last executing test programs: 3.706639604s ago: executing program 2 (id=204): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1.681426032s ago: executing program 3 (id=233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 1.653144374s ago: executing program 0 (id=234): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6cf553295e5e2cc962e0058093bc", 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.652809384s ago: executing program 3 (id=235): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) fadvise64(r0, 0x3, 0x6, 0x4) 1.573329358s ago: executing program 0 (id=237): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001d"]) 1.572238318s ago: executing program 2 (id=238): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, 0x0, 0xc8) 1.530747261s ago: executing program 0 (id=239): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000b00)) 1.477945434s ago: executing program 0 (id=241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540000000000800024000000024080001"], 0xc8}}, 0x0) 1.477771884s ago: executing program 3 (id=242): setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1.419966257s ago: executing program 0 (id=243): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x2, 0x2e, 0x4c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_prespec={0x44, 0x24, 0x15, 0x3, 0xb, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x3}, {@broadcast, 0x1000}, {@multicast1, 0x7}]}]}}, {{0x4e27, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x57}}}}}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000000801010000000000000000050000070600024088630000040004800900010073793430000000000500"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x70}, 0x1, 0x7}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1.412857988s ago: executing program 3 (id=245): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x400) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, 0x0) 1.343966031s ago: executing program 3 (id=246): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 1.165571862s ago: executing program 4 (id=251): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x8, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="2808f99a33640a01", 0x0, 0x3, 0x10001, 0x1, 0x0}) 1.113398585s ago: executing program 4 (id=252): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) 1.073936387s ago: executing program 2 (id=253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10001, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x85a, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x20400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x400007b0, 0x7, 0x103, 0x100006, 0xd, 0x0, 0x4, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x100, 0x3, 0x3, 0x86, 0x7, 0x8, 0x100, 0xc0004000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x2000000, 0x1, 0x0, 0x4, 0x9, 0x61, 0x8000, 0x7, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0xffffffff, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x1, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0xccf, 0x70, 0x2, 0x5, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x47f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x89d1, 0xfca, 0x399d, 0x9, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x0, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xef, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0xa, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x1, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x3, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x200040, 0x4, 0x2004, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0xfffd, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x325, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x101000, 0x7ff, 0x1, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x7, 0x5, 0x2, 0x0, 0x4e4, 0x80, 0x3, 0x8, 0x9, 0x5, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x6, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x8, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc84631, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xc, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbe8, {0x8, 0x0, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000000b80)=[{{&(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 993.393582ms ago: executing program 4 (id=254): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") fallocate(r0, 0x2, 0x2a38, 0x9) 777.572765ms ago: executing program 4 (id=255): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0xfffffed8) 739.440387ms ago: executing program 1 (id=256): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x64, 0x19, 0x1, 0x70bd29, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0xf, 0x0, 0x1, [@nested={0x49, 0x6e, 0x0, 0x1, [@generic="0f75d985950d56a74b8c05c2f8a1df7a7632878b41f3a5bd16358521632786fe074c39fd31825b6a4b0d45043873302d09604c5374e2e1f9e90e65c888a3fc614ccbd0cd5d"]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) 590.688436ms ago: executing program 4 (id=257): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x342) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) 584.896056ms ago: executing program 1 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10001, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x85a, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x20400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x400007b0, 0x7, 0x103, 0x100006, 0xd, 0x0, 0x4, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x100, 0x3, 0x3, 0x86, 0x7, 0x8, 0x100, 0xc0004000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x2000000, 0x1, 0x0, 0x4, 0x9, 0x61, 0x8000, 0x7, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0xffffffff, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x1, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0xccf, 0x70, 0x2, 0x5, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x47f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x89d1, 0xfca, 0x399d, 0x9, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x0, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xef, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0xa, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x1, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x3, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x200040, 0x4, 0x2004, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0xfffd, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x325, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x101000, 0x7ff, 0x1, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x7, 0x5, 0x2, 0x0, 0x4e4, 0x80, 0x3, 0x8, 0x9, 0x5, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x6, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x8, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc84631, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xc, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbe8, {0x8, 0x0, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 530.628309ms ago: executing program 3 (id=259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000001, 0x12, r1, 0x100000000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x3ff, 0x80, 0xffffffff, 0x4, "8100e1c8070000000000000000eaffffff00"}) r2 = syz_open_pts(0xffffffffffffffff, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 529.181179ms ago: executing program 0 (id=260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, 0x0, 0x2040005) capset(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x801070cf, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x20000054) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x800, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_io_uring_setup(0x82d, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2040400) cachestat(r8, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r7, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) 458.571163ms ago: executing program 1 (id=261): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") writev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)="d8348acc1ad89094a1de30a4751eaea99d5233a510d57ee151985a15279ea13a915989fe5b3e4c84e3861271b63be89a8087d27e3a23cdb70083fedc68ff84879b7d8efe0870d409320574c65a2dec7f31cdac3b39ab3afea6c4415932cfada36897d06c580d965669ae41abaecf54d79711b4c86913874164e8e9475098e4fc2acfebb0f0af67c5d708822df341ea1e0e3b763b9a00c7f4faa013acde2a7dc453949a524dbeb9034140365fdf0128ce1af9688cbb4ebfc8162f3ec13a566f1a124878d8227668c4b97badc32d", 0xcd}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x2400, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x1, 0x4000, 0xfffff3e3}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0xf, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'btrfs.', '/\x00'}, &(0x7f0000000180)='\\\x00', 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000480)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) socket$kcm(0x2b, 0x1, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 458.282513ms ago: executing program 4 (id=262): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0xffffffffffffffff, {0x1, 0xff, 0x4}, 0xfe}, 0x18) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001340)={0x0, @multicast2, @broadcast}, &(0x7f0000001240)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xf1}}]}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'macvlan0\x00'}) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb3", 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 310.098662ms ago: executing program 2 (id=263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 116.923543ms ago: executing program 1 (id=264): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f00000001c0)) 73.405206ms ago: executing program 2 (id=265): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xeffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0x2}, 0x103803, 0x0, 0x0, 0x3, 0xfff, 0x6, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) 40.058328ms ago: executing program 1 (id=266): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000a00)=0x40, 0x4) 28.947628ms ago: executing program 2 (id=267): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @private1, 0x5}, @ib={0x1b, 0x2, 0x10, {"1713475ed3d6eb3498967e9c5ae2445a"}, 0x6, 0xf, 0x1}}}, 0x118) 0s ago: executing program 1 (id=268): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000340)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 34.496610][ T29] audit: type=1400 audit(1769014765.099:62): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.519699][ T29] audit: type=1400 audit(1769014765.119:63): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.522053][ T3307] cgroup: Unknown subsys name 'net' [ 34.547466][ T29] audit: type=1400 audit(1769014765.149:64): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.727306][ T3307] cgroup: Unknown subsys name 'cpuset' [ 34.733650][ T3307] cgroup: Unknown subsys name 'rlimit' [ 34.885368][ T29] audit: type=1400 audit(1769014765.479:65): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.908714][ T29] audit: type=1400 audit(1769014765.489:66): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.929295][ T29] audit: type=1400 audit(1769014765.489:67): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.949812][ T29] audit: type=1400 audit(1769014765.489:68): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.970195][ T29] audit: type=1400 audit(1769014765.509:69): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.991673][ T29] audit: type=1400 audit(1769014765.509:70): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.011624][ T3312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.016613][ T29] audit: type=1400 audit(1769014765.509:71): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.077978][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.274012][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.322336][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.348388][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 36.368761][ T3331] chnl_net:caif_netlink_parms(): no params data found [ 36.419441][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.426640][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.433885][ T3320] bridge_slave_0: entered allmulticast mode [ 36.440545][ T3320] bridge_slave_0: entered promiscuous mode [ 36.451947][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 36.466660][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.473824][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.481063][ T3320] bridge_slave_1: entered allmulticast mode [ 36.487462][ T3320] bridge_slave_1: entered promiscuous mode [ 36.543465][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.550580][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.557846][ T3321] bridge_slave_0: entered allmulticast mode [ 36.564353][ T3321] bridge_slave_0: entered promiscuous mode [ 36.576924][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.593419][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.600563][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.607779][ T3321] bridge_slave_1: entered allmulticast mode [ 36.614119][ T3321] bridge_slave_1: entered promiscuous mode [ 36.620511][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.627618][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.635100][ T3319] bridge_slave_0: entered allmulticast mode [ 36.641646][ T3319] bridge_slave_0: entered promiscuous mode [ 36.649128][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.665531][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.672702][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.680314][ T3331] bridge_slave_0: entered allmulticast mode [ 36.686816][ T3331] bridge_slave_0: entered promiscuous mode [ 36.698326][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.705432][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.712699][ T3319] bridge_slave_1: entered allmulticast mode [ 36.719130][ T3319] bridge_slave_1: entered promiscuous mode [ 36.734382][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.741487][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.748708][ T3331] bridge_slave_1: entered allmulticast mode [ 36.755358][ T3331] bridge_slave_1: entered promiscuous mode [ 36.790095][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.804482][ T3320] team0: Port device team_slave_0 added [ 36.810534][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.817644][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.824813][ T3324] bridge_slave_0: entered allmulticast mode [ 36.831644][ T3324] bridge_slave_0: entered promiscuous mode [ 36.839600][ T3331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.850195][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.860369][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.870378][ T3320] team0: Port device team_slave_1 added [ 36.876171][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.883341][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.890715][ T3324] bridge_slave_1: entered allmulticast mode [ 36.897221][ T3324] bridge_slave_1: entered promiscuous mode [ 36.904363][ T3331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.914622][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.954943][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.962001][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.988052][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.013392][ T3321] team0: Port device team_slave_0 added [ 37.019382][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.026412][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.052432][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.064684][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.074785][ T3331] team0: Port device team_slave_0 added [ 37.081502][ T3319] team0: Port device team_slave_0 added [ 37.087989][ T3321] team0: Port device team_slave_1 added [ 37.097430][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.107232][ T3331] team0: Port device team_slave_1 added [ 37.113688][ T3319] team0: Port device team_slave_1 added [ 37.129627][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.136621][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.162597][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.188119][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.195141][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.221246][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.252817][ T3324] team0: Port device team_slave_0 added [ 37.258704][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.265655][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.291811][ T3331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.302859][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.310027][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.335988][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.353043][ T3324] team0: Port device team_slave_1 added [ 37.359133][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.366111][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.392084][ T3331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.412990][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.420018][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.446181][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.459476][ T3320] hsr_slave_0: entered promiscuous mode [ 37.465452][ T3320] hsr_slave_1: entered promiscuous mode [ 37.498857][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.505841][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.531903][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.543573][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.550636][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.576660][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.590186][ T3321] hsr_slave_0: entered promiscuous mode [ 37.596409][ T3321] hsr_slave_1: entered promiscuous mode [ 37.602365][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.608163][ T3321] Cannot create hsr debugfs directory [ 37.642075][ T3331] hsr_slave_0: entered promiscuous mode [ 37.648088][ T3331] hsr_slave_1: entered promiscuous mode [ 37.653962][ T3331] debugfs: 'hsr0' already exists in 'hsr' [ 37.659741][ T3331] Cannot create hsr debugfs directory [ 37.694394][ T3319] hsr_slave_0: entered promiscuous mode [ 37.700788][ T3319] hsr_slave_1: entered promiscuous mode [ 37.706804][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 37.712530][ T3319] Cannot create hsr debugfs directory [ 37.725429][ T3324] hsr_slave_0: entered promiscuous mode [ 37.731482][ T3324] hsr_slave_1: entered promiscuous mode [ 37.737577][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 37.743307][ T3324] Cannot create hsr debugfs directory [ 37.959039][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.968312][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.979532][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.988491][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.004900][ T3324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.014773][ T3324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.025770][ T3324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.034910][ T3324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.063308][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.072757][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.085560][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.095054][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.141919][ T3331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.153198][ T3331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.162761][ T3331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.172035][ T3331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.213871][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.225017][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.235078][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.250011][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.294379][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.310916][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.333247][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.352042][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.362665][ T899] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.369893][ T899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.384122][ T899] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.391310][ T899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.405772][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.416733][ T899] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.423925][ T899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.444571][ T899] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.451739][ T899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.469038][ T3331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.477931][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.490652][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.497832][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.514421][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.521516][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.547385][ T3331] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.559909][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.580174][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.587295][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.602995][ T899] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.610202][ T899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.621550][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.643693][ T1679] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.650818][ T1679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.678063][ T899] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.685192][ T899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.702590][ T3331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.713156][ T3331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.747154][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.781289][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.808674][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.842409][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.888733][ T3331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.976856][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.041988][ T3321] veth0_vlan: entered promiscuous mode [ 39.054562][ T3324] veth0_vlan: entered promiscuous mode [ 39.071582][ T3324] veth1_vlan: entered promiscuous mode [ 39.082369][ T3321] veth1_vlan: entered promiscuous mode [ 39.115086][ T3331] veth0_vlan: entered promiscuous mode [ 39.141273][ T3324] veth0_macvtap: entered promiscuous mode [ 39.160854][ T3321] veth0_macvtap: entered promiscuous mode [ 39.167710][ T3324] veth1_macvtap: entered promiscuous mode [ 39.179036][ T3319] veth0_vlan: entered promiscuous mode [ 39.186239][ T3331] veth1_vlan: entered promiscuous mode [ 39.193238][ T3321] veth1_macvtap: entered promiscuous mode [ 39.211893][ T3319] veth1_vlan: entered promiscuous mode [ 39.218925][ T3320] veth0_vlan: entered promiscuous mode [ 39.228020][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.240703][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.251763][ T3320] veth1_vlan: entered promiscuous mode [ 39.259117][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.273483][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.281680][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.290752][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.300060][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.313712][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.328120][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.342419][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.351540][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.364716][ T3319] veth0_macvtap: entered promiscuous mode [ 39.372078][ T3331] veth0_macvtap: entered promiscuous mode [ 39.378707][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.390101][ T3331] veth1_macvtap: entered promiscuous mode [ 39.411956][ T3319] veth1_macvtap: entered promiscuous mode [ 39.422198][ T3320] veth0_macvtap: entered promiscuous mode [ 39.432003][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.454154][ T3320] veth1_macvtap: entered promiscuous mode [ 39.468098][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.497730][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.515869][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 39.515888][ T29] audit: type=1400 audit(1769014770.109:97): avc: denied { prog_load } for pid=3491 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.540771][ T29] audit: type=1400 audit(1769014770.109:98): avc: denied { bpf } for pid=3491 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.561346][ T29] audit: type=1400 audit(1769014770.139:99): avc: denied { perfmon } for pid=3491 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.572522][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.581982][ T29] audit: type=1400 audit(1769014770.139:100): avc: denied { prog_run } for pid=3491 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.607952][ T29] audit: type=1400 audit(1769014770.139:101): avc: denied { create } for pid=3491 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.610733][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.627211][ T29] audit: type=1400 audit(1769014770.159:102): avc: denied { create } for pid=3491 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.644692][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.658222][ T29] audit: type=1400 audit(1769014770.159:103): avc: denied { setopt } for pid=3491 comm="syz.0.1" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.688518][ T3494] syz_tun: entered allmulticast mode [ 39.698232][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.720530][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.736954][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.745998][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.760962][ T29] audit: type=1400 audit(1769014770.349:104): avc: denied { create } for pid=3496 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.795634][ T1039] IPVS: starting estimator thread 0... [ 39.801868][ T29] audit: type=1400 audit(1769014770.359:105): avc: denied { map_create } for pid=3496 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.820804][ T29] audit: type=1400 audit(1769014770.369:106): avc: denied { open } for pid=3496 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.839832][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.893963][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.925104][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.934176][ T3501] IPVS: using max 2208 ests per chain, 110400 per kthread [ 39.956908][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.978180][ T3507] loop3: detected capacity change from 0 to 2048 [ 39.995631][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.047614][ T3507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.065315][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.078513][ T3521] loop1: detected capacity change from 0 to 512 [ 40.085837][ T3521] EXT4-fs (loop1): filesystem is read-only [ 40.092287][ T3521] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 40.107322][ T3507] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.120727][ T3507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6'. [ 40.126802][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.140002][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.147260][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.154551][ T3521] EXT4-fs (loop1): filesystem is read-only [ 40.160559][ T3521] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.168280][ T3521] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10: bg 0: block 64: padding at end of block bitmap is not set [ 40.182905][ T3521] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 40.193383][ T3521] EXT4-fs (loop1): 1 orphan inode deleted [ 40.200261][ T3521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.235900][ T3528] loop0: detected capacity change from 0 to 128 [ 40.243157][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.252401][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.253383][ T3528] vfat: Unknown parameter 'shortnale' [ 40.290903][ T3507] netlink: 'syz.3.6': attribute type 10 has an invalid length. [ 40.321007][ T3331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.332797][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.339943][ T3507] bridge0: port 2(bridge_slave_1) entered listening state [ 40.347386][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.354499][ T3507] bridge0: port 1(bridge_slave_0) entered listening state [ 40.371733][ T3507] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 40.463833][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.500003][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 40.573698][ T3542] loop3: detected capacity change from 0 to 512 [ 40.582960][ T3542] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 40.596563][ T3542] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 40.608706][ T3313] udevd[3313]: incorrect jbd checksum on /dev/loop3 [ 40.745106][ T3549] syz_tun: entered allmulticast mode [ 40.752507][ T3548] syz_tun: left allmulticast mode [ 41.290849][ T3557] syzkaller0: entered promiscuous mode [ 41.296480][ T3557] syzkaller0: entered allmulticast mode [ 42.526555][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.982024][ T3603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3603 comm=syz.3.33 [ 42.996121][ T3603] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 43.076504][ T3605] loop3: detected capacity change from 0 to 4096 [ 43.104754][ T3605] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.139183][ T3605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.169891][ T3609] loop4: detected capacity change from 0 to 1024 [ 43.193465][ T3609] EXT4-fs: Ignoring removed bh option [ 43.267875][ T3609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.302491][ T3617] loop1: detected capacity change from 0 to 2048 [ 43.323074][ T3609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.35'. [ 43.373009][ T3609] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.35: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 43.404896][ T3609] EXT4-fs (loop4): Remounting filesystem read-only [ 43.407042][ T3621] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 43.415796][ T3609] EXT4-fs (loop4): shut down requested (0) [ 43.440709][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.494910][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.516898][ T3626] loop1: detected capacity change from 0 to 512 [ 43.570503][ T3626] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.571343][ T3629] Zero length message leads to an empty skb [ 43.583636][ T3626] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.613131][ T3634] netlink: 'syz.3.39': attribute type 13 has an invalid length. [ 43.622322][ T3626] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.40: bad orphan inode 16 [ 43.633051][ T3626] ext4_test_bit(bit=15, block=4) = 0 [ 43.638452][ T3626] EXT4-fs (loop1): 1 orphan inode deleted [ 43.645287][ T3626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.672304][ T3629] loop4: detected capacity change from 0 to 1024 [ 43.789887][ T3626] EXT4-fs (loop1): shut down requested (1) [ 43.836270][ C1] hrtimer: interrupt took 43100 ns [ 43.986921][ T3634] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.994113][ T3634] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.095552][ T3665] loop0: detected capacity change from 0 to 128 [ 44.289765][ T1679] kworker/u8:9: attempt to access beyond end of device [ 44.289765][ T1679] loop0: rw=1, sector=145, nr_sectors = 16 limit=128 [ 44.316622][ T1679] kworker/u8:9: attempt to access beyond end of device [ 44.316622][ T1679] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 44.340232][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.366602][ T1679] kworker/u8:9: attempt to access beyond end of device [ 44.366602][ T1679] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 44.393167][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.406062][ T3678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.408138][ T1679] kworker/u8:9: attempt to access beyond end of device [ 44.408138][ T1679] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 44.456913][ T3678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.457280][ T1679] kworker/u8:9: attempt to access beyond end of device [ 44.457280][ T1679] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 44.465110][ T3679] netlink: 'syz.4.50': attribute type 10 has an invalid length. [ 44.515085][ T1679] kworker/u8:9: attempt to access beyond end of device [ 44.515085][ T1679] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 44.554726][ T1679] kworker/u8:9: attempt to access beyond end of device [ 44.554726][ T1679] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 44.604262][ T1679] kworker/u8:9: attempt to access beyond end of device [ 44.604262][ T1679] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 44.647240][ T1679] kworker/u8:9: attempt to access beyond end of device [ 44.647240][ T1679] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 44.686606][ T3679] bond0: (slave bond_slave_0): Releasing backup interface [ 44.694446][ T1679] kworker/u8:9: attempt to access beyond end of device [ 44.694446][ T1679] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 44.716776][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.754791][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.802231][ T3681] syzkaller0: entered promiscuous mode [ 44.807860][ T3681] syzkaller0: entered allmulticast mode [ 44.815370][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 44.815389][ T29] audit: type=1400 audit(1769014775.409:254): avc: denied { write } for pid=3684 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.842113][ T29] audit: type=1400 audit(1769014775.409:255): avc: denied { nlmsg_write } for pid=3684 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.877040][ T3400] IPVS: starting estimator thread 0... [ 44.899544][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.930401][ T3692] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 44.949827][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.966394][ T3690] IPVS: using max 2208 ests per chain, 110400 per kthread [ 44.990188][ T3685] loop0: detected capacity change from 0 to 512 [ 45.000814][ T3685] ext4: Unknown parameter 'euid<00000000000000060928' [ 45.049601][ T29] audit: type=1326 audit(1769014775.619:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18217acb9 code=0x7ffc0000 [ 45.072821][ T29] audit: type=1326 audit(1769014775.619:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa18217acb9 code=0x7ffc0000 [ 45.096802][ T29] audit: type=1326 audit(1769014775.619:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18217acb9 code=0x7ffc0000 [ 45.120173][ T29] audit: type=1326 audit(1769014775.619:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa18217acb9 code=0x7ffc0000 [ 45.143405][ T29] audit: type=1326 audit(1769014775.619:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18217acb9 code=0x7ffc0000 [ 45.167123][ T29] audit: type=1326 audit(1769014775.619:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa18217acb9 code=0x7ffc0000 [ 45.190962][ T29] audit: type=1326 audit(1769014775.619:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18217acb9 code=0x7ffc0000 [ 45.214227][ T29] audit: type=1326 audit(1769014775.619:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18217acb9 code=0x7ffc0000 [ 45.238748][ T3699] veth3: entered promiscuous mode [ 45.377952][ T3711] loop3: detected capacity change from 0 to 256 [ 45.398657][ T3711] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.475465][ T3717] tipc: Started in network mode [ 45.480665][ T3717] tipc: Node identity 7f000001, cluster identity 4711 [ 45.552565][ T3717] tipc: Enabled bearer , priority 10 [ 45.598307][ T3331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.638061][ T3717] tipc: Enabled bearer , priority 10 [ 45.873477][ T3711] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 45.881546][ T3711] FAT-fs (loop3): Filesystem has been set read-only [ 45.936578][ T3711] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 45.992939][ T3777] netlink: 'syz.4.60': attribute type 4 has an invalid length. [ 46.107971][ T3781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.57'. [ 46.119157][ T3781] team0: No ports can be present during mode change [ 46.579302][ T3787] loop3: detected capacity change from 0 to 128 [ 46.597395][ T3787] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.627511][ T3787] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.646387][ T9] tipc: Node number set to 2130706433 [ 46.849372][ T1911] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.948631][ T3796] syzkaller0: entered promiscuous mode [ 46.954183][ T3796] syzkaller0: entered allmulticast mode [ 47.185685][ T3815] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.296358][ T3821] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 47.304054][ T3821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 47.313754][ T3821] netlink: 68 bytes leftover after parsing attributes in process `syz.2.72'. [ 47.332190][ T3821] loop2: detected capacity change from 0 to 2048 [ 47.376559][ T3313] loop2: p1 p3 p4 [ 47.382428][ T3823] syz.1.73 uses obsolete (PF_INET,SOCK_PACKET) [ 47.389324][ T3313] loop2: p4 size 589824 extends beyond EOD, truncated [ 47.405661][ T3821] loop2: p1 p3 p4 [ 47.419595][ T3821] loop2: p4 size 589824 extends beyond EOD, truncated [ 47.428718][ T3825] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 47.457565][ T3821] netlink: 'syz.2.72': attribute type 8 has an invalid length. [ 47.486514][ T3827] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.695132][ T3835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3835 comm=syz.4.78 [ 47.711576][ T3835] netlink: 'syz.4.78': attribute type 1 has an invalid length. [ 47.867643][ T3844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 48.138302][ T3864] loop4: detected capacity change from 0 to 512 [ 48.147051][ T3864] ======================================================= [ 48.147051][ T3864] WARNING: The mand mount option has been deprecated and [ 48.147051][ T3864] and is ignored by this kernel. Remove the mand [ 48.147051][ T3864] option from the mount to silence this warning. [ 48.147051][ T3864] ======================================================= [ 48.230293][ T3864] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 48.264423][ T3864] loop4: detected capacity change from 0 to 512 [ 48.304164][ T3864] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.390573][ T3864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 48.411764][ T3872] bond1: entered promiscuous mode [ 48.416877][ T3872] bond1: entered allmulticast mode [ 48.436433][ T3872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.446648][ T3864] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.594214][ T3844] Set syz1 is full, maxelem 65536 reached [ 48.605593][ T3875] capability: warning: `syz.1.84' uses deprecated v2 capabilities in a way that may be insecure [ 48.672061][ T3876] EXT4-fs (loop4): shut down requested (1) [ 48.702336][ T3876] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 48.739132][ T3881] syzkaller0: entered promiscuous mode [ 48.744696][ T3881] syzkaller0: entered allmulticast mode [ 48.756426][ T3876] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 48.777073][ T3876] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 48.790623][ T3876] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 48.797234][ T3876] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 48.832906][ T3883] bridge0: entered allmulticast mode [ 48.850343][ T3883] loop3: detected capacity change from 0 to 1024 [ 48.866813][ T3885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 48.896282][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 48.909033][ T3883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.938435][ T3891] netlink: 'syz.4.90': attribute type 13 has an invalid length. [ 48.950085][ T3883] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.966042][ T3889] SELinux: failed to load policy [ 49.043842][ T3891] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.051428][ T3891] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.066778][ T3895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 49.108245][ T3891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.120033][ T3885] syz.0.88 (3885) used greatest stack depth: 10424 bytes left [ 49.121069][ T3891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.259295][ T3894] pim6reg: entered allmulticast mode [ 49.277469][ T3895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.285131][ T3895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.298937][ T123] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.312525][ T123] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.331436][ T123] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.359466][ T3900] loop1: detected capacity change from 0 to 1024 [ 49.382712][ T3890] delete_channel: no stack [ 49.388325][ T3900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.404761][ T123] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.447812][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.473397][ T3897] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 49.480039][ T3897] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 49.488074][ T3897] vhci_hcd vhci_hcd.0: Device attached [ 49.511258][ T3906] syzkaller0: entered promiscuous mode [ 49.517003][ T3906] syzkaller0: entered allmulticast mode [ 49.561396][ T3903] vhci_hcd: connection closed [ 49.562547][ T123] vhci_hcd vhci_hcd.0: stop threads [ 49.572634][ T123] vhci_hcd vhci_hcd.0: release socket [ 49.578102][ T123] vhci_hcd vhci_hcd.0: disconnect device [ 49.630574][ T3910] tipc: Started in network mode [ 49.635575][ T3910] tipc: Node identity ac14140f, cluster identity 4711 [ 49.643797][ T3910] tipc: New replicast peer: 255.255.255.255 [ 49.650185][ T3910] tipc: Enabled bearer , priority 10 [ 49.848992][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 49.849011][ T29] audit: type=1400 audit(1769014780.449:440): avc: denied { connect } for pid=3919 comm="syz.2.99" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.879143][ T3920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 49.890268][ T29] audit: type=1400 audit(1769014780.479:441): avc: denied { ioctl } for pid=3919 comm="syz.2.99" path="socket:[6147]" dev="sockfs" ino=6147 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.914591][ T29] audit: type=1400 audit(1769014780.479:442): avc: denied { connect } for pid=3919 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.998663][ T29] audit: type=1400 audit(1769014780.599:443): avc: denied { listen } for pid=3921 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.018924][ T29] audit: type=1400 audit(1769014780.599:444): avc: denied { connect } for pid=3921 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.038561][ T29] audit: type=1400 audit(1769014780.599:445): avc: denied { write } for pid=3921 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.058081][ T29] audit: type=1400 audit(1769014780.599:446): avc: denied { accept } for pid=3921 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.117358][ T3922] mmap: syz.3.100 (3922) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.162068][ T29] audit: type=1400 audit(1769014780.759:447): avc: denied { write } for pid=3926 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.188509][ T29] audit: type=1400 audit(1769014780.789:448): avc: denied { bind } for pid=3926 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.188859][ T3927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 50.332853][ T3331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.379994][ T3933] syzkaller0: entered promiscuous mode [ 50.385539][ T3933] syzkaller0: entered allmulticast mode [ 50.407396][ T29] audit: type=1400 audit(1769014781.009:449): avc: denied { write } for pid=3936 comm="syz.3.106" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.433583][ T3937] random: crng reseeded on system resumption [ 50.478579][ T3939] netlink: 'syz.1.107': attribute type 4 has an invalid length. [ 50.776277][ T23] tipc: Node number set to 2886997007 [ 50.895001][ T3945] loop1: detected capacity change from 0 to 512 [ 50.963978][ T3945] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.973597][ T3928] syz.2.101 (3928) used greatest stack depth: 10368 bytes left [ 50.998393][ T3945] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.027053][ T3945] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.109: Allocating blocks 41-42 which overlap fs metadata [ 51.069071][ T3945] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.109: Failed to acquire dquot type 1 [ 51.088092][ T3945] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 51.118374][ T3945] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.109: corrupted inode contents [ 51.134128][ T3953] IPv6: Can't replace route, no match found [ 51.228121][ T3945] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.109: mark_inode_dirty error [ 51.260776][ T3957] loop3: detected capacity change from 0 to 1024 [ 51.277253][ T3945] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.109: corrupted inode contents [ 51.289340][ T3957] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.316478][ T3945] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.109: mark_inode_dirty error [ 51.349345][ T3945] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.109: corrupted inode contents [ 51.364766][ T3957] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #11: comm syz.3.111: iget: bogus i_mode (1) [ 51.378638][ T3945] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 51.395844][ T3945] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.109: corrupted inode contents [ 51.435545][ T3945] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.109: mark_inode_dirty error [ 51.460771][ T3965] loop2: detected capacity change from 0 to 164 [ 51.469515][ T3945] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 51.510817][ T3969] sctp: [Deprecated]: syz.4.114 (pid 3969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 51.510817][ T3969] Use struct sctp_sack_info instead [ 51.528804][ T3957] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.111: couldn't read orphan inode 11 (err -117) [ 51.543508][ T3965] rock: directory entry would overflow storage [ 51.549855][ T3965] rock: sig=0x4543, size=28, remaining=18 [ 51.556045][ T3945] EXT4-fs (loop1): 1 truncate cleaned up [ 51.562665][ T3945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.587050][ T3957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.667110][ T3945] syz.1.109 (3945) used greatest stack depth: 9968 bytes left [ 51.766959][ T3331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.913221][ T3974] 0: reclassify loop, rule prio 0, protocol 800 [ 52.076754][ T3983] capability: warning: `syz.0.121' uses 32-bit capabilities (legacy support in use) [ 52.340342][ T3949] syz.3.111 (3949) used greatest stack depth: 7096 bytes left [ 52.370164][ T3995] loop0: detected capacity change from 0 to 512 [ 52.400311][ T3995] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.125: bg 0: block 248: padding at end of block bitmap is not set [ 52.421457][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.439760][ T3995] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.125: Failed to acquire dquot type 1 [ 52.456881][ T3998] loop2: detected capacity change from 0 to 1024 [ 52.478444][ T3998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.500749][ T3995] EXT4-fs (loop0): 1 truncate cleaned up [ 52.506661][ T3998] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.531446][ T3995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.587790][ T3995] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.607432][ T3995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.679813][ T3986] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.122: lblock 3 mapped to illegal pblock 3 (length 3) [ 52.697601][ T3995] loop0: detected capacity change from 0 to 512 [ 52.714739][ T3995] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.743539][ T3995] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.756314][ T3998] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.122: bg 0: block 112: padding at end of block bitmap is not set [ 52.771134][ T3995] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.125: Allocating blocks 41-42 which overlap fs metadata [ 52.796761][ T3995] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.125: Failed to acquire dquot type 1 [ 52.810535][ T3986] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 52.822917][ T3986] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.822917][ T3986] [ 52.836063][ T3995] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 52.846816][ T4009] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.122: Freeing blocks not in datazone - block = 3, count = 3 [ 52.861850][ T3995] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.125: corrupted inode contents [ 52.885215][ T3995] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.125: mark_inode_dirty error [ 52.898339][ T3995] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.125: corrupted inode contents [ 52.964055][ T3995] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.125: mark_inode_dirty error [ 52.991145][ T3995] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.125: corrupted inode contents [ 53.011584][ T3995] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 53.021061][ T3995] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.125: corrupted inode contents [ 53.051323][ T3995] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.125: mark_inode_dirty error [ 53.051816][ T3756] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 53.074875][ T3756] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.074875][ T3756] [ 53.095197][ T3995] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 53.116355][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.127042][ T4014] loop3: detected capacity change from 0 to 764 [ 53.144160][ T3995] EXT4-fs (loop0): 1 truncate cleaned up [ 53.150710][ T3995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.163856][ T3995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.227089][ T4012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4012 comm=syz.4.127 [ 53.248185][ T4023] syz_tun: entered allmulticast mode [ 53.264517][ T4022] syz_tun: left allmulticast mode [ 53.388200][ T4030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.409360][ T4030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.507676][ T4028] loop3: detected capacity change from 0 to 8192 [ 53.622435][ T4036] loop1: detected capacity change from 0 to 512 [ 53.631621][ T4036] EXT4-fs: Ignoring removed oldalloc option [ 53.650773][ T4036] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.134: Parent and EA inode have the same ino 15 [ 53.669039][ T4036] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.683046][ T4036] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.134: Parent and EA inode have the same ino 15 [ 53.696988][ T4036] EXT4-fs (loop1): 1 orphan inode deleted [ 53.703459][ T4036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.734039][ T4036] syz_tun: entered allmulticast mode [ 53.798093][ T3331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.033883][ T4040] loop1: detected capacity change from 0 to 8192 [ 54.064682][ T4040] netlink: 'syz.1.135': attribute type 10 has an invalid length. [ 54.219734][ T4048] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 54.340019][ T4062] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.360961][ T4062] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 54.397099][ C0] I/O error, dev loop7, sector 12040 op 0x0:(READ) flags 0x80700 phys_seg 24 prio class 2 [ 54.427782][ T4066] EXT4-fs: Ignoring removed orlov option [ 54.466769][ T4066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.560484][ T4073] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.586563][ T4073] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 54.599134][ T4076] vfat: Bad value for 'fmask' [ 54.607624][ T4073] System zones: 1-12 [ 54.612204][ T4073] EXT4-fs (loop3): 1 truncate cleaned up [ 54.621270][ T4073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.797789][ T4073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4073 comm=syz.3.146 [ 54.855006][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.938562][ T4082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.958934][ T4082] EXT4-fs (loop0): 1 truncate cleaned up [ 54.978511][ T4082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.000037][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 55.000055][ T29] audit: type=1400 audit(1769014785.599:491): avc: denied { getopt } for pid=4081 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.039057][ T4090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 55.060068][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.210184][ T29] audit: type=1400 audit(1769014785.809:492): avc: denied { read } for pid=4101 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 55.412515][ T4109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.159'. [ 55.422883][ T4109] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 55.424402][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.497221][ T29] audit: type=1400 audit(1769014786.099:493): avc: denied { setopt } for pid=4110 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.564732][ T4111] lo speed is unknown, defaulting to 1000 [ 55.573863][ T4111] lo speed is unknown, defaulting to 1000 [ 55.587228][ T4111] lo speed is unknown, defaulting to 1000 [ 55.595687][ T4111] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 55.608699][ T4111] lo speed is unknown, defaulting to 1000 [ 55.616556][ T4111] lo speed is unknown, defaulting to 1000 [ 55.623016][ T4111] lo speed is unknown, defaulting to 1000 [ 55.629453][ T4111] lo speed is unknown, defaulting to 1000 [ 55.643352][ T4111] lo speed is unknown, defaulting to 1000 [ 55.704490][ T29] audit: type=1400 audit(1769014786.299:494): avc: denied { read write } for pid=4115 comm="syz.3.162" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 55.729087][ T29] audit: type=1400 audit(1769014786.299:495): avc: denied { open } for pid=4115 comm="syz.3.162" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 55.758082][ T4116] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 55.848511][ T4122] EXT4-fs (loop3): orphan cleanup on readonly fs [ 55.854984][ T4122] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 55.863746][ T4122] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 55.889650][ T4122] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.165: attempt to clear invalid blocks 2 len 1 [ 55.903195][ T4122] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.165: invalid indirect mapped block 1819239214 (level 0) [ 55.919523][ T4122] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.165: invalid indirect mapped block 1819239214 (level 1) [ 55.933976][ T4122] EXT4-fs (loop3): 1 truncate cleaned up [ 55.940104][ T4122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.954325][ T4122] EXT4-fs error (device loop3): ext4_lookup:1782: inode #2: comm syz.3.165: 'file1' linked to parent dir [ 55.979478][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.008307][ T4126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'. [ 56.063844][ T29] audit: type=1400 audit(1769014786.659:496): avc: denied { ioctl } for pid=4127 comm="syz.3.167" path="socket:[6510]" dev="sockfs" ino=6510 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.130282][ T4130] set_capacity_and_notify: 7 callbacks suppressed [ 56.130304][ T4130] loop3: detected capacity change from 0 to 2048 [ 56.220795][ T4138] loop0: detected capacity change from 0 to 1024 [ 56.228110][ T4138] EXT4-fs: Ignoring removed orlov option [ 56.234916][ T4138] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 56.251642][ T4136] lo speed is unknown, defaulting to 1000 [ 56.276149][ T4138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.358283][ T4138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 56.367240][ T4138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 56.408213][ T4145] lo speed is unknown, defaulting to 1000 [ 56.428807][ T29] audit: type=1400 audit(1769014787.029:497): avc: denied { write } for pid=4148 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.485934][ T29] audit: type=1400 audit(1769014787.079:498): avc: denied { create } for pid=4150 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.527933][ T29] audit: type=1400 audit(1769014787.089:499): avc: denied { getopt } for pid=4150 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.575622][ T4138] infiniband !yz!: set active [ 56.580470][ T4138] infiniband !yz!: added team_slave_0 [ 56.608979][ T4154] loop3: detected capacity change from 0 to 128 [ 56.619090][ T4138] RDS/IB: !yz!: added [ 56.632323][ T4138] smc: adding ib device !yz! with port count 1 [ 56.646063][ T4138] smc: ib device !yz! port 1 has no pnetid [ 56.656456][ T4154] bio_check_eod: 33 callbacks suppressed [ 56.656477][ T4154] syz.3.177: attempt to access beyond end of device [ 56.656477][ T4154] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 56.725987][ T4154] syz.3.177: attempt to access beyond end of device [ 56.725987][ T4154] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 56.772772][ T4154] syz.3.177: attempt to access beyond end of device [ 56.772772][ T4154] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 56.786578][ T4154] syz.3.177: attempt to access beyond end of device [ 56.786578][ T4154] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 56.800161][ T4154] syz.3.177: attempt to access beyond end of device [ 56.800161][ T4154] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 56.821527][ T4154] syz.3.177: attempt to access beyond end of device [ 56.821527][ T4154] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 56.843716][ T4154] syz.3.177: attempt to access beyond end of device [ 56.843716][ T4154] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 56.859057][ T4154] syz.3.177: attempt to access beyond end of device [ 56.859057][ T4154] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 56.872909][ T4154] syz.3.177: attempt to access beyond end of device [ 56.872909][ T4154] loop3: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 56.924898][ T4154] syz.3.177: attempt to access beyond end of device [ 56.924898][ T4154] loop3: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 56.959107][ T29] audit: type=1400 audit(1769014787.559:500): avc: denied { bind } for pid=4164 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.047102][ T4158] Buffer I/O error on dev loop3, logical block 305, async page read [ 57.065502][ T4158] Buffer I/O error on dev loop3, logical block 306, async page read [ 57.095956][ T4158] Buffer I/O error on dev loop3, logical block 307, async page read [ 57.125907][ T4158] Buffer I/O error on dev loop3, logical block 308, async page read [ 57.136016][ T4158] Buffer I/O error on dev loop3, logical block 309, async page read [ 57.144077][ T4158] Buffer I/O error on dev loop3, logical block 310, async page read [ 57.169251][ T4158] Buffer I/O error on dev loop3, logical block 311, async page read [ 57.183246][ T4158] Buffer I/O error on dev loop3, logical block 312, async page read [ 57.191539][ T4153] Buffer I/O error on dev loop3, logical block 305, async page read [ 57.199766][ T4153] Buffer I/O error on dev loop3, logical block 306, async page read [ 57.387379][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.703561][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 57.729912][ T4183] loop1: detected capacity change from 0 to 4096 [ 57.744344][ T4183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.903316][ T3331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.122819][ T4194] loop0: detected capacity change from 0 to 512 [ 58.237089][ T4194] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.182: corrupted inode contents [ 58.359052][ T4194] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.182: mark_inode_dirty error [ 58.373397][ T4194] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.182: corrupted inode contents [ 58.387774][ T4194] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.182: mark_inode_dirty error [ 58.399330][ T4194] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.182: Failed to acquire dquot type 0 [ 58.412154][ T4194] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.182: corrupted inode contents [ 58.424255][ T4194] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.182: mark_inode_dirty error [ 58.435990][ T4194] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.182: corrupted inode contents [ 58.449160][ T4194] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.182: mark_inode_dirty error [ 58.460770][ T4194] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.182: corrupted inode contents [ 58.493505][ T4194] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 58.513925][ T4194] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.182: corrupted inode contents [ 58.546400][ T4194] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.182: mark_inode_dirty error [ 58.606187][ T4194] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 58.627875][ T4194] EXT4-fs (loop0): 1 truncate cleaned up [ 58.634714][ T4208] netlink: 256 bytes leftover after parsing attributes in process `syz.4.190'. [ 58.644567][ T4194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.712788][ T4194] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.853050][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.870171][ T4223] loop3: detected capacity change from 0 to 256 [ 58.930897][ T4223] FAT-fs (loop3): Directory bread(block 64) failed [ 58.952975][ T4223] FAT-fs (loop3): Directory bread(block 65) failed [ 58.976652][ T4225] loop4: detected capacity change from 0 to 4096 [ 58.980304][ T4223] FAT-fs (loop3): Directory bread(block 66) failed [ 58.983920][ T4225] EXT4-fs: Ignoring removed i_version option [ 59.012055][ T4225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.065819][ T4223] FAT-fs (loop3): Directory bread(block 67) failed [ 59.072593][ T4223] FAT-fs (loop3): Directory bread(block 68) failed [ 59.085795][ T4223] FAT-fs (loop3): Directory bread(block 69) failed [ 59.103050][ T4223] FAT-fs (loop3): Directory bread(block 70) failed [ 59.112929][ T4223] FAT-fs (loop3): Directory bread(block 71) failed [ 59.130617][ T4223] FAT-fs (loop3): Directory bread(block 72) failed [ 59.140682][ T4223] FAT-fs (loop3): Directory bread(block 73) failed [ 59.282170][ T4233] loop2: detected capacity change from 0 to 512 [ 59.493881][ T4233] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 59.987967][ T4237] loop1: detected capacity change from 0 to 256 [ 60.004856][ T4237] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.059124][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 60.059143][ T29] audit: type=1400 audit(1769014790.659:502): avc: denied { ioctl } for pid=4238 comm="syz.1.207" path="net:[4026532647]" dev="nsfs" ino=4026532647 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.163087][ T29] audit: type=1400 audit(1769014790.759:503): avc: denied { write } for pid=4244 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.183169][ T4245] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.216685][ T4246] loop0: detected capacity change from 0 to 512 [ 60.243408][ T4246] EXT4-fs: Ignoring removed bh option [ 60.281939][ T4246] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.327219][ T4256] SELinux: failed to load policy [ 60.345149][ T4246] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.205: Invalid block bitmap block 0 in block_group 0 [ 60.407480][ T4246] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 60.417199][ T4260] syz_tun: entered allmulticast mode [ 60.457490][ T4246] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.205: attempt to clear invalid blocks 983261 len 1 [ 60.511945][ T4246] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.205: Invalid inode table block 0 in block_group 0 [ 60.525934][ T4233] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 60.569093][ T4246] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 60.607201][ T4246] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 60.642538][ T4246] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.205: Invalid inode table block 0 in block_group 0 [ 60.679791][ T29] audit: type=1400 audit(1769014791.279:504): avc: denied { create } for pid=4272 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.707800][ T4246] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 60.743688][ T4246] EXT4-fs error (device loop0): ext4_truncate:4635: inode #11: comm syz.0.205: mark_inode_dirty error [ 60.764278][ T29] audit: type=1400 audit(1769014791.299:505): avc: denied { setopt } for pid=4272 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.804606][ T4246] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 60.830124][ T4246] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.205: Invalid inode table block 0 in block_group 0 [ 60.850970][ T29] audit: type=1400 audit(1769014791.449:506): avc: denied { read } for pid=4281 comm="syz.1.226" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 60.873922][ T29] audit: type=1400 audit(1769014791.449:507): avc: denied { open } for pid=4281 comm="syz.1.226" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 60.900383][ T4282] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.921275][ T4246] EXT4-fs (loop0): 1 truncate cleaned up [ 60.927640][ T4246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.003902][ T4287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.043638][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.062160][ T4287] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 61.070278][ T4287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 61.100080][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.112163][ T4291] SELinux: policydb string does not match my string SE Linux [ 61.125307][ T4233] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.204: bad orphan inode 4 [ 61.140994][ T4233] EXT4-fs (loop2): 1 orphan inode deleted [ 61.147443][ T4233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.159179][ T4287] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 61.160973][ T4291] SELinux: failed to load policy [ 61.169488][ T4287] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 61.237651][ T4233] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #2: block 4: comm syz.2.204: lblock 0 mapped to illegal pblock 4 (length 1) [ 61.241343][ T29] audit: type=1400 audit(1769014791.839:508): avc: denied { write } for pid=4301 comm="syz.4.236" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.274640][ T29] audit: type=1400 audit(1769014791.839:509): avc: denied { open } for pid=4301 comm="syz.4.236" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.291974][ T4287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 61.316948][ T4307] program syz.0.237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.360182][ T4311] set_capacity_and_notify: 2 callbacks suppressed [ 61.360204][ T4311] loop4: detected capacity change from 0 to 256 [ 61.389111][ T4287] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.228: dx entry: limit 65535 != root limit 120 [ 61.401314][ T4287] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.228: Corrupt directory, running e2fsck is recommended [ 61.402695][ T29] audit: type=1400 audit(1769014791.989:510): avc: denied { create } for pid=4314 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 61.427007][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.461584][ T3331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.524047][ T4317] netlink: 'syz.0.243': attribute type 13 has an invalid length. [ 61.540024][ T29] audit: type=1400 audit(1769014792.079:511): avc: denied { append } for pid=4319 comm="syz.3.245" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.590084][ T4328] loop1: detected capacity change from 0 to 128 [ 61.618937][ T4331] netlink: 'syz.3.246': attribute type 10 has an invalid length. [ 61.643888][ T4332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.247'. [ 61.659040][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.666379][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.717826][ C1] sd 0:0:1:0: [sda] tag#4219 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 61.728275][ C1] sd 0:0:1:0: [sda] tag#4219 CDB: Read(10) 28 08 f9 9a 33 64 0a 01 [ 61.768953][ T4340] loop1: detected capacity change from 0 to 512 [ 61.804481][ T4340] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.834090][ T4340] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.843330][ T4340] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.250: Allocating blocks 41-42 which overlap fs metadata [ 61.857413][ T4340] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.250: Allocating blocks 41-42 which overlap fs metadata [ 61.871426][ T4340] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.250: Failed to acquire dquot type 1 [ 61.880828][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.884379][ T4340] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 61.904983][ T4340] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.250: corrupted inode contents [ 61.918037][ T4340] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.250: mark_inode_dirty error [ 61.929633][ T4340] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.250: corrupted inode contents [ 61.941772][ T4340] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.250: mark_inode_dirty error [ 61.943122][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.961249][ T4347] loop4: detected capacity change from 0 to 512 [ 61.967605][ T4340] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.250: corrupted inode contents [ 61.980690][ T4340] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 61.994148][ T4347] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.004218][ T4340] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.250: corrupted inode contents [ 62.017199][ T4340] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.250: mark_inode_dirty error [ 62.021040][ T4347] EXT4-fs (loop4): 1 truncate cleaned up [ 62.030398][ T4340] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 62.053072][ T4347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.070241][ T4340] EXT4-fs (loop1): 1 truncate cleaned up [ 62.099277][ T4340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.112616][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.160653][ T3331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.178857][ T4331] bond0: (slave bond_slave_0): Releasing backup interface [ 62.259855][ T3745] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.276634][ T3745] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.300117][ T3745] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.300136][ T4362] usb usb8: usbfs: process 4362 (syz.4.257) did not claim interface 0 before use [ 62.327798][ T3745] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.425873][ T4373] loop4: detected capacity change from 0 to 128 [ 62.434400][ T4374] loop1: detected capacity change from 0 to 1024 [ 62.453752][ T4374] EXT4-fs: Ignoring removed bh option [ 62.528202][ T4374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.592078][ T4374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.261'. [ 62.646390][ T4374] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.261: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 62.688931][ T4374] EXT4-fs (loop1): Remounting filesystem read-only [ 62.697188][ T4374] EXT4-fs (loop1): shut down requested (0) [ 62.759166][ T3331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.899113][ T4378] ================================================================== [ 62.907282][ T4378] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 62.915398][ T4378] [ 62.917795][ T4378] write to 0xffff888119b6ca68 of 8 bytes by task 4373 on cpu 1: [ 62.925453][ T4378] filemap_splice_read+0x523/0x780 [ 62.930616][ T4378] splice_direct_to_actor+0x26e/0x670 [ 62.936135][ T4378] do_splice_direct+0x119/0x1a0 [ 62.941128][ T4378] do_sendfile+0x380/0x650 [ 62.945585][ T4378] __x64_sys_sendfile64+0x105/0x150 [ 62.950821][ T4378] x64_sys_call+0x2db1/0x3000 [ 62.955535][ T4378] do_syscall_64+0xc0/0x2a0 [ 62.960087][ T4378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.966017][ T4378] [ 62.968361][ T4378] write to 0xffff888119b6ca68 of 8 bytes by task 4378 on cpu 0: [ 62.976025][ T4378] filemap_splice_read+0x523/0x780 [ 62.981173][ T4378] splice_direct_to_actor+0x26e/0x670 [ 62.986592][ T4378] do_splice_direct+0x119/0x1a0 [ 62.991502][ T4378] do_sendfile+0x380/0x650 [ 62.995965][ T4378] __x64_sys_sendfile64+0x105/0x150 [ 63.001203][ T4378] x64_sys_call+0x2db1/0x3000 [ 63.005915][ T4378] do_syscall_64+0xc0/0x2a0 [ 63.010466][ T4378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.016387][ T4378] [ 63.018741][ T4378] value changed: 0x0000000000002d9d -> 0x0000000000002dae [ 63.025871][ T4378] [ 63.028210][ T4378] Reported by Kernel Concurrency Sanitizer on: [ 63.034388][ T4378] CPU: 0 UID: 0 PID: 4378 Comm: syz.4.262 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.044041][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.054135][ T4378] ================================================================== [ 63.158709][ T4373] bio_check_eod: 10077 callbacks suppressed [ 63.158727][ T4373] syz.4.262: attempt to access beyond end of device [ 63.158727][ T4373] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 63.178493][ T4373] buffer_io_error: 9854 callbacks suppressed [ 63.178534][ T4373] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 63.213503][ T4378] syz.4.262: attempt to access beyond end of device [ 63.213503][ T4378] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 63.227264][ T4378] Buffer I/O error on dev loop4, logical block 128, lost async page write