last executing test programs: 3m4.341011489s ago: executing program 32 (id=272): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) fallocate(r0, 0x0, 0xbf5, 0x2000405) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x54, 0x0, 0xfffffffffe000001}) 2m33.974321579s ago: executing program 33 (id=754): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x48100, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f0000000100)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2m28.601723318s ago: executing program 34 (id=838): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x11, 0x572, 0x8000, 0x29, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "8b14d4570100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x1a) 2m16.431822432s ago: executing program 35 (id=1004): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) 2m1.713745095s ago: executing program 36 (id=1223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @private1, 0x3}, 0x1c) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 1m59.798124263s ago: executing program 37 (id=1258): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000080)=r4, 0x12) 1m53.728679099s ago: executing program 38 (id=1339): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r0) 1m53.214303333s ago: executing program 39 (id=1345): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x21) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m45.960028918s ago: executing program 3 (id=1457): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) 1m45.002395332s ago: executing program 3 (id=1475): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 1m44.888047329s ago: executing program 3 (id=1476): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x40000, 0x8, 0x3c}, 0x18) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 1m44.781831017s ago: executing program 3 (id=1477): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000380)={[{@dioread_nolock}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") 1m44.547312933s ago: executing program 3 (id=1483): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 1m44.1286895s ago: executing program 3 (id=1491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) shutdown(r0, 0x1) 1m44.128544151s ago: executing program 40 (id=1491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) shutdown(r0, 0x1) 1m37.916739246s ago: executing program 0 (id=1551): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) close_range(r0, 0xffffffffffffffff, 0x0) 1m37.739461568s ago: executing program 0 (id=1553): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x449) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000480)='\a\x00', 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1m37.70461766s ago: executing program 0 (id=1554): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1m36.798072841s ago: executing program 0 (id=1571): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m36.712679467s ago: executing program 0 (id=1573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e61, 0x2, @loopback, 0x80000003}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17", 0x3}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) close(0x3) 1m36.168735133s ago: executing program 0 (id=1578): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m36.115517146s ago: executing program 41 (id=1578): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m22.370613785s ago: executing program 5 (id=1830): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16, @ANYRES32=r2], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 1m22.349798566s ago: executing program 5 (id=1831): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00176a0000fcf7ffffa5e8673608f7ecfeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) write$binfmt_elf64(r2, 0x0, 0x0) 1m22.023673668s ago: executing program 5 (id=1833): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x4}, 0x106200, 0x7, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m21.958668692s ago: executing program 5 (id=1836): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x840, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,dots,nodots,nodots,quiet,dots,dots,nocase,dots,dots,dots,check=relaxed,nocase,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d6e6f726d616c2c6e6f646f74732c6e66732c6e6f646f74732c0085631469e4e3ebe0f848a069f81e50c93409023d7e4dba3e8c4d8a10a9d296b30d58f9509e00bb34b7828749c7d8f731945afa8a19f315a9bc5e8f36d11609786bb0568a5cdc4806eb6c9bdf47e7ec9616ee240aa0913c1ae2a4a2b172982688119c245062290e392d538e2a7f7d101281cb737e2777fe36c8fdb305fb2b9240a5fe96a39cbb1c9d13c41da60f15645c2e7f2708730b7b91c4d29a0b64caab07109beb5dec6f777effe7c525c26748f8627760b7c6c13e3947e6cf6c2300"/261], 0xfd, 0x1bf, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x2]}) rmdir(&(0x7f0000000100)='./control\x00') 1m21.729157688s ago: executing program 5 (id=1840): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="110000000400000004000000"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1m21.500707663s ago: executing program 5 (id=1845): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10000, 0x800, 0x4, 0x5, 0x78d9, 0x3ff, 0x1, 0x4, 0x2}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x14c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x120, 0x2, [@TCA_U32_SEL={0x114, 0x5, {0xf, 0x5, 0x10, 0x1, 0x1, 0x644e, 0x7, 0x4, [{0xe, 0x7ff, 0x5f, 0x6}, {0x8, 0x101, 0x7d, 0xfffffffa}, {0x3, 0x0, 0x6e86, 0x4}, {0x6, 0x2230, 0x0, 0x8}, {0x7fff, 0x401, 0xffff, 0xff}, {0x1, 0x8, 0xff, 0x4}, {0x8, 0x0, 0x6, 0x8}, {0xf02, 0x7, 0x4, 0xffff}, {0x5, 0x81, 0x3, 0x2}, {0x9, 0x4, 0x216, 0x5}, {0x401, 0xdc6, 0xadb, 0x6}, {0x0, 0x8, 0xb62, 0x5}, {0x6, 0xa, 0x1, 0x2}, {0x2, 0x79ff, 0x4, 0x4}, {0x101, 0x10003, 0xfffffbff, 0x400}, {0x0, 0x0, 0x6, 0x3}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xc}}]}}]}, 0x14c}}, 0x4080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m21.359782512s ago: executing program 42 (id=1845): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10000, 0x800, 0x4, 0x5, 0x78d9, 0x3ff, 0x1, 0x4, 0x2}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x14c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x120, 0x2, [@TCA_U32_SEL={0x114, 0x5, {0xf, 0x5, 0x10, 0x1, 0x1, 0x644e, 0x7, 0x4, [{0xe, 0x7ff, 0x5f, 0x6}, {0x8, 0x101, 0x7d, 0xfffffffa}, {0x3, 0x0, 0x6e86, 0x4}, {0x6, 0x2230, 0x0, 0x8}, {0x7fff, 0x401, 0xffff, 0xff}, {0x1, 0x8, 0xff, 0x4}, {0x8, 0x0, 0x6, 0x8}, {0xf02, 0x7, 0x4, 0xffff}, {0x5, 0x81, 0x3, 0x2}, {0x9, 0x4, 0x216, 0x5}, {0x401, 0xdc6, 0xadb, 0x6}, {0x0, 0x8, 0xb62, 0x5}, {0x6, 0xa, 0x1, 0x2}, {0x2, 0x79ff, 0x4, 0x4}, {0x101, 0x10003, 0xfffffbff, 0x400}, {0x0, 0x0, 0x6, 0x3}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xc}}]}}]}, 0x14c}}, 0x4080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m20.442453564s ago: executing program 2 (id=1864): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x2b1e}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x67f4, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m20.19755257s ago: executing program 2 (id=1866): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1m19.939861257s ago: executing program 2 (id=1868): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1fffff9, {0x0, 0x0, 0x0, r2, {0x7}, {0xc}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1m19.719874232s ago: executing program 2 (id=1873): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2253043, 0x0) 1m19.60365881s ago: executing program 2 (id=1876): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1m18.480503285s ago: executing program 2 (id=1886): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffcb4, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x120) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m18.40349196s ago: executing program 43 (id=1886): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffcb4, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x120) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 31.017395397s ago: executing program 4 (id=2596): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r0 = socket(0x28, 0x1, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x0, 0x201}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 30.710579157s ago: executing program 4 (id=2600): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x30209000, 0x0, 0x0, 0x0, 0x0, 0x0) 29.100286505s ago: executing program 4 (id=2616): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 28.928671987s ago: executing program 4 (id=2618): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 28.559640371s ago: executing program 4 (id=2627): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @private=0xa010101}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000480)={r3, 0x2}, 0x8) 28.263537141s ago: executing program 4 (id=2634): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020400) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) 28.217190174s ago: executing program 44 (id=2634): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020400) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) 1.679309648s ago: executing program 1 (id=3133): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="02000000", 0x4) 1.574686385s ago: executing program 1 (id=3135): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1.006311513s ago: executing program 6 (id=3151): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8001, 0x0, 0x80007ffe, 0xfffffff9, 0x6, "00f2ff325a0400000000d10d00"}) dup3(r2, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0x179) write$binfmt_script(r1, &(0x7f0000000c40)={'#! ', './file0', [], 0xa, "151aac1eb374d12e402b77dbf96a45629cff0e0a983a33f748bbea357d8fec683242d7a4434cfe7f3f52a332e3a7411298629f4e85a7"}, 0x41) 920.640278ms ago: executing program 6 (id=3155): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) 919.939329ms ago: executing program 6 (id=3156): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x714f, 0x0) 919.081759ms ago: executing program 1 (id=3157): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000080), 0x0}, 0x20) 880.226641ms ago: executing program 6 (id=3161): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003cc0)=""/4096, 0x94}, {0x0}], 0x2}, 0x3}], 0x1, 0x40000000, 0x0) 820.357705ms ago: executing program 1 (id=3163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 814.931305ms ago: executing program 8 (id=3165): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setuid(0xee01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 811.234655ms ago: executing program 1 (id=3166): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) 760.698089ms ago: executing program 1 (id=3168): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) 760.397189ms ago: executing program 8 (id=3169): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x86) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x101, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r2, &(0x7f00000002c0)=""/201, 0xc9) 701.170043ms ago: executing program 8 (id=3172): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2004c0d0}, 0x4000044) 700.683983ms ago: executing program 8 (id=3174): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) socket(0x2, 0x3, 0xff) clock_settime(0xfacf157edf639126, 0x0) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20}, 0x42) 633.132568ms ago: executing program 8 (id=3178): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x3) r0 = getpid() syz_pidfd_open(r0, 0x0) 632.726728ms ago: executing program 8 (id=3180): open(&(0x7f0000000140)='./bus\x00', 0xe2b40, 0xa8) io_uring_setup(0x4c0c, &(0x7f0000000140)={0x0, 0x2637, 0x3c00, 0x2, 0x10001d4}) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 536.758674ms ago: executing program 7 (id=3183): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)="b5", 0x1}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 536.446774ms ago: executing program 7 (id=3184): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000300)=ANY=[@ANYBLOB="73686f776173736f632c757466382c6e6f636f6d70726573732c6e6f6a6f6c6965742c6e6f6a6f6f636b3d3078303030303030303030303030303430302c7362736563746f723d3078666666666666666666666666666666312c6d6f64653d3080303030303030303030303030303030632c6d6f64653d3078303030303030303030303030303038302c7362736563746f723d3078303030303030303030303030303030642c626c6f636b3d3078303030303030303030303030303230302c6d61703d61636f726e2c6f76657272696465726f636b7065726d2c636865636b3d72656c617865642c6769643d00000000000000", @ANYRESHEX=0x0, @ANYBLOB=',check=strict,check=relaxed,overriderockperm,overriderockperm,\x00'], 0x5, 0xa51, &(0x7f0000001240)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 441.48881ms ago: executing program 7 (id=3187): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 441.15875ms ago: executing program 7 (id=3188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001042dbd70000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000002000128008000100736974001400028008001400"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 440.97399ms ago: executing program 9 (id=3189): openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "382a66aa8e9e2354", "12a9f54c011c99ee72c5c79dcae88de8", "aae25cc4", "427714ed8a2599f0"}, 0x28) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) 440.75276ms ago: executing program 7 (id=3190): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2c020400) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) 440.45173ms ago: executing program 9 (id=3191): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 380.651305ms ago: executing program 9 (id=3192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sync() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 380.385265ms ago: executing program 7 (id=3193): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2000000015e21bc4c5ab2991fb76d16b54fcffffffff00000007000000000000000000000000000000e0e581f56a54235fef73cd3799802b10d398469552cc36a6625430032301c9c9a6913b1bfeee34f35505401714a50f8cedd92323e704"], 0x20, 0x4c004}], 0x1, 0x8010) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, &(0x7f0000000e00)=""/4095, 0xfff) 371.416165ms ago: executing program 9 (id=3194): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9360, 0x0) 356.857616ms ago: executing program 9 (id=3195): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x8000002f) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0xbb) 164.647959ms ago: executing program 9 (id=3196): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000040)='./file0\x00') 22.945718ms ago: executing program 6 (id=3197): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') writev(r2, 0x0, 0x0) sync_file_range(r2, 0x5, 0x3, 0x3) 0s ago: executing program 6 (id=3198): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) ppoll(&(0x7f0000000080)=[{r0, 0x401}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 161.318591][ T28] audit: type=1326 audit(1775361362.918:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 161.342940][ T28] audit: type=1326 audit(1775361362.918:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 161.405600][ T28] audit: type=1326 audit(1775361362.918:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 161.476117][ T28] audit: type=1326 audit(1775361362.918:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 161.813638][T10622] loop5: detected capacity change from 0 to 256 [ 161.880464][T10622] loop5: detected capacity change from 256 to 0 [ 161.888125][T10622] FAT-fs (loop5): Directory bread(block 52) failed [ 161.896514][T10622] FAT-fs (loop5): Directory bread(block 53) failed [ 161.906270][T10622] FAT-fs (loop5): Directory bread(block 54) failed [ 161.919828][T10622] FAT-fs (loop5): Directory bread(block 55) failed [ 161.936448][T10622] FAT-fs (loop5): Directory bread(block 56) failed [ 161.943445][T10622] FAT-fs (loop5): Directory bread(block 57) failed [ 161.958722][T10622] FAT-fs (loop5): Directory bread(block 58) failed [ 161.966747][T10622] FAT-fs (loop5): Directory bread(block 59) failed [ 161.979233][T10622] FAT-fs (loop5): Directory bread(block 3) failed [ 161.992642][T10628] netlink: 'syz.9.1839': attribute type 10 has an invalid length. [ 161.999232][ T9369] FAT-fs (loop5): Directory bread(block 3) failed [ 162.009520][T10628] team0: Failed to send options change via netlink (err -105) [ 162.017434][T10628] team0: Port device dummy0 added [ 162.023742][ T9369] FAT-fs (loop5): unable to read boot sector to mark fs as dirty [ 162.027256][T10628] netlink: 'syz.9.1839': attribute type 10 has an invalid length. [ 162.048522][T10628] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 162.071180][T10628] team0: Failed to send options change via netlink (err -105) [ 162.080444][T10628] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 162.090802][T10628] team0: Port device dummy0 removed [ 162.247105][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.275276][ T28] audit: type=1400 audit(1775361370.023:2588): avc: denied { create } for pid=10638 comm="syz.9.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 162.313158][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.413244][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.475317][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.545517][T10655] loop7: detected capacity change from 0 to 1024 [ 162.552865][T10655] EXT4-fs: Ignoring removed bh option [ 162.581330][T10655] EXT4-fs: Ignoring removed bh option [ 162.587175][T10655] EXT4-fs: Ignoring removed bh option [ 162.832146][ T50] bond0 (unregistering): Released all slaves [ 163.009518][T10655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.038761][ T50] hsr_slave_0: left promiscuous mode [ 163.059370][ T50] hsr_slave_1: left promiscuous mode [ 163.127134][ T50] veth1_macvtap: left promiscuous mode [ 163.132797][ T50] veth0_macvtap: left promiscuous mode [ 163.141798][T10655] Invalid argument reading file caps for ./file0 [ 163.141924][ T50] veth1_vlan: left promiscuous mode [ 163.168362][ T50] veth0_vlan: left promiscuous mode [ 163.179689][ T8808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.235054][ T3489] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 163.243009][ T3489] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 163.264414][ T3489] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 163.283157][ T3489] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 163.301477][ T3489] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 163.311235][ T3489] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 163.322288][ T3489] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 163.340418][ T3489] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 163.360267][ T3489] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 163.381297][ T3489] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 163.403961][ T3489] hid-generic 0000:0000:000E.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 163.806679][T10643] chnl_net:caif_netlink_parms(): no params data found [ 163.821990][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 163.871826][T10730] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.894294][T10730] bridge_slave_0 (unregistering): left allmulticast mode [ 163.901846][T10730] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.969917][T10643] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.987257][T10643] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.995144][T10643] bridge_slave_0: entered allmulticast mode [ 164.002518][T10643] bridge_slave_0: entered promiscuous mode [ 164.009553][T10643] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.016911][T10643] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.024743][T10643] bridge_slave_1: entered allmulticast mode [ 164.031594][T10643] bridge_slave_1: entered promiscuous mode [ 164.087026][T10643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.142521][T10643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.160519][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1877'. [ 164.991873][ T23] IPVS: starting estimator thread 0... [ 165.053492][T10643] team0: Port device team_slave_0 added [ 165.063126][T10643] team0: Port device team_slave_1 added [ 165.075966][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1880'. [ 165.088820][T10767] IPVS: using max 2496 ests per chain, 124800 per kthread [ 165.134689][T10773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.144038][T10643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.151635][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.199696][T10643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.212912][T10779] bond2: option ad_select: unable to set because the bond device is up [ 165.237348][T10643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.256867][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.288680][T10643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.335847][T10643] hsr_slave_0: entered promiscuous mode [ 165.344693][T10643] hsr_slave_1: entered promiscuous mode [ 165.352551][T10643] debugfs: 'hsr0' already exists in 'hsr' [ 165.358414][T10643] Cannot create hsr debugfs directory [ 165.817915][T10792] chnl_net:caif_netlink_parms(): no params data found [ 165.996828][T10643] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.008441][T10872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=10872 comm=syz.7.1905 [ 166.026517][T10643] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.039107][T10872] netlink: 1195 bytes leftover after parsing attributes in process `syz.7.1905'. [ 166.050884][T10792] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.058205][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.081167][T10792] bridge_slave_0: entered allmulticast mode [ 166.088225][T10792] bridge_slave_0: entered promiscuous mode [ 166.096507][T10792] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.103743][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.113292][T10792] bridge_slave_1: entered allmulticast mode [ 166.120191][T10792] bridge_slave_1: entered promiscuous mode [ 166.126935][T10643] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.150036][T10643] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.182700][T10792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.206120][T10792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.245655][T10792] team0: Port device team_slave_0 added [ 166.274203][T10792] team0: Port device team_slave_1 added [ 166.282545][T10900] loop9: detected capacity change from 0 to 512 [ 166.301399][T10900] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.336616][T10900] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 166.345212][T10792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.360904][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.387574][T10900] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1910: bg 0: block 248: padding at end of block bitmap is not set [ 166.402335][T10900] loop9: lost filesystem error report for type 5 error -117 [ 166.402413][T10792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.408918][T10900] __quota_error: 57 callbacks suppressed [ 166.408936][T10900] Quota error (device loop9): write_blk: dquota write failed [ 166.409754][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 166.431991][T10900] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 166.434189][ C1] EXT4-fs (loop9): last error at time 1775361374: ext4_validate_block_bitmap:441 [ 166.453939][T10900] EXT4-fs error (device loop9): ext4_acquire_dquot:7026: comm syz.9.1910: Failed to acquire dquot type 1 [ 166.472471][T10900] loop9: lost filesystem error report for type 5 error -28 [ 166.473092][T10900] EXT4-fs (loop9): 1 truncate cleaned up [ 166.486877][T10900] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 166.509936][T10792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.518644][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.553065][T10921] loop7: detected capacity change from 0 to 1024 [ 166.570306][T10921] EXT4-fs: Ignoring removed i_version option [ 166.577276][T10921] EXT4-fs: Ignoring removed bh option [ 166.607364][T10792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.619231][T10921] ext4: Unknown parameter 'noacl' [ 166.627812][ T7344] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 166.705661][T10792] hsr_slave_0: entered promiscuous mode [ 166.718212][T10792] hsr_slave_1: entered promiscuous mode [ 166.731293][T10792] debugfs: 'hsr0' already exists in 'hsr' [ 166.740713][T10792] Cannot create hsr debugfs directory [ 166.791133][T10643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.858645][ T28] audit: type=1400 audit(1775361374.563:2646): avc: denied { read } for pid=10939 comm="syz.9.1918" path="socket:[31367]" dev="sockfs" ino=31367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 166.924073][T10643] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.168281][ T9195] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.175452][ T9195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.212599][ T9195] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.219749][ T9195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.576861][T10643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.641680][T10997] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1926'. [ 167.687998][T10997] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.696414][T10997] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.719573][T11000] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1926'. [ 167.770452][T10792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.800667][T10792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.846816][T10792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.895421][T10792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.913856][T11019] loop7: detected capacity change from 0 to 1024 [ 167.939236][T11019] EXT4-fs: Ignoring removed bh option [ 167.991116][T11030] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1931'. [ 168.010960][T11019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.032824][T10792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.061528][T10792] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.095768][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.103148][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.174356][ T9195] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.182558][ T9195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.263791][ T8808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.278344][T10643] veth0_vlan: entered promiscuous mode [ 168.288773][ T28] audit: type=1400 audit(1775361376.033:2647): avc: denied { create } for pid=11054 comm="syz.8.1933" name=01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.294566][T10643] veth1_vlan: entered promiscuous mode [ 168.408215][T10792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.436151][T10643] veth0_macvtap: entered promiscuous mode [ 168.447149][T10643] veth1_macvtap: entered promiscuous mode [ 168.477077][T10643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.499730][T10643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.539301][ T3444] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.554345][ T3444] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.570942][ T3444] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.599462][ T3444] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.625231][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1939'. [ 168.667482][T11094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.692680][T11094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.781814][T10792] veth0_vlan: entered promiscuous mode [ 168.821153][T10792] veth1_vlan: entered promiscuous mode [ 168.880507][T10792] veth0_macvtap: entered promiscuous mode [ 168.896519][T10792] veth1_macvtap: entered promiscuous mode [ 168.944877][T10792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.970705][T10792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.023365][ T3649] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.042406][ T3649] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.071565][ T3649] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.082245][ T28] audit: type=1400 audit(1775361376.833:2648): avc: denied { unlink } for pid=6601 comm="syz-executor" name=01 dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 169.338405][ T3649] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.471313][T11150] loop4: detected capacity change from 0 to 128 [ 169.493473][T11150] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.526576][T11150] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.608881][T11157] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 169.752040][T10792] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.917385][T11176] syzkaller0: entered promiscuous mode [ 169.925654][ T28] audit: type=1400 audit(1775361377.663:2649): avc: denied { ioctl } for pid=11175 comm="syz.4.1951" path="socket:[32869]" dev="sockfs" ino=32869 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.015353][T11185] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 170.028865][T11176] syzkaller0: entered allmulticast mode [ 170.132266][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1953'. [ 170.175861][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1953'. [ 170.358319][ T28] audit: type=1400 audit(1775361378.093:2650): avc: denied { remount } for pid=11206 comm="syz.4.1955" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 170.899562][T11264] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1966'. [ 170.960448][ T28] audit: type=1326 audit(1775361378.713:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.7.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6ddc819 code=0x7ffc0000 [ 171.031087][ T28] audit: type=1326 audit(1775361378.733:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.7.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6ddc819 code=0x7ffc0000 [ 171.086546][ T28] audit: type=1326 audit(1775361378.743:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.7.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6ddc819 code=0x7ffc0000 [ 171.217001][T11281] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 172.204952][T11339] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 172.296727][T11339] SELinux: failed to load policy [ 172.312518][T11346] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 172.323068][T11346] SELinux: failed to load policy [ 172.340472][T11350] loop7: detected capacity change from 0 to 128 [ 172.357806][T11350] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.471624][ T126] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.753859][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 172.753877][ T28] audit: type=1400 audit(1775361380.503:2683): avc: denied { bind } for pid=11391 comm="syz.6.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.846722][ T28] audit: type=1400 audit(1775361380.573:2684): avc: denied { write } for pid=11391 comm="syz.6.1990" path="socket:[32474]" dev="sockfs" ino=32474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.933694][ T28] audit: type=1400 audit(1775361380.643:2685): avc: denied { read } for pid=11391 comm="syz.6.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 173.534792][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2000'. [ 173.700378][T11446] syzkaller0: entered promiscuous mode [ 173.705974][T11446] syzkaller0: entered allmulticast mode [ 174.537223][T11524] xt_hashlimit: size too large, truncated to 1048576 [ 174.574101][T11529] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 174.593410][T11530] syzkaller1: entered promiscuous mode [ 174.606224][T11530] syzkaller1: entered allmulticast mode [ 174.707416][ T28] audit: type=1400 audit(1775361382.453:2686): avc: denied { setopt } for pid=11536 comm="syz.6.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.375656][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2019'. [ 175.396318][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2019'. [ 175.499205][ T28] audit: type=1326 audit(1775361383.253:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.7.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6ddc819 code=0x7ffc0000 [ 175.546543][ T28] audit: type=1326 audit(1775361383.253:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.7.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6ddc819 code=0x7ffc0000 [ 175.579628][ T28] audit: type=1326 audit(1775361383.253:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.7.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6ddc819 code=0x7ffc0000 [ 175.604562][ T28] audit: type=1326 audit(1775361383.253:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.7.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe3f6ddc819 code=0x7ffc0000 [ 175.631206][ T28] audit: type=1326 audit(1775361383.273:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.7.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6ddc819 code=0x7ffc0000 [ 175.676877][ T28] audit: type=1326 audit(1775361383.273:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.7.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6ddc819 code=0x7ffc0000 [ 175.799616][T11589] loop6: detected capacity change from 0 to 128 [ 175.812494][T11589] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.845627][T11589] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.889189][T11589] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 20: comm syz.6.2032: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 175.911345][T11589] EXT4-fs error (device loop6) in do_split:2027: Corrupt filesystem [ 175.922619][T11589] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 20: comm syz.6.2032: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 175.957864][T10643] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.474716][T11623] netlink: 'syz.9.2047': attribute type 1 has an invalid length. [ 176.497589][T11623] bond0: entered promiscuous mode [ 176.503651][T11623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.521816][T11626] loop4: detected capacity change from 0 to 512 [ 176.550787][T11623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.560589][T11626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.568952][T11623] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 176.584159][T11623] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 176.593645][T11626] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.596693][T11623] bond0: (slave vcan1): making interface the new active one [ 176.613338][T11623] vcan1: entered promiscuous mode [ 176.636080][T10792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.647775][T11623] bond0: (slave vcan1): Enslaving as an active interface with an up link [ 176.884397][T11647] loop6: detected capacity change from 0 to 128 [ 176.923081][T11647] syz.6.2055: attempt to access beyond end of device [ 176.923081][T11647] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 176.947080][T11637] loop4: detected capacity change from 0 to 32768 [ 176.991530][T11647] syz.6.2055: attempt to access beyond end of device [ 176.991530][T11647] loop6: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 177.036967][T11647] Buffer I/O error on dev loop6, logical block 69, lost async page write [ 177.052573][T11637] loop4: p1 p3 < > [ 177.052751][T11647] syz.6.2055: attempt to access beyond end of device [ 177.052751][T11647] loop6: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 177.075886][T11647] Buffer I/O error on dev loop6, logical block 70, lost async page write [ 177.098477][T11647] syz.6.2055: attempt to access beyond end of device [ 177.098477][T11647] loop6: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 177.113124][T11647] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 177.126801][T11647] syz.6.2055: attempt to access beyond end of device [ 177.126801][T11647] loop6: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 177.166174][T11647] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 177.234871][T11670] netlink: 'syz.8.2063': attribute type 1 has an invalid length. [ 177.252174][T11670] bond3: entered promiscuous mode [ 177.257534][T11670] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.283629][ T8862] udevd[8862]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 177.295842][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 177.314957][T11670] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.328420][T11670] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 177.341196][T11670] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 177.354377][T11670] bond3: (slave vcan1): making interface the new active one [ 177.362036][T11670] vcan1: entered promiscuous mode [ 177.369750][T11670] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 178.282756][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 179.499514][ T3489] hid_parser_main: 7 callbacks suppressed [ 179.499543][ T3489] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 179.528780][ T3489] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.761123][T11639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.827293][T11753] loop6: detected capacity change from 0 to 256 [ 180.073303][T11780] loop9: detected capacity change from 0 to 512 [ 180.138370][T11784] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2104'. [ 180.148537][T11780] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.175183][T11780] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.224324][T11787] syz_tun: entered allmulticast mode [ 180.247846][T11780] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 180.265991][T11786] syz_tun: left allmulticast mode [ 180.301485][T11780] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 180.335524][T11780] EXT4-fs (loop9): This should not happen!! Data will be lost [ 180.335524][T11780] [ 180.353776][T11780] EXT4-fs (loop9): Total free blocks count 0 [ 180.360463][T11780] EXT4-fs (loop9): Free/Dirty block details [ 180.366480][T11780] EXT4-fs (loop9): free_blocks=65280 [ 180.393390][T11780] EXT4-fs (loop9): dirty_blocks=2 [ 180.399568][T11780] EXT4-fs (loop9): Block reservation details [ 180.405906][T11780] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 180.405930][T11801] loop7: detected capacity change from 0 to 512 [ 180.414316][T11780] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 180.446586][ T7344] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 180.484596][T11795] netlink: 'syz.6.2109': attribute type 10 has an invalid length. [ 180.527745][T11795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.539942][T11795] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 180.576452][T11801] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.598861][T11801] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.666199][ T8808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.935945][T11840] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2125'. [ 180.951626][T11840] geneve2: entered promiscuous mode [ 180.982708][T11844] netlink: 'syz.8.2129': attribute type 12 has an invalid length. [ 180.992231][T11844] netlink: 'syz.8.2129': attribute type 29 has an invalid length. [ 181.001280][T11844] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2129'. [ 181.011139][T11844] netlink: 'syz.8.2129': attribute type 2 has an invalid length. [ 181.067419][T11852] netlink: 'syz.7.2133': attribute type 39 has an invalid length. [ 181.133633][T11863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2137'. [ 181.467462][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 181.467481][ T28] audit: type=1400 audit(1775361389.213:2731): avc: denied { listen } for pid=11883 comm="syz.7.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 181.928064][T11912] netlink: 'syz.8.2167': attribute type 1 has an invalid length. [ 181.964900][T11912] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.981880][T11910] loop4: detected capacity change from 0 to 256 [ 182.007476][T11912] bond4: (slave veth1_to_team): Enslaving as a backup interface with an up link [ 182.250613][T11922] netlink: 'syz.4.2161': attribute type 3 has an invalid length. [ 182.258740][T11922] netlink: 'syz.4.2161': attribute type 1 has an invalid length. [ 182.266743][T11922] netlink: 198116 bytes leftover after parsing attributes in process `syz.4.2161'. [ 182.334935][T11924] ªªªªªª: renamed from vlan0 (while UP) [ 182.376028][T11916] loop6: detected capacity change from 0 to 2048 [ 182.397888][T11926] mmap: syz.4.2163 (11926) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.566767][T11916] Alternate GPT is invalid, using primary GPT. [ 182.567667][T11941] syzkaller0: entered allmulticast mode [ 182.585023][T11916] loop6: p2 p3 p7 [ 182.587626][T11941] syzkaller0: entered promiscuous mode [ 182.607990][T11941] syzkaller0 (unregistering): left allmulticast mode [ 182.618797][T11941] syzkaller0 (unregistering): left promiscuous mode [ 182.761122][ T2999] Alternate GPT is invalid, using primary GPT. [ 182.767850][ T2999] loop6: p2 p3 p7 [ 182.773024][T11949] syz_tun: entered allmulticast mode [ 182.780873][T11948] syz_tun: left allmulticast mode [ 182.941474][ T28] audit: type=1326 audit(1775361390.693:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 182.988455][ T28] audit: type=1326 audit(1775361390.693:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 183.029111][ T28] audit: type=1326 audit(1775361390.693:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 183.053325][ T28] audit: type=1326 audit(1775361390.693:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 183.078448][ T28] audit: type=1326 audit(1775361390.693:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 183.116178][ T28] audit: type=1326 audit(1775361390.693:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 183.147029][ T28] audit: type=1326 audit(1775361390.723:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 183.186489][ T28] audit: type=1326 audit(1775361390.723:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 183.213001][ T28] audit: type=1326 audit(1775361390.733:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.8.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b0f1c819 code=0x7ffc0000 [ 183.270904][T11971] loop7: detected capacity change from 0 to 2048 [ 183.290563][T11971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.321632][ T8808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.438400][T11982] loop7: detected capacity change from 0 to 512 [ 183.447844][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 183.462470][T11981] uprobe: syz.6.2190:11981 failed to unregister, leaking uprobe [ 183.488833][T11982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.516368][T11982] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.587776][ T8808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.660506][T11996] sctp: [Deprecated]: syz.6.2195 (pid 11996) Use of int in maxseg socket option. [ 183.660506][T11996] Use struct sctp_assoc_value instead [ 183.700884][T12001] loop7: detected capacity change from 0 to 4096 [ 183.727300][T12001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.107973][ T8808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.151178][T12014] sock: sock_timestamping_bind_phc: sock not bind to device [ 184.241893][T12024] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2208'. [ 184.356886][T12032] loop6: detected capacity change from 0 to 512 [ 184.366043][T12032] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 184.377998][T12032] EXT4-fs (loop6): 1 truncate cleaned up [ 184.384629][T12032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.518208][T10643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.408286][T12052] netlink: 'syz.7.2221': attribute type 1 has an invalid length. [ 185.428439][T12052] gretap1: entered allmulticast mode [ 185.436002][T12052] bond1: (slave gretap1): making interface the new active one [ 185.444542][T12052] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 185.776968][T12081] xt_hashlimit: size too large, truncated to 1048576 [ 185.995612][T12102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.004361][T12102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.151839][T11963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.304481][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2242'. [ 186.493620][T12145] loop9: detected capacity change from 0 to 256 [ 186.778762][T12163] netlink: 'syz.9.2249': attribute type 13 has an invalid length. [ 187.031039][T12183] loop6: detected capacity change from 0 to 512 [ 187.053118][T12183] EXT4-fs (loop6): blocks per group (255) and clusters per group (8192) inconsistent [ 187.083533][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 187.083549][ T28] audit: type=1400 audit(1775361394.833:2766): avc: denied { append } for pid=12182 comm="syz.6.2255" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.123753][ T28] audit: type=1400 audit(1775361394.863:2767): avc: denied { map } for pid=12182 comm="syz.6.2255" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.213291][T12199] netlink: 13 bytes leftover after parsing attributes in process `syz.7.2265'. [ 187.217822][ T28] audit: type=1400 audit(1775361394.963:2768): avc: denied { name_bind } for pid=12200 comm="syz.4.2266" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 187.327817][ T28] audit: type=1400 audit(1775361395.073:2769): avc: denied { create } for pid=12211 comm="syz.4.2271" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 187.401857][T12218] netlink: 'syz.7.2273': attribute type 21 has an invalid length. [ 187.727657][ T28] audit: type=1400 audit(1775361395.473:2770): avc: denied { mount } for pid=12232 comm="syz.6.2280" name="/" dev="autofs" ino=34717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 187.778723][ T28] audit: type=1400 audit(1775361395.513:2771): avc: denied { read write } for pid=10643 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.809063][ T28] audit: type=1400 audit(1775361395.513:2772): avc: denied { open } for pid=10643 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.840437][ T28] audit: type=1400 audit(1775361395.513:2773): avc: denied { ioctl } for pid=10643 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.871688][ T28] audit: type=1400 audit(1775361395.593:2774): avc: denied { name_bind } for pid=12234 comm="syz.6.2281" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 187.894512][ T28] audit: type=1400 audit(1775361395.593:2775): avc: denied { create } for pid=12234 comm="syz.6.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.002068][T12242] loop9: detected capacity change from 0 to 512 [ 188.019201][T12242] EXT4-fs: Ignoring removed i_version option [ 188.034328][T12242] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.608406][ T7344] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.744725][T12262] netlink: 41 bytes leftover after parsing attributes in process `syz.9.2292'. [ 188.755066][T12262] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2292'. [ 188.776878][T12262] netlink: 41 bytes leftover after parsing attributes in process `syz.9.2292'. [ 189.510294][T12288] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 189.556349][T12288] syzkaller0: Linktype set failed because interface is up [ 189.622001][ T3649] syzkaller0: tun_net_xmit 76 [ 189.631648][ T3649] syzkaller0: tun_net_xmit 48 [ 189.648954][ T3422] syzkaller0: tun_net_xmit 76 [ 189.720450][T12299] syzkaller0: entered promiscuous mode [ 189.742404][T12299] syzkaller0: entered allmulticast mode [ 189.756093][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2310'. [ 190.938528][T12330] loop7: detected capacity change from 0 to 2048 [ 191.140751][ T3306] Alternate GPT is invalid, using primary GPT. [ 191.147157][ T3306] loop7: p2 p3 p7 [ 191.248072][T12330] Alternate GPT is invalid, using primary GPT. [ 191.256919][T12330] loop7: p2 p3 p7 [ 191.513458][T12351] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2323'. [ 192.044218][T12367] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2330'. [ 192.078071][T12349] loop6: detected capacity change from 0 to 2048 [ 192.800742][T12349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.832035][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 192.832054][ T28] audit: type=1400 audit(1775361400.583:2854): avc: denied { read append open } for pid=12348 comm="syz.6.2322" path="/75/file0/blkio.bfq.group_wait_time" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 192.886347][T12349] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2322: bg 0: block 234: padding at end of block bitmap is not set [ 192.919096][T12349] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 117 [ 192.942529][T12382] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2334'. [ 192.948900][T12349] EXT4-fs (loop6): This should not happen!! Data will be lost [ 192.948900][T12349] [ 192.962388][ T28] audit: type=1400 audit(1775361400.693:2855): avc: denied { write } for pid=12381 comm="syz.7.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 193.102622][T10643] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 193.159195][T10643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.194334][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2340'. [ 193.237015][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2340'. [ 193.420678][ T28] audit: type=1400 audit(1775361401.163:2856): avc: denied { setopt } for pid=12402 comm="syz.8.2343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.593816][ T28] audit: type=1400 audit(1775361401.183:2857): avc: denied { mount } for pid=12403 comm="syz.7.2344" name="/" dev="ramfs" ino=36057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 193.663919][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2346'. [ 193.673163][T12412] loop6: detected capacity change from 0 to 512 [ 193.680287][ T28] audit: type=1400 audit(1775361401.223:2858): avc: denied { write } for pid=12406 comm="syz.8.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 193.710184][ T28] audit: type=1400 audit(1775361401.223:2859): avc: denied { name_connect } for pid=12406 comm="syz.8.2345" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 193.731788][ T28] audit: type=1400 audit(1775361401.223:2860): avc: denied { setopt } for pid=12406 comm="syz.8.2345" lport=58837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 193.764427][ T28] audit: type=1400 audit(1775361401.413:2861): avc: denied { bind } for pid=12408 comm="syz.7.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.790297][ T28] audit: type=1400 audit(1775361401.413:2862): avc: denied { setopt } for pid=12408 comm="syz.7.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.812829][ T28] audit: type=1400 audit(1775361401.453:2863): avc: denied { mount } for pid=12411 comm="syz.6.2348" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 193.910951][T12422] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.2351'. [ 193.922054][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2351'. [ 194.723031][T12438] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2356'. [ 194.789209][T12441] netlink: 'syz.7.2357': attribute type 13 has an invalid length. [ 194.962718][T12446] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 195.361622][T12480] netlink: 'syz.7.2375': attribute type 8 has an invalid length. [ 195.376245][T12480] netlink: 'syz.7.2375': attribute type 7 has an invalid length. [ 195.396046][T12480] netlink: 194488 bytes leftover after parsing attributes in process `syz.7.2375'. [ 195.771923][ T310] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.826307][T12492] sctp: [Deprecated]: syz.8.2379 (pid 12492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.826307][T12492] Use struct sctp_sack_info instead [ 195.871884][ T310] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.961376][ T310] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.966312][T12503] netlink: 'syz.6.2384': attribute type 1 has an invalid length. [ 196.046842][T12513] xt_hashlimit: size too large, truncated to 1048576 [ 196.068209][T12514] netlink: 'syz.6.2384': attribute type 1 has an invalid length. [ 196.090807][T12503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.170655][ T310] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.210216][T12514] vxlan0: entered promiscuous mode [ 196.251003][T12514] bond1: (slave vxlan0): making interface the new active one [ 196.296756][T12514] bond1: (slave vxlan0): Enslaving as an active interface with an up link [ 196.305882][ T126] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.345802][ T126] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.421582][ T126] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.436053][ T3444] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.545178][T12533] lo: Caught tx_queue_len zero misconfig [ 196.579803][T12533] sch_fq: defrate 0 ignored. [ 196.600450][T12496] chnl_net:caif_netlink_parms(): no params data found [ 196.695453][T12496] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.714580][T12496] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.722917][T12496] bridge_slave_0: entered allmulticast mode [ 196.744927][T12496] bridge_slave_0: entered promiscuous mode [ 196.763565][T12496] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.771042][T12496] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.778385][T12496] bridge_slave_1: entered allmulticast mode [ 196.785280][T12496] bridge_slave_1: entered promiscuous mode [ 196.805480][T12496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.816759][T12496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.842182][T12496] team0: Port device team_slave_0 added [ 196.849328][T12496] team0: Port device team_slave_1 added [ 196.867837][T12496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.875151][T12496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.904759][T12496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.504243][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 199.504260][ T28] audit: type=1400 audit(1775361407.253:2921): avc: denied { mount } for pid=12550 comm="syz.8.2397" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 200.095060][T12496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.108349][T12496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.135475][T12496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.160248][T12562] loop9: detected capacity change from 0 to 512 [ 200.178784][ T28] audit: type=1400 audit(1775361407.923:2922): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 200.251953][T12562] EXT4-fs (loop9): 1 truncate cleaned up [ 200.261043][T12562] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.273825][T12496] hsr_slave_0: entered promiscuous mode [ 200.289465][T12496] hsr_slave_1: entered promiscuous mode [ 200.315379][T12496] debugfs: 'hsr0' already exists in 'hsr' [ 200.321975][T12570] netlink: 'syz.6.2401': attribute type 13 has an invalid length. [ 200.343680][T12496] Cannot create hsr debugfs directory [ 200.361459][ T7344] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.378995][ T310] bridge_slave_1: left allmulticast mode [ 200.388206][ T28] audit: type=1400 audit(1775361408.133:2923): avc: denied { bind } for pid=12573 comm="syz.9.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.397373][ T310] bridge_slave_1: left promiscuous mode [ 200.425491][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.440519][ T310] bridge_slave_0: left allmulticast mode [ 200.446339][ T310] bridge_slave_0: left promiscuous mode [ 200.452451][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.570109][ T28] audit: type=1400 audit(1775361408.323:2924): avc: denied { execute } for pid=12580 comm="syz.8.2407" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 200.602160][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.612619][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.622450][ T310] bond0 (unregistering): Released all slaves [ 200.682524][T12585] tipc: Failed to remove unknown binding: 66,1,1/0:131996155/131996157 [ 200.691065][T12585] tipc: Failed to remove unknown binding: 66,1,1/0:131996155/131996157 [ 200.710254][T12566] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 200.732319][ T310] hsr_slave_0: left promiscuous mode [ 200.753093][ T310] hsr_slave_1: left promiscuous mode [ 200.759313][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.769151][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.778335][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.785965][ T28] audit: type=1400 audit(1775361408.523:2925): avc: denied { map } for pid=12588 comm="syz.7.2411" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 200.811156][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.822214][ T310] veth1_macvtap: left promiscuous mode [ 200.828126][ T310] veth0_macvtap: left promiscuous mode [ 200.834393][ T28] audit: type=1400 audit(1775361408.523:2926): avc: denied { read write } for pid=12588 comm="syz.7.2411" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 200.859637][ T310] veth1_vlan: left promiscuous mode [ 200.865157][ T310] veth0_vlan: left promiscuous mode [ 200.986350][ T310] team0 (unregistering): Port device team_slave_1 removed [ 201.000885][ T310] team0 (unregistering): Port device team_slave_0 removed [ 201.067079][T12596] netlink: 'syz.7.2412': attribute type 27 has an invalid length. [ 201.082890][ T28] audit: type=1400 audit(1775361408.833:2927): avc: denied { search } for pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.149506][ T28] audit: type=1400 audit(1775361408.833:2928): avc: denied { search } for pid=3038 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.173058][ T28] audit: type=1400 audit(1775361408.833:2929): avc: denied { search } for pid=3038 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.216401][ T28] audit: type=1400 audit(1775361408.833:2930): avc: denied { read } for pid=3038 comm="dhcpcd" name="n66" dev="tmpfs" ino=11983 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.342644][T12596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.511643][T12596] geneve2: left promiscuous mode [ 201.519418][T12596] geneve2: left allmulticast mode [ 201.551707][T12596] gretap1: left allmulticast mode [ 201.616662][T12597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.653359][T12597] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.686464][T12597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.723336][ T30] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.734448][ T30] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.744184][ T30] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 201.773480][ T30] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.783769][ T30] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.801584][ T30] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 201.824515][ T30] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.835384][ T30] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.846970][ T30] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 201.872115][ T30] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.884880][ T30] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.913714][ T30] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 202.096809][T12496] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 202.266707][T12496] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.284877][T12496] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.301744][T12496] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.324935][T12688] netlink: 'syz.9.2430': attribute type 4 has an invalid length. [ 202.351631][T12688] netlink: 'syz.9.2430': attribute type 4 has an invalid length. [ 202.408131][T12688] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.415486][T12688] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.495976][T12688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.511765][T12688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.567663][ T8038] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.583466][ T8038] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.616554][ T8038] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.633429][ T8038] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.656220][T12496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.671163][T12496] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.696146][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.703793][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.714405][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.721598][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.742417][T12712] loop9: detected capacity change from 0 to 512 [ 202.769568][T12712] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #12: comm syz.9.2438: missing EA_INODE flag [ 202.798078][T12496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.809911][T12712] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 202.810159][T12712] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.2438: error while reading EA inode 12 err=-117 [ 202.819503][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 202.819527][ C1] EXT4-fs (loop9): initial error at time 1775361410: ext4_xattr_inode_iget:441: inode 12 [ 202.819574][ C1] EXT4-fs (loop9): last error at time 1775361410: ext4_xattr_inode_iget:441: inode 12 [ 202.879450][T12496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.909605][T12712] loop9: lost filesystem error report for type 5 error -117 [ 202.909766][T12712] EXT4-fs (loop9): 1 orphan inode deleted [ 202.942099][T12712] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.212922][T12496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.783955][T12496] veth0_vlan: entered promiscuous mode [ 203.802054][T12496] veth1_vlan: entered promiscuous mode [ 203.883994][T12496] veth0_macvtap: entered promiscuous mode [ 203.891970][T12496] veth1_macvtap: entered promiscuous mode [ 203.903864][T12496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.926496][T12496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.953500][ T3649] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.964190][ T3649] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.980646][ T3649] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.014198][ T3649] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.151286][ T7344] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.209370][T12754] veth1_to_bond: Caught tx_queue_len zero misconfig [ 204.232434][T12758] netlink: 'syz.4.2445': attribute type 3 has an invalid length. [ 204.241240][T12758] __nla_validate_parse: 1 callbacks suppressed [ 204.241258][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2445'. [ 204.313595][T12765] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2447'. [ 204.491849][T12791] loop4: detected capacity change from 0 to 128 [ 204.530053][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2462'. [ 204.660712][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 204.660734][ T28] audit: type=1400 audit(1775361412.413:2978): avc: denied { setopt } for pid=12803 comm="syz.8.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.840673][ T28] audit: type=1400 audit(1775361412.593:2979): avc: denied { create } for pid=12817 comm="syz.6.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.883193][ T28] audit: type=1400 audit(1775361412.593:2980): avc: denied { setopt } for pid=12817 comm="syz.6.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.937001][ T28] audit: type=1400 audit(1775361412.593:2981): avc: denied { block_suspend } for pid=12817 comm="syz.6.2471" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.997418][ T28] audit: type=1400 audit(1775361412.713:2982): avc: denied { watch watch_reads } for pid=12822 comm="syz.6.2472" path="/110/file1" dev="tmpfs" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 205.061672][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2474'. [ 205.107547][T12827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2474'. [ 205.253191][ T28] audit: type=1326 audit(1775361413.003:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12834 comm="syz.6.2477" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1800fc819 code=0x0 [ 205.518634][T12806] loop4: detected capacity change from 0 to 2048 [ 205.580014][T12806] Alternate GPT is invalid, using primary GPT. [ 205.591499][T12806] loop4: p2 p3 p7 [ 205.746968][ T2999] Alternate GPT is invalid, using primary GPT. [ 205.754759][ T2999] loop4: p2 p3 p7 [ 205.840275][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2487'. [ 205.850587][T12859] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2487'. [ 205.912875][ T28] audit: type=1400 audit(1775361413.663:2984): avc: denied { setopt } for pid=12862 comm="syz.9.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.298271][T12622] kernel read not supported for file /277/pagemap (pid: 12622 comm: kworker/0:16) [ 206.313233][T12879] loop7: detected capacity change from 0 to 128 [ 206.323370][T12875] netlink: 'syz.9.2495': attribute type 27 has an invalid length. [ 206.356089][T12875] bond0: left promiscuous mode [ 206.383667][T12875] vcan1: left promiscuous mode [ 206.389974][ T28] audit: type=1400 audit(1775361414.133:2985): avc: denied { connect } for pid=12882 comm="syz.6.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 206.425467][T12885] syz.7.2496: attempt to access beyond end of device [ 206.425467][T12885] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 206.439857][T12884] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.452592][T12885] syz.7.2496: attempt to access beyond end of device [ 206.452592][T12885] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 206.467023][T12884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.493348][T12885] syz.7.2496: attempt to access beyond end of device [ 206.493348][T12885] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 206.520773][T12885] syz.7.2496: attempt to access beyond end of device [ 206.520773][T12885] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 206.587696][T12885] syz.7.2496: attempt to access beyond end of device [ 206.587696][T12885] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 206.624575][T12893] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 206.628399][T12885] syz.7.2496: attempt to access beyond end of device [ 206.628399][T12885] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 206.631314][T12893] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 206.633179][ T28] audit: type=1400 audit(1775361414.363:2986): avc: denied { read open } for pid=12897 comm="syz.6.2503" path="/" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 206.645467][T12885] syz.7.2496: attempt to access beyond end of device [ 206.645467][T12885] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 206.661625][T12893] vhci_hcd vhci_hcd.0: Device attached [ 206.686451][T12885] syz.7.2496: attempt to access beyond end of device [ 206.686451][T12885] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 206.698731][ T28] audit: type=1400 audit(1775361414.363:2987): avc: denied { watch watch_reads } for pid=12897 comm="syz.6.2503" path="/" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 206.709114][T12885] syz.7.2496: attempt to access beyond end of device [ 206.709114][T12885] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 206.747911][T12885] syz.7.2496: attempt to access beyond end of device [ 206.747911][T12885] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 206.762545][T12902] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(6) [ 206.769503][T12902] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.777514][T12904] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(9) [ 206.784367][T12904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.808610][T12902] vhci_hcd vhci_hcd.0: Device attached [ 206.836478][T12904] vhci_hcd vhci_hcd.0: Device attached [ 206.898773][T12893] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(5) [ 206.905463][T12893] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.918695][T12622] usb 19-1: new high-speed USB device number 2 using vhci_hcd [ 206.926362][T12893] vhci_hcd vhci_hcd.0: Device attached [ 206.940743][T12893] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(11) [ 206.947713][T12893] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 206.978918][T12893] vhci_hcd vhci_hcd.0: Device attached [ 206.988547][T12893] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(13) [ 206.995353][T12893] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.005210][T12893] vhci_hcd vhci_hcd.0: Device attached [ 207.012106][T12893] vhci_hcd vhci_hcd.0: pdev(9) rhport(6) sockfd(15) [ 207.018842][T12893] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 207.027623][T12893] vhci_hcd vhci_hcd.0: Device attached [ 207.037035][T12893] vhci_hcd vhci_hcd.0: pdev(9) rhport(7) sockfd(17) [ 207.043930][T12893] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.053808][T12893] vhci_hcd vhci_hcd.0: Device attached [ 207.062294][T12930] vhci_hcd: connection closed [ 207.062462][T12926] vhci_hcd: connection closed [ 207.062496][T12905] vhci_hcd: connection closed [ 207.067433][T12918] vhci_hcd: connection closed [ 207.072253][ T8038] vhci_hcd vhci_hcd.9: stop threads [ 207.077041][T12924] vhci_hcd: connection closed [ 207.083398][T12903] vhci_hcd: connection closed [ 207.086991][T12894] vhci_hcd: connection reset by peer [ 207.092079][ T8038] vhci_hcd vhci_hcd.9: release socket [ 207.098686][T12914] vhci_hcd: connection closed [ 207.117836][ T8038] vhci_hcd vhci_hcd.9: disconnect device [ 207.158100][ T8038] vhci_hcd vhci_hcd.9: stop threads [ 207.168662][ T8038] vhci_hcd vhci_hcd.9: release socket [ 207.179845][ T8038] vhci_hcd vhci_hcd.9: disconnect device [ 207.222790][ T8038] vhci_hcd vhci_hcd.9: stop threads [ 207.228099][ T8038] vhci_hcd vhci_hcd.9: release socket [ 207.236902][ T8038] vhci_hcd vhci_hcd.9: disconnect device [ 207.271067][ T8038] vhci_hcd vhci_hcd.9: stop threads [ 207.280611][T12945] loop6: detected capacity change from 0 to 512 [ 207.287219][ T8038] vhci_hcd vhci_hcd.9: release socket [ 207.293247][ T8038] vhci_hcd vhci_hcd.9: disconnect device [ 207.308015][T12945] EXT4-fs error (device loop6): ext4_iget_extra_inode:5040: inode #15: comm syz.6.2516: corrupted in-inode xattr: overlapping e_value [ 207.317931][ T8038] vhci_hcd vhci_hcd.9: stop threads [ 207.327606][ T8038] vhci_hcd vhci_hcd.9: release socket [ 207.333096][ T8038] vhci_hcd vhci_hcd.9: disconnect device [ 207.339174][T12945] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 207.339512][T12945] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2516: couldn't read orphan inode 15 (err -117) [ 207.348679][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 207.348706][ C0] EXT4-fs (loop6): initial error at time 1775361415: ext4_iget_extra_inode:5040: inode 15 [ 207.348758][ C0] EXT4-fs (loop6): last error at time 1775361415: ext4_iget_extra_inode:5040: inode 15 [ 207.358641][ T8038] vhci_hcd vhci_hcd.9: stop threads [ 207.360669][T12945] loop6: lost filesystem error report for type 5 error -117 [ 207.368975][ T8038] vhci_hcd vhci_hcd.9: release socket [ 207.409400][T12945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.410529][ T8038] vhci_hcd vhci_hcd.9: disconnect device [ 207.467604][T10643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.487443][ T8038] vhci_hcd vhci_hcd.9: stop threads [ 207.505750][ T8038] vhci_hcd vhci_hcd.9: release socket [ 207.518648][ T8038] vhci_hcd vhci_hcd.9: disconnect device [ 207.524556][ T8038] vhci_hcd vhci_hcd.9: stop threads [ 207.534553][ T8038] vhci_hcd vhci_hcd.9: release socket [ 207.544744][ T8038] vhci_hcd vhci_hcd.9: disconnect device [ 207.569398][T12954] loop2: detected capacity change from 0 to 7 [ 208.132735][T12965] ªªªªªª: renamed from vlan0 [ 208.344953][T12961] loop4: detected capacity change from 0 to 2048 [ 208.455208][T12961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.592254][T12496] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.979901][T13016] loop4: detected capacity change from 0 to 512 [ 209.009348][T13016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.029451][T13016] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.293509][T12496] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.491362][T13044] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2555'. [ 209.965374][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 209.965398][ T28] audit: type=1400 audit(1775361417.713:3076): avc: denied { setopt } for pid=13057 comm="syz.4.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.058121][ T28] audit: type=1400 audit(1775361417.803:3077): avc: denied { mount } for pid=13062 comm="syz.8.2562" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 210.116049][ T28] audit: type=1400 audit(1775361417.833:3078): avc: denied { watch watch_reads } for pid=13062 comm="syz.8.2562" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 210.175105][T13067] loop4: detected capacity change from 0 to 1024 [ 210.197563][ T28] audit: type=1400 audit(1775361417.893:3079): avc: denied { create } for pid=13064 comm="syz.8.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.259670][T13067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.289693][ T28] audit: type=1400 audit(1775361417.903:3080): avc: denied { bind } for pid=13064 comm="syz.8.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.326128][T13067] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 210.374069][ T28] audit: type=1400 audit(1775361417.903:3081): avc: denied { listen } for pid=13064 comm="syz.8.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.420568][T12496] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.422251][ T28] audit: type=1400 audit(1775361417.933:3082): avc: denied { connect } for pid=13064 comm="syz.8.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.474543][ T28] audit: type=1400 audit(1775361417.933:3083): avc: denied { write } for pid=13064 comm="syz.8.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.489480][T13075] loop4: detected capacity change from 0 to 1024 [ 210.516483][ T28] audit: type=1400 audit(1775361417.943:3084): avc: denied { accept } for pid=13064 comm="syz.8.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.542907][ T28] audit: type=1400 audit(1775361417.943:3085): avc: denied { read } for pid=13064 comm="syz.8.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.565546][T13075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.687519][T13059] loop9: detected capacity change from 0 to 2048 [ 210.832120][T13059] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.886398][T12496] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.932457][T13085] bridge0: port 3(erspan0) entered blocking state [ 210.940909][T13085] bridge0: port 3(erspan0) entered disabled state [ 210.981342][T13059] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2559: bg 0: block 234: padding at end of block bitmap is not set [ 211.003222][T13085] erspan0: entered allmulticast mode [ 211.017506][T13088] netlink: 'syz.7.2570': attribute type 10 has an invalid length. [ 211.032922][T13059] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 211.048980][T13059] EXT4-fs (loop9): This should not happen!! Data will be lost [ 211.048980][T13059] [ 211.061763][T13085] erspan0: entered promiscuous mode [ 211.075352][T13085] bridge0: port 3(erspan0) entered blocking state [ 211.081895][T13085] bridge0: port 3(erspan0) entered forwarding state [ 211.109103][T13059] EXT4-fs (loop9): Total free blocks count 0 [ 211.118926][T13059] EXT4-fs (loop9): Free/Dirty block details [ 211.129810][T13088] bridge0: port 3(erspan0) entered disabled state [ 211.138068][T13059] EXT4-fs (loop9): free_blocks=0 [ 211.138298][T13088] bridge0: port 3(erspan0) entered blocking state [ 211.149741][T13088] bridge0: port 3(erspan0) entered forwarding state [ 211.150872][T13059] EXT4-fs (loop9): dirty_blocks=16 [ 211.181567][T13088] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 211.184558][T13059] EXT4-fs (loop9): Block reservation details [ 211.200894][T13059] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 211.280064][ T7344] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 211.291677][ T7344] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.638448][T13128] bridge0: port 3(erspan0) entered blocking state [ 211.658761][T13128] bridge0: port 3(erspan0) entered disabled state [ 211.669074][T13128] erspan0: entered allmulticast mode [ 211.684874][T13128] erspan0: entered promiscuous mode [ 211.705476][T13128] bridge0: port 3(erspan0) entered blocking state [ 211.711992][T13128] bridge0: port 3(erspan0) entered forwarding state [ 211.737030][T13131] netlink: 'syz.4.2585': attribute type 10 has an invalid length. [ 211.815074][T13131] bridge0: port 3(erspan0) entered disabled state [ 211.821734][T13131] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.828988][T13131] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.896999][T13131] bridge0: port 3(erspan0) entered blocking state [ 211.903729][T13131] bridge0: port 3(erspan0) entered forwarding state [ 211.910548][T13131] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.917807][T13131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.925372][T13131] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.932562][T13131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.018675][T12622] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 212.036923][T13131] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 212.307954][T13143] loop6: detected capacity change from 0 to 512 [ 212.400004][T13143] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 212.421733][T13143] EXT4-fs (loop6): 1 truncate cleaned up [ 212.430280][T13143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.468337][T10643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.785649][T13168] loop6: detected capacity change from 0 to 1024 [ 212.811683][T13168] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 212.867005][T13168] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 212.895128][T13168] EXT4-fs error (device loop6): ext4_get_journal_inode:5888: inode #32: comm syz.6.2598: iget: special inode unallocated [ 212.924513][T13168] loop6: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 212.924786][T13168] EXT4-fs (loop6): Remounting filesystem read-only [ 212.934623][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 212.934652][ C1] EXT4-fs (loop6): initial error at time 1775361420: ext4_get_journal_inode:5888: inode 32 [ 212.934683][ C1] EXT4-fs (loop6): last error at time 1775361420: ext4_get_journal_inode:5888: inode 32 [ 212.979678][T13168] EXT4-fs (loop6): no journal found [ 212.984975][T13168] EXT4-fs (loop6): can't get journal size [ 213.018936][T13168] EXT4-fs (loop6): failed to initialize system zone (-117) [ 213.035008][T13168] EXT4-fs (loop6): mount failed [ 213.159855][T13183] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2604'. [ 213.302943][T13191] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.2606'. [ 213.312755][T13191] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2606'. [ 213.338847][T13190] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2607'. [ 214.025903][T13205] netlink: 'syz.8.2610': attribute type 1 has an invalid length. [ 214.058280][T13205] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.255408][T13205] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2610'. [ 214.402408][T13204] bond5: (slave veth13): Enslaving as an active interface with a down link [ 214.591893][T13205] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 214.643685][T13205] bond5: (slave batadv1): making interface the new active one [ 214.655053][T13205] batadv1: entered promiscuous mode [ 214.661437][T13205] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 214.679246][T13219] netlink: 'syz.4.2616': attribute type 4 has an invalid length. [ 214.708731][T13219] netlink: 'syz.4.2616': attribute type 4 has an invalid length. [ 214.752470][T13221] bond0: entered promiscuous mode [ 214.759261][T13221] bond_slave_0: entered promiscuous mode [ 214.765542][T13221] bond_slave_1: entered promiscuous mode [ 214.777972][T13224] loop4: detected capacity change from 0 to 128 [ 214.780131][T13221] team0: entered promiscuous mode [ 214.790526][T13221] team_slave_0: entered promiscuous mode [ 214.796906][T13221] team_slave_1: entered promiscuous mode [ 214.809594][T13221] bridge0: entered promiscuous mode [ 214.817980][T13221] bridge1: entered promiscuous mode [ 214.919104][T13224] bio_check_eod: 46 callbacks suppressed [ 214.919123][T13224] syz.4.2618: attempt to access beyond end of device [ 214.919123][T13224] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 214.965008][T13224] syz.4.2618: attempt to access beyond end of device [ 214.965008][T13224] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 214.984009][T13234] netlink: 'syz.7.2624': attribute type 1 has an invalid length. [ 214.988666][T13224] syz.4.2618: attempt to access beyond end of device [ 214.988666][T13224] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 215.005718][T13224] syz.4.2618: attempt to access beyond end of device [ 215.005718][T13224] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 215.029179][T13224] syz.4.2618: attempt to access beyond end of device [ 215.029179][T13224] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 215.042761][T13224] syz.4.2618: attempt to access beyond end of device [ 215.042761][T13224] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 215.057016][T13224] syz.4.2618: attempt to access beyond end of device [ 215.057016][T13224] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 215.060642][T13234] bond2: entered promiscuous mode [ 215.070860][T13224] syz.4.2618: attempt to access beyond end of device [ 215.070860][T13224] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 215.070906][T13224] syz.4.2618: attempt to access beyond end of device [ 215.070906][T13224] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 215.070942][T13224] syz.4.2618: attempt to access beyond end of device [ 215.070942][T13224] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 215.126008][T13234] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.148360][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 215.148377][ T28] audit: type=1400 audit(1775361422.893:3168): avc: denied { unmount } for pid=12496 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 215.161941][T13234] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.188264][T13234] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 215.201179][T13234] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 215.213627][T13234] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 215.290404][ T28] audit: type=1400 audit(1775361423.033:3169): avc: denied { shutdown } for pid=13247 comm="syz.9.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.318330][ T28] audit: type=1400 audit(1775361423.043:3170): avc: denied { read } for pid=13247 comm="syz.9.2629" path="socket:[37670]" dev="sockfs" ino=37670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.355202][ T28] audit: type=1400 audit(1775361423.043:3171): avc: denied { mounton } for pid=13247 comm="syz.9.2629" path="/276/file0" dev="tmpfs" ino=1438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.411846][ T28] audit: type=1400 audit(1775361423.163:3172): avc: denied { mount } for pid=13255 comm="syz.9.2632" name="/" dev="hugetlbfs" ino=38638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 215.435252][ T28] audit: type=1400 audit(1775361423.163:3173): avc: denied { watch } for pid=13255 comm="syz.9.2632" path="/" dev="hugetlbfs" ino=38638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 215.484707][ T9195] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.542875][ T9195] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.577249][ T28] audit: type=1400 audit(1775361423.323:3174): avc: denied { read } for pid=13264 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 215.602503][ T28] audit: type=1400 audit(1775361423.353:3175): avc: denied { open } for pid=13264 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 215.646093][ T28] audit: type=1400 audit(1775361423.353:3176): avc: denied { mounton } for pid=13264 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 215.674687][ T28] audit: type=1400 audit(1775361423.423:3177): avc: denied { kexec_image_load } for pid=13253 comm="syz.7.2633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 215.728294][ T9195] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.844491][ T9195] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.948308][ T9195] erspan0: left allmulticast mode [ 215.971658][ T9195] erspan0: left promiscuous mode [ 215.984349][ T9195] bridge0: port 3(erspan0) entered disabled state [ 216.014722][ T9195] bridge_slave_1: left allmulticast mode [ 216.020994][ T9195] bridge_slave_1: left promiscuous mode [ 216.028097][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.064264][ T9195] bridge_slave_0: left allmulticast mode [ 216.077100][ T9195] bridge_slave_0: left promiscuous mode [ 216.089216][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.242559][T13254] kexec: Could not allocate control_code_buffer [ 216.285611][ T9195] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 216.364097][ T9195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.383229][ T9195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.404559][ T9195] bond0 (unregistering): Released all slaves [ 216.483880][ T9195] hsr_slave_0: left promiscuous mode [ 216.494473][ T9195] hsr_slave_1: left promiscuous mode [ 216.508961][ T9195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.519766][ T9195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.541566][ T9195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.552794][ T9195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.574676][ T9195] veth1_macvtap: left promiscuous mode [ 216.581039][ T9195] veth0_macvtap: left promiscuous mode [ 216.586845][ T9195] veth1_vlan: left promiscuous mode [ 216.593624][ T9195] veth0_vlan: left promiscuous mode [ 216.698293][ T9195] team0 (unregistering): Port device team_slave_1 removed [ 216.712667][ T9195] team0 (unregistering): Port device team_slave_0 removed [ 216.863780][T13264] chnl_net:caif_netlink_parms(): no params data found [ 216.933582][ T3444] Bluetooth: hci0: Frame reassembly failed (-84) [ 216.949112][ T3649] Bluetooth: hci1: Frame reassembly failed (-84) [ 216.995093][T13333] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2652'. [ 217.082553][T13264] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.107336][T13264] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.125029][T13264] bridge_slave_0: entered allmulticast mode [ 217.133221][T13264] bridge_slave_0: entered promiscuous mode [ 217.147889][T13352] loop9: detected capacity change from 0 to 128 [ 217.157223][T13264] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.174703][T13264] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.188902][T13264] bridge_slave_1: entered allmulticast mode [ 217.199435][T13264] bridge_slave_1: entered promiscuous mode [ 217.257711][T13264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.286724][T13264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.349758][T13264] team0: Port device team_slave_0 added [ 217.356387][T13264] team0: Port device team_slave_1 added [ 217.447011][T13264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.469015][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.505990][T13264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.522916][T13264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.530522][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.560272][T13264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.598426][T13264] hsr_slave_0: entered promiscuous mode [ 217.606545][T13264] hsr_slave_1: entered promiscuous mode [ 217.632210][T13264] debugfs: 'hsr0' already exists in 'hsr' [ 217.638234][T13264] Cannot create hsr debugfs directory [ 217.998748][T13264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 218.010828][T13264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 218.028656][T13264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 218.053452][T13264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.142024][T13264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.164018][T13264] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.178841][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.186003][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.202933][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.210217][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.303033][T13264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.423310][T13264] veth0_vlan: entered promiscuous mode [ 218.431477][T13264] veth1_vlan: entered promiscuous mode [ 218.451635][T13264] veth0_macvtap: entered promiscuous mode [ 218.461930][T13264] veth1_macvtap: entered promiscuous mode [ 218.476512][T13264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.490233][T13264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.505262][ T3630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.522976][ T3630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.537383][ T3630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.546439][ T3630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.989583][ T3823] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 218.995997][ T3939] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 218.997537][ T43] Bluetooth: hci1: command 0x1003 tx timeout [ 219.113538][T13461] chnl_net:caif_netlink_parms(): no params data found [ 219.216684][T13471] loop1: detected capacity change from 0 to 2048 [ 219.347763][T13471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.375414][T13461] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.401041][T13461] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.421649][T13461] bridge_slave_0: entered allmulticast mode [ 219.439367][T13461] bridge_slave_0: entered promiscuous mode [ 219.452036][T13461] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.459933][T13461] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.467484][T13461] bridge_slave_1: entered allmulticast mode [ 219.476811][T13461] bridge_slave_1: entered promiscuous mode [ 219.549983][T13461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.563298][T13264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.579588][T13537] loop6: detected capacity change from 0 to 512 [ 219.594926][T13461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.740141][T13537] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 219.750904][T13461] team0: Port device team_slave_0 added [ 219.757693][T13461] team0: Port device team_slave_1 added [ 219.865771][T13461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.877420][T13461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.920800][T13461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.944312][T13461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.978730][T13461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.015145][T13461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.121825][T13579] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.2681'. [ 220.146941][T13461] hsr_slave_0: entered promiscuous mode [ 220.159910][T13461] hsr_slave_1: entered promiscuous mode [ 220.200378][T13461] debugfs: 'hsr0' already exists in 'hsr' [ 220.216753][T13461] Cannot create hsr debugfs directory [ 220.591154][T13461] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 220.607322][T13461] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 220.622593][T13461] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 220.653745][T13461] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 220.716574][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 220.716627][ T28] audit: type=1400 audit(1775361428.463:3219): avc: denied { bind } for pid=13631 comm="syz.8.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.790918][ T28] audit: type=1400 audit(1775361428.493:3220): avc: denied { node_bind } for pid=13631 comm="syz.8.2687" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 220.857500][ T28] audit: type=1326 audit(1775361428.593:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.6.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1800fc819 code=0x7ffc0000 [ 220.870490][T13461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.896495][ T28] audit: type=1326 audit(1775361428.593:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.6.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1800fc819 code=0x7ffc0000 [ 220.933651][T13461] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.937022][ T28] audit: type=1326 audit(1775361428.593:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.6.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1800fc819 code=0x7ffc0000 [ 220.975215][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.982482][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.013282][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.020414][ T3649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.058373][ T28] audit: type=1326 audit(1775361428.593:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.6.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc1800fc819 code=0x7ffc0000 [ 221.114031][ T28] audit: type=1326 audit(1775361428.593:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.6.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1800fc819 code=0x7ffc0000 [ 221.124491][T13661] loop6: detected capacity change from 0 to 512 [ 221.214794][ T28] audit: type=1326 audit(1775361428.593:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.6.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1800fc819 code=0x7ffc0000 [ 221.281165][T13661] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 221.311287][T13661] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2690: invalid indirect mapped block 1023410176 (level 0) [ 221.333402][ T28] audit: type=1326 audit(1775361428.593:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.6.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1800fc819 code=0x7ffc0000 [ 221.359230][T13661] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.359703][T13661] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, [ 221.368953][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 221.368973][ C1] EXT4-fs (loop6): initial error at time 1775361429: ext4_free_branches:1023: inode 11 [ 221.369010][ C1] EXT4-fs (loop6): last error at time 1775361429: ext4_free_branches:1023: inode 11 [ 221.383027][ T28] audit: type=1326 audit(1775361428.593:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.6.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1800fc819 code=0x7ffc0000 [ 221.383170][T13661] inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 221.486561][T13461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.584367][T13661] EXT4-fs (loop6): 1 truncate cleaned up [ 221.610584][T13661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.890940][T10643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.929496][T13461] veth0_vlan: entered promiscuous mode [ 221.941712][T13714] tipc: Started in network mode [ 221.948339][T13714] tipc: Node identity 12d3bb7a48cd, cluster identity 4711 [ 221.965088][T13714] tipc: Enabled bearer , priority 0 [ 221.979610][T13714] tipc: Enabling of bearer rejected, already enabled [ 222.004989][T13461] veth1_vlan: entered promiscuous mode [ 222.027801][T13721] loop6: detected capacity change from 0 to 512 [ 222.040790][T13713] tipc: Disabling bearer [ 222.049889][T13721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.067624][T13723] loop1: detected capacity change from 0 to 512 [ 222.086311][T13723] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 222.093005][T13461] veth0_macvtap: entered promiscuous mode [ 222.102987][T13721] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 222.114857][T13723] EXT4-fs (loop1): 1 truncate cleaned up [ 222.121896][T13721] EXT4-fs (loop6): orphan cleanup on readonly fs [ 222.134450][T13723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.137586][T13461] veth1_macvtap: entered promiscuous mode [ 222.154365][T13721] EXT4-fs warning (device loop6): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 222.182869][T13461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.197436][T13721] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 222.203837][T13461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.223874][T13721] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz.6.2703: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 222.257330][T13721] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 222.257546][T13721] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2703: couldn't read orphan inode 13 (err -117) [ 222.266870][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 222.266891][ C0] EXT4-fs (loop6): last error at time 1775361430: ext4_ext_check_inode:521: inode 13 [ 222.283245][ T126] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.286315][T13721] loop6: lost filesystem error report for type 5 error -117 [ 222.305825][T13721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 222.334501][ T126] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.355289][T13264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.404861][T13721] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 222.414859][T13735] 9p: Bad value for 'rfdno' [ 222.430999][ T126] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.442148][T13721] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 222.453377][ T126] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.471881][T13721] EXT4-fs warning (device loop6): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 222.511080][T10643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.598072][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2712'. [ 222.663178][T13752] loop7: detected capacity change from 0 to 512 [ 222.679957][T13752] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 222.738940][T13752] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2711: invalid indirect mapped block 1023410176 (level 0) [ 222.772624][T13752] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 222.773098][T13752] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, [ 222.782494][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 222.782518][ C0] EXT4-fs (loop7): initial error at time 1775361430: ext4_free_branches:1023: inode 11 [ 222.782550][ C0] EXT4-fs (loop7): last error at time 1775361430: ext4_free_branches:1023: inode 11 [ 222.816542][T13752] inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 222.837162][T13752] EXT4-fs (loop7): 1 truncate cleaned up [ 222.851601][T13752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.975646][T12622] IPVS: starting estimator thread 0... [ 223.061341][T13781] loop6: detected capacity change from 0 to 128 [ 223.088649][T13776] IPVS: using max 2256 ests per chain, 112800 per kthread [ 223.168675][ T8808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.198427][T13785] bio_check_eod: 139 callbacks suppressed [ 223.198445][T13785] syz.6.2723: attempt to access beyond end of device [ 223.198445][T13785] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 223.227006][T13785] syz.6.2723: attempt to access beyond end of device [ 223.227006][T13785] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 223.301438][T13785] syz.6.2723: attempt to access beyond end of device [ 223.301438][T13785] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 223.330441][T13785] syz.6.2723: attempt to access beyond end of device [ 223.330441][T13785] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 223.349151][T13785] syz.6.2723: attempt to access beyond end of device [ 223.349151][T13785] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 223.388386][T13785] syz.6.2723: attempt to access beyond end of device [ 223.388386][T13785] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 223.416548][T13785] syz.6.2723: attempt to access beyond end of device [ 223.416548][T13785] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 223.431310][T13785] syz.6.2723: attempt to access beyond end of device [ 223.431310][T13785] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 223.445431][T13785] syz.6.2723: attempt to access beyond end of device [ 223.445431][T13785] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 223.459232][T13785] syz.6.2723: attempt to access beyond end of device [ 223.459232][T13785] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 223.572250][T13803] syz_tun: entered allmulticast mode [ 223.581903][T13802] syz_tun: left allmulticast mode [ 223.740334][T13765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.981672][T13850] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 225.014904][T13850] SELinux: failed to load policy [ 225.138729][T13858] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2754'. [ 225.791184][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 225.791202][ T28] audit: type=1400 audit(1775361433.543:3279): avc: denied { mounton } for pid=13901 comm="syz.6.2771" path="/file0" dev="autofs" ino=40789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 225.796246][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2772'. [ 225.877723][T13908] xt_hashlimit: size too large, truncated to 1048576 [ 225.898843][ T126] batadv1: left promiscuous mode [ 225.978122][T13915] loop1: detected capacity change from 0 to 512 [ 226.000826][T13915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.019434][T13915] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.045197][T13915] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 226.070721][T13915] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 226.083864][T13915] EXT4-fs (loop1): This should not happen!! Data will be lost [ 226.083864][T13915] [ 226.093752][T13915] EXT4-fs (loop1): Total free blocks count 0 [ 226.100662][T13915] EXT4-fs (loop1): Free/Dirty block details [ 226.106609][T13915] EXT4-fs (loop1): free_blocks=65280 [ 226.112278][T13915] EXT4-fs (loop1): dirty_blocks=4 [ 226.117353][T13915] EXT4-fs (loop1): Block reservation details [ 226.123614][T13915] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 226.130481][T13915] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 226.158662][T13264] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 226.487854][ T28] audit: type=1400 audit(1775361434.233:3280): avc: denied { setopt } for pid=13937 comm="syz.7.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.594977][ T28] audit: type=1400 audit(1775361434.343:3281): avc: denied { listen } for pid=13941 comm="syz.7.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 226.692905][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2785'. [ 226.701456][ T28] audit: type=1400 audit(1775361434.383:3282): avc: denied { read } for pid=13941 comm="syz.7.2784" path="socket:[41126]" dev="sockfs" ino=41126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.067566][ T28] audit: type=1400 audit(1775361434.813:3283): avc: denied { watch } for pid=13962 comm="syz.8.2792" path="/413" dev="tmpfs" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 227.411530][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2799'. [ 227.586622][T13981] loop6: detected capacity change from 0 to 512 [ 227.596584][T13981] EXT4-fs: Ignoring removed nobh option [ 227.606127][T13981] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 227.622045][T13981] EXT4-fs (loop6): 1 truncate cleaned up [ 227.630017][T13981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.700659][T13991] EXT4-fs (loop6): shut down requested (0) [ 227.724582][ T28] audit: type=1400 audit(1775361435.473:3284): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 227.747198][ T28] audit: type=1400 audit(1775361435.473:3285): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.773138][ T28] audit: type=1400 audit(1775361435.473:3286): avc: denied { append } for pid=2980 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 227.796084][ T28] audit: type=1400 audit(1775361435.473:3287): avc: denied { open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 227.819216][ T28] audit: type=1400 audit(1775361435.473:3288): avc: denied { getattr } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 228.245475][T10643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.346304][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2820'. [ 228.373191][T14039] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2821'. [ 228.547051][T14054] loop9: detected capacity change from 0 to 512 [ 228.558086][T14054] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2828: inode has both inline data and extents flags [ 228.572087][T14054] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 228.572266][T14054] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2828: couldn't read orphan inode 15 (err -117) [ 228.582519][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 228.582534][ C1] EXT4-fs (loop9): initial error at time 1775361436: ext4_orphan_get:1397: inode 15 [ 228.582571][ C1] EXT4-fs (loop9): last error at time 1775361436: ext4_orphan_get:1397: inode 15 [ 228.620174][T14054] loop9: lost filesystem error report for type 5 error -117 [ 228.621339][T14054] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.700158][T14060] EXT4-fs (loop9): shut down requested (1) [ 228.755085][T13461] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.981057][T14074] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 228.993710][T14084] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14084 comm=syz.1.2840 [ 229.796313][T14135] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2852'. [ 229.876673][T14136] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2852'. [ 230.183385][T14157] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2862'. [ 230.292879][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2866'. [ 230.323777][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2866'. [ 230.638808][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2870'. [ 230.688540][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 231.594734][T14230] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 231.912352][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 231.912391][ T28] audit: type=1400 audit(1775361439.663:3308): avc: denied { map } for pid=14234 comm="syz.1.2886" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 231.996700][ T28] audit: type=1400 audit(1775361439.663:3309): avc: denied { read write } for pid=14234 comm="syz.1.2886" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 232.059580][ T28] audit: type=1400 audit(1775361439.703:3310): avc: denied { override_creds } for pid=14234 comm="syz.1.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 232.080608][ T28] audit: type=1400 audit(1775361439.803:3311): avc: denied { create } for pid=14239 comm="syz.1.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 232.101859][ T28] audit: type=1400 audit(1775361439.803:3312): avc: denied { ioctl } for pid=14239 comm="syz.1.2888" path="socket:[42183]" dev="sockfs" ino=42183 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 232.171425][ T28] audit: type=1400 audit(1775361439.853:3313): avc: denied { wake_alarm } for pid=14241 comm="syz.9.2889" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 232.251359][ T28] audit: type=1400 audit(1775361439.973:3314): avc: denied { write } for pid=14251 comm="syz.1.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.447644][T14257] loop6: detected capacity change from 0 to 512 [ 232.457013][T14257] ext4: Unknown parameter 'nouser_xattr' [ 232.593896][ T28] audit: type=1400 audit(1775361440.333:3315): avc: denied { create } for pid=14258 comm="syz.6.2895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.595513][T14264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.650225][T14264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.814808][T14272] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2901'. [ 232.953506][ T28] audit: type=1326 audit(1775361440.703:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14279 comm="syz.9.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0b3fc819 code=0x7ffc0000 [ 233.022174][T14250] kexec: Could not allocate control_code_buffer [ 233.035735][ T28] audit: type=1326 audit(1775361440.703:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14279 comm="syz.9.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0b3fc819 code=0x7ffc0000 [ 233.222595][T14301] bond6: entered promiscuous mode [ 233.228306][T14301] bond6: entered allmulticast mode [ 233.239092][T14301] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.377245][T14320] __nla_validate_parse: 1 callbacks suppressed [ 233.377299][T14320] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2928'. [ 233.650717][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 233.772656][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2938'. [ 233.784323][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2938'. [ 233.803288][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2938'. [ 233.938010][T14386] netlink: 'syz.9.2946': attribute type 5 has an invalid length. [ 234.334530][T14408] geneve2: entered promiscuous mode [ 234.341748][ T50] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 47909 - 0 [ 234.351084][ T50] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 47909 - 0 [ 234.362316][ T50] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 47909 - 0 [ 234.371493][ T50] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 47909 - 0 [ 234.400663][T14413] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2958'. [ 234.483538][T14417] syzkaller0: entered promiscuous mode [ 234.489235][T14417] syzkaller0: entered allmulticast mode [ 235.248491][T14448] bridge1: entered promiscuous mode [ 235.266199][T14448] bridge1: entered allmulticast mode [ 235.286217][T14448] team0: Port device bridge1 added [ 235.298880][T14449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2973'. [ 235.307980][T14449] bridge_slave_1: left allmulticast mode [ 235.329197][T14449] bridge_slave_1: left promiscuous mode [ 235.334926][T14449] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.344464][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2975'. [ 235.360088][T14449] bridge_slave_0: left allmulticast mode [ 235.375964][T14449] bridge_slave_0: left promiscuous mode [ 235.384671][T14449] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.709006][ T3939] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 236.318784][T14523] netlink: 'syz.9.3009': attribute type 1 has an invalid length. [ 236.352037][T14523] bond1: entered promiscuous mode [ 236.363021][T14523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.378700][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3009'. [ 236.427135][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3009'. [ 236.462698][T14523] bond1: (slave bridge1): making interface the new active one [ 236.492478][T14523] bridge1: entered promiscuous mode [ 236.501533][T14523] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 236.585823][T14558] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3024'. [ 236.918796][ T28] kauditd_printk_skb: 500 callbacks suppressed [ 236.918816][ T28] audit: type=1400 audit(1775361444.673:3794): avc: denied { open } for pid=14579 comm="syz.8.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 236.968593][ T28] audit: type=1400 audit(1775361444.703:3795): avc: denied { prog_load } for pid=14579 comm="syz.8.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 237.027688][ T28] audit: type=1400 audit(1775361444.703:3796): avc: denied { create } for pid=14579 comm="syz.8.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 237.092408][ T28] audit: type=1400 audit(1775361444.703:3797): avc: denied { create } for pid=14579 comm="syz.8.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 237.166586][ T28] audit: type=1400 audit(1775361444.763:3798): avc: denied { create } for pid=14581 comm="syz.8.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 237.187867][ T28] audit: type=1400 audit(1775361444.763:3799): avc: denied { map_create } for pid=14581 comm="syz.8.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 237.226186][ T28] audit: type=1400 audit(1775361444.763:3800): avc: denied { prog_load } for pid=14581 comm="syz.8.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 237.278665][ T28] audit: type=1400 audit(1775361444.763:3801): avc: denied { prog_load } for pid=14581 comm="syz.8.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 237.345250][ T28] audit: type=1400 audit(1775361444.823:3802): avc: denied { map_create } for pid=14583 comm="syz.8.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 237.385030][ T28] audit: type=1400 audit(1775361444.823:3803): avc: denied { mounton } for pid=14583 comm="syz.8.3034" path="/476/file0" dev="tmpfs" ino=2476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=0 [ 237.421694][T14588] syzkaller0: entered promiscuous mode [ 237.447856][T14588] syzkaller0: entered allmulticast mode [ 239.532556][T14725] netlink: 'syz.8.3092': attribute type 8 has an invalid length. [ 239.548815][T14725] __nla_validate_parse: 4 callbacks suppressed [ 239.548836][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3092'. [ 239.584329][T14732] netlink: 'syz.8.3092': attribute type 8 has an invalid length. [ 239.585899][T14725] bond0: entered promiscuous mode [ 239.599830][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3092'. [ 239.618446][T14725] bond_slave_0: entered promiscuous mode [ 239.626388][T14725] bond_slave_1: entered promiscuous mode [ 239.641222][T14725] gretap0: entered promiscuous mode [ 239.662092][T14725] batadv0: entered promiscuous mode [ 239.674354][T14725] debugfs: 'hsr1' already exists in 'hsr' [ 239.688924][T14725] Cannot create hsr debugfs directory [ 239.699852][T14725] hsr1: entered promiscuous mode [ 239.827300][T14746] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3101'. [ 239.863421][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3101'. [ 239.915440][T14753] netlink: 'syz.9.3104': attribute type 1 has an invalid length. [ 241.868323][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3130'. [ 241.902335][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3130'. [ 241.944517][ T28] kauditd_printk_skb: 265 callbacks suppressed [ 241.944552][ T28] audit: type=1400 audit(1775361449.693:4069): avc: denied { read write } for pid=10643 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.001179][ T28] audit: type=1400 audit(1775361449.743:4070): avc: denied { create } for pid=14825 comm="syz.6.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 242.001349][T14826] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.067718][ T28] audit: type=1400 audit(1775361449.803:4071): avc: denied { read write } for pid=13264 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.110215][ T28] audit: type=1400 audit(1775361449.843:4072): avc: denied { create } for pid=14827 comm="syz.1.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 242.165971][ T28] audit: type=1400 audit(1775361449.893:4073): avc: denied { create } for pid=14827 comm="syz.1.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 242.194616][T14834] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3136'. [ 242.213980][T14834] netlink: 'syz.7.3136': attribute type 7 has an invalid length. [ 242.224891][ T28] audit: type=1400 audit(1775361449.913:4074): avc: denied { read write } for pid=13264 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.237438][T14834] netlink: 'syz.7.3136': attribute type 8 has an invalid length. [ 242.261309][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3136'. [ 242.299537][ T28] audit: type=1400 audit(1775361449.933:4075): avc: denied { read write } for pid=8808 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.382595][ T28] audit: type=1400 audit(1775361449.943:4076): avc: denied { create } for pid=14833 comm="syz.7.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 242.454382][ T28] audit: type=1400 audit(1775361449.943:4077): avc: denied { create } for pid=14833 comm="syz.7.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 242.500700][ T28] audit: type=1400 audit(1775361449.943:4078): avc: denied { allowed } for pid=14833 comm="syz.7.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 242.516773][T14853] netlink: 'syz.6.3144': attribute type 4 has an invalid length. [ 242.599082][T14853] netlink: 'syz.6.3144': attribute type 4 has an invalid length. [ 242.742170][T14872] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3152'. [ 242.779315][T14872] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.792125][T14872] netlink: 'syz.7.3152': attribute type 1 has an invalid length. [ 243.047226][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3175'. [ 243.747472][T14969] ================================================================== [ 243.755882][T14969] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 243.762939][T14969] [ 243.765281][T14969] read-write to 0xffff888147def36c of 4 bytes by task 14968 on cpu 0: [ 243.773443][T14969] fifo_open+0x86/0x5d0 [ 243.777634][T14969] do_dentry_open+0x4ca/0xa90 [ 243.782607][T14969] vfs_open+0x37/0x1e0 [ 243.786711][T14969] path_openat+0x1b70/0x2050 [ 243.791319][T14969] do_file_open+0x16c/0x290 [ 243.795850][T14969] do_sys_openat2+0x94/0x130 [ 243.800458][T14969] __x64_sys_creat+0x65/0x90 [ 243.805106][T14969] x64_sys_call+0x2ea0/0x3020 [ 243.809828][T14969] do_syscall_64+0x12c/0x370 [ 243.814460][T14969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.820386][T14969] [ 243.822736][T14969] read to 0xffff888147def36c of 4 bytes by task 14969 on cpu 1: [ 243.830415][T14969] wait_for_partner+0x117/0x1e0 [ 243.835315][T14969] fifo_open+0x4b1/0x5d0 [ 243.839577][T14969] do_dentry_open+0x4ca/0xa90 [ 243.844278][T14969] vfs_open+0x37/0x1e0 [ 243.848454][T14969] path_openat+0x1b70/0x2050 [ 243.853073][T14969] do_file_open+0x16c/0x290 [ 243.857674][T14969] file_open_name+0xfa/0x120 [ 243.862303][T14969] __se_sys_acct+0x8c/0x500 [ 243.866828][T14969] __x64_sys_acct+0x1f/0x30 [ 243.871374][T14969] x64_sys_call+0x2e7f/0x3020 [ 243.876173][T14969] do_syscall_64+0x12c/0x370 [ 243.880804][T14969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.886902][T14969] [ 243.889243][T14969] value changed: 0x00000001 -> 0x00000002 [ 243.895235][T14969] [ 243.897574][T14969] Reported by Kernel Concurrency Sanitizer on: [ 243.903825][T14969] CPU: 1 UID: 0 PID: 14969 Comm: syz.9.3196 Not tainted syzkaller #0 PREEMPT(full) [ 243.913204][T14969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.923710][T14969] ==================================================================