last executing test programs: 3m4.448053946s ago: executing program 32 (id=386): flistxattr(0xffffffffffffffff, &(0x7f0000000000)=""/235, 0xeb) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x3fffffffc}, 0x210, 0x4000004, 0xfffffffc, 0x6, 0xfff, 0x3, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0xe201ffff) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x200084c, &(0x7f0000000080)={[{@fat=@time_offset={'time_offset', 0x3d, 0x4f7}}, {@fat=@sys_immutable}, {@nodots}, {@nodots}, {@fat=@nfs}, {@fat=@errors_continue}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@nodots}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}]}, 0x1, 0x274, &(0x7f0000000300)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m51.053770745s ago: executing program 33 (id=367): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x1, 0x8, 0x4, 0x5}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d30, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 2m50.702607716s ago: executing program 34 (id=583): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) setsockopt$inet_tcp_int(r0, 0x6, 0x24, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m14.425974307s ago: executing program 35 (id=1257): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x9, 0x6, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000"/46], 0x13c}}, 0x20040880) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 1m57.568213798s ago: executing program 8 (id=1515): syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1m57.36764625s ago: executing program 8 (id=1521): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80026, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noinit_itable}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x4, 0x0, 0x85c, 0x6}) 1m56.777589524s ago: executing program 8 (id=1533): creat(&(0x7f0000000180)='./file0\x00', 0x70) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(r0) r1 = epoll_create1(0x80000) r2 = mq_open(&(0x7f0000000540)='^n3\x91>[\xf0QW\x10\xd4\xba\xbc\x86~\xc4\x86\x1e\x88o]\xcd\xbag\x84W\x9a \xe2\xd7i9\xb9\xddO\xde\xf6\x8b \x92F;\x8a^+\xf1 E\xcd\xa5\xdd\xb3\x86D\xa7\xcbd%a0v\xec}\x8a\xbf+A\x1c\xe1\x87XE\xfat\x95\xf3\xa3\x13\x02a\x8d*0xffffffffffffffff}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000001c0)={0x1, 0x1, 0x1, 0xfffe}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m56.455470643s ago: executing program 36 (id=1541): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000001c0)={0x1, 0x1, 0x1, 0xfffe}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m55.975398061s ago: executing program 5 (id=1551): r0 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x27, 0xd6}, &(0x7f00000009c0), &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000b, 0x12, r1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, 0x0, 0xc8c2) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={0x0}, 0x1) 1m55.927345803s ago: executing program 5 (id=1552): socket(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES64=r0], 0x20) 1m55.82366759s ago: executing program 5 (id=1555): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x1, 0x0, 0x1, 0xf6d, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x100) openat(0xffffffffffffff9c, 0x0, 0xc0, 0xccee9c1c9e8aeada) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 1m55.696824467s ago: executing program 5 (id=1556): syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0, 0xfffffefe}, 0xb3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 1m55.047547915s ago: executing program 5 (id=1560): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local}) 1m53.450392108s ago: executing program 5 (id=1576): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f0000000100)="d5c0e9", 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m53.387701341s ago: executing program 37 (id=1576): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f0000000100)="d5c0e9", 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m44.371369386s ago: executing program 9 (id=1741): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x1, 0x0, 0xb9ff, 0xa, '\x00\x00\x00\x00\x00c\t\x00'}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1m44.055580884s ago: executing program 9 (id=1749): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @empty}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1000002, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x7d) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000380), r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 1m43.95931787s ago: executing program 9 (id=1752): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7c5ee4a0befa09f29"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x433f, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m43.585606362s ago: executing program 9 (id=1763): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") truncate(&(0x7f0000000000)='./file2\x00', 0xb00) r0 = syz_clone(0x20800200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone3(0x0, 0x0) 1m43.405026393s ago: executing program 9 (id=1770): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x3, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) write(r2, &(0x7f0000000280)="3966af", 0x3) 1m42.467496457s ago: executing program 9 (id=1783): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1bcb1058", 0x4}], 0x1}}], 0x1, 0x40) 1m42.42499938s ago: executing program 38 (id=1783): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1bcb1058", 0x4}], 0x1}}], 0x1, 0x40) 1m5.932971303s ago: executing program 2 (id=2494): creat(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000002680)={0x3a}, 0x8) sendto$inet6(r2, &(0x7f0000003c40)="22de", 0x2, 0x0, 0x0, 0x0) 1m5.795407501s ago: executing program 2 (id=2496): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60b}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e200000"], 0x610) 1m5.790162922s ago: executing program 2 (id=2497): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1, 0x57}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38) 1m4.764726691s ago: executing program 2 (id=2502): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000a40)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d303e002804de526a2962c96269574f352812653af3f6cd668c31a51bb3ea504a07f361244709ddea94f616bfbdb1850c78c12060f961cc4c0f80ed3390fb03dbe82a2014852c59665501cd64f0a6a4ba839cf58fe10e184c735b4692a267d276169f0c203459a3f8899e6c3ac3bd115cdd185ca2972692171eed646eb083d9c646931c7987d8c087efbb77b881ceaaef4cf13f59d8417bf2ba94f6f9bcf2d707ff2c4f28415a5fa5517f85d05882"], 0x4, 0x2d1, &(0x7f0000000740)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) 1m4.571174492s ago: executing program 2 (id=2506): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x1, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000380)="c9", 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 1m4.107340759s ago: executing program 2 (id=2524): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @rand_addr=0x64010102}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x2, 0x0, 0x4, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 1m4.107145139s ago: executing program 39 (id=2524): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @rand_addr=0x64010102}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x2, 0x0, 0x4, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 21.011706167s ago: executing program 1 (id=3174): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 20.80067935s ago: executing program 1 (id=3178): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 20.696953416s ago: executing program 1 (id=3179): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 20.63218043s ago: executing program 1 (id=3181): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_remount}, {@noload}, {@oldalloc}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) syz_clone3(&(0x7f00000006c0)={0x20040080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20.321558038s ago: executing program 1 (id=3184): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 19.881185503s ago: executing program 1 (id=3193): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 19.828182606s ago: executing program 40 (id=3193): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 3.61255172s ago: executing program 7 (id=3434): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 2.952886658s ago: executing program 7 (id=3450): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 2.653869076s ago: executing program 7 (id=3454): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80000, 0x0, 0x12}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) 2.541425463s ago: executing program 6 (id=3456): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004014, &(0x7f0000000040)={[{@abort}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) 2.399351281s ago: executing program 6 (id=3458): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000680)}, 0x1}], 0x1, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) 1.776785187s ago: executing program 7 (id=3466): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0xc480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x8ca4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') pread64(r1, 0x0, 0x0, 0x3) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x6}, {}, {0x2, 0x1}], {0x4, 0x4}, [], {}, {0x20, 0x3}}, 0x3c, 0x3) 1.629366975s ago: executing program 4 (id=3469): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340), 0x8) 1.525885471s ago: executing program 4 (id=3471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.354434122s ago: executing program 6 (id=3473): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x2) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000008c0)=""/239, 0x40000, 0x0, 0x0, 0x0) 1.353788381s ago: executing program 3 (id=3474): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x4e}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) 1.291329855s ago: executing program 6 (id=3475): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x304}, "fa5e8ffc32f57112", "c900", '\x00', "00f8ffffffffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 1.233255539s ago: executing program 4 (id=3476): pipe(&(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x40009}, 0x40800) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.180531571s ago: executing program 7 (id=3477): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0xffffffffffffffff, 0x4}, 0x38) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 979.268263ms ago: executing program 3 (id=3478): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) 978.977903ms ago: executing program 4 (id=3479): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4044000) r0 = io_uring_setup(0x1c77, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 943.009285ms ago: executing program 6 (id=3480): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 930.657526ms ago: executing program 3 (id=3481): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) 794.781104ms ago: executing program 3 (id=3482): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000921) read(r0, 0x0, 0x20) close(r0) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x7c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x4) 711.349329ms ago: executing program 0 (id=3484): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="ef", 0x33fe0}], 0x1}, 0x0) 663.939921ms ago: executing program 0 (id=3485): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) 653.285622ms ago: executing program 3 (id=3486): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 550.001908ms ago: executing program 0 (id=3487): socket$kcm(0x29, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 542.325868ms ago: executing program 7 (id=3488): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='statm\x00') r1 = io_uring_setup(0x63f3, &(0x7f0000000040)={0x0, 0xf311, 0x1000, 0x4, 0x172}) close_range(r0, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x64) sendto$inet(r2, 0x0, 0xfffffffffffffdd9, 0x20008080, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x35}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4044) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/45, 0x2d}], 0x1}, 0x8}], 0x1, 0x10100, 0x0) 517.23708ms ago: executing program 0 (id=3489): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r2, 0x0, 0x0) 454.271344ms ago: executing program 0 (id=3490): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 403.509866ms ago: executing program 3 (id=3491): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 138.553802ms ago: executing program 4 (id=3492): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) 100.775844ms ago: executing program 0 (id=3493): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a226", 0x54}, {&(0x7f0000000a00)}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2e91f3af98057ad0674eff7875169861ce6274b379522d411d3766aa7de767671efa6", 0xa4}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="157873e2c9542e45e27dea3315e396369a51bd63b2c4f6a8272d27ff0675547ec9a31d3a42ecb0583efde7adc254e59416050c1eb7a1fc02536c070f4964e8b18941198253d8da9fbf8c456af254ebf1795878f3a3256ee70c2964d3f010587a5fe800f697966822ccb7cc3257b6f1ed3d66646315c63b79f1c87ada02da4cf577d9dc1daaf1332400dead2760122a2669a387ad030550c0580bd9adc59af055e059c887c0b5c02779310337b803821ccf3aa365e1a057d5129c02d8c4", 0xbd}, {&(0x7f0000000800)="775d1ea0235b1d8979bc06a446925deee745776767c450620fa4e27c6dba", 0x1e}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a40)="1d21ba0cd66e3473c68037fab094c9cbe4565c1161aeb51bee605c71f26915faee4ed9170dfcd774388bdf06b356b4f709160aa83cfc1b63d25602c52b282054cd28085f7215a74e8e2a5e342150886b2a7b18dec8e7ecddccc2d698d14b7f16f2c59781d0a3dfc6908dc69ec4ff2a897ee7277c2ccdff49b79ec664b5f8e7015bbb9f137759961fb67735c695628eeb618270ab32072054c1321f2fcf33141cc6ad4caedcb1d5dea8aeb3906d4b9ad9ddd7", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 687.9µs ago: executing program 6 (id=3494): socket$rds(0x15, 0x5, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800", @ANYRES16=r0], 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 0s ago: executing program 4 (id=3495): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) r3 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) dup3(r1, r0, 0x0) kernel console output (not intermixed with test programs): [ 145.321247][ T9584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.345686][ T9600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1922'. [ 145.369015][ T9600] gtp0: entered promiscuous mode [ 145.413297][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.288676][ T9671] netlink: 'syz.6.1949': attribute type 1 has an invalid length. [ 146.321613][ T9673] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1950'. [ 146.341330][ T9671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.389282][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1950'. [ 146.471821][ T9675] bond1: (slave dummy0): making interface the new active one [ 146.490037][ T9675] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 146.571382][ T9679] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1951'. [ 146.618309][ T9684] netlink: 'syz.6.1952': attribute type 1 has an invalid length. [ 146.642852][ T9684] bond2: (slave geneve3): making interface the new active one [ 146.652345][ T9684] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 146.661946][ T3798] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.703813][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1955'. [ 146.712906][ T3798] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.721451][ T3798] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.730211][ T3798] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.743881][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1955'. [ 146.885546][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 146.885563][ T28] audit: type=1400 audit(2000000032.580:716): avc: denied { bind } for pid=9699 comm="syz.2.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.267976][ T9732] loop1: detected capacity change from 0 to 128 [ 147.281842][ T28] audit: type=1400 audit(2000000032.970:717): avc: denied { mount } for pid=9731 comm="syz.1.1971" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 147.333968][ T28] audit: type=1400 audit(2000000033.020:718): avc: denied { unmount } for pid=8974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 147.363150][ T9736] netlink: 'syz.1.1973': attribute type 10 has an invalid length. [ 147.377224][ T9736] team0: Failed to send options change via netlink (err -105) [ 147.384938][ T9736] team0: Port device dummy0 added [ 147.391629][ T9736] netlink: 'syz.1.1973': attribute type 10 has an invalid length. [ 147.400464][ T9736] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 147.411654][ T9736] team0: Failed to send options change via netlink (err -105) [ 147.419251][ T9736] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 147.428354][ T9736] team0: Port device dummy0 removed [ 147.436928][ T9736] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 147.836697][ T9762] loop1: detected capacity change from 0 to 1024 [ 147.881576][ T9786] loop6: detected capacity change from 0 to 512 [ 147.908225][ T9786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.927141][ T9786] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.1981'. [ 147.960447][ T5144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.979572][ T9762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.020128][ T9799] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1982'. [ 148.022164][ T9762] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.060536][ T9799] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1982'. [ 148.167066][ T9762] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.1979: lblock 3 mapped to illegal pblock 3 (length 3) [ 148.193690][ T9816] veth4: entered promiscuous mode [ 148.199677][ T9762] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 148.215136][ T9816] veth4: entered allmulticast mode [ 148.226953][ T9762] EXT4-fs (loop1): This should not happen!! Data will be lost [ 148.226953][ T9762] [ 148.293140][ T3798] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 148.314951][ T3798] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 148.331436][ T3798] EXT4-fs (loop1): This should not happen!! Data will be lost [ 148.331436][ T3798] [ 148.343063][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 148.904301][ T3871] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 149.037374][ T9890] loop2: detected capacity change from 0 to 128 [ 149.114121][ T9890] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.180192][ T28] audit: type=1400 audit(2000000034.870:719): avc: denied { unmount } for pid=9893 comm="syz.6.2003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.194416][ T9890] ext4 filesystem being mounted at /408/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.240285][ T28] audit: type=1326 audit(2000000034.930:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9896 comm="syz.1.2004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x0 [ 149.287520][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.413153][ T9908] batadv_slave_1: entered promiscuous mode [ 149.424837][ T9908] batadv_slave_1: left promiscuous mode [ 149.490061][ T28] audit: type=1400 audit(2000000035.180:721): avc: denied { unmount } for pid=9913 comm="syz.6.2012" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 149.518597][ T9911] process '/newroot/433/file0' started with executable stack [ 149.868404][ T9938] loop4: detected capacity change from 0 to 512 [ 149.877174][ T9938] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.889154][ T9938] EXT4-fs (loop4): 1 truncate cleaned up [ 149.896917][ T9938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.932690][ T28] audit: type=1326 audit(2000000035.620:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7fc00000 [ 149.966897][ T28] audit: type=1326 audit(2000000035.620:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc45d2abf79 code=0x7fc00000 [ 149.990513][ T28] audit: type=1326 audit(2000000035.620:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7fc00000 [ 150.014362][ T28] audit: type=1326 audit(2000000035.620:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7fc00000 [ 150.060769][ T8198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.109079][ T9945] veth2: entered promiscuous mode [ 150.114290][ T9945] veth2: entered allmulticast mode [ 150.188705][ T6768] kernel read not supported for file 90/task/91/wchan (pid: 6768 comm: kworker/0:13) [ 150.198349][ T6757] kernel write not supported for file /vcs (pid: 6757 comm: kworker/0:6) [ 150.638413][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2047'. [ 150.684897][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2047'. [ 151.417656][T10023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10023 comm=syz.0.2056 [ 151.625443][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 151.640052][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 151.689353][T10041] loop2: detected capacity change from 0 to 512 [ 151.732337][T10041] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2063: inode has both inline data and extents flags [ 151.748018][T10041] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 151.748277][T10041] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2063: couldn't read orphan inode 15 (err -117) [ 151.769878][T10041] loop2: lost filesystem error report for type 5 error -117 [ 151.770529][T10041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.799811][T10041] Invalid argument reading file caps for ./file0 [ 151.894558][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.979277][T10057] geneve2: entered promiscuous mode [ 151.985562][ T2000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.998034][ T2000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.010336][ T2000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.019286][ T2000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.396779][T10082] loop1: detected capacity change from 0 to 8192 [ 152.439605][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2084'. [ 152.451425][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'. [ 152.471472][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2084'. [ 152.492996][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'. [ 152.620104][T10096] all: renamed from veth1_to_bond (while UP) [ 152.699586][T10100] geneve2: entered promiscuous mode [ 152.713519][T10100] geneve2: entered allmulticast mode [ 152.721386][ T51] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.735446][ T51] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.744856][T10102] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 152.751423][T10102] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.759353][ T51] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.768636][ T51] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.777857][T10102] vhci_hcd vhci_hcd.0: Device attached [ 152.784576][T10104] vhci_hcd: connection closed [ 152.784865][ T51] vhci_hcd vhci_hcd.1: stop threads [ 152.795426][ T51] vhci_hcd vhci_hcd.1: release socket [ 152.800876][ T51] vhci_hcd vhci_hcd.1: disconnect device [ 152.841852][T10109] loop4: detected capacity change from 0 to 512 [ 152.853435][T10111] loop2: detected capacity change from 0 to 512 [ 152.863076][T10111] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.876904][T10109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.889405][T10111] EXT4-fs (loop2): 1 truncate cleaned up [ 152.902247][T10111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.925440][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 152.925457][ T28] audit: type=1326 audit(2000000038.610:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.6.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 152.934477][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2092'. [ 152.955599][ T28] audit: type=1326 audit(2000000038.610:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.6.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 152.988028][ T28] audit: type=1326 audit(2000000038.610:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.6.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 153.011502][ T28] audit: type=1326 audit(2000000038.620:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.6.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 153.034995][ T28] audit: type=1326 audit(2000000038.620:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.6.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 153.080844][ T28] audit: type=1326 audit(2000000038.620:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.6.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 153.104389][ T28] audit: type=1326 audit(2000000038.620:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.6.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 153.128573][ T8198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.140931][ T28] audit: type=1326 audit(2000000038.620:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.6.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 153.178514][ T28] audit: type=1326 audit(2000000038.620:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.6.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 153.202054][ T28] audit: type=1326 audit(2000000038.620:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.6.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 153.244569][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.404490][T10136] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2101'. [ 153.473158][T10140] loop1: detected capacity change from 0 to 4096 [ 153.540653][T10140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.700703][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.075282][T10158] loop4: detected capacity change from 0 to 1024 [ 154.205434][T10158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 154.229375][T10158] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.385760][T10158] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.2109: lblock 3 mapped to illegal pblock 3 (length 3) [ 154.404057][T10158] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 154.425037][T10158] EXT4-fs (loop4): This should not happen!! Data will be lost [ 154.425037][T10158] [ 154.463937][ T51] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 154.498695][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 154.514574][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 154.514574][ T51] [ 154.526383][ T8198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 155.622981][T10246] loop4: detected capacity change from 0 to 128 [ 155.639157][T10246] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.664532][T10246] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.779658][ T8198] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.826721][T10259] __nla_validate_parse: 3 callbacks suppressed [ 155.826740][T10259] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.2146'. [ 157.221700][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2181'. [ 157.235696][T10371] erspan0: entered promiscuous mode [ 157.246217][T10371] macvtap1: entered promiscuous mode [ 157.286083][T10371] macvtap1: entered allmulticast mode [ 157.297662][T10371] erspan0: entered allmulticast mode [ 157.674362][T10372] erspan0: left allmulticast mode [ 157.679606][T10372] erspan0: left promiscuous mode [ 157.940499][T10407] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.961761][T10407] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 157.980197][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 157.980217][ T28] audit: type=1400 audit(2000000043.670:800): avc: denied { setattr } for pid=10375 comm="syz.2.2183" name="/" dev="configfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.043104][ T28] audit: type=1326 audit(2000000043.730:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz.4.2194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7911cbf79 code=0x0 [ 158.068996][T10407] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.079138][T10407] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 158.106757][T10407] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.164628][T10407] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 158.215372][T10407] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.234328][T10407] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 158.291102][ T1652] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.299744][ T1652] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 158.324561][ T1652] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.337641][ T1652] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 158.351108][ T1652] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.377639][ T1652] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 158.398993][ T1652] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.417479][ T1652] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 158.509085][ T28] audit: type=1400 audit(2000000044.200:802): avc: denied { mount } for pid=10439 comm="syz.2.2204" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 158.566936][ T28] audit: type=1400 audit(2000000044.250:803): avc: denied { search } for pid=10439 comm="syz.2.2204" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 158.597850][ T28] audit: type=1400 audit(2000000044.250:804): avc: denied { search } for pid=10439 comm="syz.2.2204" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 158.629362][ T28] audit: type=1400 audit(2000000044.250:805): avc: denied { read open } for pid=10439 comm="syz.2.2204" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 158.689150][T10454] netlink: 'syz.0.2208': attribute type 1 has an invalid length. [ 158.730682][T10454] 8021q: adding VLAN 0 to HW filter on device bond5 [ 158.767928][T10454] bond5: (slave gretap1): making interface the new active one [ 158.803360][ T28] audit: type=1400 audit(2000000044.490:806): avc: denied { name_bind } for pid=10461 comm="syz.6.2211" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 158.825532][T10454] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 159.162479][ T28] audit: type=1326 audit(2000000044.850:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9368eabf79 code=0x7ffc0000 [ 159.214751][ T28] audit: type=1326 audit(2000000044.850:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9368eabf79 code=0x7ffc0000 [ 159.290545][ T28] audit: type=1326 audit(2000000044.860:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9368eabf79 code=0x7ffc0000 [ 159.360811][T10502] bond2: entered allmulticast mode [ 159.366292][T10502] vcan1: entered allmulticast mode [ 159.372254][T10501] bond2: left allmulticast mode [ 159.380126][T10501] vcan1: left allmulticast mode [ 159.616435][T10518] loop4: detected capacity change from 0 to 1024 [ 159.635749][T10518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 159.654845][T10518] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.669107][T10518] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm syz.4.2234: lblock 8 mapped to illegal pblock 8 (length 8) [ 159.683835][T10518] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.2234: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 159.705211][T10518] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.2234: lblock 0 mapped to illegal pblock 0 (length 1) [ 159.718799][T10518] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 159.731453][T10518] EXT4-fs (loop4): This should not happen!! Data will be lost [ 159.731453][T10518] [ 159.755463][ T8198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 159.977781][T10538] io-wq is not configured for unbound workers [ 160.251517][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.290264][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.417582][T10559] loop4: detected capacity change from 0 to 128 [ 160.429451][T10559] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.442340][T10559] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.493072][ T8198] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.830157][T10569] loop1: detected capacity change from 0 to 512 [ 160.909886][T10569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.923242][T10569] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.697111][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.749737][T10615] loop1: detected capacity change from 0 to 128 [ 161.786773][T10615] bio_check_eod: 18 callbacks suppressed [ 161.786789][T10615] syz.1.2265: attempt to access beyond end of device [ 161.786789][T10615] loop1: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 161.806410][T10615] syz.1.2265: attempt to access beyond end of device [ 161.806410][T10615] loop1: rw=2049, sector=186, nr_sectors = 16 limit=128 [ 161.820447][T10615] syz.1.2265: attempt to access beyond end of device [ 161.820447][T10615] loop1: rw=2049, sector=218, nr_sectors = 16 limit=128 [ 161.834345][T10615] syz.1.2265: attempt to access beyond end of device [ 161.834345][T10615] loop1: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 161.848177][T10615] syz.1.2265: attempt to access beyond end of device [ 161.848177][T10615] loop1: rw=2049, sector=234, nr_sectors = 16 limit=128 [ 161.862139][T10615] syz.1.2265: attempt to access beyond end of device [ 161.862139][T10615] loop1: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 161.876592][T10615] syz.1.2265: attempt to access beyond end of device [ 161.876592][T10615] loop1: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 161.910641][T10615] syz.1.2265: attempt to access beyond end of device [ 161.910641][T10615] loop1: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 162.047001][T10629] syz_tun: entered allmulticast mode [ 162.056356][T10627] syz_tun: left allmulticast mode [ 162.125308][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2273'. [ 162.148849][T10637] team2: entered promiscuous mode [ 162.153982][T10637] team2: entered allmulticast mode [ 162.164770][T10637] 8021q: adding VLAN 0 to HW filter on device team2 [ 162.611920][T10650] syz_tun: entered allmulticast mode [ 162.664737][T10649] syz_tun: left allmulticast mode [ 163.069725][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 163.069744][ T28] audit: type=1326 audit(2000000048.760:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10651 comm="syz.6.2278" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc45d2abf79 code=0x0 [ 163.473577][ T28] audit: type=1326 audit(2000000049.160:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17102bf79 code=0x7ffc0000 [ 163.497670][ T28] audit: type=1326 audit(2000000049.160:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17102bf79 code=0x7ffc0000 [ 163.524008][ T28] audit: type=1326 audit(2000000049.160:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb17102bf79 code=0x7ffc0000 [ 163.549856][ T28] audit: type=1326 audit(2000000049.250:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17102bf79 code=0x7ffc0000 [ 163.579297][ T28] audit: type=1326 audit(2000000049.250:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17102bf79 code=0x7ffc0000 [ 163.941336][T10702] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.2294'. [ 164.076612][ T28] audit: type=1326 audit(2000000049.770:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.2.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17102bf79 code=0x7ffc0000 [ 164.100987][ T28] audit: type=1326 audit(2000000049.770:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.2.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17102bf79 code=0x7ffc0000 [ 164.126634][ T28] audit: type=1326 audit(2000000049.770:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.2.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb17102bf79 code=0x7ffc0000 [ 164.137540][T10711] pim6reg: entered allmulticast mode [ 164.151212][ T28] audit: type=1326 audit(2000000049.770:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.2.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17102bf79 code=0x7ffc0000 [ 164.210528][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'. [ 164.349517][T10725] loop1: detected capacity change from 0 to 128 [ 164.627279][ T1743] kworker/u8:6: attempt to access beyond end of device [ 164.627279][ T1743] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 164.649910][ T1743] kworker/u8:6: attempt to access beyond end of device [ 164.649910][ T1743] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 165.243746][T10759] bond0: option lp_interval: invalid value (0) [ 165.250011][T10759] bond0: option lp_interval: allowed values 1 - 2147483647 [ 165.423967][T10772] pim6reg: entered allmulticast mode [ 165.839529][T10722] syz.2.2304 (10722) used greatest stack depth: 6008 bytes left [ 165.934643][T10788] xt_hashlimit: size too large, truncated to 1048576 [ 166.670847][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2335'. [ 166.754580][T10803] netlink: 'syz.2.2334': attribute type 6 has an invalid length. [ 166.833449][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2341'. [ 166.849526][T10815] netlink: 'syz.6.2341': attribute type 1 has an invalid length. [ 167.323016][T10854] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 167.521719][T10873] loop4: detected capacity change from 0 to 128 [ 167.618787][T10873] bio_check_eod: 110 callbacks suppressed [ 167.618803][T10873] syz.4.2362: attempt to access beyond end of device [ 167.618803][T10873] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 167.638492][T10873] syz.4.2362: attempt to access beyond end of device [ 167.638492][T10873] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 167.653257][T10873] syz.4.2362: attempt to access beyond end of device [ 167.653257][T10873] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 167.668318][T10873] syz.4.2362: attempt to access beyond end of device [ 167.668318][T10873] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 167.682529][T10873] syz.4.2362: attempt to access beyond end of device [ 167.682529][T10873] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 167.697525][T10873] syz.4.2362: attempt to access beyond end of device [ 167.697525][T10873] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 167.711472][T10873] syz.4.2362: attempt to access beyond end of device [ 167.711472][T10873] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 167.725290][T10873] syz.4.2362: attempt to access beyond end of device [ 167.725290][T10873] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 167.739112][T10873] syz.4.2362: attempt to access beyond end of device [ 167.739112][T10873] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 167.752880][T10873] syz.4.2362: attempt to access beyond end of device [ 167.752880][T10873] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 167.967549][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2369'. [ 168.170975][T10901] team_slave_0: entered promiscuous mode [ 168.176729][T10901] team_slave_1: entered promiscuous mode [ 168.284652][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2378'. [ 168.293911][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2378'. [ 168.340294][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 168.340312][ T28] audit: type=1400 audit(2000000054.030:868): avc: denied { setopt } for pid=10917 comm="syz.2.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 168.416086][T10923] loop4: detected capacity change from 0 to 128 [ 168.529349][T10933] kernel profiling enabled (shift: 8) [ 168.710460][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2392'. [ 168.817820][T10954] loop4: detected capacity change from 0 to 512 [ 168.832586][T10954] EXT4-fs: Ignoring removed i_version option [ 168.839005][T10954] EXT4-fs: Ignoring removed bh option [ 168.862036][T10954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.897712][T10954] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.952320][ T8198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.997599][T10963] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 169.497285][ T28] audit: type=1400 audit(2000000055.180:869): avc: denied { cmd } for pid=10970 comm="syz.6.2410" path="socket:[41835]" dev="sockfs" ino=41835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 169.649102][ T28] audit: type=1400 audit(2000000055.340:870): avc: denied { listen } for pid=10977 comm="syz.0.2402" lport=37879 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 169.783363][ T28] audit: type=1326 audit(2000000055.470:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10987 comm="syz.2.2407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb17102bf79 code=0x0 [ 169.842089][ T28] audit: type=1326 audit(2000000055.530:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 169.869748][ T28] audit: type=1326 audit(2000000055.530:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 169.907864][ T28] audit: type=1326 audit(2000000055.570:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 169.938438][ T28] audit: type=1326 audit(2000000055.570:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 169.962530][ T28] audit: type=1326 audit(2000000055.570:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 170.031952][ T28] audit: type=1326 audit(2000000055.570:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.1.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 170.968891][T11023] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11023 comm=syz.1.2420 [ 171.165149][T11034] loop1: detected capacity change from 0 to 512 [ 171.181965][T11034] EXT4-fs: Ignoring removed oldalloc option [ 171.219557][T11034] EXT4-fs (loop1): 1 truncate cleaned up [ 171.234602][T11034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.279698][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.407036][T11047] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 171.771060][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 171.781424][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2438'. [ 171.948450][T11084] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2445'. [ 171.957898][T11084] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 172.021006][T11088] netlink: 'syz.1.2447': attribute type 21 has an invalid length. [ 172.030335][T11088] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.039933][T11088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.047225][T11088] IPv6: NLM_F_CREATE should be set when creating new route [ 172.054474][T11088] IPv6: NLM_F_CREATE should be set when creating new route [ 172.061694][T11088] IPv6: NLM_F_CREATE should be set when creating new route [ 172.121141][T11092] loop1: detected capacity change from 0 to 512 [ 172.128151][T11092] journal_path: Non-blockdev passed as './bus' [ 172.140893][T11092] EXT4-fs: error: could not find journal device path [ 172.512099][T11112] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2457'. [ 172.667115][T11126] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2463'. [ 172.772839][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2465'. [ 174.126452][ T1652] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.169746][ T1652] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.188801][ T6766] kernel read not supported for file bpf-prog (pid: 6766 comm: kworker/0:12) [ 174.193877][ T1652] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.264120][ T1652] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.594444][ T1743] team0: Port device team_slave_0 removed [ 175.162816][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 175.162835][ T28] audit: type=1400 audit(2000000060.850:934): avc: denied { ioctl } for pid=11212 comm="syz.4.2499" path="socket:[43195]" dev="sockfs" ino=43195 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.283930][T11213] syzkaller0: entered promiscuous mode [ 175.290689][T11213] syzkaller0: entered allmulticast mode [ 175.303812][T11218] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 175.324661][T11218] syzkaller0: Linktype set failed because interface is up [ 175.350254][ T1743] syzkaller0: tun_net_xmit 48 [ 175.419902][ T28] audit: type=1400 audit(2000000061.110:935): avc: denied { connect } for pid=11221 comm="syz.6.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.531066][T11231] loop2: detected capacity change from 0 to 256 [ 175.544546][T11232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2505'. [ 175.641017][ T3316] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 175.654739][ T3316] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 176.318206][T11270] chnl_net:caif_netlink_parms(): no params data found [ 176.374935][T11270] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.382175][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.389675][T11270] bridge_slave_0: entered allmulticast mode [ 176.396449][T11270] bridge_slave_0: entered promiscuous mode [ 176.405597][T11270] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.412737][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.420131][T11270] bridge_slave_1: entered allmulticast mode [ 176.426987][T11270] bridge_slave_1: entered promiscuous mode [ 176.449373][T11270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.460948][T11270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.487785][T11270] team0: Port device team_slave_0 added [ 176.495799][T11270] team0: Port device team_slave_1 added [ 176.515854][T11270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.522899][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.549247][T11270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.560882][T11270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.568114][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.594546][T11270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.626123][T11270] hsr_slave_0: entered promiscuous mode [ 176.632421][T11270] hsr_slave_1: entered promiscuous mode [ 176.638851][T11270] debugfs: 'hsr0' already exists in 'hsr' [ 176.644751][T11270] Cannot create hsr debugfs directory [ 176.747620][T11270] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.824813][T11270] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.866356][ T28] audit: type=1400 audit(2000000062.560:936): avc: denied { ioctl } for pid=11306 comm="syz.1.2536" path="socket:[43344]" dev="sockfs" ino=43344 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.909314][T11270] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.942353][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2539'. [ 177.031742][ T28] audit: type=1326 audit(2000000062.720:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11321 comm="syz.0.2541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9368eabf79 code=0x0 [ 177.079483][T11270] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.191814][T11270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.217765][T11270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.256100][T11270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.288660][T11270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.443868][T11270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.479169][T11270] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.508238][ T2000] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.515358][ T2000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.541931][ T2000] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.549073][ T2000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.712681][T11270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.887481][T11270] veth0_vlan: entered promiscuous mode [ 177.900148][T11270] veth1_vlan: entered promiscuous mode [ 177.947570][T11270] veth0_macvtap: entered promiscuous mode [ 177.949727][ T28] audit: type=1326 audit(2000000063.640:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11326 comm="syz.6.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7fc00000 [ 177.961770][T11270] veth1_macvtap: entered promiscuous mode [ 178.006960][T11270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.026483][T11270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.059670][ T3803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.073807][ T3803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.103687][ T3803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.119270][ T3803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.206704][ T6835] IPVS: starting estimator thread 0... [ 178.262913][T11422] loop3: detected capacity change from 0 to 128 [ 178.275144][T11422] FAT-fs (loop3): bogus number of reserved sectors [ 178.286757][T11422] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 178.297767][T11422] FAT-fs (loop3): Can't find a valid FAT filesystem [ 178.314235][T11415] IPVS: using max 2160 ests per chain, 108000 per kthread [ 178.414677][T11440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2554'. [ 178.828753][T11493] syzkaller0: entered allmulticast mode [ 178.834998][T11493] syzkaller0: entered promiscuous mode [ 178.844737][T11493] syzkaller0 (unregistering): left promiscuous mode [ 178.851434][T11493] syzkaller0 (unregistering): left allmulticast mode [ 178.875614][T11497] netlink: 'syz.0.2558': attribute type 8 has an invalid length. [ 178.883423][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2558'. [ 178.898818][T11497] bond0: entered promiscuous mode [ 178.905895][T11497] bond_slave_0: entered promiscuous mode [ 178.911680][T11497] bond_slave_1: entered promiscuous mode [ 178.927029][T11497] bond0: left promiscuous mode [ 178.940495][T11497] bond_slave_0: left promiscuous mode [ 178.966638][T11497] bond_slave_1: left promiscuous mode [ 179.435540][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2573'. [ 179.520607][ T28] audit: type=1326 audit(2000000065.210:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11555 comm="syz.3.2575" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fbeb7bf79 code=0x0 [ 179.562660][T11549] loop1: detected capacity change from 0 to 128 [ 179.663105][T11549] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.216786][ T28] audit: type=1326 audit(2000000065.910:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11547 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7911cbf79 code=0x7fc00000 [ 181.209835][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2585'. [ 181.234317][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2585'. [ 181.358375][ T28] audit: type=1400 audit(2000000067.050:941): avc: denied { setopt } for pid=11706 comm="syz.4.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 181.899010][T11743] loop3: detected capacity change from 0 to 256 [ 181.916662][T11743] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.966583][T11754] uprobe: syz.4.2600:11754 failed to unregister, leaking uprobe [ 182.912168][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2612'. [ 183.037933][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2615'. [ 183.078895][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2615'. [ 183.409153][T11811] syzkaller1: entered promiscuous mode [ 183.428117][T11811] syzkaller1: entered allmulticast mode [ 183.565109][ T28] audit: type=1400 audit(2000000069.260:942): avc: denied { accept } for pid=11812 comm="syz.3.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.653453][T11815] loop4: detected capacity change from 0 to 4096 [ 183.675518][T11815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.774098][ T8198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.406997][T11855] loop1: detected capacity change from 0 to 512 [ 184.425087][T11855] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.462311][T11855] EXT4-fs (loop1): 1 truncate cleaned up [ 184.475514][T11855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.631542][T11852] loop4: detected capacity change from 0 to 256 [ 184.648918][T11862] uprobe: syz.0.2640:11862 failed to unregister, leaking uprobe [ 184.657202][T11852] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.688677][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.864364][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2642'. [ 185.174596][T11889] netlink: 1315 bytes leftover after parsing attributes in process `syz.0.2652'. [ 185.393314][ T28] audit: type=1400 audit(2000000071.080:943): avc: denied { create } for pid=11912 comm="syz.3.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 186.079349][ T1652] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 186.112214][ T1652] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 186.144303][ T1652] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 186.176968][ T1652] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 186.202618][ T1652] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 186.236297][ T1652] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 186.275003][ T1652] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 186.288662][ T1652] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 186.328517][T11953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2679'. [ 186.458691][T11955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2680'. [ 186.509410][T11962] tipc: Failed to remove unknown binding: 66,1,1/0:2594573197/2594573199 [ 186.607887][T11969] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 186.847579][T11991] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 187.696773][T12023] loop1: detected capacity change from 0 to 512 [ 187.787106][T12023] EXT4-fs (loop1): 1 orphan inode deleted [ 187.804859][T12023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.859044][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.882230][T12031] netlink: 'syz.6.2708': attribute type 27 has an invalid length. [ 187.892812][T12031] macvlan2: left promiscuous mode [ 187.898408][T12031] ipip0: left promiscuous mode [ 187.903608][T12031] geneve2: left promiscuous mode [ 187.908910][T12031] team1: left promiscuous mode [ 187.913841][T12031] team1: left allmulticast mode [ 187.921975][T12031] veth4: left promiscuous mode [ 187.926865][T12031] veth4: left allmulticast mode [ 187.931932][T12031] team2: left promiscuous mode [ 187.937075][T12031] team2: left allmulticast mode [ 187.964957][T12033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.973185][T12033] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.982586][T12033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.274211][T11946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.647201][T12098] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2733'. [ 190.276751][T12124] loop1: detected capacity change from 0 to 512 [ 190.322228][T12124] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.362674][T12124] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 190.510075][T12124] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 190.532663][T12124] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 190.561023][T12124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.725197][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.863617][T12135] lo: Caught tx_queue_len zero misconfig [ 190.903582][T12135] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 191.400457][ T28] audit: type=1400 audit(2000000077.090:944): avc: denied { sys_nice } for pid=12149 comm="syz.3.2753" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 192.339451][ T28] audit: type=1400 audit(2000000078.030:945): avc: denied { create } for pid=12165 comm="syz.0.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.430953][ T28] audit: type=1400 audit(2000000078.060:946): avc: denied { connect } for pid=12165 comm="syz.0.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.564281][ T28] audit: type=1400 audit(2000000078.060:947): avc: denied { setopt } for pid=12165 comm="syz.0.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.706704][T12183] ref_ctr increment failed for inode: 0x992 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810a756c00 [ 192.735454][T12182] uprobe: syz.6.2766:12182 failed to unregister, leaking uprobe [ 192.879468][ T28] audit: type=1326 audit(2000000078.570:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12189 comm="syz.1.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 192.924175][ T28] audit: type=1326 audit(2000000078.570:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12189 comm="syz.1.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 192.959734][ T28] audit: type=1326 audit(2000000078.570:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12189 comm="syz.1.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 192.995105][ T28] audit: type=1326 audit(2000000078.570:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12189 comm="syz.1.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 193.028989][ T28] audit: type=1326 audit(2000000078.570:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12189 comm="syz.1.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 193.072922][ T28] audit: type=1326 audit(2000000078.610:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12189 comm="syz.1.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 193.220302][T12205] loop1: detected capacity change from 0 to 512 [ 193.234303][T12205] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 193.248872][T12205] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2776: Invalid block bitmap block 0 in block_group 0 [ 193.280158][T12205] loop1: lost filesystem error report for type 5 error -117 [ 193.280499][T12205] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 193.304222][T12205] loop1: lost filesystem error report for type 5 error -117 [ 193.304421][T12205] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.2776: attempt to clear invalid blocks 983261 len 1 [ 193.386862][T12205] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 193.387041][T12205] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.2776: Invalid inode table block 0 in block_group 0 [ 193.443827][T12205] loop1: lost filesystem error report for type 5 error -117 [ 193.444040][T12205] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 193.449155][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2778'. [ 193.470196][T12205] loop1: lost filesystem error report for type 5 error -117 [ 193.471257][T12205] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 193.550814][T12205] loop1: lost filesystem error report for type 5 error -117 [ 193.551041][T12205] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.2776: Invalid inode table block 0 in block_group 0 [ 193.588929][T12205] loop1: lost filesystem error report for type 5 error -117 [ 193.589325][T12205] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 193.639125][T12205] loop1: lost filesystem error report for type 5 error -117 [ 193.639353][T12205] EXT4-fs error (device loop1): ext4_truncate:4635: inode #11: comm syz.1.2776: mark_inode_dirty error [ 193.679707][T12205] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 193.679974][T12205] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 193.709676][T12205] loop1: lost filesystem error report for type 5 error -117 [ 193.711453][T12205] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.2776: Invalid inode table block 0 in block_group 0 [ 193.761778][T12205] loop1: lost filesystem error report for type 5 error -117 [ 193.762102][T12205] EXT4-fs (loop1): 1 truncate cleaned up [ 193.812066][T12205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.949624][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.110982][T12236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2787'. [ 194.144268][T12236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2787'. [ 194.853447][T12260] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2795'. [ 194.867400][T12260] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2795'. [ 195.133633][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2804'. [ 195.149251][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2804'. [ 195.415148][T12303] loop3: detected capacity change from 0 to 136 [ 195.877468][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.895460][T12328] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.902690][T12328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.152705][T12345] loop3: detected capacity change from 0 to 1024 [ 196.182852][T12345] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 196.214477][T12345] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 196.231400][T12345] EXT4-fs (loop3): invalid journal inode [ 196.244355][T12342] delete_channel: no stack [ 196.274390][T12345] EXT4-fs (loop3): can't get journal size [ 196.304628][T12345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.317218][T12351] netlink: 'syz.1.2831': attribute type 1 has an invalid length. [ 196.370259][T12351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.418633][T11270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.499864][T12351] bond1: (slave veth5): Enslaving as an active interface with a down link [ 196.536360][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2833'. [ 196.566147][T12353] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 196.605319][T12353] bond1: (slave batadv1): making interface the new active one [ 196.624725][T12353] batadv1: entered promiscuous mode [ 196.633326][T12353] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 196.725972][T12362] loop3: detected capacity change from 0 to 256 [ 196.732962][T12362] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.774932][T12355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.978705][T12362] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.037070][T12374] loop4: detected capacity change from 0 to 512 [ 197.050349][T12374] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.4.2838: corrupted xattr block 95: invalid header [ 197.050444][T12374] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 197.114658][T12374] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2838: bg 0: block 7: invalid block bitmap [ 197.114695][T12374] loop4: lost filesystem error report for type 5 error -117 [ 197.114916][T12374] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 197.115230][T12374] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.2838: corrupted xattr block 95: invalid header [ 197.115266][T12374] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 197.115527][T12374] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 197.115668][T12374] EXT4-fs (loop4): 1 orphan inode deleted [ 197.116476][T12374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.304042][ T8198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.413498][T12390] netlink: 'syz.3.2844': attribute type 27 has an invalid length. [ 197.498731][T12390] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.498877][T12390] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.559440][T12390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.561891][T12390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.665146][T12392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.680367][T12392] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.691752][T12392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.718156][ T3803] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.731554][ T3803] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.778326][T12396] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.812356][ T3803] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.830908][ T3803] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.850917][T12396] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.940442][T12396] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.019076][T12396] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.065960][T12407] lo speed is unknown, defaulting to 1000 [ 198.079488][ T3803] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.088558][T12407] lo speed is unknown, defaulting to 1000 [ 198.097384][T12407] lo speed is unknown, defaulting to 1000 [ 198.110557][T12407] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 198.127584][T12407] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 198.138254][ T3803] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.154668][ T3803] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.163289][ T3803] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.194228][T12407] lo speed is unknown, defaulting to 1000 [ 198.200576][T12407] lo speed is unknown, defaulting to 1000 [ 198.234823][T12407] lo speed is unknown, defaulting to 1000 [ 198.238851][T12421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2857'. [ 198.241273][T12407] lo speed is unknown, defaulting to 1000 [ 198.282005][T12407] lo speed is unknown, defaulting to 1000 [ 198.292821][T12407] lo speed is unknown, defaulting to 1000 [ 198.315010][T12407] lo speed is unknown, defaulting to 1000 [ 198.347379][T12407] lo speed is unknown, defaulting to 1000 [ 198.615990][T12447] netlink: 'syz.3.2858': attribute type 5 has an invalid length. [ 198.712307][T12457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2871'. [ 198.778206][T12461] siw: device registration error -23 [ 198.897516][T12469] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2875'. [ 199.480980][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 199.480998][ T28] audit: type=1400 audit(2000000085.170:959): avc: denied { watch watch_reads } for pid=12485 comm="syz.3.2880" path="/" dev="ramfs" ino=47706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 199.655324][T12488] loop3: detected capacity change from 0 to 164 [ 200.015207][T12502] netlink: 'syz.0.2887': attribute type 27 has an invalid length. [ 200.032250][T12502] geneve2: left promiscuous mode [ 200.037731][T12502] gtp0: left promiscuous mode [ 200.109151][T12510] loop1: detected capacity change from 0 to 256 [ 200.135600][T12502] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.152244][T12502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.321840][T12521] lo speed is unknown, defaulting to 1000 [ 200.574402][ T28] audit: type=1326 audit(2000000086.250:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7fc00000 [ 200.614287][ T28] audit: type=1326 audit(2000000086.250:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fbeb7bf79 code=0x7fc00000 [ 200.654181][ T28] audit: type=1326 audit(2000000086.250:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7fc00000 [ 200.724782][ T28] audit: type=1326 audit(2000000086.250:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7fc00000 [ 200.773255][ T28] audit: type=1326 audit(2000000086.250:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7fc00000 [ 200.849439][ T28] audit: type=1326 audit(2000000086.250:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7fc00000 [ 200.892485][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2895'. [ 200.912584][ T28] audit: type=1326 audit(2000000086.250:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7fc00000 [ 200.937194][T12521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2895'. [ 200.942043][T12541] netlink: 'syz.3.2903': attribute type 4 has an invalid length. [ 200.952665][T12521] geneve0: entered promiscuous mode [ 200.959517][ T28] audit: type=1326 audit(2000000086.250:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7fc00000 [ 200.978209][T12521] geneve0: entered allmulticast mode [ 200.994223][ T28] audit: type=1326 audit(2000000086.250:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.3.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7fc00000 [ 201.017855][T12543] netlink: 'syz.3.2903': attribute type 4 has an invalid length. [ 201.391910][T12563] bridge0: entered promiscuous mode [ 201.399614][T12563] macvtap2: entered promiscuous mode [ 201.413815][T12563] macvtap2: entered allmulticast mode [ 201.423829][T12583] loop3: detected capacity change from 0 to 256 [ 201.430499][T12563] bridge0: entered allmulticast mode [ 201.473570][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2922'. [ 201.495389][T12563] bridge0: port 3(macvtap2) entered blocking state [ 201.508133][T12563] bridge0: port 3(macvtap2) entered disabled state [ 201.581827][T12563] bridge0: left allmulticast mode [ 201.611912][T12563] bridge0: left promiscuous mode [ 201.758954][T12594] loop1: detected capacity change from 0 to 512 [ 201.760273][T12596] netlink: 'syz.3.2924': attribute type 1 has an invalid length. [ 201.792673][T12596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.808764][T12594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.812992][T12598] lo speed is unknown, defaulting to 1000 [ 201.822333][T12594] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.873610][T12596] bond1: (slave veth5): Enslaving as an active interface with a down link [ 201.926707][T12598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2926'. [ 201.942286][T12596] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 201.951540][T12596] bond1: (slave batadv1): making interface the new active one [ 201.960946][T12596] batadv1: entered promiscuous mode [ 201.966431][T12596] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 202.075539][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.150139][T12618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.188616][T12621] netlink: 'syz.1.2929': attribute type 27 has an invalid length. [ 202.232294][T12621] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.239677][T12621] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.274503][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2935'. [ 202.343390][T12621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.354050][T12621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.403821][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2938'. [ 202.453104][T12629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.462275][T12629] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.472610][T12629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.488130][ C0] vcan0: j1939_tp_rxtimer: 0xffff888121e5ec00: rx timeout, send abort [ 202.509581][ T51] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.526800][T12636] syz_tun: entered allmulticast mode [ 202.534977][ T51] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.544813][T12630] syz_tun: left allmulticast mode [ 202.550076][ T51] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.586421][ T51] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.634876][T12641] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 202.657129][T12641] bond2 (unregistering): Released all slaves [ 203.631956][T12664] batman_adv: batadv0: Adding interface: dummy0 [ 203.640931][T12664] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.667171][T12664] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 203.751655][T12670] lo speed is unknown, defaulting to 1000 [ 203.949772][T12695] loop1: detected capacity change from 0 to 512 [ 203.964836][T12695] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 203.992225][T12695] EXT4-fs (loop1): 1 truncate cleaned up [ 203.998651][T12695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.130430][T12697] macvtap1: entered promiscuous mode [ 204.138243][T12697] bridge0: entered promiscuous mode [ 204.145913][T12697] macvtap1: entered allmulticast mode [ 204.153731][T12697] bridge0: entered allmulticast mode [ 204.168599][T12697] bridge0: port 3(macvtap1) entered blocking state [ 204.179104][T12697] bridge0: port 3(macvtap1) entered disabled state [ 204.224957][T12697] bridge0: left allmulticast mode [ 204.230709][T12697] bridge0: left promiscuous mode [ 204.307558][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.457541][T12728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.516684][T12728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.591612][T12735] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÛß% [ 204.686056][T12733] syzkaller0: entered promiscuous mode [ 204.696182][T12733] syzkaller0: entered allmulticast mode [ 204.995924][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2983'. [ 205.015795][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2983'. [ 205.263154][T12749] bridge0: entered promiscuous mode [ 205.315854][T12749] macvtap1: entered promiscuous mode [ 205.345521][T12749] macvtap1: entered allmulticast mode [ 205.351395][T12749] bridge0: entered allmulticast mode [ 205.394905][T12749] bridge0: port 3(macvtap1) entered blocking state [ 205.402751][T12749] bridge0: port 3(macvtap1) entered disabled state [ 205.509644][T12749] bridge0: left allmulticast mode [ 205.526627][T12749] bridge0: left promiscuous mode [ 205.760573][T12769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.802605][T12769] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.822343][T12769] batman_adv: batadv0: Interface activated: dummy0 [ 205.836547][T12769] batadv0: mtu less than device minimum [ 205.843285][T12769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 205.854400][T12769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 205.865469][T12769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 205.876429][T12769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 205.887442][T12769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 205.898567][T12769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 205.909804][T12769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 205.920800][T12769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 205.931926][T12769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 206.149821][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3003'. [ 206.169206][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 206.169224][ T28] audit: type=1400 audit(2000000091.860:1030): avc: denied { getopt } for pid=12801 comm="syz.3.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.714300][T12819] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 206.796576][T12821] loop3: detected capacity change from 0 to 1024 [ 206.821532][T12821] EXT4-fs: Ignoring removed orlov option [ 206.857923][T12821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.022677][T11270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.052536][T12832] netlink: 'syz.0.3014': attribute type 10 has an invalid length. [ 207.353439][ T28] audit: type=1400 audit(2000000093.040:1031): avc: denied { append } for pid=12859 comm="syz.1.3027" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 207.503263][ T28] audit: type=1400 audit(2000000093.190:1032): avc: denied { accept } for pid=12854 comm="syz.3.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 207.545762][T12879] netlink: 'syz.6.3034': attribute type 4 has an invalid length. [ 207.566913][ T6768] lo speed is unknown, defaulting to 1000 [ 207.572703][ T6768] syz2: Port: 1 Link DOWN [ 207.656082][T12880] lo speed is unknown, defaulting to 1000 [ 207.828697][ T28] audit: type=1326 audit(2000000093.520:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12888 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 207.905137][ T28] audit: type=1326 audit(2000000093.550:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12888 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 207.967234][ T28] audit: type=1326 audit(2000000093.550:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12888 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 208.064474][ T28] audit: type=1326 audit(2000000093.550:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12888 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 208.155996][ T28] audit: type=1326 audit(2000000093.550:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12888 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 208.181655][T12898] loop4: detected capacity change from 0 to 164 [ 208.222407][T12869] loop1: detected capacity change from 0 to 2048 [ 208.224773][ T28] audit: type=1326 audit(2000000093.550:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12888 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 208.259467][T12898] ISOFS: unable to read i-node block [ 208.274403][T12898] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 208.303896][ T28] audit: type=1326 audit(2000000093.550:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12888 comm="syz.3.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 208.664942][T12869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.766618][T12869] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 208.795235][T12869] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 208.814804][T12869] EXT4-fs (loop1): This should not happen!! Data will be lost [ 208.814804][T12869] [ 208.827337][T12869] EXT4-fs (loop1): Total free blocks count 0 [ 208.842402][T12869] EXT4-fs (loop1): Free/Dirty block details [ 208.861982][T12869] EXT4-fs (loop1): free_blocks=2415919104 [ 208.869520][T12869] EXT4-fs (loop1): dirty_blocks=64 [ 208.876041][T12869] EXT4-fs (loop1): Block reservation details [ 208.884293][T12869] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 208.945300][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 209.084655][T12918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3048'. [ 209.414304][T12942] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3058'. [ 210.267791][T12951] loop1: detected capacity change from 0 to 1024 [ 210.301456][T12951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 210.333993][T12961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3064'. [ 210.353540][T12951] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.374770][T12951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3061'. [ 210.408984][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 210.436380][T12955] bridge0: entered promiscuous mode [ 210.451298][T12955] macvtap1: entered promiscuous mode [ 210.491242][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3064'. [ 210.491670][T12955] macvtap1: entered allmulticast mode [ 210.523687][T12973] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3066'. [ 210.524138][T12955] bridge0: entered allmulticast mode [ 210.570132][T12955] bridge0: port 3(macvtap1) entered blocking state [ 210.592509][T12955] bridge0: port 3(macvtap1) entered disabled state [ 210.636764][T12955] bridge0: left allmulticast mode [ 210.645509][T12955] bridge0: left promiscuous mode [ 211.666539][T13030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3090'. [ 211.685582][T13030] IPv6: Can't replace route, no match found [ 211.745681][T13019] bridge0: entered promiscuous mode [ 211.763274][T13019] macvtap0: entered promiscuous mode [ 211.819601][T13019] macvtap0: entered allmulticast mode [ 211.857737][T13019] bridge0: entered allmulticast mode [ 211.906110][T13019] bridge0: port 3(macvtap0) entered blocking state [ 211.915556][T13019] bridge0: port 3(macvtap0) entered disabled state [ 212.024272][T13019] bridge0: left allmulticast mode [ 212.030443][T13019] bridge0: left promiscuous mode [ 212.443888][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bd3fe00: rx timeout, send abort [ 212.481397][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 212.481415][ T28] audit: type=1400 audit(2000000098.170:1065): avc: denied { bind } for pid=13049 comm="syz.3.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 212.634923][ T28] audit: type=1400 audit(2000000098.300:1066): avc: denied { watch watch_reads } for pid=13051 comm="syz.3.3099" path="/proc/332" dev="proc" ino=49963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 212.906025][T13091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3112'. [ 212.920367][ T28] audit: type=1326 audit(2000000098.620:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.1.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 212.952256][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bd3fe00: abort rx timeout. Force session deactivation [ 212.982665][ T28] audit: type=1326 audit(2000000098.640:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.1.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 213.050165][ T28] audit: type=1326 audit(2000000098.640:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.1.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 213.114003][ T28] audit: type=1326 audit(2000000098.640:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.1.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 213.158789][ T28] audit: type=1326 audit(2000000098.640:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.1.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 213.257440][ T28] audit: type=1326 audit(2000000098.640:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.1.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 213.324168][ T28] audit: type=1326 audit(2000000098.640:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.1.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 213.395611][ T28] audit: type=1326 audit(2000000098.640:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.1.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2ecbf79 code=0x7ffc0000 [ 213.515034][ T30] batadv1: left promiscuous mode [ 214.161022][T13149] loop3: detected capacity change from 0 to 1024 [ 214.186599][T13139] lo speed is unknown, defaulting to 1000 [ 214.195448][T13149] EXT4-fs: Ignoring removed oldalloc option [ 214.237492][T13149] EXT4-fs: Ignoring removed bh option [ 214.430155][T13149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.283179][T13148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3119'. [ 215.347011][T11270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.969928][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3127'. [ 216.019372][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3127'. [ 216.958697][T13261] loop1: detected capacity change from 0 to 128 [ 217.085266][T13265] loop1: detected capacity change from 0 to 2048 [ 217.103549][T13265] EXT4-fs: Ignoring removed oldalloc option [ 217.125246][T13265] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 217.133534][T13265] System zones: 0-7 [ 217.144229][T13265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.217732][T13267] bridge_slave_1: left allmulticast mode [ 217.268681][T13267] bridge_slave_1: left promiscuous mode [ 217.274603][T13267] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.299670][ T8974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.672687][T13282] loop3: detected capacity change from 0 to 512 [ 217.698906][T13282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.723661][T13291] netlink: 'syz.4.3145': attribute type 10 has an invalid length. [ 217.747191][T13282] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.811578][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3147'. [ 217.844274][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3147'. [ 218.059055][T13291] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 218.096383][T11270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.379209][T13322] netlink: 'syz.4.3158': attribute type 1 has an invalid length. [ 218.401308][T13322] bond1: entered promiscuous mode [ 218.418953][T13322] bond1: entered allmulticast mode [ 218.424403][T13322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.443050][T13322] macvlan2: entered promiscuous mode [ 218.448581][T13322] macvlan2: entered allmulticast mode [ 218.455690][T13322] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 218.717845][T13339] loop4: detected capacity change from 0 to 1024 [ 218.752709][T13339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.773406][T13345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3167'. [ 218.793550][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3167'. [ 218.976933][T13356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3171'. [ 219.049669][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3173'. [ 219.322009][ T8198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.346268][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 219.346299][ T28] audit: type=1400 audit(2000000105.030:1095): avc: denied { setopt } for pid=13363 comm="syz.1.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.482381][T13373] xt_hashlimit: max too large, truncated to 1048576 [ 219.622087][T13380] loop1: detected capacity change from 0 to 512 [ 219.634740][T13380] EXT4-fs: Ignoring removed oldalloc option [ 219.661297][T13380] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 219.737078][T13380] EXT4-fs (loop1): 1 truncate cleaned up [ 219.758731][T13380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.777632][T13384] loop4: detected capacity change from 0 to 512 [ 219.817528][T13384] EXT4-fs: Ignoring removed i_version option [ 219.894172][T13384] EXT4-fs: Ignoring removed bh option [ 219.912402][ T8974] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 219.938299][T13384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.954314][ T8974] EXT4-fs (loop1): Remounting filesystem read-only [ 219.971531][T13384] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.084429][ T8198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.112132][T13392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3185'. [ 220.187191][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3187'. [ 220.306411][T13385] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.367805][ T28] audit: type=1400 audit(2000000106.040:1096): avc: denied { ioctl } for pid=13406 comm="syz.3.3192" path="socket:[51021]" dev="sockfs" ino=51021 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 220.611032][T13421] lo speed is unknown, defaulting to 1000 [ 220.675973][T13421] chnl_net:caif_netlink_parms(): no params data found [ 220.719950][T13421] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.727155][T13421] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.735032][T13421] bridge_slave_0: entered allmulticast mode [ 220.741495][T13421] bridge_slave_0: entered promiscuous mode [ 220.748701][T13421] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.755844][T13421] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.763201][T13421] bridge_slave_1: entered allmulticast mode [ 220.769843][T13421] bridge_slave_1: entered promiscuous mode [ 220.788857][T13421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.799822][T13421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.821861][T13421] team0: Port device team_slave_0 added [ 220.829041][T13421] team0: Port device team_slave_1 added [ 220.846539][T13421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.853630][T13421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.880545][T13421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.891909][T13421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.899005][T13421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.925649][T13421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.954968][T13421] hsr_slave_0: entered promiscuous mode [ 220.961155][T13421] hsr_slave_1: entered promiscuous mode [ 220.967180][T13421] debugfs: 'hsr0' already exists in 'hsr' [ 220.972907][T13421] Cannot create hsr debugfs directory [ 221.238715][T13421] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 221.249547][T13421] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 221.259425][T13421] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 221.269056][T13421] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 221.352737][T13421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.381157][T13421] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.401737][ T2000] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.409022][ T2000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.441503][ T2000] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.448703][ T2000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.551930][ T28] audit: type=1400 audit(2000000107.240:1097): avc: denied { ioctl } for pid=13509 comm="syz.0.3209" path="socket:[52516]" dev="sockfs" ino=52516 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.652951][T13421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.767540][T13531] team_slave_1: Caught tx_queue_len zero misconfig [ 222.049237][T13421] veth0_vlan: entered promiscuous mode [ 222.080068][T13421] veth1_vlan: entered promiscuous mode [ 222.233579][T13421] veth0_macvtap: entered promiscuous mode [ 222.280080][T13421] veth1_macvtap: entered promiscuous mode [ 222.335485][T13575] __nla_validate_parse: 1 callbacks suppressed [ 222.335506][T13575] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3220'. [ 222.369616][T13421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.417005][T13421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.427566][T13583] netlink: 'syz.3.3222': attribute type 10 has an invalid length. [ 222.455330][ T51] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.484313][ T30] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.494423][T13583] net_ratelimit: 11 callbacks suppressed [ 222.494590][T13583] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-224); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 222.535699][T13583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.563065][T13583] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 222.650161][ T30] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.674359][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.733653][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3226'. [ 222.786032][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3226'. [ 222.924414][ T61] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 222.946215][T13627] loop3: detected capacity change from 0 to 512 [ 222.991024][T13627] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 223.044384][T13627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 223.083300][T13627] System zones: 1-12 [ 223.118696][T13627] EXT4-fs (loop3): 1 truncate cleaned up [ 223.154768][T13627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.202881][T11270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.218308][T13645] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3233'. [ 223.226617][ T28] audit: type=1400 audit(2000000108.910:1098): avc: denied { nlmsg_read } for pid=13644 comm="syz.7.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.362502][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3238'. [ 223.399097][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3238'. [ 223.465676][ T2000] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 223.576460][T13679] loop7: detected capacity change from 0 to 512 [ 223.595414][T13679] EXT4-fs: Ignoring removed i_version option [ 223.617642][T13679] EXT4-fs: Ignoring removed bh option [ 223.661844][T13679] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.675224][T13679] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.736702][T13421] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.826559][T13693] netlink: 'syz.7.3244': attribute type 1 has an invalid length. [ 223.873581][T13696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3245'. [ 223.985641][ T28] audit: type=1400 audit(2000000109.670:1099): avc: denied { connect } for pid=13702 comm="syz.0.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.014945][ T1652] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 224.143952][T13722] xt_hashlimit: size too large, truncated to 1048576 [ 224.181046][T13723] lo speed is unknown, defaulting to 1000 [ 224.205103][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3253'. [ 224.217201][T13725] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3251'. [ 224.257456][T13728] loop7: detected capacity change from 0 to 1024 [ 224.299818][T13733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3255'. [ 224.328443][T13726] bridge_slave_0 (unregistering): left allmulticast mode [ 224.343058][T13728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.343422][T13726] bridge_slave_0 (unregistering): left promiscuous mode [ 224.377690][T13726] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.384077][ T28] audit: type=1400 audit(2000000110.060:1100): avc: denied { rename } for pid=13727 comm="syz.7.3254" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 224.439390][T13421] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.536013][ T28] audit: type=1400 audit(2000000110.230:1101): avc: denied { getopt } for pid=13750 comm="syz.7.3257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.574520][ T30] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 224.830756][ T28] audit: type=1326 audit(2000000110.520:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13780 comm="syz.4.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7911cbf79 code=0x7ffc0000 [ 224.877362][ T28] audit: type=1326 audit(2000000110.550:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13780 comm="syz.4.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff7911cbf79 code=0x7ffc0000 [ 224.920540][ T28] audit: type=1326 audit(2000000110.550:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13780 comm="syz.4.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7911cbf79 code=0x7ffc0000 [ 224.954593][ T28] audit: type=1326 audit(2000000110.550:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13780 comm="syz.4.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7911cbf79 code=0x7ffc0000 [ 224.980705][ T28] audit: type=1326 audit(2000000110.550:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13780 comm="syz.4.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff79118c84e code=0x7ffc0000 [ 225.020208][ T28] audit: type=1326 audit(2000000110.550:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13780 comm="syz.4.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff79118c84e code=0x7ffc0000 [ 225.043946][ T28] audit: type=1326 audit(2000000110.550:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13780 comm="syz.4.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7911cbf79 code=0x7ffc0000 [ 225.104171][ T30] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 225.133153][ T28] audit: type=1326 audit(2000000110.550:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13780 comm="syz.4.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7ff7911cbf79 code=0x7ffc0000 [ 225.208859][T13802] lo speed is unknown, defaulting to 1000 [ 225.250871][T13796] loop3: detected capacity change from 0 to 512 [ 225.272985][T13796] EXT4-fs: Invalid want_extra_isize 64870 [ 225.460017][ T1652] bridge_slave_1: left allmulticast mode [ 225.471132][ T1652] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.487812][ T1652] bridge_slave_0: left allmulticast mode [ 225.497682][ T1652] bridge_slave_0: left promiscuous mode [ 225.509735][ T1652] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.667490][T13829] xt_hashlimit: size too large, truncated to 1048576 [ 225.684198][ T51] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 225.878502][ T1652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.907792][ T1652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.938255][ T1652] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 225.966376][ T1652] bond0 (unregistering): Released all slaves [ 225.989229][ T1652] bond1 (unregistering): (slave veth5): Releasing active interface [ 226.012738][ T1652] bond1 (unregistering): (slave batadv1): Releasing active interface [ 226.037187][ T1652] bond1 (unregistering): Released all slaves [ 226.050790][T13832] bridge_slave_0 (unregistering): left allmulticast mode [ 226.058217][T13832] bridge_slave_0 (unregistering): left promiscuous mode [ 226.066467][T13832] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.098597][ T1652] IPVS: stopping master sync thread 11047 ... [ 226.144333][ T1652] hsr_slave_0: left promiscuous mode [ 226.159546][ T1652] hsr_slave_1: left promiscuous mode [ 226.174675][ T1652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.224171][ T51] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 226.239228][ T1652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.425584][ T1652] team0 (unregistering): Port device team_slave_1 removed [ 226.444637][ T1652] team0 (unregistering): Port device team_slave_0 removed [ 226.666847][T13903] netlink: 'syz.0.3297': attribute type 4 has an invalid length. [ 226.699806][T13903] netlink: 'syz.0.3297': attribute type 4 has an invalid length. [ 226.775738][ T61] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 227.108484][T13938] netlink: 'syz.3.3302': attribute type 1 has an invalid length. [ 227.131553][T13938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.160580][T13938] bond2: (slave veth7): Enslaving as an active interface with a down link [ 227.246460][T13938] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 227.253955][T13938] bond2: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 227.305248][ T1652] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 227.854198][ T1652] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 228.299282][T13984] lo speed is unknown, defaulting to 1000 [ 228.306014][T13984] lo speed is unknown, defaulting to 1000 [ 228.311942][T13984] lo speed is unknown, defaulting to 1000 [ 228.350202][T13984] infiniband syz0: set active [ 228.355017][T13984] infiniband syz0: added lo [ 228.360073][ T6831] lo speed is unknown, defaulting to 1000 [ 228.389670][T13984] RDS/IB: syz0: added [ 228.393751][T13984] smc: adding ib device syz0 with port count 1 [ 228.394286][ T9851] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 228.399992][T13984] smc: ib device syz0 port 1 has no pnetid [ 228.421292][T13984] lo speed is unknown, defaulting to 1000 [ 228.458309][T13984] lo speed is unknown, defaulting to 1000 [ 228.495960][T13984] lo speed is unknown, defaulting to 1000 [ 228.535004][T13984] lo speed is unknown, defaulting to 1000 [ 228.573605][T13984] lo speed is unknown, defaulting to 1000 [ 228.610944][T13984] lo speed is unknown, defaulting to 1000 [ 228.648670][T13984] lo speed is unknown, defaulting to 1000 [ 228.686944][T13984] lo speed is unknown, defaulting to 1000 [ 228.727525][ T6831] lo speed is unknown, defaulting to 1000 [ 228.817367][T13987] xt_hashlimit: size too large, truncated to 1048576 [ 228.883238][T13991] __nla_validate_parse: 5 callbacks suppressed [ 228.883259][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3317'. [ 228.918491][T13991] bridge_slave_0 (unregistering): left allmulticast mode [ 228.925910][ T30] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 228.953557][T13991] bridge_slave_0 (unregistering): left promiscuous mode [ 228.963143][T13991] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.975677][T13994] loop4: detected capacity change from 0 to 1024 [ 229.006151][T13994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.031973][T13994] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.3319: Allocating blocks 497-513 which overlap fs metadata [ 229.134528][T13993] EXT4-fs (loop4): pa ffff8881079e6700: logic 16, phys. 129, len 24 [ 229.142588][T13993] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 229.166858][ T8198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.272377][T14010] veth12: entered promiscuous mode [ 229.284999][T14010] veth12: entered allmulticast mode [ 229.457032][ T61] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 229.529055][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3333'. [ 229.891635][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 229.891652][ T28] audit: type=1400 audit(2000000115.580:1116): avc: denied { mounton } for pid=14049 comm="syz.0.3341" path=2F3732332FE91F7189591E9233614B dev="tmpfs" ino=3758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 230.004919][ T30] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 230.186413][T14062] netlink: 'syz.6.3346': attribute type 1 has an invalid length. [ 230.242169][T14062] bond3: entered promiscuous mode [ 230.277160][T14062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.329727][T14062] bond3: (slave bridge4): making interface the new active one [ 230.341358][T14062] bridge4: entered promiscuous mode [ 230.350692][T14062] bridge4: left promiscuous mode [ 230.364320][ T28] audit: type=1326 audit(2000000116.050:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.3.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 230.393289][ T28] audit: type=1326 audit(2000000116.050:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.3.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 230.417499][ T28] audit: type=1326 audit(2000000116.050:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.3.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 230.441639][ T28] audit: type=1326 audit(2000000116.090:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.3.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 230.471103][ T28] audit: type=1326 audit(2000000116.090:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.3.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 230.498779][ T28] audit: type=1326 audit(2000000116.090:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.3.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 230.524074][ T28] audit: type=1326 audit(2000000116.090:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.3.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 230.549177][ T61] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 230.568119][ T28] audit: type=1326 audit(2000000116.090:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.3.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 230.592149][ T28] audit: type=1326 audit(2000000116.090:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz.3.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fbeb7bf79 code=0x7ffc0000 [ 230.711716][T14088] loop7: detected capacity change from 0 to 1024 [ 230.738200][T14093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3354'. [ 230.774769][T14088] EXT4-fs: Ignoring removed oldalloc option [ 230.780762][T14088] EXT4-fs: Ignoring removed bh option [ 230.844354][T14101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3362'. [ 230.863585][T14088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.070941][ T61] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 232.079609][ T30] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 232.110294][T13421] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.178005][T14156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3380'. [ 232.206285][ T30] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.216265][T14156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3380'. [ 232.234288][ T30] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.243255][ T30] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.281979][ T30] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.319846][T14163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3384'. [ 232.476929][T14169] netlink: 'syz.6.3387': attribute type 2 has an invalid length. [ 232.485615][T14169] netlink: 'syz.6.3387': attribute type 1 has an invalid length. [ 232.523046][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3388'. [ 232.554430][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3388'. [ 232.620409][T14181] loop3: detected capacity change from 0 to 256 [ 232.644408][ T61] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 232.673106][T14184] loop4: detected capacity change from 0 to 1024 [ 232.697991][T14184] EXT4-fs: Ignoring removed oldalloc option [ 232.718917][T14184] EXT4-fs: Ignoring removed bh option [ 232.744898][T14184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.194336][ T51] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 233.468847][T14184] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.3392: Allocating blocks 1-17 which overlap fs metadata [ 233.524373][T14192] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.3392: Allocating blocks 1-17 which overlap fs metadata [ 233.724224][ T9851] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 233.849115][ T8198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.900646][T14212] netlink: 'syz.4.3402': attribute type 1 has an invalid length. [ 233.962889][T14212] bond2: entered promiscuous mode [ 234.016269][T14212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.064630][T14223] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 234.204714][T14212] bond2: (slave bridge4): making interface the new active one [ 234.244275][T14212] bridge4: entered promiscuous mode [ 234.270067][T14212] bridge4: left promiscuous mode [ 234.290175][ T61] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 234.307480][T14231] IPv6: addrconf: prefix option has invalid lifetime [ 234.757809][T14248] netlink: 'syz.6.3412': attribute type 1 has an invalid length. [ 234.834080][T14248] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 234.864280][ T51] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 234.885124][T14248] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 234.896188][T14248] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 235.416002][ T51] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 235.599930][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 235.599946][ T28] audit: type=1326 audit(2000000121.290:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.6.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 235.663092][ T28] audit: type=1326 audit(2000000121.290:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.6.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 235.716974][ T28] audit: type=1326 audit(2000000121.290:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.6.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 235.770401][ T28] audit: type=1326 audit(2000000121.290:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.6.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 235.804045][T14256] loop7: detected capacity change from 0 to 2048 [ 235.822627][ T28] audit: type=1326 audit(2000000121.290:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.6.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 235.895714][ T28] audit: type=1326 audit(2000000121.290:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.6.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 235.934661][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 235.951700][ T61] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 236.019900][ T28] audit: type=1326 audit(2000000121.290:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.6.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 236.072623][T14256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.123162][T14256] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 236.151005][T14256] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 236.164922][T14256] EXT4-fs (loop7): This should not happen!! Data will be lost [ 236.164922][T14256] [ 236.208951][T14256] EXT4-fs (loop7): Total free blocks count 0 [ 236.232147][T14256] EXT4-fs (loop7): Free/Dirty block details [ 236.260617][T14256] EXT4-fs (loop7): free_blocks=2415919104 [ 236.295655][T14256] EXT4-fs (loop7): dirty_blocks=64 [ 236.321007][T14256] EXT4-fs (loop7): Block reservation details [ 236.346986][T14256] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 236.403402][ T30] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 236.421396][ T28] audit: type=1326 audit(2000000121.290:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.6.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 236.492928][ T28] audit: type=1326 audit(2000000121.290:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.6.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 236.518936][ T61] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 236.562817][ T6831] IPVS: starting estimator thread 0... [ 236.583911][ T28] audit: type=1326 audit(2000000121.290:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.6.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45d2abf79 code=0x7ffc0000 [ 236.655054][T14303] IPVS: using max 1728 ests per chain, 86400 per kthread [ 236.674048][T14254] loop3: detected capacity change from 0 to 1024 [ 236.712616][T14308] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.3444'. [ 236.733954][T14254] EXT4-fs: Ignoring removed orlov option [ 236.741479][T14308] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3444'. [ 236.798590][T14254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.915136][T11270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.960651][T14317] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 237.054220][ T51] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 237.143363][T14334] netlink: 'syz.4.3446': attribute type 4 has an invalid length. [ 237.162715][T14334] netlink: 'syz.4.3446': attribute type 4 has an invalid length. [ 237.235446][T14334] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.242729][T14334] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.256051][T14334] team_slave_1: left promiscuous mode [ 237.338794][T14334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.351400][T14334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.442598][ T30] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.456398][ T30] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.474255][ T30] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.490894][ T30] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.513722][ T30] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.525548][ T30] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.537592][ T30] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.556396][ T30] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.577462][ T30] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.594053][ T30] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.618225][ T30] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.634646][ T30] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.987162][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3462'. [ 238.533997][T14424] loop7: detected capacity change from 0 to 2048 [ 238.617389][T14424] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.634174][ T51] net_ratelimit: 2 callbacks suppressed [ 238.634268][ T51] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 238.812272][T14424] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 238.850842][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3471'. [ 238.900852][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3471'. [ 239.139266][ T51] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 239.174224][ T51] EXT4-fs (loop7): This should not happen!! Data will be lost [ 239.174224][ T51] [ 239.214592][ T61] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-224); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 239.234298][ T51] EXT4-fs (loop7): Total free blocks count 0 [ 239.252214][ T51] EXT4-fs (loop7): Free/Dirty block details [ 239.274174][ T51] EXT4-fs (loop7): free_blocks=4096 [ 239.279452][ T51] EXT4-fs (loop7): dirty_blocks=928 [ 239.310470][ T51] EXT4-fs (loop7): Block reservation details [ 239.324262][ T51] EXT4-fs (loop7): i_reserved_data_blocks=58 [ 239.336316][ T1652] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 896 with error 28 [ 239.591520][T14501] netlink: 'syz.3.3486': attribute type 4 has an invalid length. [ 239.627150][T14501] netlink: 'syz.3.3486': attribute type 4 has an invalid length. [ 239.635708][ T6837] lo speed is unknown, defaulting to 1000 [ 239.641464][ T6837] syz0: Port: 1 Link DOWN [ 239.660972][ T6839] lo speed is unknown, defaulting to 1000 [ 239.766546][T14501] batman_adv: batadv0: Interface deactivated: dummy0 [ 239.790859][ T6839] lo speed is unknown, defaulting to 1000 [ 239.804597][ T6837] lo speed is unknown, defaulting to 1000 [ 239.835103][T14510] lo speed is unknown, defaulting to 1000 [ 239.845252][T14510] lo speed is unknown, defaulting to 1000 [ 239.874299][T14514] loop3: detected capacity change from 0 to 1024 [ 239.889880][T14514] EXT4-fs: Ignoring removed oldalloc option [ 239.907456][T14514] EXT4-fs: Ignoring removed bh option [ 239.957434][T14514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.238003][T14514] ================================================================== [ 240.246169][T14514] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 240.254114][T14514] [ 240.256456][T14514] write to 0xffff88811b13a164 of 4 bytes by task 14518 on cpu 0: [ 240.264188][T14514] xas_set_mark+0x12b/0x140 [ 240.268724][T14514] __folio_start_writeback+0x17b/0x370 [ 240.274212][T14514] ext4_bio_write_folio+0x5ad/0x9f0 [ 240.279446][T14514] mpage_process_page_bufs+0x4a1/0x620 [ 240.284940][T14514] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 240.290785][T14514] ext4_do_writepages+0x9f6/0x2800 [ 240.295930][T14514] ext4_writepages+0x18f/0x320 [ 240.300735][T14514] do_writepages+0x1c6/0x310 [ 240.305343][T14514] file_write_and_wait_range+0x178/0x2f0 [ 240.311029][T14514] generic_buffers_fsync_noflush+0x45/0x130 [ 240.316966][T14514] ext4_sync_file+0x1aa/0x680 [ 240.321665][T14514] vfs_fsync_range+0xc5/0xe0 [ 240.326286][T14514] ext4_buffered_write_iter+0x34f/0x3c0 [ 240.331858][T14514] ext4_file_write_iter+0x380/0xf70 [ 240.337066][T14514] iter_file_splice_write+0x6bc/0xa80 [ 240.342471][T14514] direct_splice_actor+0x156/0x2a0 [ 240.347606][T14514] splice_direct_to_actor+0x311/0x670 [ 240.353020][T14514] do_splice_direct+0x119/0x1a0 [ 240.357934][T14514] do_sendfile+0x382/0x650 [ 240.362390][T14514] __x64_sys_sendfile64+0x105/0x150 [ 240.367615][T14514] x64_sys_call+0x2dc4/0x3020 [ 240.372324][T14514] do_syscall_64+0x12c/0x370 [ 240.376955][T14514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.382909][T14514] [ 240.385244][T14514] read to 0xffff88811b13a164 of 4 bytes by task 14514 on cpu 1: [ 240.392890][T14514] __writeback_single_inode+0x1f2/0x6e0 [ 240.398455][T14514] writeback_single_inode+0x16d/0x3f0 [ 240.403857][T14514] sync_inode_metadata+0x6e/0xa0 [ 240.408816][T14514] generic_buffers_fsync_noflush+0xee/0x130 [ 240.414774][T14514] ext4_sync_file+0x1aa/0x680 [ 240.419485][T14514] vfs_fsync_range+0xc5/0xe0 [ 240.424249][T14514] ext4_buffered_write_iter+0x34f/0x3c0 [ 240.429848][T14514] ext4_file_write_iter+0x380/0xf70 [ 240.435075][T14514] iter_file_splice_write+0x6bc/0xa80 [ 240.440492][T14514] direct_splice_actor+0x156/0x2a0 [ 240.445638][T14514] splice_direct_to_actor+0x311/0x670 [ 240.451051][T14514] do_splice_direct+0x119/0x1a0 [ 240.455940][T14514] do_sendfile+0x382/0x650 [ 240.460396][T14514] __x64_sys_sendfile64+0x105/0x150 [ 240.465685][T14514] x64_sys_call+0x2dc4/0x3020 [ 240.470393][T14514] do_syscall_64+0x12c/0x370 [ 240.475028][T14514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.480944][T14514] [ 240.483273][T14514] value changed: 0x0a000021 -> 0x04000021 [ 240.488995][T14514] [ 240.491330][T14514] Reported by Kernel Concurrency Sanitizer on: [ 240.497505][T14514] CPU: 1 UID: 0 PID: 14514 Comm: syz.3.3491 Tainted: G W syzkaller #0 PREEMPT(full) [ 240.508474][T14514] Tainted: [W]=WARN [ 240.512286][T14514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 240.522353][T14514] ================================================================== [ 240.826813][T11270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.