rc5-syzkaller-00200-g5bbd9b249880 #0 [ 159.893747][T11838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 159.903890][T11838] ================================================================== [ 159.919376][T11731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.927004][T11847] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 159.929024][T11731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.943170][T11847] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.2372: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 159.963317][T11731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.970399][T11837] loop0: detected capacity change from 0 to 512 [ 159.987073][T11837] journal_path: Non-blockdev passed as '' [ 159.992927][T11837] EXT4-fs: error: could not find journal device path [ 160.017368][T11847] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.2372: couldn't read orphan inode 13 (err -117) [ 160.047676][T11847] EXT4-fs mount: 28 callbacks suppressed [ 160.047694][T11847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.078759][T11731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.088243][T11847] EXT4-fs error (device loop1): ext4_lookup:1854: comm syz.1.2372: inode #15: comm syz.1.2372: iget: illegal inode # [ 160.108589][T11731] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.118403][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.125472][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.142030][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.149250][ T972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.167176][T11731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.177737][T11731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.230179][T11731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.297714][T11731] veth0_vlan: entered promiscuous mode [ 160.306071][T11731] veth1_vlan: entered promiscuous mode [ 160.319102][T11731] veth0_macvtap: entered promiscuous mode [ 160.329466][T11731] veth1_macvtap: entered promiscuous mode [ 160.340331][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.350876][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.360793][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.371299][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.381176][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.391763][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.402701][T11731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.413243][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.423805][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.433689][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.444126][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.453929][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.464378][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.475347][T11731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.485482][T11731] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.494475][T11731] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.503264][T11731] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.512091][T11731] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.566127][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.