last executing test programs: 7m21.875165187s ago: executing program 32 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r1, 0x382b59769e38e0c7, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 7m13.6497301s ago: executing program 33 (id=642): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 6m40.742742483s ago: executing program 34 (id=1569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "06"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 6m19.764657576s ago: executing program 35 (id=2106): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x86}, &(0x7f0000000100)=0x90) 6m18.56415164s ago: executing program 36 (id=2125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x150, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x9, 0x0, 0x9, 0xe, 0xd, 0x19, 0x1}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x18014041}, 0x800) 6m8.87496096s ago: executing program 37 (id=2003): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) 5m2.484071912s ago: executing program 38 (id=4210): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 4m51.024159094s ago: executing program 39 (id=4481): setresuid(0x0, 0xee01, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2404c042) 4m28.07400827s ago: executing program 40 (id=5099): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/201, 0xc9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x1200, 0x0, 0x0, 0x0, 0x0, 0x0) 3m55.190009134s ago: executing program 41 (id=5993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="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"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3m31.114033703s ago: executing program 42 (id=6523): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_io_uring_setup(0x838, &(0x7f00000000c0)={0x0, 0x1998, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x39a904175f124fbf}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m11.465600519s ago: executing program 4 (id=6926): unshare(0x24020400) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0xa, 0x1, 0x0, r1}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x12}, 0x94) 3m11.344895755s ago: executing program 4 (id=6929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0xfff1}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 3m11.25094967s ago: executing program 4 (id=6931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3m11.103225697s ago: executing program 4 (id=6936): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 3m11.013968071s ago: executing program 4 (id=6939): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x194f, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) recvfrom(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) 3m10.863598818s ago: executing program 4 (id=6943): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 3m10.860794758s ago: executing program 43 (id=6943): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2m21.377168371s ago: executing program 6 (id=8023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 2m21.345398953s ago: executing program 6 (id=8024): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000540)='net/udp6\x00') socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 2m21.266040967s ago: executing program 6 (id=8026): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x1000000, &(0x7f00000009c0)=ANY=[], 0x1, 0x294, &(0x7f0000006080)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) 2m21.218092349s ago: executing program 6 (id=8027): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000004c0)='./file0/file0\x00') 2m21.19987042s ago: executing program 6 (id=8028): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000040)=[{0x0, 0x85fd, 0x1000}], 0x1) semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) 2m20.918040093s ago: executing program 6 (id=8037): openat$pidfd(0xffffffffffffff9c, 0x0, 0x80800, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}], 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 2m20.917682353s ago: executing program 44 (id=8037): openat$pidfd(0xffffffffffffff9c, 0x0, 0x80800, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}], 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 2m15.929426024s ago: executing program 7 (id=8125): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x0) 2m15.866207497s ago: executing program 7 (id=8126): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 2m15.789705961s ago: executing program 7 (id=8127): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x1, 0x0, 0x0, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 2m15.732768163s ago: executing program 7 (id=8129): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m15.645552407s ago: executing program 7 (id=8132): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x8fa, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_UNLINKAT={0x24, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 2m14.938241422s ago: executing program 7 (id=8146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x14f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r1, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) 2m14.938046272s ago: executing program 45 (id=8146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x14f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r1, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) 31.627913187s ago: executing program 0 (id=10430): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x124) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xf000, 0x863, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 31.588440779s ago: executing program 0 (id=10431): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 31.544430451s ago: executing program 0 (id=10433): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b80000001500e99900"], 0xb8}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 31.54405248s ago: executing program 0 (id=10434): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40000, 0x0) 31.526993541s ago: executing program 0 (id=10435): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 31.462161495s ago: executing program 0 (id=10436): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x7, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x40008c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 31.461841035s ago: executing program 46 (id=10436): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x7, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x40008c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 21.149129992s ago: executing program 8 (id=10650): unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000540)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 21.061839176s ago: executing program 8 (id=10652): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x140) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) 21.057815476s ago: executing program 8 (id=10653): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 20.871532285s ago: executing program 8 (id=10654): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) rmdir(&(0x7f0000000100)='./control\x00') 20.594522668s ago: executing program 8 (id=10656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xf2ff}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 19.843043124s ago: executing program 8 (id=10668): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) 19.831601485s ago: executing program 47 (id=10668): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) 2.029923632s ago: executing program 1 (id=10978): setresuid(0x0, 0xee00, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x0, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 1.995506454s ago: executing program 1 (id=10980): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) fsopen(0x0, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.136861555s ago: executing program 1 (id=10993): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffe0, 0xb}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[], 0x5c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240), 0x8) 762.719023ms ago: executing program 2 (id=10994): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000580)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x21, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0xe0, 0x21, 0x0, 0x0) 677.461537ms ago: executing program 5 (id=10999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000001000ffff27a87000fedb000000000000", @ANYRES32=0x0, @ANYBLOB="170c0000000000005000128009000100766c616e0000000040000280340003800c00010001000000008000000c000100f1ffffff0c0000000c00010001000000050000000c0001000100000040000000060001000400000008000500", @ANYRES32=r4, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 648.154559ms ago: executing program 2 (id=11000): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) 569.865922ms ago: executing program 9 (id=11003): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r2, 0x3}, 0x8) 567.146672ms ago: executing program 3 (id=11004): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xc, 0x1, 0x3, [{@local, 0x7ff}, {@private=0xa010102, 0x17}, {@remote, 0x8000}]}]}}}], 0x30}, 0x0) 559.187113ms ago: executing program 9 (id=11005): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001"], 0x870}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 522.466595ms ago: executing program 3 (id=11006): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004580)=@delchain={0x24, 0x28, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 479.121207ms ago: executing program 5 (id=11007): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r2}, 0x38) 478.563527ms ago: executing program 9 (id=11008): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x6d499, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x5, 0x3fff8000}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000940)=""/4096) 449.129078ms ago: executing program 3 (id=11009): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x2a7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) io_setup(0x3, &(0x7f0000008240)) 432.297929ms ago: executing program 9 (id=11010): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 422.50364ms ago: executing program 5 (id=11011): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000340), &(0x7f0000000440)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 317.906565ms ago: executing program 3 (id=11012): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 312.703325ms ago: executing program 5 (id=11013): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf251000000008000300", @ANYRES32=r1, @ANYBLOB="08003a000000000008000600", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 259.177297ms ago: executing program 2 (id=11014): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1) 258.807998ms ago: executing program 1 (id=11015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) 238.910539ms ago: executing program 3 (id=11016): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x794, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdfffff, 0x4, @perf_config_ext={0xff, 0x30000000000}, 0x12132, 0x10000, 0xfffffffe, 0x3, 0x86, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 193.184221ms ago: executing program 1 (id=11017): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="3361849159277db3032c8dd904f0f380b72688ccbd", 0x15}, {&(0x7f0000000280)="258631a5a41a47da539cf907f57998636fb435af75589f57d89c952a2f12a6d8aabd270c54c7d6d4dfa6c2ef6ab028767e2e4f62048f3c0ef0584681b2e0fe1bd05c667208756f3de0c00995454c5c9048b1ba9a99d4e0de89ee5446a13dddf231cedd92498b2a", 0x67}, {&(0x7f0000000300)="8804b21c97dae23cf34f5543b4f4d2179fe43dd45c60a048e8e6f28ebba98316716e7bebb1dc54724c8d69ee22406ad693b36abce10b36a5884b59f73cdad80072676fd640eb4baedc13f363edd2ba", 0x4f}], 0x3}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f00000004c0)="fecb85a434a5502ead508c3a855d1247e06105fb8ac57edf9094aa0c15b09901f48fc9d276a1d209a61c09afb44feeb3f355ce378f3ee105203dcbf4d127b2fb13c10a7fd6abc98f7b2aa6b8947381d03364ae1a9c018d8ee870ceb8d77d24", 0x5f}, {&(0x7f0000000540)="31bb06bf473c3225069cb1e2564b9f60e4dd6c7e83669e4d181ad0baec4766e6236ad935a964298bdf1ae404d3b47c1bd4f470b8cab903c6b8172a21f3d648b597ca7a0f9da9b2186d8a41b1a99386cce267fa859302cd", 0x57}], 0x2}}], 0x2, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 192.665821ms ago: executing program 5 (id=11018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 172.023772ms ago: executing program 1 (id=11019): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x94, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 171.559892ms ago: executing program 9 (id=11020): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x40848c0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x46, r3}) 168.884972ms ago: executing program 2 (id=11021): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) close(r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '/)+:^,'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) 94.135866ms ago: executing program 9 (id=11022): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)="e3", 0x1}], 0x1}, 0x44040) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 93.935645ms ago: executing program 2 (id=11023): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ec85", 0x2}], 0x1, 0xffff, 0xfffffffc, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) fallocate(r2, 0x20, 0x4000, 0x3000000) 17.617579ms ago: executing program 3 (id=11024): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 17.112909ms ago: executing program 2 (id=11034): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r2, 0x3, 0x80000}) 0s ago: executing program 5 (id=11025): mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r1, 0x787) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200), 0x2004402, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) kernel console output (not intermixed with test programs): ext4 filesystem being mounted at /512/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 387.984892][T21734] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 388.031865][T28602] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 388.058190][T28606] netlink: 'syz.5.8909': attribute type 20 has an invalid length. [ 388.066058][T28606] netlink: 'syz.5.8909': attribute type 21 has an invalid length. [ 388.156319][ T28] audit: type=1326 audit(1774616929.870:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28607 comm="syz.5.8910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 388.236294][ T28] audit: type=1326 audit(1774616929.870:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28607 comm="syz.5.8910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 388.298363][ T28] audit: type=1326 audit(1774616929.870:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28607 comm="syz.5.8910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 388.581439][T28632] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 388.608191][T28632] vhci_hcd vhci_hcd.2: default hub control req: 030f vfffa i0001 l0 [ 389.656310][T28656] loop5: detected capacity change from 0 to 512 [ 389.671735][T28656] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 389.709434][T28656] EXT4-fs (loop5): 1 truncate cleaned up [ 389.715461][T28656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.750496][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 389.750535][ T28] audit: type=1400 audit(1774616931.470:5228): avc: denied { setattr } for pid=28655 comm="syz.5.8930" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 389.805947][T21734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.863792][ T28] audit: type=1400 audit(1774616931.540:5229): avc: denied { create } for pid=28668 comm="syz.1.8937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 389.892219][ T28] audit: type=1400 audit(1774616931.550:5230): avc: denied { sys_admin } for pid=28668 comm="syz.1.8937" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 389.925031][ T28] audit: type=1400 audit(1774616931.560:5231): avc: denied { remount } for pid=28668 comm="syz.1.8937" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 390.078764][ T28] audit: type=1400 audit(1774616931.800:5232): avc: denied { listen } for pid=28684 comm="syz.5.8943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 390.160355][ T28] audit: type=1400 audit(1774616931.820:5233): avc: denied { accept } for pid=28684 comm="syz.5.8943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 390.669971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.691764][ T28] audit: type=1400 audit(1774616932.410:5234): avc: denied { mounton } for pid=28698 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 391.048632][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.059859][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.071447][T28696] __nla_validate_parse: 1 callbacks suppressed [ 391.071533][T28696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8957'. [ 391.089266][T28696] netlink: 'syz.2.8957': attribute type 26 has an invalid length. [ 391.108952][T28704] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 391.136552][T28696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8957'. [ 391.146303][T28696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8957'. [ 391.157341][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.167620][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.177855][T28696] netlink: 'syz.2.8957': attribute type 26 has an invalid length. [ 391.187089][T28696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8957'. [ 391.214955][T28715] loop5: detected capacity change from 0 to 256 [ 391.238054][T28715] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 391.270890][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.290962][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.381236][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.398280][ T28] audit: type=1400 audit(1774616933.100:5235): avc: denied { remount } for pid=28725 comm="syz.3.8958" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 391.418138][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.539855][T28733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=28733 comm=syz.3.8961 [ 391.570191][ T28] audit: type=1400 audit(1774616933.290:5236): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 391.587443][T28698] chnl_net:caif_netlink_parms(): no params data found [ 391.604828][ T28] audit: type=1400 audit(1774616933.290:5237): avc: denied { search } for pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.653948][ T12] bridge_slave_1: left allmulticast mode [ 391.661874][ T12] bridge_slave_1: left promiscuous mode [ 391.667687][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.688239][ T12] bridge_slave_0: left allmulticast mode [ 391.693907][ T12] bridge_slave_0: left promiscuous mode [ 391.709555][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.735879][T28755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8963'. [ 391.859076][ T12] dvmrp0 (unregistering): left allmulticast mode [ 391.940044][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.951020][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.960627][ T12] bond0 (unregistering): Released all slaves [ 391.968260][ T12] bond1 (unregistering): Released all slaves [ 391.995953][T28765] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 392.013377][T28766] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 392.110484][ T12] hsr_slave_0: left promiscuous mode [ 392.120308][ T12] hsr_slave_1: left promiscuous mode [ 392.126711][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.134693][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.157603][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.165127][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.182753][ T12] veth1_macvtap: left promiscuous mode [ 392.188869][ T12] veth0_macvtap: left promiscuous mode [ 392.198177][ T12] veth1_vlan: left promiscuous mode [ 392.208964][ T12] veth0_vlan: left promiscuous mode [ 392.386132][ T12] team0 (unregistering): Port device team_slave_1 removed [ 392.420561][ T12] team0 (unregistering): Port device team_slave_0 removed [ 392.482020][T28698] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.495970][T28698] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.513066][T28698] bridge_slave_0: entered allmulticast mode [ 392.519994][T28698] bridge_slave_0: entered promiscuous mode [ 392.529002][T28774] netlink: 'syz.2.8969': attribute type 12 has an invalid length. [ 392.537329][T28774] netlink: 'syz.2.8969': attribute type 2 has an invalid length. [ 392.545797][T28774] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8969'. [ 392.595828][T28804] team0: Port device bond0 removed [ 392.601568][T28810] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8977'. [ 392.623167][T28804] bridge_slave_0: left allmulticast mode [ 392.640729][T28804] bridge_slave_0: left promiscuous mode [ 392.649667][T28804] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.659656][T28804] bridge_slave_1: left allmulticast mode [ 392.665319][T28804] bridge_slave_1: left promiscuous mode [ 392.671498][T28804] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.682010][T28804] bond0: (slave bond_slave_0): Releasing backup interface [ 392.702116][T28804] bond0: (slave bond_slave_1): Releasing backup interface [ 392.736037][T28804] team0: Port device team_slave_0 removed [ 392.758766][T28804] team0: Port device team_slave_1 removed [ 392.788641][T28698] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.795972][T28698] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.804290][T28698] bridge_slave_1: entered allmulticast mode [ 392.813003][T28698] bridge_slave_1: entered promiscuous mode [ 392.825173][ T10] syz1: Port: 1 Link DOWN [ 392.829749][T28811] netlink: 'syz.0.8978': attribute type 5 has an invalid length. [ 392.871775][T28698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.889362][T28821] hsr0: entered promiscuous mode [ 392.902939][T28821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8981'. [ 392.932852][T28698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.002761][T28698] team0: Port device team_slave_0 added [ 393.050598][T28698] team0: Port device team_slave_1 added [ 393.130878][T28837] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8985'. [ 393.152113][T28698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.168973][T28840] loop5: detected capacity change from 0 to 1024 [ 393.175487][T28698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.204721][T28843] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8985'. [ 393.213804][T28698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.235066][T28840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.248932][T28698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.255868][T28698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.281974][T28698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.311155][T28840] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 393.330716][T28698] hsr_slave_0: entered promiscuous mode [ 393.336968][T28698] hsr_slave_1: entered promiscuous mode [ 393.416912][T28863] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 393.448244][T28863] EXT4-fs (loop5): This should not happen!! Data will be lost [ 393.448244][T28863] [ 393.478472][T28863] EXT4-fs (loop5): Total free blocks count 0 [ 393.484575][T28863] EXT4-fs (loop5): Free/Dirty block details [ 393.492815][T28863] EXT4-fs (loop5): free_blocks=20480 [ 393.511435][T28863] EXT4-fs (loop5): dirty_blocks=144 [ 393.516732][T28863] EXT4-fs (loop5): Block reservation details [ 393.523374][T28863] EXT4-fs (loop5): i_reserved_data_blocks=9 [ 393.712859][T28698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 393.731979][T28698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 393.749827][T28698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 393.770614][T28698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 393.793162][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 2048 with error 28 [ 393.850014][T28698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.864557][T28698] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.879498][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.886587][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.912883][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.920057][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.952221][T28698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.044074][T28698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.134964][T28698] veth0_vlan: entered promiscuous mode [ 394.147007][T28698] veth1_vlan: entered promiscuous mode [ 394.185873][T28698] veth0_macvtap: entered promiscuous mode [ 394.200734][T28698] veth1_macvtap: entered promiscuous mode [ 394.213503][T28698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.225507][T28698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.237486][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.266219][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.276858][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.287009][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.306571][T28953] netlink: 'syz.1.8948': attribute type 1 has an invalid length. [ 394.690494][T28991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.820297][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 394.820325][ T28] audit: type=1400 audit(1774616936.540:5292): avc: denied { map } for pid=29006 comm="syz.5.9007" path="socket:[92367]" dev="sockfs" ino=92367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 395.304446][T29034] Invalid argument reading file caps for ./file0 [ 395.359863][T29041] loop5: detected capacity change from 0 to 256 [ 395.377569][T29041] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 395.401728][ T28] audit: type=1400 audit(1774616937.120:5293): avc: denied { setopt } for pid=29042 comm="syz.2.9020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 395.944667][ T28] audit: type=1400 audit(1774616937.660:5294): avc: denied { write } for pid=29076 comm="syz.1.9036" path="socket:[93333]" dev="sockfs" ino=93333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 396.248345][T29088] veth0: entered promiscuous mode [ 396.280040][T29088] __nla_validate_parse: 3 callbacks suppressed [ 396.280103][T29088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9041'. [ 396.333514][T29088] veth0 (unregistering): left promiscuous mode [ 396.340029][ T28] audit: type=1400 audit(1774616938.050:5295): avc: denied { sqpoll } for pid=29089 comm="syz.0.9043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 396.755371][ T28] audit: type=1400 audit(1774616938.470:5296): avc: denied { connect } for pid=29123 comm="syz.3.9058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 396.929006][ T28] audit: type=1400 audit(1774616938.650:5297): avc: denied { mount } for pid=29136 comm="syz.5.9063" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 396.962660][ T28] audit: type=1400 audit(1774616938.680:5298): avc: denied { search } for pid=29136 comm="syz.5.9063" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 397.006080][ T28] audit: type=1400 audit(1774616938.680:5299): avc: denied { mounton } for pid=29136 comm="syz.5.9063" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 397.028199][ T28] audit: type=1400 audit(1774616938.710:5300): avc: denied { unmount } for pid=21734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 397.029005][T16743] Bluetooth: hci0: Frame reassembly failed (-84) [ 397.341800][ T28] audit: type=1400 audit(1774616939.060:5301): avc: denied { unlink } for pid=15861 comm="syz-executor" name="file0" dev="tmpfs" ino=4694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 398.436973][T29212] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.9096'. [ 398.527684][T29223] tipc: Started in network mode [ 398.534996][T29223] tipc: Node identity , cluster identity 4711 [ 398.696255][T29244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9111'. [ 398.705205][T29244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9111'. [ 398.714674][T29244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9111'. [ 398.729502][ T917] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.729500][T29244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9111'. [ 398.746426][ T917] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.752295][T29244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9111'. [ 398.765260][T29244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9111'. [ 398.768458][ T917] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.787757][T16732] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.932057][T29263] team0: Device vxcan3 is of different type [ 398.970084][T29266] netlink: 'syz.0.9121': attribute type 15 has an invalid length. [ 398.988360][T29266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9121'. [ 399.019835][T29266] netlink: 'syz.0.9121': attribute type 15 has an invalid length. [ 399.020155][ T117] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 399.036768][T29266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9121'. [ 399.062675][ T117] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 399.068240][T19990] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 399.071697][ T6005] Bluetooth: hci0: command 0x1003 tx timeout [ 399.103566][ T117] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 399.127714][ T117] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 399.166107][T29272] netlink: 'syz.5.9124': attribute type 1 has an invalid length. [ 399.190597][T29272] netlink: 'syz.5.9124': attribute type 2 has an invalid length. [ 399.339207][T26330] kernel write not supported for file bpf-prog (pid: 26330 comm: kworker/1:14) [ 399.439966][T29284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 399.765387][T29317] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 399.936254][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 399.936285][ T28] audit: type=1400 audit(1774616941.650:5331): avc: denied { bind } for pid=29331 comm="syz.2.9149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 399.978067][ T28] audit: type=1400 audit(1774616941.690:5332): avc: denied { write } for pid=29331 comm="syz.2.9149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 400.000409][ T28] audit: type=1400 audit(1774616941.690:5333): avc: denied { read } for pid=29331 comm="syz.2.9149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 400.437999][T29341] loop5: detected capacity change from 0 to 32768 [ 400.891057][ T28] audit: type=1400 audit(1774616942.610:5334): avc: denied { setopt } for pid=29407 comm="syz.2.9184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 401.069743][T29426] netlink: 'syz.0.9192': attribute type 21 has an invalid length. [ 401.087154][T29426] IPv6: NLM_F_CREATE should be specified when creating new route [ 401.101495][T29426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.108751][T29426] IPv6: NLM_F_CREATE should be set when creating new route [ 401.115948][T29426] IPv6: NLM_F_CREATE should be set when creating new route [ 401.123200][T29426] IPv6: NLM_F_CREATE should be set when creating new route [ 401.202269][ T28] audit: type=1326 audit(1774616942.920:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29435 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 401.269556][ T28] audit: type=1326 audit(1774616942.920:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29435 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 401.320326][ T28] audit: type=1326 audit(1774616942.920:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29435 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 401.348184][T29443] netlink: 'syz.0.9199': attribute type 64 has an invalid length. [ 401.358671][ T28] audit: type=1326 audit(1774616942.960:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29435 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 401.383423][T29443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29443 comm=syz.0.9199 [ 401.396144][T29443] netlink: 'syz.0.9199': attribute type 64 has an invalid length. [ 401.404176][ T28] audit: type=1326 audit(1774616942.960:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29435 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 401.450469][ T28] audit: type=1326 audit(1774616942.960:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29441 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe716c4cfce code=0x7ffc0000 [ 401.509596][T29462] tipc: Started in network mode [ 401.521037][T29462] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 401.530301][T29462] tipc: New replicast peer: fe88:0000:0000:0000:0000:0000:0000:0102 [ 401.538456][T29462] tipc: Enabled bearer , priority 10 [ 401.547739][T29464] ip6gre1: entered promiscuous mode [ 401.631002][T29474] loop5: detected capacity change from 0 to 128 [ 401.640614][T29474] FAT-fs (loop5): bogus number of FAT sectors [ 401.646691][T29474] FAT-fs (loop5): Can't find a valid FAT filesystem [ 402.412211][T29510] loop5: detected capacity change from 0 to 512 [ 402.440104][T29510] EXT4-fs (loop5): 1 truncate cleaned up [ 402.446191][T29510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.502912][T21734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.607661][T29521] team0: Port device vxcan3 added [ 402.658620][ T10] tipc: Node number set to 1 [ 402.788299][T29533] __nla_validate_parse: 1 callbacks suppressed [ 402.788317][T29533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9238'. [ 402.841980][T29535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9238'. [ 403.380163][T29580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9259'. [ 404.303099][T29665] netlink: 'syz.1.9275': attribute type 10 has an invalid length. [ 404.330721][T29665] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9275'. [ 404.353164][T29665] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 404.821436][T29715] team0: Device vxcan3 is of different type [ 405.730083][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 405.730101][ T28] audit: type=1401 audit(1774616947.370:5382): op=setxattr invalid_context=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 [ 405.877911][T29794] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.9301'. [ 406.054975][ T28] audit: type=1400 audit(1774616947.770:5383): avc: denied { read } for pid=29801 comm="syz.0.9305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 406.134005][T29810] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9308'. [ 406.298757][ T28] audit: type=1326 audit(1774616948.020:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29819 comm="syz.2.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde5b9c799 code=0x7ffc0000 [ 406.350544][ T28] audit: type=1326 audit(1774616948.050:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29819 comm="syz.2.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde5b9c799 code=0x7ffc0000 [ 406.400399][ T28] audit: type=1326 audit(1774616948.050:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29819 comm="syz.2.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbde5b9c799 code=0x7ffc0000 [ 406.424138][ T28] audit: type=1326 audit(1774616948.050:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29819 comm="syz.2.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde5b9c799 code=0x7ffc0000 [ 406.465888][ T28] audit: type=1326 audit(1774616948.050:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29819 comm="syz.2.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde5b9c799 code=0x7ffc0000 [ 406.490616][ T28] audit: type=1326 audit(1774616948.050:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29819 comm="syz.2.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fbde5b9c799 code=0x7ffc0000 [ 406.518019][ T28] audit: type=1326 audit(1774616948.050:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29819 comm="syz.2.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde5b9c799 code=0x7ffc0000 [ 406.543314][ T28] audit: type=1326 audit(1774616948.050:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29819 comm="syz.2.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde5b9c799 code=0x7ffc0000 [ 409.353046][T29952] netlink: 'syz.0.9368': attribute type 1 has an invalid length. [ 409.436413][T29952] bond1: entered promiscuous mode [ 409.468292][T29952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.531613][T29957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.566991][T29957] bond1: (slave bond2): making interface the new active one [ 409.584677][T29957] bond2: entered promiscuous mode [ 409.591961][T29957] bond1: (slave bond2): Enslaving as an active interface with an up link [ 410.492506][T29997] loop5: detected capacity change from 0 to 512 [ 410.518933][T29997] EXT4-fs: Ignoring removed mblk_io_submit option [ 410.543879][T29997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 410.591425][T29997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.629272][T29997] ext4 filesystem being mounted at /600/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 410.761766][T21734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.883226][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 410.883241][ T28] audit: type=1400 audit(1774616952.600:5400): avc: denied { read } for pid=30007 comm="syz.5.9388" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 411.155278][ T28] audit: type=1400 audit(1774616952.870:5401): avc: denied { mount } for pid=30017 comm="syz.2.9392" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 411.347025][T30023] netlink: 'syz.2.9404': attribute type 21 has an invalid length. [ 411.365287][T30023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9404'. [ 411.379647][T30023] netlink: 'syz.2.9404': attribute type 21 has an invalid length. [ 411.387776][T30023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9404'. [ 411.457082][T30036] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9399'. [ 411.468855][T30033] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 411.492322][T30033] bond4: (slave lo): Enslaving as an active interface with an up link [ 411.520325][T30033] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 411.679706][ T28] audit: type=1400 audit(1774616953.400:5402): avc: denied { create } for pid=30048 comm="syz.2.9406" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 411.781968][T30059] Invalid argument reading file caps for ./file0 [ 411.957117][T30083] netlink: 'syz.3.9420': attribute type 1 has an invalid length. [ 411.992860][T30083] netlink: 'syz.3.9420': attribute type 2 has an invalid length. [ 412.156000][ T28] audit: type=1400 audit(1774616953.870:5403): avc: denied { setopt } for pid=30090 comm="syz.5.9424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 412.951428][ T28] audit: type=1400 audit(1774616954.670:5404): avc: denied { map } for pid=30126 comm="syz.0.9440" path="socket:[95131]" dev="sockfs" ino=95131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 413.155937][ T28] audit: type=1326 audit(1774616954.870:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30137 comm="syz.3.9445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0bcc799 code=0x7ffc0000 [ 413.208191][ T28] audit: type=1326 audit(1774616954.870:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30137 comm="syz.3.9445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4da0bcc799 code=0x7ffc0000 [ 413.255856][ T28] audit: type=1326 audit(1774616954.910:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30137 comm="syz.3.9445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0bcc799 code=0x7ffc0000 [ 413.315957][ T28] audit: type=1326 audit(1774616954.910:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30137 comm="syz.3.9445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f4da0bcc799 code=0x7ffc0000 [ 413.389044][ T28] audit: type=1326 audit(1774616954.920:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30137 comm="syz.3.9445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0bcc799 code=0x7ffc0000 [ 413.493743][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9450'. [ 413.779624][T30178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9462'. [ 413.813058][ T3386] IPVS: starting estimator thread 0... [ 413.938386][T30181] IPVS: using max 2400 ests per chain, 120000 per kthread [ 414.081781][T30196] loop5: detected capacity change from 0 to 512 [ 414.113023][T30196] EXT4-fs: Ignoring removed bh option [ 414.125746][T30196] EXT4-fs: inline encryption not supported [ 414.144478][T30196] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 414.203116][T30196] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 414.248365][T30196] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9469: bg 0: block 248: padding at end of block bitmap is not set [ 414.282907][T30196] loop5: lost filesystem error report for type 5 error -117 [ 414.283136][T30196] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.9469: Failed to acquire dquot type 1 [ 414.290498][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 414.290526][ C0] EXT4-fs (loop5): last error at time 1774616956: ext4_validate_block_bitmap:441 [ 414.407278][T30196] loop5: lost filesystem error report for type 5 error -117 [ 414.407769][T30196] EXT4-fs (loop5): 1 truncate cleaned up [ 414.431673][T30196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 414.471514][T30217] netlink: 'syz.1.9478': attribute type 1 has an invalid length. [ 414.499484][T21734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 414.512061][T16743] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:14: Failed to release dquot type 1 [ 414.531428][T16743] loop5: lost filesystem error report for type 5 error -117 [ 414.911080][T30231] syz_tun: entered allmulticast mode [ 414.939478][T30230] syz_tun: left allmulticast mode [ 415.126737][T30242] 9p: Unknown uid 00000000004294967295 [ 415.613938][T30273] loop5: detected capacity change from 0 to 512 [ 416.076358][T30305] netlink: 'syz.2.9516': attribute type 8 has an invalid length. [ 416.107028][T30305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9516'. [ 416.139166][T30305] bond0: entered promiscuous mode [ 416.155670][T30305] bond_slave_0: entered promiscuous mode [ 416.175647][T30305] bond_slave_1: entered promiscuous mode [ 416.195299][T30305] gretap0: entered promiscuous mode [ 416.213768][T30305] batadv0: entered promiscuous mode [ 416.225026][T30305] debugfs: 'hsr0' already exists in 'hsr' [ 416.237201][T30305] Cannot create hsr debugfs directory [ 416.251547][T30305] hsr0: entered promiscuous mode [ 416.314970][T30313] ip6gre1: entered promiscuous mode [ 416.315054][ T28] kauditd_printk_skb: 393 callbacks suppressed [ 416.315067][ T28] audit: type=1400 audit(1774616958.030:5800): avc: denied { read } for pid=30316 comm="syz.3.9522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 416.328245][T30313] ip6gre1: entered allmulticast mode [ 416.398492][ T28] audit: type=1400 audit(1774616958.120:5801): avc: denied { ioctl } for pid=30316 comm="syz.3.9522" path="socket:[96488]" dev="sockfs" ino=96488 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 416.426990][T30319] xt_hashlimit: size too large, truncated to 1048576 [ 416.774970][T30336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9529'. [ 416.976793][ T28] audit: type=1400 audit(1774616958.690:5802): avc: denied { create } for pid=30346 comm="syz.1.9533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 417.018060][ T28] audit: type=1400 audit(1774616958.730:5803): avc: denied { bind } for pid=30346 comm="syz.1.9533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 417.064673][T30347] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 417.069549][ T28] audit: type=1400 audit(1774616958.730:5804): avc: denied { read } for pid=30346 comm="syz.1.9533" path="socket:[95879]" dev="sockfs" ino=95879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 417.361958][T30378] ip6gre3: entered allmulticast mode [ 417.591714][T30396] netlink: 'syz.1.9554': attribute type 8 has an invalid length. [ 417.622105][T30396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9554'. [ 417.656386][T30396] bond0: entered promiscuous mode [ 417.681640][T30396] bond_slave_0: entered promiscuous mode [ 417.703715][T30396] bond_slave_1: entered promiscuous mode [ 417.725951][T30396] gretap0: entered promiscuous mode [ 417.738426][ T28] audit: type=1400 audit(1774616959.460:5805): avc: denied { append } for pid=30408 comm="syz.5.9560" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 417.753724][T30396] batadv0: entered promiscuous mode [ 417.802129][T30396] hsr1: entered promiscuous mode [ 418.129983][T30454] netlink: 'syz.3.9570': attribute type 4 has an invalid length. [ 418.180391][T30464] netlink: 'syz.3.9570': attribute type 4 has an invalid length. [ 419.043807][T30586] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9587'. [ 419.053153][T30586] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9587'. [ 420.380625][T30641] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9608'. [ 420.401095][ T28] audit: type=1326 audit(1774616962.120:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30643 comm="syz.2.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde5b9c799 code=0x7ffc0000 [ 420.467983][ T28] audit: type=1326 audit(1774616962.120:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30643 comm="syz.2.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde5b9c799 code=0x7ffc0000 [ 420.530107][ T28] audit: type=1326 audit(1774616962.120:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30643 comm="syz.2.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde5b9c799 code=0x7ffc0000 [ 420.625439][ T28] audit: type=1326 audit(1774616962.120:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30643 comm="syz.2.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde5b9c799 code=0x7ffc0000 [ 420.860915][T30676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9624'. [ 420.886089][T30676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9624'. [ 420.897569][T30676] netlink: 'syz.1.9624': attribute type 6 has an invalid length. [ 420.926672][T30676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9624'. [ 420.950352][T30676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9624'. [ 420.972232][T30676] netlink: 'syz.1.9624': attribute type 6 has an invalid length. [ 421.482675][T16732] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x77 [ 421.569046][T30736] netlink: 'syz.1.9646': attribute type 4 has an invalid length. [ 421.601629][T30736] netlink: 'syz.1.9646': attribute type 4 has an invalid length. [ 421.769170][T30740] Invalid option length (63724) for dns_resolver key [ 421.864227][T30738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.050761][ T30] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.088181][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.114559][ T30] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.146328][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.207646][ T30] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.217379][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.226615][ T30] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.236484][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.301484][T30779] netlink: 'syz.0.9660': attribute type 4 has an invalid length. [ 422.349942][T30784] netlink: 'syz.0.9660': attribute type 4 has an invalid length. [ 422.465921][T30790] loop5: detected capacity change from 0 to 128 [ 423.481531][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 423.481545][ T28] audit: type=1400 audit(1774616965.200:5877): avc: denied { read } for pid=30830 comm="syz.3.9681" path="socket:[102303]" dev="sockfs" ino=102303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 423.711217][ T28] audit: type=1326 audit(1774616965.430:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30844 comm="syz.5.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 423.776161][ T28] audit: type=1326 audit(1774616965.430:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30844 comm="syz.5.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 423.814335][T30852] rdma_op ffff88812888f580 conn xmit_rdma 0000000000000000 [ 423.829780][ T28] audit: type=1326 audit(1774616965.430:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30844 comm="syz.5.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 423.878479][ T28] audit: type=1326 audit(1774616965.430:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30844 comm="syz.5.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 423.923349][ T28] audit: type=1326 audit(1774616965.430:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30844 comm="syz.5.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 423.980981][ T28] audit: type=1326 audit(1774616965.430:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30844 comm="syz.5.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 424.066624][ T28] audit: type=1326 audit(1774616965.430:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30844 comm="syz.5.9688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 424.335470][T16732] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x77 [ 424.391012][T30876] Invalid option length (63724) for dns_resolver key [ 424.417766][T30883] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.9703'. [ 424.771540][T30898] netlink: 'syz.1.9711': attribute type 7 has an invalid length. [ 425.006712][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.018001][T30898] netlink: 'syz.1.9711': attribute type 7 has an invalid length. [ 425.040320][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 425.068291][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.093729][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.121366][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 425.140255][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.159783][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.182507][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 425.200277][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.218342][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.237481][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 425.258997][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.399151][ T28] audit: type=1400 audit(1774616967.120:5885): avc: denied { shutdown } for pid=30909 comm="syz.0.9717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 425.744327][ T28] audit: type=1400 audit(1774616967.460:5886): avc: denied { shutdown } for pid=30922 comm="syz.1.9722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 425.958183][T16732] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.977918][T16732] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.008296][T16732] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.022555][T16732] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.040375][T16732] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.059279][T16732] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.078243][T16732] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.112404][T16732] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.327415][T30948] rdma_op ffff88810ab48980 conn xmit_rdma 0000000000000000 [ 426.513254][T30959] netlink: 1692 bytes leftover after parsing attributes in process `syz.2.9737'. [ 426.766653][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.798210][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.840162][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.871481][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.895252][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.909600][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.929031][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.949599][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.647078][T31025] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.9766'. [ 428.225803][T31047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.242196][T31047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.648870][T31055] ªªªªªª: renamed from vlan0 [ 428.806042][T31068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9781'. [ 428.871929][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 428.871944][ T28] audit: type=1400 audit(1774616970.590:5918): avc: denied { connect } for pid=31070 comm="syz.2.9782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 429.203298][ T28] audit: type=1326 audit(1774616970.920:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31082 comm="syz.2.9788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde5b9c799 code=0x7fc00000 [ 429.259462][T31102] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9796'. [ 429.850483][ T28] audit: type=1326 audit(1774616971.570:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31082 comm="syz.2.9788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbde5b96517 code=0x7fc00000 [ 430.010187][ T28] audit: type=1400 audit(1774616971.720:5921): avc: denied { mount } for pid=31109 comm="syz.1.9801" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 430.061560][T31111] 9pnet: p9_errstr2errno: server reported unknown error [ 430.711029][ T28] audit: type=1326 audit(1774616972.420:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31139 comm="syz.3.9811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0bcc799 code=0x7ffc0000 [ 430.769724][ T28] audit: type=1326 audit(1774616972.420:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31139 comm="syz.3.9811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0bcc799 code=0x7ffc0000 [ 430.821363][ T28] audit: type=1326 audit(1774616972.420:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31139 comm="syz.3.9811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0bcc799 code=0x7ffc0000 [ 430.864756][ T28] audit: type=1326 audit(1774616972.420:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31139 comm="syz.3.9811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0bcc799 code=0x7ffc0000 [ 430.889029][ T28] audit: type=1326 audit(1774616972.430:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31139 comm="syz.3.9811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4da0bcc799 code=0x7ffc0000 [ 430.920917][ T28] audit: type=1326 audit(1774616972.430:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31139 comm="syz.3.9811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da0bcc799 code=0x7ffc0000 [ 431.414924][T31178] netlink: 'syz.1.9828': attribute type 12 has an invalid length. [ 431.758190][T31213] netlink: 25 bytes leftover after parsing attributes in process `syz.0.9843'. [ 431.809486][T31214] netlink: 'syz.0.9843': attribute type 4 has an invalid length. [ 431.912611][T31225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9848'. [ 431.952857][T31225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9848'. [ 431.969239][T31225] netlink: 'syz.0.9848': attribute type 7 has an invalid length. [ 431.995674][T16743] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.006630][T31225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9848'. [ 432.021431][T16743] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.032831][T31225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9848'. [ 432.042387][T31225] netlink: 'syz.0.9848': attribute type 7 has an invalid length. [ 432.055988][T16743] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.071341][T16743] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.115931][T31238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9853'. [ 432.138399][T31238] IPv6: Can't replace route, no match found [ 432.434633][T31277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9868'. [ 433.034779][T31311] loop5: detected capacity change from 0 to 1764 [ 433.145544][T31317] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 437.270326][T31409] netlink: 'syz.1.9924': attribute type 1 has an invalid length. [ 437.298258][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 437.298278][ T28] audit: type=1400 audit(1774616979.000:5959): avc: denied { ioctl } for pid=31410 comm="syz.5.9926" path="socket:[106898]" dev="sockfs" ino=106898 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 437.353624][T31409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.381089][T31414] bond1: (slave geneve2): making interface the new active one [ 437.397450][T31414] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 437.467785][ T28] audit: type=1400 audit(1774616979.180:5960): avc: denied { connect } for pid=31427 comm="syz.2.9934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 437.494928][ T28] audit: type=1400 audit(1774616979.210:5961): avc: denied { bind } for pid=31427 comm="syz.2.9934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 437.504641][T31421] sch_tbf: burst 0 is lower than device ip6gre0 mtu (65485) ! [ 438.268590][T31489] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9958'. [ 438.285109][T31492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9959'. [ 439.928480][T31573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9999'. [ 439.959950][T31573] netlink: 'syz.2.9999': attribute type 1 has an invalid length. [ 439.977927][T31573] netlink: 'syz.2.9999': attribute type 2 has an invalid length. [ 440.093305][ T28] audit: type=1400 audit(1774616981.810:5962): avc: denied { append } for pid=31581 comm="syz.0.9992" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 440.242598][T31600] netlink: 'syz.0.9997': attribute type 1 has an invalid length. [ 440.292378][T31600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 440.333260][T31605] bond3: (slave geneve2): making interface the new active one [ 440.391302][T31605] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 440.411685][ T917] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.430762][ T917] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.464536][ T917] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.473781][ T917] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.693452][T31623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10006'. [ 440.708943][T31623] vxlan1: entered promiscuous mode [ 440.712119][T31622] loop5: detected capacity change from 0 to 512 [ 440.725333][T16732] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.736733][T31622] EXT4-fs: Ignoring removed nobh option [ 440.748962][T16732] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.772841][T16732] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.790339][T31622] EXT4-fs (loop5): 1 orphan inode deleted [ 440.791812][T16732] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.810954][T31622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.937572][T21734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.091764][ T28] audit: type=1326 audit(1774616982.810:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31641 comm="syz.1.10014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 441.160206][ T28] audit: type=1326 audit(1774616982.810:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31641 comm="syz.1.10014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 441.214574][ T28] audit: type=1326 audit(1774616982.840:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31641 comm="syz.1.10014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 441.263494][ T28] audit: type=1326 audit(1774616982.840:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31641 comm="syz.1.10014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 441.345353][ T28] audit: type=1326 audit(1774616982.840:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31641 comm="syz.1.10014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 441.400830][ T28] audit: type=1326 audit(1774616982.840:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31641 comm="syz.1.10014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe716c8c502 code=0x7ffc0000 [ 442.308610][T31689] netlink: 'syz.5.10035': attribute type 2 has an invalid length. [ 442.328087][T31689] netlink: 'syz.5.10035': attribute type 1 has an invalid length. [ 442.336053][T31689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10035'. [ 442.445628][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 442.445670][ T28] audit: type=1326 audit(1774616984.160:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31699 comm="syz.0.10038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dab74c799 code=0x7ffc0000 [ 442.499519][ T28] audit: type=1326 audit(1774616984.160:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31699 comm="syz.0.10038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dab74c799 code=0x7ffc0000 [ 442.544806][ T28] audit: type=1326 audit(1774616984.200:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31699 comm="syz.0.10038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dab74c799 code=0x7ffc0000 [ 442.606862][ T28] audit: type=1326 audit(1774616984.200:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31699 comm="syz.0.10038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dab74c799 code=0x7ffc0000 [ 442.657825][ T28] audit: type=1326 audit(1774616984.200:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31699 comm="syz.0.10038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6dab74c799 code=0x7ffc0000 [ 442.700818][T31725] netlink: 'syz.3.10050': attribute type 10 has an invalid length. [ 442.712835][ T28] audit: type=1326 audit(1774616984.200:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31699 comm="syz.0.10038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dab74c799 code=0x7ffc0000 [ 442.737667][ T28] audit: type=1326 audit(1774616984.200:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31699 comm="syz.0.10038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dab74c799 code=0x7ffc0000 [ 442.747992][T31725] team0: Port device dummy0 added [ 442.785675][ T28] audit: type=1326 audit(1774616984.200:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31699 comm="syz.0.10038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dab74c799 code=0x7ffc0000 [ 442.828677][ T28] audit: type=1326 audit(1774616984.200:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31699 comm="syz.0.10038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dab74c799 code=0x7ffc0000 [ 442.852586][T31725] netlink: 'syz.3.10050': attribute type 10 has an invalid length. [ 442.877355][ T28] audit: type=1326 audit(1774616984.200:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31699 comm="syz.0.10038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6dab74c799 code=0x7ffc0000 [ 442.901450][T31725] team0: Port device dummy0 removed [ 442.911887][T31725] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 442.925499][T31735] netlink: 'syz.0.10055': attribute type 7 has an invalid length. [ 442.933827][T31735] netlink: 'syz.0.10055': attribute type 7 has an invalid length. [ 443.185876][T31762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10068'. [ 443.564638][T31803] syzkaller1: entered promiscuous mode [ 443.570159][T31803] syzkaller1: entered allmulticast mode [ 446.920532][T31851] loop5: detected capacity change from 0 to 512 [ 446.927382][T31851] EXT4-fs: Ignoring removed oldalloc option [ 446.984358][T31851] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.10107: invalid indirect mapped block 4294967295 (level 1) [ 447.028633][T31851] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 447.028819][T31851] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.10107: invalid indirect mapped block 4294967295 (level 1) [ 447.051937][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 447.051965][ C0] EXT4-fs (loop5): initial error at time 1774616988: ext4_free_branches:1023: inode 11 [ 447.051998][ C0] EXT4-fs (loop5): last error at time 1774616988: ext4_free_branches:1023: inode 11 [ 447.078896][T31851] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 447.079131][T31851] EXT4-fs (loop5): 2 truncates cleaned up [ 447.094874][T31851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.134073][T21734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.542163][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 447.542180][ T28] audit: type=1326 audit(1774616989.260:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31900 comm="syz.5.10125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 447.608400][ T28] audit: type=1326 audit(1774616989.260:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31900 comm="syz.5.10125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 447.665446][ T28] audit: type=1326 audit(1774616989.300:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31900 comm="syz.5.10125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 447.708620][T31905] Invalid argument reading file caps for ./file0 [ 447.720580][ T28] audit: type=1326 audit(1774616989.300:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31900 comm="syz.5.10125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 447.757660][ T28] audit: type=1326 audit(1774616989.300:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31900 comm="syz.5.10125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 447.781821][ T28] audit: type=1326 audit(1774616989.300:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31900 comm="syz.5.10125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 447.807333][ T28] audit: type=1326 audit(1774616989.300:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31900 comm="syz.5.10125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 447.831259][ T28] audit: type=1326 audit(1774616989.300:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31900 comm="syz.5.10125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 447.855291][ T28] audit: type=1326 audit(1774616989.300:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31900 comm="syz.5.10125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 447.904786][ T28] audit: type=1326 audit(1774616989.300:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31900 comm="syz.5.10125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 447.998901][T31912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10130'. [ 448.476297][T31929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.713300][T31948] Invalid ELF header magic: != ELF [ 448.823687][T31903] kexec: Could not allocate control_code_buffer [ 449.135542][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10170'. [ 449.246871][T32006] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10174'. [ 449.773989][T16732] Bluetooth: hci0: Frame reassembly failed (-84) [ 450.044738][T32068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10201'. [ 450.088222][T32072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10203'. [ 451.059636][T32158] loop5: detected capacity change from 0 to 256 [ 451.788151][ T6005] Bluetooth: hci0: command 0x1003 tx timeout [ 451.788205][T19990] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 451.842870][T32205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.270928][T32226] netlink: 'syz.2.10265': attribute type 34 has an invalid length. [ 452.490836][T32243] loop5: detected capacity change from 0 to 256 [ 452.531525][T32243] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 453.048001][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 453.048019][ T28] audit: type=1326 audit(1774616994.760:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32264 comm="syz.1.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 453.113947][ T28] audit: type=1326 audit(1774616994.760:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32264 comm="syz.1.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 453.180500][ T28] audit: type=1326 audit(1774616994.770:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32264 comm="syz.1.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 453.214787][T32269] netlink: 'syz.1.10285': attribute type 12 has an invalid length. [ 453.222820][T32269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10285'. [ 453.247141][ T28] audit: type=1326 audit(1774616994.770:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32264 comm="syz.1.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 453.274124][T32269] netlink: 'syz.1.10285': attribute type 12 has an invalid length. [ 453.278359][T11755] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.298895][T32269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10285'. [ 453.302610][T11755] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.316838][ T28] audit: type=1326 audit(1774616994.790:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32264 comm="syz.1.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 453.334740][T11755] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.368412][T11755] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.377254][ T28] audit: type=1326 audit(1774616994.800:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32264 comm="syz.1.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 453.430631][ T28] audit: type=1326 audit(1774616994.800:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32264 comm="syz.1.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 453.454722][ T28] audit: type=1326 audit(1774616994.800:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32264 comm="syz.1.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 453.464037][T32276] xt_hashlimit: size too large, truncated to 1048576 [ 453.479223][ T28] audit: type=1326 audit(1774616994.800:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32264 comm="syz.1.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 453.508649][ T28] audit: type=1326 audit(1774616994.800:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32264 comm="syz.1.10282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 453.578632][T32277] loop5: detected capacity change from 0 to 128 [ 454.800914][ T30] kworker/u8:1: attempt to access beyond end of device [ 454.800914][ T30] loop5: rw=1, sector=145, nr_sectors = 40 limit=128 [ 454.816572][ T30] kworker/u8:1: attempt to access beyond end of device [ 454.816572][ T30] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 454.830537][ T30] kworker/u8:1: attempt to access beyond end of device [ 454.830537][ T30] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 454.868463][ T30] kworker/u8:1: attempt to access beyond end of device [ 454.868463][ T30] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 454.908195][ T30] kworker/u8:1: attempt to access beyond end of device [ 454.908195][ T30] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 454.930811][ T30] kworker/u8:1: attempt to access beyond end of device [ 454.930811][ T30] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 454.944433][ T30] kworker/u8:1: attempt to access beyond end of device [ 454.944433][ T30] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 454.959726][ T30] kworker/u8:1: attempt to access beyond end of device [ 454.959726][ T30] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 454.973336][ T30] kworker/u8:1: attempt to access beyond end of device [ 454.973336][ T30] loop5: rw=1, sector=305, nr_sectors = 8 limit=128 [ 454.996950][ T30] kworker/u8:1: attempt to access beyond end of device [ 454.996950][ T30] loop5: rw=1, sector=321, nr_sectors = 8 limit=128 [ 455.290608][ T9057] IPVS: starting estimator thread 0... [ 455.388111][T32352] IPVS: using max 2352 ests per chain, 117600 per kthread [ 455.574430][T32377] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.10329'. [ 456.097280][T32429] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10352'. [ 457.176448][T32499] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10380'. [ 457.185804][T32499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10380'. [ 457.441008][T32525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10391'. [ 457.460505][T32525] hsr_slave_1 (unregistering): left promiscuous mode [ 457.971751][T32549] rdma_op ffff888104bfb980 conn xmit_rdma 0000000000000000 [ 458.137478][T32566] netlink: 'syz.1.10410': attribute type 83 has an invalid length. [ 458.228217][T32572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10413'. [ 458.256761][T32572] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 458.268208][T32572] bond4: (slave ip6gre2): Error -95 calling set_mac_address [ 458.519463][ T30] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.537730][ T30] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.557397][ T30] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.577723][ T30] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.592513][ T30] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.619037][ T30] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.640505][ T30] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.659242][ T30] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.849929][T32537] kexec: Could not allocate control_code_buffer [ 458.953792][T32610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10429'. [ 459.056608][T32616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10432'. [ 459.385768][T32654] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 459.465302][T32625] chnl_net:caif_netlink_parms(): no params data found [ 459.529502][T32625] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.536730][T32625] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.544247][T32625] bridge_slave_0: entered allmulticast mode [ 459.552766][T32625] bridge_slave_0: entered promiscuous mode [ 459.561552][T32625] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.571966][T32625] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.579273][T32625] bridge_slave_1: entered allmulticast mode [ 459.586122][T32625] bridge_slave_1: entered promiscuous mode [ 459.605174][T32625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.617210][T32625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.637792][T32625] team0: Port device team_slave_0 added [ 459.644797][T32625] team0: Port device team_slave_1 added [ 459.661553][T32625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.668630][T32625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.694762][T32625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.706110][T32625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.713184][T32625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.739195][T32625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.768494][T32625] hsr_slave_0: entered promiscuous mode [ 459.774883][T32625] hsr_slave_1: entered promiscuous mode [ 459.781596][T32625] debugfs: 'hsr0' already exists in 'hsr' [ 459.787471][T32625] Cannot create hsr debugfs directory [ 460.010003][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 460.010022][ T28] audit: type=1400 audit(1774617001.710:6206): avc: denied { override_creds } for pid=32681 comm="syz.3.10453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 460.212136][T32625] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 460.246362][T32708] netlink: 'syz.3.10457': attribute type 1 has an invalid length. [ 460.270514][T32625] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 460.286100][T32710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10458'. [ 460.324662][T32625] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 460.338172][T32710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10458'. [ 460.360787][T32625] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 460.417352][T32708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.485063][T32718] bond3: (slave geneve2): making interface the new active one [ 460.494217][T32718] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 460.535846][T16743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 460.557071][T16743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 460.598952][T16743] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 460.633569][T16743] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 460.638141][T32756] 9p: Bad value for 'rfdno' [ 460.734705][T32625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.781546][T32625] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.808295][T11755] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.815395][T11755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.861055][T11755] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.868157][T11755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.968690][ T316] loop5: detected capacity change from 0 to 1024 [ 461.034094][ T316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.054659][T32625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.147984][ T28] audit: type=1400 audit(1774617002.860:6207): avc: denied { watch watch_reads } for pid=315 comm="syz.5.10472" path="/798/file1" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.204099][T21734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.313552][T32625] veth0_vlan: entered promiscuous mode [ 461.334883][T32625] veth1_vlan: entered promiscuous mode [ 461.385559][T32625] veth0_macvtap: entered promiscuous mode [ 461.407542][T32625] veth1_macvtap: entered promiscuous mode [ 461.439990][T32625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.466612][T32625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.491057][T16743] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.513053][T16743] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.527660][T16743] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.539354][T16743] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.540920][ T28] audit: type=1400 audit(1774617003.260:6208): avc: denied { mount } for pid=405 comm="syz.2.10480" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 462.576643][ T28] audit: type=1326 audit(1774617004.290:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=530 comm="syz.1.10500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe716c8c799 code=0x0 [ 462.792827][ T550] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10505'. [ 462.826165][ T552] netlink: 'syz.2.10504': attribute type 1 has an invalid length. [ 462.842236][ T552] 8021q: adding VLAN 0 to HW filter on device bond5 [ 462.879423][ T552] bond5: (slave bridge2): making interface the new active one [ 462.889566][ T552] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 462.922533][ T557] syzkaller1: entered promiscuous mode [ 462.933811][ T557] syzkaller1: entered allmulticast mode [ 463.034327][ T566] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 463.108283][ T580] loop5: detected capacity change from 0 to 512 [ 463.123848][ T580] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 463.133198][ T580] System zones: 1-12 [ 463.137636][ T580] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.10518: corrupted in-inode xattr: e_value size too large [ 463.152704][ T580] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.152932][ T580] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.10518: couldn't read orphan inode 15 (err -117) [ 463.162155][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 463.162174][ C1] EXT4-fs (loop5): initial error at time 1774617004: ext4_iget_extra_inode:5025: inode 15 [ 463.162242][ C1] EXT4-fs (loop5): last error at time 1774617004: ext4_iget_extra_inode:5025: inode 15 [ 463.203251][ T580] loop5: lost filesystem error report for type 5 error -117 [ 463.217800][ T580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.240804][ T28] audit: type=1400 audit(1774617004.960:6210): avc: denied { create } for pid=579 comm="syz.5.10518" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 463.242599][ T580] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.10518: Unrecognised inode hash code 4 [ 463.295776][ T580] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.10518: Corrupt directory, running e2fsck is recommended [ 463.312783][ T580] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.10518: Unrecognised inode hash code 4 [ 463.324741][ T580] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.10518: Corrupt directory, running e2fsck is recommended [ 463.328114][ T28] audit: type=1400 audit(1774617004.960:6211): avc: denied { create } for pid=579 comm="syz.5.10518" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 463.423325][T21734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.843875][ T614] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 464.139022][ T28] audit: type=1326 audit(1774617005.860:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=629 comm="syz.3.10537" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4da0bcc799 code=0x0 [ 465.153767][ T659] loop5: detected capacity change from 0 to 4096 [ 465.176964][ T659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.321013][ T670] netlink: 'syz.8.10553': attribute type 12 has an invalid length. [ 465.329631][ T670] netlink: 'syz.8.10553': attribute type 29 has an invalid length. [ 465.340774][ T670] netlink: 148 bytes leftover after parsing attributes in process `syz.8.10553'. [ 465.358120][ T670] netlink: 'syz.8.10553': attribute type 2 has an invalid length. [ 465.395224][ T28] audit: type=1400 audit(1774617007.110:6213): avc: denied { read write } for pid=672 comm="syz.1.10555" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 465.397144][T26328] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 465.430904][ T28] audit: type=1400 audit(1774617007.110:6214): avc: denied { open } for pid=672 comm="syz.1.10555" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 465.458841][T26328] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 465.534355][T21734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.575518][ T683] syzkaller1: entered promiscuous mode [ 465.581093][ T683] syzkaller1: entered allmulticast mode [ 465.975669][ T700] loop8: detected capacity change from 0 to 32768 [ 466.033489][ T4408] loop8: p1 p3 < > [ 466.041463][ T700] loop8: p1 p3 < > [ 466.124203][ T4408] udevd[4408]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 466.134110][T26139] udevd[26139]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 466.157390][ T4408] udevd[4408]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 466.164733][T26139] udevd[26139]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 466.380718][ T721] loop5: detected capacity change from 0 to 1024 [ 466.391603][ T721] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 466.399852][ T721] System zones: 0-1, 3-36 [ 466.404652][ T721] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.10584: bad orphan inode 134217728 [ 466.415424][ T721] loop5: lost filesystem error report for type 5 error -117 [ 466.416054][ T721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.667959][T21734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.156498][ T28] audit: type=1400 audit(1774617008.870:6215): avc: denied { setopt } for pid=779 comm="syz.2.10597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 467.220121][ T28] audit: type=1400 audit(1774617008.900:6216): avc: denied { connect } for pid=779 comm="syz.2.10597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 467.342893][ T28] audit: type=1400 audit(1774617009.060:6217): avc: denied { bind } for pid=799 comm="syz.8.10605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 467.604134][ T28] audit: type=1326 audit(1774617009.320:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=808 comm="syz.2.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde5b9c799 code=0x7ffc0000 [ 467.673480][ T28] audit: type=1326 audit(1774617009.350:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=808 comm="syz.2.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbde5b96517 code=0x7ffc0000 [ 467.724694][ T28] audit: type=1326 audit(1774617009.350:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=808 comm="syz.2.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbde5b3db19 code=0x7ffc0000 [ 467.811033][ T28] audit: type=1326 audit(1774617009.350:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=808 comm="syz.2.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbde5b96517 code=0x7ffc0000 [ 467.866718][ T28] audit: type=1326 audit(1774617009.350:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=808 comm="syz.2.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbde5b3db19 code=0x7ffc0000 [ 468.808933][ T860] loop8: detected capacity change from 0 to 1024 [ 468.818158][ T860] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 468.826340][ T860] System zones: 0-1, 3-36 [ 468.831784][ T860] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.10629: bad orphan inode 134217728 [ 468.842634][ T860] loop8: lost filesystem error report for type 5 error -117 [ 468.843325][ T860] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.132396][T32625] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.218204][ T880] loop5: detected capacity change from 0 to 4096 [ 469.261290][ T880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.521823][T21734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.750569][ T921] loop8: detected capacity change from 0 to 128 [ 469.769670][ T921] EXT4-fs: Ignoring removed bh option [ 469.787742][ T921] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.816192][ T921] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 469.888650][ T921] loop8: detected capacity change from 128 to 0 [ 469.895492][ T923] EXT4-fs error (device loop8): __ext4_find_entry:1615: inode #2: comm syz.8.10654: reading directory lblock 0 [ 469.923520][ T923] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 469.973701][ T923] EXT4-fs (loop8): I/O error while writing superblock [ 470.020507][T32625] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 470.078861][T32625] EXT4-fs error (device loop8): ext4_get_inode_loc:4920: inode #2: block 35: comm syz-executor: unable to read itable block [ 470.091533][ T925] loop5: detected capacity change from 0 to 1764 [ 470.112528][T32625] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 470.123857][T32625] EXT4-fs (loop8): I/O error while writing superblock [ 470.138976][T32625] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: IO failure [ 470.150155][ T925] iso9660: Unknown parameter 'ÿ' [ 470.158305][T32625] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 470.167856][T32625] EXT4-fs (loop8): I/O error while writing superblock [ 470.176339][T32625] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error [ 470.220498][T32625] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 470.242457][T32625] EXT4-fs (loop8): I/O error while writing superblock [ 470.254429][ T12] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4905: inode #12: block 36: comm kworker/u8:0: unable to read itable block [ 470.278668][ T12] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 470.290470][ T12] EXT4-fs (loop8): I/O error while writing superblock [ 470.298935][ T12] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4905: inode #13: block 36: comm kworker/u8:0: unable to read itable block [ 470.336373][ T12] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 470.360863][ T12] EXT4-fs (loop8): I/O error while writing superblock [ 470.387993][ T12] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4905: inode #2: block 35: comm kworker/u8:0: unable to read itable block [ 470.413556][ T12] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 470.455796][ T12] EXT4-fs (loop8): I/O error while writing superblock [ 470.476596][T32625] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 470.509600][T32625] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 470.522392][T32625] EXT4-fs (loop8): I/O error while writing superblock [ 470.743664][ T953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10667'. [ 470.775123][ T953] team1: entered promiscuous mode [ 470.808458][ T961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10667'. [ 470.824358][ T953] team1: entered allmulticast mode [ 470.851943][ T953] 8021q: adding VLAN 0 to HW filter on device team1 [ 470.909502][ T961] team2: entered promiscuous mode [ 470.922553][ T961] team2: entered allmulticast mode [ 470.938188][ T961] 8021q: adding VLAN 0 to HW filter on device team2 [ 471.224329][ T966] chnl_net:caif_netlink_parms(): no params data found [ 471.261670][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 471.261754][ T28] audit: type=1326 audit(1774617018.980:6239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.10681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 471.318814][ T966] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.320224][ T28] audit: type=1326 audit(1774617019.020:6240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.10681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 471.328284][ T966] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.356551][ T966] bridge_slave_0: entered allmulticast mode [ 471.363556][ T966] bridge_slave_0: entered promiscuous mode [ 471.370840][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.378002][ T966] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.385214][ T966] bridge_slave_1: entered allmulticast mode [ 471.389642][ T28] audit: type=1326 audit(1774617019.020:6241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.10681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 471.393382][ T966] bridge_slave_1: entered promiscuous mode [ 471.435668][ T966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.446459][ T966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.462240][ T28] audit: type=1326 audit(1774617019.020:6242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.10681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 471.468403][ T966] team0: Port device team_slave_0 added [ 471.506010][ T1001] Invalid ELF header magic: != ELF [ 471.516308][ T28] audit: type=1326 audit(1774617019.020:6243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.10681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 471.522905][ T966] team0: Port device team_slave_1 added [ 471.563879][ T28] audit: type=1326 audit(1774617019.020:6244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.10681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 471.566694][ T966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.615079][ T966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.617884][ T28] audit: type=1326 audit(1774617019.020:6245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.10681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 471.666605][ T966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.696332][ T966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.707935][ T966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.736326][ T28] audit: type=1326 audit(1774617019.020:6246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.10681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 471.759834][ T966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.800031][ T28] audit: type=1326 audit(1774617019.020:6247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.1.10681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe716c8c799 code=0x7ffc0000 [ 471.850788][ T966] hsr_slave_0: entered promiscuous mode [ 471.858834][ T966] hsr_slave_1: entered promiscuous mode [ 471.867818][ T966] debugfs: 'hsr0' already exists in 'hsr' [ 471.876125][ T966] Cannot create hsr debugfs directory [ 472.136311][ T966] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 472.150696][ T966] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 472.160275][ T966] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 472.170874][ T966] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 472.242938][ T966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.257309][ T966] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.267552][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.274731][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.286146][ T917] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.293349][ T917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.380922][ T1052] gre1: entered promiscuous mode [ 472.464073][ T28] audit: type=1400 audit(1774617020.180:6248): avc: denied { ioctl } for pid=1067 comm="syz.1.10691" path="socket:[119338]" dev="sockfs" ino=119338 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 472.534867][ T966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.582660][ T1079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.605749][ T1079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.921368][ T1079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.933875][ T1079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.993579][ T1079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.026202][ T1079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.084219][ T966] veth0_vlan: entered promiscuous mode [ 473.115929][ T1079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.126563][ T1079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.143906][ T966] veth1_vlan: entered promiscuous mode [ 473.189287][ T966] veth0_macvtap: entered promiscuous mode [ 473.203304][ T966] veth1_macvtap: entered promiscuous mode [ 473.224618][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.235863][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.251118][ T966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.271754][ T117] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.282734][ T117] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.295954][ T117] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.305762][ T117] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.318765][ T966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.332585][T11755] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.348250][T11755] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.368872][T11755] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.409367][T11755] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.419330][T11755] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.436800][T11755] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.625383][ T1185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10709'. [ 473.653456][ T1185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10709'. [ 474.353646][ T1281] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10726'. [ 474.364245][ T1281] netlink: 'syz.5.10726': attribute type 7 has an invalid length. [ 474.372258][ T1281] netlink: 'syz.5.10726': attribute type 8 has an invalid length. [ 474.385147][ T1281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10726'. [ 474.661383][ T1320] loop5: detected capacity change from 0 to 1024 [ 474.757161][ T1320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.953130][ T1366] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 474.970461][ T1366] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 5 with error 28 [ 474.987853][ T1366] EXT4-fs (loop5): This should not happen!! Data will be lost [ 474.987853][ T1366] [ 474.999114][ T1366] EXT4-fs (loop5): Total free blocks count 0 [ 475.005292][ T1366] EXT4-fs (loop5): Free/Dirty block details [ 475.023495][ T1366] EXT4-fs (loop5): free_blocks=2588934144 [ 475.030407][ T1369] netlink: 'syz.1.10730': attribute type 10 has an invalid length. [ 475.040534][ T1366] EXT4-fs (loop5): dirty_blocks=96 [ 475.046635][ T1366] EXT4-fs (loop5): Block reservation details [ 475.076175][ T1369] team0 (unregistering): Port device team_slave_0 removed [ 475.079273][ T1366] EXT4-fs (loop5): i_reserved_data_blocks=6 [ 475.094987][ T1369] team0 (unregistering): Port device team_slave_1 removed [ 475.587631][T11757] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 60 with error 28 [ 475.681411][ T1450] loop5: detected capacity change from 0 to 128 [ 475.721212][ T1450] bio_check_eod: 98 callbacks suppressed [ 475.721232][ T1450] syz.5.10738: attempt to access beyond end of device [ 475.721232][ T1450] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 475.793798][ T50] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.844156][ T50] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.911315][ T50] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.961809][ T50] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.051028][ T50] bridge_slave_1: left allmulticast mode [ 476.060360][ T50] bridge_slave_1: left promiscuous mode [ 476.066333][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.079863][ T50] bridge_slave_0: left allmulticast mode [ 476.089018][ T50] bridge_slave_0: left promiscuous mode [ 476.095272][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.220419][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.238431][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.263403][ T50] bond0 (unregistering): Released all slaves [ 476.738709][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 476.738726][ T28] audit: type=1326 audit(1774617024.460:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1608 comm="syz.2.10746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbde5b9c799 code=0x0 [ 477.127424][ T50] hsr_slave_0: left promiscuous mode [ 477.143322][ T50] hsr_slave_1: left promiscuous mode [ 477.156795][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.171185][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.180355][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.187741][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.220043][ T50] veth1_macvtap: left promiscuous mode [ 477.225772][ T50] veth0_macvtap: left promiscuous mode [ 477.232930][ T50] veth1_vlan: left promiscuous mode [ 477.238838][ T50] veth0_vlan: left promiscuous mode [ 477.286322][ T28] audit: type=1326 audit(1774617025.000:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.9.10753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 477.329959][ T28] audit: type=1326 audit(1774617025.030:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.9.10753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 477.359665][ T28] audit: type=1326 audit(1774617025.030:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.9.10753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 477.393447][ T28] audit: type=1326 audit(1774617025.030:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.9.10753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 477.417156][ T28] audit: type=1326 audit(1774617025.040:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.9.10753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 477.417371][ T50] team0 (unregistering): Port device team_slave_1 removed [ 477.454120][ T50] team0 (unregistering): Port device team_slave_0 removed [ 477.471695][ T28] audit: type=1326 audit(1774617025.040:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.9.10753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 477.514848][ T28] audit: type=1326 audit(1774617025.040:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.9.10753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 477.538800][ T28] audit: type=1326 audit(1774617025.040:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.9.10753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 477.563934][ T28] audit: type=1326 audit(1774617025.040:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1640 comm="syz.9.10753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 477.739663][ T1658] loop5: detected capacity change from 0 to 512 [ 477.770669][ T1658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.786656][ T1658] ext4 filesystem being mounted at /858/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.826305][ T1658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 477.852131][ T1658] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 477.929632][T21734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.932641][ T1684] syzkaller0: entered allmulticast mode [ 478.938586][ T1684] syzkaller0: entered promiscuous mode [ 478.946290][ T1684] syzkaller0 (unregistering): left allmulticast mode [ 478.953066][ T1684] syzkaller0 (unregistering): left promiscuous mode [ 478.992360][ T1691] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10769'. [ 479.007923][ T1691] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.030643][ T1691] bridge_slave_1 (unregistering): left allmulticast mode [ 479.041179][ T1691] bridge_slave_1 (unregistering): left promiscuous mode [ 479.054339][ T1691] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.194011][ T1707] loop9: detected capacity change from 0 to 256 [ 479.236245][ T1707] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 479.379518][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.387514][ T1718] FAT-fs (loop9): Filesystem has been set read-only [ 479.394802][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.402888][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.410927][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.421027][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.441200][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.452343][ T1721] tipc: Started in network mode [ 479.457245][ T1721] tipc: Node identity ac14140f, cluster identity 4711 [ 479.462277][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.464285][ T1721] tipc: New replicast peer: 255.255.186.255 [ 479.491813][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.499925][ T1721] tipc: Enabled bearer , priority 10 [ 479.508480][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.520717][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.528899][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.536804][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.553240][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.562458][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.570880][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.589073][ T1727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10785'. [ 479.598830][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.618485][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.637253][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.648185][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.656377][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.679650][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.687671][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.695899][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.705120][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.713821][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.721965][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.730059][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.738280][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.746256][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.759416][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.767405][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.775631][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.783793][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 479.792845][ T1718] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 480.618379][ T3406] tipc: Node number set to 2886997007 [ 481.563004][ T1795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10814'. [ 481.649299][ T1805] syzkaller1: entered promiscuous mode [ 481.654823][ T1805] syzkaller1: entered allmulticast mode [ 481.879384][ T1823] xt_hashlimit: size too large, truncated to 1048576 [ 482.417243][ T1819] loop5: detected capacity change from 0 to 2048 [ 482.475082][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 482.475117][ T28] audit: type=1400 audit(1774617030.190:6349): avc: denied { read } for pid=1857 comm="syz.1.10840" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 482.511696][ T28] audit: type=1400 audit(1774617030.230:6350): avc: denied { open } for pid=1857 comm="syz.1.10840" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 482.520672][ T1868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10841'. [ 482.586498][ T1876] netlink: 'syz.3.10845': attribute type 10 has an invalid length. [ 482.601504][ T1876] bond0: (slave dummy0): Releasing backup interface [ 482.615348][ T1876] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 482.624994][ T1876] team0: Failed to send options change via netlink (err -105) [ 482.633032][ T1876] team0: Port device dummy0 added [ 482.648943][ T1880] netlink: 'syz.3.10845': attribute type 10 has an invalid length. [ 482.659689][ T1880] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 482.692749][ T1880] team0: Failed to send options change via netlink (err -105) [ 482.700580][ T1880] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 482.711227][ T1880] team0: Port device dummy0 removed [ 482.721733][ T1880] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 482.731910][ T1882] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10847'. [ 482.735964][ T1819] Alternate GPT is invalid, using primary GPT. [ 482.758096][ T1882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10847'. [ 482.767192][ T1819] loop5: p2 p3 p7 [ 482.791433][ T1882] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10847'. [ 482.821821][ T1882] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10847'. [ 482.850296][ T1882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10847'. [ 482.885529][ T1884] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 482.946821][ T2999] Alternate GPT is invalid, using primary GPT. [ 482.953338][ T2999] loop5: p2 p3 p7 [ 483.202661][ T28] audit: type=1400 audit(1774617030.920:6351): avc: denied { watch } for pid=1913 comm="syz.3.10859" path="/" dev="hugetlbfs" ino=120305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 483.308550][ T1926] netlink: 'syz.2.10863': attribute type 1 has an invalid length. [ 483.345449][ T1926] gretap1: entered allmulticast mode [ 483.354472][ T1926] bond6: (slave gretap1): making interface the new active one [ 483.363261][ T1926] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 483.406501][ T28] audit: type=1326 audit(1774617031.120:6352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.9.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7fc00000 [ 483.641843][ T1948] loop9: detected capacity change from 0 to 128 [ 483.660086][ T1948] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 483.759101][T26320] kernel read not supported for file /ppp (pid: 26320 comm: kworker/1:9) [ 484.310698][ T1974] geneve3: entered promiscuous mode [ 484.311325][T11757] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 484.325985][T11757] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 484.326063][T11757] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 484.326116][T11757] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 484.827189][ T2024] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10901'. [ 484.925119][ T2031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10904'. [ 484.945279][ T28] audit: type=1326 audit(1774617032.660:6353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2014 comm="syz.9.10897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7fc00000 [ 485.149869][ T2044] bond4: (slave lo): Releasing backup interface [ 485.157039][ T2044] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 485.174632][ T2044] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 485.179512][ T28] audit: type=1326 audit(1774617032.900:6354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2049 comm="syz.5.10912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 485.221582][ T28] audit: type=1326 audit(1774617032.940:6355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2049 comm="syz.5.10912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 485.246284][ T28] audit: type=1326 audit(1774617032.940:6356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2049 comm="syz.5.10912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 485.305867][ T28] audit: type=1326 audit(1774617032.940:6357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2049 comm="syz.5.10912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 485.351616][ T28] audit: type=1326 audit(1774617032.940:6358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2049 comm="syz.5.10912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb64833c799 code=0x7ffc0000 [ 485.631171][ T2083] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10927'. [ 485.647876][ T50] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.656984][ T2083] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10927'. [ 485.667375][ T50] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.683336][ T50] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.703210][ T50] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.780149][ T2103] loop9: detected capacity change from 0 to 512 [ 485.794885][ T2103] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.10935: inode has both inline data and extents flags [ 485.808401][ T2103] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 485.808567][ T2103] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.10935: couldn't read orphan inode 15 (err -117) [ 485.829653][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 485.829695][ C0] EXT4-fs (loop9): initial error at time 1774617033: ext4_orphan_get:1391: inode 15 [ 485.829730][ C0] EXT4-fs (loop9): last error at time 1774617033: ext4_orphan_get:1391: inode 15 [ 485.858887][ T2103] loop9: lost filesystem error report for type 5 error -117 [ 485.859709][ T2103] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.896172][ T966] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.498846][ T2152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10952'. [ 486.535453][ T2152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10952'. [ 487.356665][ T2179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10960'. [ 487.631581][ T2204] loop5: detected capacity change from 0 to 1024 [ 487.662334][ T2187] veth0_virt_wifi: entered promiscuous mode [ 487.690584][ T2204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.857557][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 487.857575][ T28] audit: type=1326 audit(1774617035.570:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.9.10965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 487.958019][ T28] audit: type=1326 audit(1774617035.570:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.9.10965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 488.006972][T21734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.047005][ T28] audit: type=1326 audit(1774617035.570:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.9.10965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 488.072290][ T28] audit: type=1326 audit(1774617035.570:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.9.10965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 488.096470][ T28] audit: type=1326 audit(1774617035.580:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.9.10965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 488.152708][ T28] audit: type=1326 audit(1774617035.590:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.9.10965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 488.177952][ T28] audit: type=1326 audit(1774617035.590:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.9.10965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 488.203004][ T28] audit: type=1326 audit(1774617035.600:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.9.10965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 488.226819][ T28] audit: type=1326 audit(1774617035.600:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.9.10965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 488.253057][ T28] audit: type=1326 audit(1774617035.600:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2222 comm="syz.9.10965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7fecc799 code=0x7ffc0000 [ 488.393277][ T2242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10970'. [ 488.809846][ T2285] bridge0: entered allmulticast mode [ 488.828614][ T2285] bond0: left allmulticast mode [ 488.840070][ T2285] bond_slave_0: left allmulticast mode [ 488.849907][ T2285] bond_slave_1: left allmulticast mode [ 488.859893][ T2285] team0: left allmulticast mode [ 488.871501][ T2285] team_slave_0: left allmulticast mode [ 488.882568][ T2285] team_slave_1: left allmulticast mode [ 488.907749][ T2285] bridge0: port 3(bond0) entered disabled state [ 488.946734][ T2285] bridge_slave_1: left allmulticast mode [ 488.959567][ T2299] loop9: detected capacity change from 0 to 512 [ 488.966458][ T2285] bridge_slave_1: left promiscuous mode [ 488.990523][ T2285] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.005462][ T2299] EXT4-fs: Ignoring removed mblk_io_submit option [ 489.033817][ T2299] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 489.045418][ T2301] process '/newroot/804/file0' started with executable stack [ 489.065322][ T2299] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 489.077355][ T2299] EXT4-fs (loop9): orphan cleanup on readonly fs [ 489.089371][ T2285] bridge_slave_0: left allmulticast mode [ 489.095624][ T2299] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.10990: bg 0: block 361: padding at end of block bitmap is not set [ 489.111948][ T2285] bridge_slave_0: left promiscuous mode [ 489.117576][ T2299] loop9: lost filesystem error report for type 5 error -117 [ 489.117931][ T2299] EXT4-fs (loop9): Remounting filesystem read-only [ 489.125239][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 489.125259][ C1] EXT4-fs (loop9): initial error at time 1774617036: ext4_validate_block_bitmap:441 [ 489.125287][ C1] EXT4-fs (loop9): last error at time 1774617036: ext4_validate_block_bitmap:441 [ 489.158882][ T2285] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.170183][ T2299] EXT4-fs (loop9): 1 truncate cleaned up [ 489.180270][ T2299] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 489.796800][ T966] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 489.859444][ T2310] loop9: detected capacity change from 0 to 128 [ 490.010131][ T2327] netlink: 'syz.3.11002': attribute type 10 has an invalid length. [ 490.021986][ T2327] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.11002'. [ 490.096632][ T2337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11006'. [ 490.728177][ T2386] ================================================================== [ 490.736294][ T2386] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 490.743598][ T2386] [ 490.745913][ T2386] write to 0xffff888103a649a8 of 4 bytes by task 2382 on cpu 0: [ 490.753540][ T2386] touch_atime+0x1d7/0x330 [ 490.757969][ T2386] shmem_file_read_iter+0x477/0x540 [ 490.763179][ T2386] copy_splice_read+0x471/0x6c0 [ 490.768040][ T2386] splice_direct_to_actor+0x28f/0x670 [ 490.773418][ T2386] do_splice_direct+0x119/0x1a0 [ 490.778265][ T2386] do_sendfile+0x382/0x650 [ 490.782681][ T2386] __x64_sys_sendfile64+0x105/0x150 [ 490.787887][ T2386] x64_sys_call+0x2dc4/0x3020 [ 490.792576][ T2386] do_syscall_64+0x12c/0x370 [ 490.797169][ T2386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.803059][ T2386] [ 490.805384][ T2386] read to 0xffff888103a649a8 of 4 bytes by task 2386 on cpu 1: [ 490.812927][ T2386] atime_needs_update+0x25f/0x3e0 [ 490.817971][ T2386] touch_atime+0x4a/0x330 [ 490.822300][ T2386] shmem_file_read_iter+0x477/0x540 [ 490.827511][ T2386] copy_splice_read+0x471/0x6c0 [ 490.832365][ T2386] splice_direct_to_actor+0x28f/0x670 [ 490.837753][ T2386] do_splice_direct+0x119/0x1a0 [ 490.842610][ T2386] do_sendfile+0x382/0x650 [ 490.847027][ T2386] __x64_sys_sendfile64+0x105/0x150 [ 490.852223][ T2386] x64_sys_call+0x2dc4/0x3020 [ 490.856901][ T2386] do_syscall_64+0x12c/0x370 [ 490.861497][ T2386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.867394][ T2386] [ 490.869707][ T2386] value changed: 0x1a3fbe77 -> 0x1ad854f7 [ 490.875435][ T2386] [ 490.877759][ T2386] Reported by Kernel Concurrency Sanitizer on: [ 490.883904][ T2386] CPU: 1 UID: 0 PID: 2386 Comm: syz.3.11024 Tainted: G W syzkaller #0 PREEMPT(full) [ 490.894838][ T2386] Tainted: [W]=WARN [ 490.898631][ T2386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.908682][ T2386] ==================================================================