last executing test programs: 3m11.203880082s ago: executing program 1 (id=523): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000200)=0x7fff, 0x4) 3m11.182370218s ago: executing program 1 (id=524): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, 0x0, &(0x7f0000000600)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') readv(r0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/156, 0x9c}, {0x0, 0x300}], 0x2) 3m10.557776683s ago: executing program 1 (id=533): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r2, 0x7}, 0x14, 0x0}}], 0x1, 0x80) 3m10.488301281s ago: executing program 1 (id=535): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@debug}, {@acl}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0xb6c, &(0x7f00000017c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) 3m10.256957338s ago: executing program 1 (id=540): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x8, 0x6, 0xff7f, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x1, 0xfffffffffffffffe}}) 3m9.788096802s ago: executing program 1 (id=547): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x6, 0xc9fa75ff70186347}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x800) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x9) 3m9.787962102s ago: executing program 32 (id=547): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x6, 0xc9fa75ff70186347}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x800) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x9) 2m45.468180902s ago: executing program 2 (id=892): socket$inet6(0xa, 0x3, 0xff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xdffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 2m45.328161166s ago: executing program 2 (id=896): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) 2m44.5346309s ago: executing program 2 (id=905): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10001}, 0x1c) listen(r1, 0x6) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2m44.509360526s ago: executing program 2 (id=907): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080), 0x1, 0x7b9, &(0x7f00000007c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffff7, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x3]}) unlink(&(0x7f0000000080)='./file1\x00') 2m44.069988745s ago: executing program 2 (id=912): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[], 0x200002e6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80214, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) fcntl$setpipe(r0, 0x407, 0x7000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 2m43.225128919s ago: executing program 2 (id=919): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x800, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xf7f8000000000001, 0xffffffffffffffff, 0xa) r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x1, 0xffffffbc, 0x333}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) socket$inet6_sctp(0xa, 0x4, 0x84) read$eventfd(r1, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 2m43.193057174s ago: executing program 33 (id=919): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x800, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xf7f8000000000001, 0xffffffffffffffff, 0xa) r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x1, 0xffffffbc, 0x333}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) socket$inet6_sctp(0xa, 0x4, 0x84) read$eventfd(r1, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 2m22.33079228s ago: executing program 0 (id=1203): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x35}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m22.265602008s ago: executing program 0 (id=1205): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x4cfb, 0x80, 0x1, 0x135}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m22.131370493s ago: executing program 0 (id=1211): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 2m21.535146993s ago: executing program 0 (id=1216): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) 2m21.477764873s ago: executing program 0 (id=1219): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) lsm_get_self_attr(0x67, 0xffffffffffffffff, &(0x7f0000000080), 0x1) 2m20.986520812s ago: executing program 0 (id=1227): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x625, 0x4c1, 0xc1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88020cc, 0x1000000000000000) 2m20.948699885s ago: executing program 34 (id=1227): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x625, 0x4c1, 0xc1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88020cc, 0x1000000000000000) 3.605014953s ago: executing program 4 (id=2993): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) io_uring_enter(r2, 0x40044fd, 0x40000003, 0x28, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) 3.442919663s ago: executing program 3 (id=2996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 3.308374608s ago: executing program 3 (id=2997): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x7fc4, 0x4) 3.144601319s ago: executing program 7 (id=2999): r0 = gettid() sigaltstack(&(0x7f00000000c0)={0x0, 0x1}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) r3 = socket$key(0xf, 0x3, 0x2) wait4(r0, &(0x7f0000000600), 0x1, 0x0) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300030e000000002800000000000004000900a800b0f453bb467d04f14562c5f463273ef4a720564f485af200000003000600000000000200100000000000000000000000000002000100000000000000060d000000000300050000000000020000"], 0x70}, 0x1, 0x7}, 0x0) 2.17217663s ago: executing program 7 (id=3001): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fb, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 1.916029532s ago: executing program 3 (id=3002): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 1.755723613s ago: executing program 5 (id=3003): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1.643633872s ago: executing program 6 (id=3004): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r1 = getpid() tgkill(r1, r0, 0xf) 1.232035577s ago: executing program 7 (id=3005): socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00005af000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f00005ad000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00005ae000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x83, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0xffff}, {0xe, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.131645358s ago: executing program 7 (id=3006): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x35, &(0x7f0000000100)=[{&(0x7f0000000040)="a905000000007464000100000000ae5774ee54bbda4c1a986374", 0x1a}, {&(0x7f0000000000)="57870d9335908e477aa0b126ab404be6802c", 0x12}], 0x2}}], 0x1, 0x24004044) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000006c0), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) 861.099548ms ago: executing program 3 (id=3007): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x18, 0x32, 0xe72c5f922f23cad9, 0x70bd28, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc1920335b598980a}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 860.562028ms ago: executing program 7 (id=3017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) 860.077048ms ago: executing program 6 (id=3008): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 700.807249ms ago: executing program 7 (id=3009): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x371d, &(0x7f0000000100)={0x0, 0xc9bd, 0x8, 0x3, 0x801ef}, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 650.53394ms ago: executing program 5 (id=3010): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsa(0x0, 0xfffffffffffffe00, 0x4501) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) dup(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x60, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x2a, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1}]}}}}}}, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 571.545435ms ago: executing program 6 (id=3011): syz_io_uring_setup(0x10d3, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x20, 0x5, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd3e, 0x25dfdbfc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0080c0}, 0x0) sendmsg$inet(r0, &(0x7f0000000d00)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="4efe54a7f754a53dc2c98b39f023c8cf5245dc1b31fef34fe2bff5955810fcad084f2dc6e7871c98c1e01fe0230f073d33d984c80bfcde5e", 0x38}], 0x1, &(0x7f0000000c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x84) 571.060565ms ago: executing program 4 (id=3012): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendto$inet(r2, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$notify(0xffffffffffffffff, 0x402, 0xda92b92eb38eb61c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000480)={[{@fat=@dos1xfloppy}, {@fat=@fmask={'fmask', 0x3d, 0x9}}, {@rodir}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}]}, 0x0, 0x284, &(0x7f0000000700)="$eJzs3E9rE10Ux/Ffk/5NaZPFwwMK4kE3uhna+AqCtCAGKrURdSFM7URDxqRkYiUitju3vguhuHQnqG+gG3fuxU0RBDddiJEmmSatgbbaONF8PxDmZs6czL2TmXBmIHf75vMHxXwQU0tM2tCOlNLeKg21YxrSqDpt6OLk1w9nrt+6fTWTze7G5jNLl9JmNn32zaMnL8+9q07eeDX9ekxbqTvbX9Ift/7fOrX9fSn89HLVXFsul6vusu/ZSiEoOmbXfM8NPCuUAq+yL573y6urNXNLK1OJ1YoXBOaWalb0alYtW7VSM/eeWyiZ4zg2ldCgiR87I7e5uOhmetIZRGGi28pKJePGuwZzm3+iUwAAoL+06n8n71YVG7ffrP/nFs2OVv/fLwRWCKx0WP0fE/V/71D/D4Ld+j/Run73o/4HAAAAAAAAAAAAAAAAAAAAAOBvsFOvJ+v1ejJchq8xSeOSwvdR9xO9wfc/2Dr+uDcu+c/Wcmu55rIZz+RVkC9PMyPSt8b50NJsz1/Jzs1YQ0pv/fVW/vpaLq6xMD+U6p4/28y3/fkjSnTuP62k/uuen+6aP6oL5zvyHSX1/q7K8rXSOK/b+U9nzS4vZA/kTzS2AwAAAADgX+DYnp/u3xtxx8JpQw7EmyvbzweUPOT5wIH762GdHo5u3AAAAAAADJKg9rjo+r5XoXGcxkKPDt2LfhlgPzRikiLa+2dJ/XEQTrTx6WHzqj/KxlH/MgEAAAA4ae2iP+qeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuI46eVi4/a/MPdaxu3g0owQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6w48AAAD//0zfHpw=") 519.091856ms ago: executing program 3 (id=3013): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r2 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/136, 0x88}], 0x1}, 0x7}], 0x1, 0x40012023, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 472.017887ms ago: executing program 4 (id=3014): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) r2 = syz_io_uring_setup(0x1ca0, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) 452.493053ms ago: executing program 5 (id=3015): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x200047bc, 0x0, 0x0, 0x0, 0x5e) 336.646522ms ago: executing program 6 (id=3016): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 298.092225ms ago: executing program 3 (id=3018): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000340)=ANY=[], 0xa) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 286.921753ms ago: executing program 6 (id=3019): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}]}]}, 0x16c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@local}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) 264.216079ms ago: executing program 6 (id=3020): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x1fc, 0x0) 160.42017ms ago: executing program 4 (id=3021): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 114.500872ms ago: executing program 5 (id=3022): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r3}, 0x8) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 100.250938ms ago: executing program 4 (id=3023): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x7e}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x1, 0x5c9}, 0x8) 91.550797ms ago: executing program 5 (id=3024): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000300)=""/60, 0x3c) unlinkat(r1, &(0x7f0000000100)='./bus\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getdents(r2, 0xfffffffffffffffd, 0x58) 523.59µs ago: executing program 5 (id=3025): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc800, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 0s ago: executing program 4 (id=3026): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x10000002, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x200204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)="580000001500edd427323b470c45b65602067fffffff81004e2203584f5a29857c30b60bcb0d0032ff0028925aa8002040eaa57b00090080020efffeffe8093a0400080600ffffffffffffffffffffe7ee00000000000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): debugfs directory [ 134.989490][ T8376] loop7: detected capacity change from 0 to 128 [ 135.094384][ T8376] syz.7.1496: attempt to access beyond end of device [ 135.094384][ T8376] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 135.108471][ T8376] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 135.122288][ T8376] syz.7.1496: attempt to access beyond end of device [ 135.122288][ T8376] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 135.160212][ T8376] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 135.204723][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1497'. [ 135.229102][ T8381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1498'. [ 135.247910][ T8381] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1498'. [ 135.257680][ T8381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1498'. [ 135.267178][ T8381] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1498'. [ 135.375776][ T8323] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 135.408518][ T8323] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 135.419463][ T8323] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 135.434937][ T8323] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 135.533512][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.586256][ T8402] loop7: detected capacity change from 0 to 256 [ 135.598902][ T8402] FAT-fs (loop7): Directory bread(block 64) failed [ 135.609784][ T8402] FAT-fs (loop7): Directory bread(block 65) failed [ 135.623856][ T8402] FAT-fs (loop7): Directory bread(block 66) failed [ 135.632592][ T8402] FAT-fs (loop7): Directory bread(block 67) failed [ 135.638899][ T8323] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.652526][ T8402] FAT-fs (loop7): Directory bread(block 68) failed [ 135.659125][ T8402] FAT-fs (loop7): Directory bread(block 69) failed [ 135.668725][ T2391] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.675831][ T2391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.700632][ T2391] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.707759][ T2391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.715627][ T8402] FAT-fs (loop7): Directory bread(block 70) failed [ 135.722181][ T8402] FAT-fs (loop7): Directory bread(block 71) failed [ 135.785740][ T8402] FAT-fs (loop7): Directory bread(block 72) failed [ 135.792671][ T8323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.821903][ T8402] FAT-fs (loop7): Directory bread(block 73) failed [ 135.991428][ T8424] loop6: detected capacity change from 0 to 4096 [ 136.011472][ T8424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.067095][ T8432] xt_hashlimit: size too large, truncated to 1048576 [ 136.161606][ T8323] veth0_vlan: entered promiscuous mode [ 136.171691][ T8323] veth1_vlan: entered promiscuous mode [ 136.177568][ T28] audit: type=1400 audit(1772892862.576:813): avc: denied { append } for pid=8438 comm="syz.3.1512" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.275019][ T8323] veth0_macvtap: entered promiscuous mode [ 136.295417][ T8323] veth1_macvtap: entered promiscuous mode [ 136.324900][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.346282][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.378923][ T96] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.388824][ T96] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.415709][ T96] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.440651][ T96] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.488611][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 136.548439][ T8444] 8021q: adding VLAN 0 to HW filter on device team1 [ 136.643968][ T7520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.768931][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1520'. [ 137.250969][ T8480] loop3: detected capacity change from 0 to 4096 [ 137.311535][ T8480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.783504][ T8500] __nla_validate_parse: 1 callbacks suppressed [ 137.783622][ T8500] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1533'. [ 137.895239][ T28] audit: type=1400 audit(1772892864.296:814): avc: denied { ioctl } for pid=8503 comm="syz.4.1535" path="socket:[39953]" dev="sockfs" ino=39953 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.963540][ T6138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.978264][ T8508] bond1: entered promiscuous mode [ 137.986269][ T8508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.102104][ T8508] bridge1: entered promiscuous mode [ 138.220298][ T28] audit: type=1326 audit(1772892864.616:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 138.304708][ T28] audit: type=1326 audit(1772892864.616:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 138.367697][ T8524] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 138.384656][ T28] audit: type=1326 audit(1772892864.616:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 138.503243][ T28] audit: type=1326 audit(1772892864.616:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 138.527234][ T28] audit: type=1326 audit(1772892864.616:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 138.582191][ T28] audit: type=1326 audit(1772892864.616:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 138.642480][ T28] audit: type=1326 audit(1772892864.616:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 138.718098][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1545'. [ 138.732640][ T28] audit: type=1326 audit(1772892864.616:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 138.793211][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1545'. [ 139.852338][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 139.861429][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 140.094170][ T8576] netlink: 'syz.4.1569': attribute type 1 has an invalid length. [ 142.579326][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 142.579345][ T28] audit: type=1326 audit(1772892868.976:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.5.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76058ec799 code=0x7fc00000 [ 143.213219][ T28] audit: type=1326 audit(1772892869.596:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.5.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76058ec799 code=0x7fc00000 [ 143.268809][ T8661] loop5: detected capacity change from 0 to 4096 [ 143.497158][ T8665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.540493][ T8665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.551016][ T8661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.653621][ T8323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.743411][ T8664] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1590'. [ 143.760572][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1590'. [ 144.261310][ T28] audit: type=1326 audit(1772892870.656:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 144.476876][ T28] audit: type=1326 audit(1772892870.656:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 144.500804][ T28] audit: type=1326 audit(1772892870.696:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 144.541774][ T28] audit: type=1326 audit(1772892870.696:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 144.575036][ T28] audit: type=1326 audit(1772892870.696:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 144.620214][ T28] audit: type=1326 audit(1772892870.696:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 144.631278][ T8670] loop5: detected capacity change from 0 to 1951 [ 144.695144][ T3305] Alternate GPT is invalid, using primary GPT. [ 144.701611][ T3305] loop5: p2 p3 p7 [ 144.712514][ T28] audit: type=1326 audit(1772892870.696:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 144.756355][ T28] audit: type=1326 audit(1772892870.696:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8679 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 144.826389][ T8670] Alternate GPT is invalid, using primary GPT. [ 144.837131][ T8670] loop5: p2 p3 p7 [ 144.889444][ T3004] Alternate GPT is invalid, using primary GPT. [ 144.896008][ T3004] loop5: p2 p3 p7 [ 145.803442][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1605'. [ 145.884753][ T8712] bridge_slave_1: left allmulticast mode [ 145.890527][ T8712] bridge_slave_1: left promiscuous mode [ 145.902706][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.036114][ T8712] bridge_slave_0: left allmulticast mode [ 146.042798][ T8712] bridge_slave_0: left promiscuous mode [ 146.068152][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.183506][ T8716] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.279817][ T8716] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.347023][ T8716] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.397092][ T8716] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.461464][ T1653] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.498344][ T1653] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.539820][ T1653] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.781475][ T1653] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.150907][ T8761] loop7: detected capacity change from 0 to 512 [ 148.367822][ T8761] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 148.378870][ T8761] EXT4-fs (loop7): group descriptors corrupted! [ 148.489793][ T8767] loop7: detected capacity change from 0 to 256 [ 148.509984][ T8769] syzkaller1: entered promiscuous mode [ 148.516151][ T8769] syzkaller1: entered allmulticast mode [ 148.537317][ T8767] loop7: detected capacity change from 0 to 764 [ 148.563853][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 148.563870][ T28] audit: type=1400 audit(1772892874.966:866): avc: denied { mount } for pid=8765 comm="syz.7.1627" name="/" dev="loop7" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 148.649325][ T28] audit: type=1400 audit(1772892875.016:867): avc: denied { mounton } for pid=8765 comm="syz.7.1627" path="/proc/190/task" dev="proc" ino=40526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 148.743070][ T28] audit: type=1400 audit(1772892875.096:868): avc: denied { unmount } for pid=7393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 148.900166][ T8777] loop7: detected capacity change from 0 to 256 [ 148.921936][ T28] audit: type=1400 audit(1772892875.296:869): avc: denied { name_bind } for pid=8778 comm="syz.5.1633" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 149.212498][ T28] audit: type=1326 audit(1772892875.596:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 149.276801][ T28] audit: type=1326 audit(1772892875.606:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 149.341836][ T28] audit: type=1326 audit(1772892875.606:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 149.402811][ T28] audit: type=1326 audit(1772892875.606:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 149.472009][ T8791] loop7: detected capacity change from 0 to 2048 [ 149.478284][ T28] audit: type=1326 audit(1772892875.606:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 149.478424][ T28] audit: type=1326 audit(1772892875.616:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 149.632292][ T8791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.892278][ T8791] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1637: bg 0: block 234: padding at end of block bitmap is not set [ 149.976536][ T8791] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1172 with error 28 [ 150.020325][ T8791] EXT4-fs (loop7): This should not happen!! Data will be lost [ 150.020325][ T8791] [ 150.100206][ T8791] EXT4-fs (loop7): Total free blocks count 0 [ 150.135755][ T8791] EXT4-fs (loop7): Free/Dirty block details [ 150.155146][ T8791] EXT4-fs (loop7): free_blocks=0 [ 150.160200][ T8791] EXT4-fs (loop7): dirty_blocks=1184 [ 150.226300][ T8791] EXT4-fs (loop7): Block reservation details [ 150.232330][ T8791] EXT4-fs (loop7): i_reserved_data_blocks=74 [ 150.535568][ T7393] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.280248][ T8827] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 151.497153][ T8837] loop7: detected capacity change from 0 to 256 [ 152.426394][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1664'. [ 152.443869][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1664'. [ 152.785044][ T8869] loop3: detected capacity change from 0 to 256 [ 152.814069][ T8869] FAT-fs (loop3): Directory bread(block 64) failed [ 152.841005][ T8869] FAT-fs (loop3): Directory bread(block 65) failed [ 152.862667][ T8869] FAT-fs (loop3): Directory bread(block 66) failed [ 152.869253][ T8869] FAT-fs (loop3): Directory bread(block 67) failed [ 152.876683][ T8869] FAT-fs (loop3): Directory bread(block 68) failed [ 152.883333][ T8869] FAT-fs (loop3): Directory bread(block 69) failed [ 152.890076][ T8869] FAT-fs (loop3): Directory bread(block 70) failed [ 152.896687][ T8869] FAT-fs (loop3): Directory bread(block 71) failed [ 152.903752][ T8869] FAT-fs (loop3): Directory bread(block 72) failed [ 152.910398][ T8869] FAT-fs (loop3): Directory bread(block 73) failed [ 153.032539][ T8872] syz.3.1665: attempt to access beyond end of device [ 153.032539][ T8872] loop3: rw=2049, sector=1224, nr_sectors = 544 limit=256 [ 153.052865][ T8872] syz.3.1665: attempt to access beyond end of device [ 153.052865][ T8872] loop3: rw=2049, sector=1800, nr_sectors = 128 limit=256 [ 153.119676][ T8872] syz.3.1665: attempt to access beyond end of device [ 153.119676][ T8872] loop3: rw=2049, sector=1960, nr_sectors = 2168 limit=256 [ 153.130282][ T8875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1669'. [ 153.438527][ T8888] netlink: 'syz.6.1670': attribute type 27 has an invalid length. [ 153.602878][ T2391] kworker/u8:10: attempt to access beyond end of device [ 153.602878][ T2391] loop3: rw=1, sector=4128, nr_sectors = 20136 limit=256 [ 153.653755][ T2391] kworker/u8:10: attempt to access beyond end of device [ 153.653755][ T2391] loop3: rw=1, sector=24296, nr_sectors = 32 limit=256 [ 153.667816][ T2391] kworker/u8:10: attempt to access beyond end of device [ 153.667816][ T2391] loop3: rw=1, sector=24360, nr_sectors = 32 limit=256 [ 153.698933][ T2391] kworker/u8:10: attempt to access beyond end of device [ 153.698933][ T2391] loop3: rw=1, sector=24424, nr_sectors = 32 limit=256 [ 153.720105][ T2391] kworker/u8:10: attempt to access beyond end of device [ 153.720105][ T2391] loop3: rw=1, sector=24488, nr_sectors = 32 limit=256 [ 153.734360][ T2391] kworker/u8:10: attempt to access beyond end of device [ 153.734360][ T2391] loop3: rw=1, sector=24552, nr_sectors = 32 limit=256 [ 153.750698][ T2391] kworker/u8:10: attempt to access beyond end of device [ 153.750698][ T2391] loop3: rw=1, sector=24616, nr_sectors = 32 limit=256 [ 153.886956][ T8888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.898368][ T8888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.010687][ T8889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.030358][ T8889] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.114057][ T8889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.165727][ T1653] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.174463][ T1653] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.212543][ T1653] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.233848][ T1653] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.163136][ T8932] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.185116][ T8929] loop3: detected capacity change from 0 to 736 [ 155.222199][ T8932] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.233797][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 155.233816][ T28] audit: type=1326 audit(1772892881.636:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 155.265691][ T28] audit: type=1326 audit(1772892881.636:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 155.290159][ T28] audit: type=1326 audit(1772892881.636:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 155.322399][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 155.335569][ T8932] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.341162][ T28] audit: type=1326 audit(1772892881.636:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 155.379253][ T28] audit: type=1326 audit(1772892881.636:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 155.409959][ T28] audit: type=1326 audit(1772892881.636:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc45cc7cfce code=0x7ffc0000 [ 155.441892][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 155.456467][ T28] audit: type=1326 audit(1772892881.636:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 155.494927][ T28] audit: type=1326 audit(1772892881.636:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 155.521827][ T28] audit: type=1326 audit(1772892881.636:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc45cc7cfce code=0x7ffc0000 [ 155.545745][ T28] audit: type=1326 audit(1772892881.636:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.6.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc45cc7cfce code=0x7ffc0000 [ 155.638727][ T8932] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.678538][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1696'. [ 155.690492][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1696'. [ 155.732026][ T5169] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.801824][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.810748][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.823138][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.850281][ T8962] netlink: 'syz.5.1698': attribute type 27 has an invalid length. [ 155.946460][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.953760][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.040160][ T8962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.052152][ T8962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.105021][ T5169] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.263402][ T8965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.277991][ T8965] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.294020][ T8965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.316018][ T5169] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.336877][ T5169] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.345614][ T5169] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.699495][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1709'. [ 156.709593][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1709'. [ 157.037879][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 157.072050][ T9015] loop3: detected capacity change from 0 to 512 [ 157.110931][ T9015] ext4: Unknown parameter 'noacl' [ 157.616982][ T9044] IPv6: sit2: Disabled Multicast RS [ 157.755292][ T9048] netlink: 'syz.4.1727': attribute type 1 has an invalid length. [ 157.789486][ T9048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.823884][ T9050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.831200][ T9050] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.842957][ T9050] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 158.950020][ T9071] __nla_validate_parse: 1 callbacks suppressed [ 158.950082][ T9071] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1738'. [ 158.969102][ T9071] lo speed is unknown, defaulting to 1000 [ 158.975465][ T9071] lo speed is unknown, defaulting to 1000 [ 158.982879][ T9071] lo speed is unknown, defaulting to 1000 [ 159.002836][ T9071] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 159.017076][ T9071] lo speed is unknown, defaulting to 1000 [ 159.036168][ T9071] lo speed is unknown, defaulting to 1000 [ 159.059500][ T9071] lo speed is unknown, defaulting to 1000 [ 159.081194][ T9071] lo speed is unknown, defaulting to 1000 [ 159.103513][ T9071] lo speed is unknown, defaulting to 1000 [ 159.115165][ T9071] lo speed is unknown, defaulting to 1000 [ 159.155364][ T9071] lo speed is unknown, defaulting to 1000 [ 159.296143][ T9081] netlink: 'syz.5.1743': attribute type 1 has an invalid length. [ 159.327165][ T9081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.347689][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1743'. [ 159.377428][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1743'. [ 159.411870][ T9081] macsec1: entered promiscuous mode [ 159.439357][ T9081] bond1: entered promiscuous mode [ 159.458883][ T9081] macsec1: entered allmulticast mode [ 159.479048][ T9081] bond1: entered allmulticast mode [ 160.518415][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 160.518468][ T28] audit: type=1400 audit(1772892886.916:911): avc: denied { mounton } for pid=9112 comm="syz.6.1754" path="/102/file0" dev="tmpfs" ino=551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 160.852798][ T9130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1759'. [ 160.905014][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 160.918589][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1760'. [ 161.062386][ T28] audit: type=1400 audit(1772892887.456:912): avc: denied { bind } for pid=9135 comm="syz.5.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 161.526649][ T9146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.846251][ T9155] loop6: detected capacity change from 0 to 128 [ 161.881134][ T9155] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.938677][ T9155] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 162.034270][ T9163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.052392][ T7520] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.110211][ T9166] netlink: 'syz.6.1769': attribute type 1 has an invalid length. [ 162.275463][ T9163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.372025][ T9166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.386237][ T9163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.468943][ T9167] bond1: (slave veth5): Enslaving as an active interface with a down link [ 162.506341][ T9166] bond1: (slave dummy0): making interface the new active one [ 162.538322][ T9166] dummy0: entered promiscuous mode [ 162.550471][ T9166] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 162.577146][ T9163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.593973][ T9173] bond1 (unregistering): (slave veth5): Releasing active interface [ 162.604072][ T9173] bond1 (unregistering): (slave dummy0): Releasing active interface [ 162.721750][ T9173] bond1 (unregistering): Released all slaves [ 162.891069][ T5178] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.054386][ T5169] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.180628][ T2391] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.216350][ T2391] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.420242][ T9193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1774'. [ 163.440548][ T9198] netlink: 'syz.6.1775': attribute type 33 has an invalid length. [ 163.454130][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1782'. [ 163.463239][ T9198] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1775'. [ 163.488591][ T9198] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1775'. [ 163.607556][ T9211] lo speed is unknown, defaulting to 1000 [ 163.883768][ T9239] bond1: entered promiscuous mode [ 163.929137][ T28] audit: type=1400 audit(1772892890.326:913): avc: denied { setopt } for pid=9249 comm="syz.6.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.089273][ T9256] __nla_validate_parse: 3 callbacks suppressed [ 164.089450][ T9256] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1796'. [ 164.493922][ T9268] xt_hashlimit: size too large, truncated to 1048576 [ 164.635302][ T9279] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1804'. [ 164.645315][ T9279] siw: device registration error -23 [ 164.970909][ T9295] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.212100][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1819'. [ 165.246005][ T9313] loop3: detected capacity change from 0 to 512 [ 165.258579][ T9311] bond2: entered promiscuous mode [ 165.299059][ T9313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.341414][ T9313] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.456189][ T6138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.276171][ T9331] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.297039][ T9331] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.512474][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1828'. [ 166.544589][ T9331] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.562494][ T9331] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.608691][ T9339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.618212][ T9345] netlink: 'syz.6.1830': attribute type 1 has an invalid length. [ 166.634704][ T9342] macsec1: entered promiscuous mode [ 166.642822][ T9342] bond2: entered promiscuous mode [ 166.650493][ T9342] bond2: left promiscuous mode [ 166.679050][ T9345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.693286][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1827'. [ 166.715907][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1827'. [ 166.730518][ T9347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.757862][ T9347] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 166.769368][ T9347] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 166.795541][ T9331] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.814825][ T9331] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.884173][ T9331] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.930226][ T9331] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.005185][ T1653] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.020616][ T1653] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.047755][ T1653] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.072902][ T1653] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.097756][ T28] audit: type=1400 audit(1772892893.486:914): avc: denied { accept } for pid=9356 comm="syz.6.1833" path="socket:[45137]" dev="sockfs" ino=45137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.146989][ T1653] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.155491][ T1653] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.182690][ T1653] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.207406][ T1653] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.294701][ T9366] syzkaller0: entered promiscuous mode [ 167.305697][ T9366] syzkaller0: entered allmulticast mode [ 167.550866][ T9378] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.558128][ T9378] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.620674][ T9378] bridge_slave_0: left allmulticast mode [ 167.628109][ T9378] bridge_slave_0: left promiscuous mode [ 167.633998][ T9378] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.645360][ T9378] bridge_slave_1: left allmulticast mode [ 167.651100][ T9378] bridge_slave_1: left promiscuous mode [ 167.657087][ T9378] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.668291][ T9378] bond0: (slave bond_slave_0): Releasing backup interface [ 167.678943][ T9378] bond0: (slave bond_slave_1): Releasing backup interface [ 167.695566][ T9378] team0: Port device team_slave_0 removed [ 167.715773][ T9378] team0: Port device team_slave_1 removed [ 167.733483][ T9378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.750103][ T9378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.759592][ T9378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.768867][ T9378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.782067][ T9378] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.830795][ T9382] batman_adv: batadv0: Interface deactivated: dummy0 [ 167.850029][ T9382] bond1: left promiscuous mode [ 167.857435][ T9383] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 167.898967][ T9383] bond0: (slave lo): Enslaving as an active interface with an up link [ 167.911047][ T9387] geneve2: entered promiscuous mode [ 167.939667][ T5169] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 37836 - 0 [ 167.949789][ T5169] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 37836 - 0 [ 167.969502][ T5169] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 37836 - 0 [ 167.989973][ T5169] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 37836 - 0 [ 168.061728][ T28] audit: type=1400 audit(1772892894.456:915): avc: denied { watch } for pid=9393 comm="syz.6.1845" path="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 168.190450][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1850'. [ 168.567845][ T9423] bond1: left allmulticast mode [ 168.573110][ T9423] bond1: left promiscuous mode [ 168.578079][ T9423] macsec1: left promiscuous mode [ 168.594918][ T9423] macsec1: left allmulticast mode [ 168.600561][ T9423] bond2: left promiscuous mode [ 168.625345][ T9424] geneve2: entered promiscuous mode [ 168.655462][ T2391] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 43133 - 0 [ 168.671700][ T2391] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 43133 - 0 [ 168.692297][ T2391] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 43133 - 0 [ 168.700701][ T2391] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 43133 - 0 [ 168.849978][ T9436] netlink: 'syz.4.1862': attribute type 2 has an invalid length. [ 168.971765][ T9439] netlink: 'syz.3.1863': attribute type 1 has an invalid length. [ 169.056089][ T9439] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 169.072510][ T9439] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 169.083810][ T9439] bond3: (slave vxcan3): making interface the new active one [ 169.091947][ T9439] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 169.120558][ T9439] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 169.135705][ T9439] bond3: (slave vxcan5): Enslaving as a backup interface with an up link [ 169.170697][ T28] audit: type=1326 audit(1772892895.566:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 169.250760][ T28] audit: type=1326 audit(1772892895.566:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 169.287140][ T28] audit: type=1326 audit(1772892895.576:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 169.311136][ T28] audit: type=1326 audit(1772892895.576:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 169.344076][ T28] audit: type=1326 audit(1772892895.576:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 169.367876][ T28] audit: type=1326 audit(1772892895.576:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 169.391502][ T28] audit: type=1326 audit(1772892895.576:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 169.415111][ T28] audit: type=1326 audit(1772892895.576:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 169.734182][ T9477] xt_hashlimit: size too large, truncated to 1048576 [ 170.092117][ T9483] loop6: detected capacity change from 0 to 512 [ 170.131305][ T9483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.171419][ T9483] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.336642][ T7520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.712491][ T9507] netlink: 'syz.5.1887': attribute type 2 has an invalid length. [ 170.762110][ T9509] lo speed is unknown, defaulting to 1000 [ 170.819595][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1890'. [ 171.416442][ T9533] lo speed is unknown, defaulting to 1000 [ 171.771848][ T9541] bridge_slave_0: left allmulticast mode [ 171.811142][ T9541] bridge_slave_0: left promiscuous mode [ 171.825679][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.850319][ T9541] bridge_slave_1: left allmulticast mode [ 171.862498][ T9541] bridge_slave_1: left promiscuous mode [ 171.868384][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.880525][ T9541] bond0: (slave bond_slave_0): Releasing backup interface [ 171.917383][ T9541] bond0: (slave bond_slave_1): Releasing backup interface [ 171.970425][ T9541] team0: Port device team_slave_0 removed [ 171.981238][ T9541] team0: Port device team_slave_1 removed [ 172.005384][ T9541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.062619][ T9541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.070655][ T9541] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 172.087001][ T35] lo speed is unknown, defaulting to 1000 [ 172.092965][ T35] syz2: Port: 1 Link DOWN [ 172.115720][ T9544] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 172.130078][ T9544] bond0: (slave lo): Enslaving as an active interface with an up link [ 172.165146][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1904'. [ 172.206197][ T4564] lo speed is unknown, defaulting to 1000 [ 172.212056][ T3398] lo speed is unknown, defaulting to 1000 [ 172.216160][ T9550] lo speed is unknown, defaulting to 1000 [ 172.218031][ T3398] syz2: Port: 1 Link ACTIVE [ 172.265718][ T9565] ref_ctr_offset mismatch. inode: 0x91f offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 172.302718][ T9567] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1909'. [ 172.471878][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1914'. [ 172.983874][ T9605] xt_hashlimit: size too large, truncated to 1048576 [ 173.102963][ T9593] bond0: (slave bond_slave_0): Releasing backup interface [ 173.142938][ T9593] bond0: (slave bond_slave_1): Releasing backup interface [ 173.180722][ T9593] team0: Port device team_slave_0 removed [ 173.220336][ T9593] team0: Port device team_slave_1 removed [ 173.246667][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.358102][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.370268][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.384138][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.399659][ T9593] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.450208][ T9601] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 173.481846][ T9601] bond0: (slave lo): Enslaving as an active interface with an up link [ 173.519791][ T9615] tipc: Started in network mode [ 173.524832][ T9615] tipc: Node identity 4, cluster identity 4711 [ 173.542381][ T9615] tipc: Node number set to 4 [ 173.823370][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1929'. [ 174.504084][ T28] kauditd_printk_skb: 13994 callbacks suppressed [ 174.504106][ T28] audit: type=1400 audit(1772892900.906:14918): avc: denied { create } for pid=9643 comm="syz.6.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.536166][ T9644] geneve2: entered promiscuous mode [ 174.562479][ T5178] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 50927 - 0 [ 174.571447][ T5178] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 50927 - 0 [ 174.590060][ T5178] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 50927 - 0 [ 174.628056][ T1653] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 50927 - 0 [ 174.803017][ T9666] loop7: detected capacity change from 0 to 1024 [ 174.815792][ T9666] EXT4-fs: inline encryption not supported [ 174.836021][ T9666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.044060][ T7393] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.085789][ T9683] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.1951'. [ 175.095084][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1951'. [ 175.290074][ T28] audit: type=1400 audit(1772892901.686:14919): avc: denied { remount } for pid=9687 comm="syz.7.1953" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 175.509570][ T28] audit: type=1400 audit(1772892901.906:14920): avc: denied { unmount } for pid=7393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 175.580406][ T28] audit: type=1400 audit(1772892901.946:14921): avc: denied { unmount } for pid=7393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 175.703789][ T28] audit: type=1400 audit(1772892902.096:14922): avc: denied { unmount } for pid=7393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 175.823556][ T28] audit: type=1400 audit(1772892902.226:14923): avc: denied { unmount } for pid=7393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 175.882547][ T28] audit: type=1400 audit(1772892902.256:14924): avc: denied { unmount } for pid=7393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 176.493694][ T9708] loop6: detected capacity change from 0 to 512 [ 176.520737][ T9710] pimreg: entered allmulticast mode [ 176.544586][ T9710] pimreg: left allmulticast mode [ 176.574460][ T9708] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.651087][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 176.683854][ T9708] EXT4-fs error (device loop6): ext4_quota_enable:7188: comm syz.6.1963: Bad quota inum: 2, type: 1 [ 176.722588][ T9708] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 176.763292][ T9716] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 176.802770][ T9716] EXT4-fs error (device loop6): ext4_quota_enable:7188: comm syz.6.1963: Bad quota inum: 2, type: 1 [ 176.832792][ T9716] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 176.881755][ T9722] loop3: detected capacity change from 0 to 4096 [ 176.917056][ T7520] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 176.963850][ T9722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.993643][ T28] audit: type=1326 audit(1772892903.396:14925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9728 comm="syz.4.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 177.017968][ T28] audit: type=1326 audit(1772892903.396:14926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9728 comm="syz.4.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 177.041952][ T28] audit: type=1326 audit(1772892903.396:14927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9728 comm="syz.4.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 177.192940][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1969'. [ 177.212280][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1969'. [ 177.242836][ T6138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.264557][ T9736] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 177.829027][ T9761] loop6: detected capacity change from 0 to 512 [ 177.843712][ T9761] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 177.974844][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1984'. [ 178.559226][ T9784] xt_hashlimit: size too large, truncated to 1048576 [ 178.774184][ T9788] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 181.891888][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 181.891960][ T28] audit: type=1400 audit(1772892908.286:14984): avc: denied { unmount } for pid=7393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 184.660877][ T28] audit: type=1326 audit(1772892911.056:14985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 184.708675][ T28] audit: type=1326 audit(1772892911.056:14986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 184.743869][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2011'. [ 184.753500][ T28] audit: type=1326 audit(1772892911.056:14987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 184.778531][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2011'. [ 184.885821][ T28] audit: type=1326 audit(1772892911.056:14988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 184.911810][ T9843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2016'. [ 184.929219][ T28] audit: type=1326 audit(1772892911.056:14989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 184.953493][ T28] audit: type=1326 audit(1772892911.086:14990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 185.002487][ T28] audit: type=1326 audit(1772892911.086:14991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 185.040679][ T28] audit: type=1326 audit(1772892911.086:14992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 185.092657][ T28] audit: type=1326 audit(1772892911.086:14993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 185.518120][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2034'. [ 186.399629][ T9926] loop6: detected capacity change from 0 to 128 [ 186.580126][ T9942] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2052'. [ 186.601249][ T9942] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2052'. [ 186.636954][ T9937] macvtap1: entered promiscuous mode [ 186.643170][ T9937] team0: entered promiscuous mode [ 186.655385][ T9937] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 186.678189][ T9937] team0: Device macvtap1 is already an upper device of the team interface [ 186.734334][ T9937] team0: left promiscuous mode [ 187.090753][ T9950] netlink: 400 bytes leftover after parsing attributes in process `syz.4.2056'. [ 187.251155][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2059'. [ 187.366054][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 187.403763][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 188.432939][T10008] veth1_to_bond: entered allmulticast mode [ 188.502582][T10007] veth1_to_bond: left allmulticast mode [ 188.590010][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 188.590048][ T28] audit: type=1400 audit(1772892914.976:15008): avc: denied { setattr } for pid=10011 comm="syz.7.2083" name="/" dev="configfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.790105][T10018] netlink: 'syz.7.2086': attribute type 1 has an invalid length. [ 188.835723][T10018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.887288][T10022] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 188.915973][T10022] bond1: (slave batadv1): making interface the new active one [ 189.013734][T10022] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 189.448954][T10046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=10046 comm=syz.4.2095 [ 189.729921][T10064] tipc: Failed to remove unknown binding: 66,1,1/0:2848383934/2848383936 [ 189.811367][T10070] __nla_validate_parse: 3 callbacks suppressed [ 189.811389][T10070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2105'. [ 190.290015][T10085] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿÿÿ [ 190.432816][T10093] xt_hashlimit: size too large, truncated to 1048576 [ 190.679524][ T28] audit: type=1326 audit(1772892917.076:15009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 190.832188][ T28] audit: type=1326 audit(1772892917.076:15010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 190.882459][ T28] audit: type=1326 audit(1772892917.076:15011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 190.920423][ T28] audit: type=1326 audit(1772892917.076:15012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 190.944617][ T28] audit: type=1326 audit(1772892917.076:15013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 190.969553][ T28] audit: type=1326 audit(1772892917.136:15014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76058ec799 code=0x7ffc0000 [ 190.971487][T10120] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 190.994142][ T28] audit: type=1326 audit(1772892917.136:15015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76058ec502 code=0x7ffc0000 [ 191.035201][ T28] audit: type=1326 audit(1772892917.136:15016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f76058ec597 code=0x7ffc0000 [ 191.051664][T10120] SELinux: failed to load policy [ 191.067233][ T28] audit: type=1326 audit(1772892917.136:15017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f76058a9491 code=0x7ffc0000 [ 191.565560][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 191.596494][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 192.540232][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2144'. [ 192.555711][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2144'. [ 193.246184][T10182] xt_TPROXY: Can be used only with -p tcp or -p udp [ 193.403410][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2153'. [ 193.412342][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2153'. [ 194.573959][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 194.573977][ T28] audit: type=1400 audit(1772892920.966:15080): avc: denied { remount } for pid=10215 comm="syz.5.2163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 194.702460][ T28] audit: type=1400 audit(1772892921.066:15081): avc: denied { firmware_load } for pid=10222 comm="syz.7.2166" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 194.775617][ T28] audit: type=1326 audit(1772892921.176:15082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699c5bc799 code=0x7ffc0000 [ 194.807571][ T28] audit: type=1326 audit(1772892921.176:15083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699c5bc799 code=0x7ffc0000 [ 194.838361][T10230] loop7: detected capacity change from 0 to 512 [ 194.842197][ T28] audit: type=1326 audit(1772892921.176:15084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699c5bc799 code=0x7ffc0000 [ 194.875906][ T28] audit: type=1326 audit(1772892921.176:15085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699c5bc799 code=0x7ffc0000 [ 194.901718][ T28] audit: type=1326 audit(1772892921.176:15086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f699c5bc799 code=0x7ffc0000 [ 194.931868][ T28] audit: type=1326 audit(1772892921.226:15087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699c5bc799 code=0x7ffc0000 [ 194.956185][ T28] audit: type=1326 audit(1772892921.226:15088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699c5bc799 code=0x7ffc0000 [ 194.980602][ T28] audit: type=1326 audit(1772892921.226:15089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f699c5bc502 code=0x7ffc0000 [ 195.004879][T10230] EXT4-fs (loop7): 1 truncate cleaned up [ 195.010987][T10230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.093654][T10245] netlink: 'syz.3.2172': attribute type 2 has an invalid length. [ 195.123274][ T7393] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.185479][T10247] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.205643][T10247] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.300279][T10247] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.320612][T10247] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.358608][T10261] syz_tun: entered allmulticast mode [ 195.396244][T10247] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.413172][T10247] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.479267][T10247] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.499358][T10247] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.615316][ T70] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.624940][ T70] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.655482][ T70] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.672473][ T70] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.706992][ T70] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.742838][ T70] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.772610][ T70] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.782788][ T70] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.999425][T10290] lo: entered allmulticast mode [ 196.094026][T10292] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2194'. [ 196.631964][T10305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2200'. [ 196.785983][T10314] loop7: detected capacity change from 0 to 128 [ 196.825746][T10321] tipc: Failed to remove unknown binding: 66,1,1/0:1354819231/1354819233 [ 196.834367][T10321] tipc: Failed to remove unknown binding: 66,1,1/0:1354819231/1354819233 [ 196.860582][T10310] bio_check_eod: 6 callbacks suppressed [ 196.860706][T10310] syz.7.2204: attempt to access beyond end of device [ 196.860706][T10310] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 197.025705][T10326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2211'. [ 197.312525][T10364] tipc: Started in network mode [ 197.326247][T10364] tipc: Node identity ac141441, cluster identity 4711 [ 197.343519][T10364] tipc: Enabled bearer , priority 10 [ 197.426939][T10366] lo speed is unknown, defaulting to 1000 [ 197.607053][T10384] loop6: detected capacity change from 0 to 256 [ 197.802652][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2239'. [ 198.156478][T10417] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2245'. [ 198.173690][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2246'. [ 198.221941][T10417] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2245'. [ 198.357137][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2250'. [ 198.462783][ T9610] tipc: Node number set to 2886997057 [ 198.604636][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2260'. [ 198.613612][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2260'. [ 198.631602][T10444] syzkaller0: entered promiscuous mode [ 198.675213][T10444] syzkaller0: entered allmulticast mode [ 199.031150][T10498] netlink: 'syz.7.2269': attribute type 39 has an invalid length. [ 199.391271][ T96] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.418703][ T96] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.445037][ T96] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.462216][ T96] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.497721][ T96] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.516327][ T96] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.547308][ T96] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.600100][ T96] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.934660][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 199.934679][ T28] audit: type=1400 audit(1772892926.336:15150): avc: denied { bind } for pid=10585 comm="syz.3.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.036179][T10597] lo speed is unknown, defaulting to 1000 [ 200.557134][ T28] audit: type=1326 audit(1772892926.946:15151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.3.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 200.617054][ T28] audit: type=1326 audit(1772892926.946:15152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.3.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 200.649010][ T28] audit: type=1326 audit(1772892926.956:15153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.3.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 200.786567][ T28] audit: type=1326 audit(1772892926.956:15154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.3.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 200.850106][ T28] audit: type=1326 audit(1772892926.956:15155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.3.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 200.968390][ T28] audit: type=1326 audit(1772892926.956:15156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.3.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 201.031919][ T28] audit: type=1326 audit(1772892926.956:15157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.3.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 201.067328][T10646] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 201.079009][ T28] audit: type=1326 audit(1772892926.956:15158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.3.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 201.109557][T10646] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 201.125348][ T28] audit: type=1326 audit(1772892926.956:15159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.3.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x7ffc0000 [ 201.381547][T10672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=10672 comm=syz.5.2315 [ 202.004863][T10737] netlink: 'syz.5.2343': attribute type 12 has an invalid length. [ 202.985950][T10775] __nla_validate_parse: 8 callbacks suppressed [ 202.985971][T10775] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.2357'. [ 203.001820][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2357'. [ 203.200130][T10782] loop7: detected capacity change from 0 to 512 [ 203.219080][T10782] EXT4-fs: Ignoring removed bh option [ 203.240004][T10782] EXT4-fs: Ignoring removed oldalloc option [ 203.256998][T10782] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 203.288717][T10782] EXT4-fs (loop7): 1 truncate cleaned up [ 203.304922][T10782] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.433366][ T7393] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.601988][ T4556] IPVS: starting estimator thread 0... [ 204.722513][T10819] IPVS: using max 1824 ests per chain, 91200 per kthread [ 204.989814][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 204.989833][ T28] audit: type=1326 audit(1772892931.386:15221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.7.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699c5bc799 code=0x7ffc0000 [ 205.047645][ T28] audit: type=1326 audit(1772892931.386:15222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.7.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f699c5bc502 code=0x7ffc0000 [ 205.072185][ T28] audit: type=1326 audit(1772892931.386:15223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.7.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f699c5bc597 code=0x7ffc0000 [ 205.097573][ T28] audit: type=1326 audit(1772892931.386:15224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.7.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f699c579491 code=0x7ffc0000 [ 205.121841][ T28] audit: type=1326 audit(1772892931.386:15225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.7.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f699c5bd589 code=0x7ffc0000 [ 205.145855][ T28] audit: type=1326 audit(1772892931.386:15226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.7.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f699c5794fb code=0x7ffc0000 [ 205.260097][ T28] audit: type=1326 audit(1772892931.386:15227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.7.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699c5bc799 code=0x7ffc0000 [ 205.350735][ T28] audit: type=1326 audit(1772892931.386:15228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.7.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699c5bc799 code=0x7ffc0000 [ 205.536130][ T28] audit: type=1326 audit(1772892931.386:15229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.7.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f699c578bec code=0x7ffc0000 [ 205.562972][ T28] audit: type=1326 audit(1772892931.386:15230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.7.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f699c578c4e code=0x7ffc0000 [ 205.644202][T10885] bond3: entered promiscuous mode [ 205.850162][T10900] netlink: 'syz.4.2383': attribute type 4 has an invalid length. [ 205.898549][T10900] netlink: 'syz.4.2383': attribute type 4 has an invalid length. [ 205.906977][T10902] loop3: detected capacity change from 0 to 256 [ 205.909751][T10892] loop6: detected capacity change from 0 to 512 [ 205.938748][T10892] EXT4-fs: Ignoring removed nobh option [ 205.985266][T10892] EXT4-fs (loop6): orphan cleanup on readonly fs [ 206.068410][T10907] syz.3.2384: attempt to access beyond end of device [ 206.068410][T10907] loop3: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 206.114012][T10907] syz.3.2384: attempt to access beyond end of device [ 206.114012][T10907] loop3: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 206.135125][T10892] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.2377: EA inode hash validation failed [ 206.152064][T10907] syz.3.2384: attempt to access beyond end of device [ 206.152064][T10907] loop3: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 206.167294][T10892] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 206.182788][T10907] syz.3.2384: attempt to access beyond end of device [ 206.182788][T10907] loop3: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 206.182909][T10907] syz.3.2384: attempt to access beyond end of device [ 206.182909][T10907] loop3: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 206.183030][T10907] syz.3.2384: attempt to access beyond end of device [ 206.183030][T10907] loop3: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 206.183220][T10907] syz.3.2384: attempt to access beyond end of device [ 206.183220][T10907] loop3: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 206.183275][T10907] syz.3.2384: attempt to access beyond end of device [ 206.183275][T10907] loop3: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 206.183415][T10907] syz.3.2384: attempt to access beyond end of device [ 206.183415][T10907] loop3: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 206.183473][T10907] syz.3.2384: attempt to access beyond end of device [ 206.183473][T10907] loop3: rw=2049, sector=928, nr_sectors = 32 limit=256 [ 206.314952][T10892] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2377: corrupted inode contents [ 206.329033][T10892] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 206.331182][T10892] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.2377: mark_inode_dirty error [ 206.332740][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 206.344158][T10892] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 206.353405][ C1] EXT4-fs (loop6): initial error at time 1772892932: ext4_do_update_inode:5569: inode 15 [ 206.353711][ C1] EXT4-fs (loop6): last error at time 1772892932: ext4_do_update_inode:5569: inode 15 [ 206.444596][T10914] 9p: Bad value for 'rfdno' [ 206.449813][T10892] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2377: corrupted inode contents [ 206.470614][T10892] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 206.474297][T10892] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.2377: mark_inode_dirty error [ 206.497805][T10892] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 206.503821][T10892] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #15: comm syz.6.2377: mark inode dirty (error -117) [ 206.528306][T10892] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 206.540409][T10892] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 206.555534][T10916] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2389'. [ 206.555582][T10916] unsupported nla_type 217 [ 206.588547][T10892] EXT4-fs (loop6): 1 orphan inode deleted [ 206.601584][T10892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 206.765202][ T7520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.805655][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2394'. [ 206.844363][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2394'. [ 206.901431][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2394'. [ 206.937145][T10937] loop7: detected capacity change from 0 to 1024 [ 207.007879][T10937] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.089297][T10945] lo speed is unknown, defaulting to 1000 [ 207.138250][T10937] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.2399: Allocating blocks 497-513 which overlap fs metadata [ 207.192268][T10937] EXT4-fs (loop7): Remounting filesystem read-only [ 207.252711][T10932] EXT4-fs (loop7): pa ffff8881082ae3f0: logic 304, phys. 433, len 5 [ 207.339763][ T7393] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.689495][T10963] loop7: detected capacity change from 0 to 512 [ 207.716561][T10967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2409'. [ 207.739783][T10963] EXT4-fs: Ignoring removed nobh option [ 207.817634][T10963] EXT4-fs (loop7): orphan cleanup on readonly fs [ 207.834237][T10963] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.2406: EA inode hash validation failed [ 207.851094][T10963] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.2406: corrupted inode contents [ 207.865958][T10963] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 207.867557][T10963] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #15: comm syz.7.2406: mark_inode_dirty error [ 207.878247][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 207.878308][ C1] EXT4-fs (loop7): initial error at time 1772892934: ext4_do_update_inode:5569: inode 15 [ 207.878617][ C1] EXT4-fs (loop7): last error at time 1772892934: ext4_do_update_inode:5569: inode 15 [ 207.924765][T10963] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 207.930420][T10963] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.2406: corrupted inode contents [ 207.955041][T10963] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 207.957415][T10963] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm syz.7.2406: mark_inode_dirty error [ 208.032922][T10963] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 208.033717][T10963] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3002: inode #15: comm syz.7.2406: mark inode dirty (error -117) [ 208.083901][T10963] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 208.084562][T10963] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -117) [ 208.128614][T10963] EXT4-fs (loop7): 1 orphan inode deleted [ 208.140053][T10963] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 208.234099][T10989] bond1: left promiscuous mode [ 208.324318][T10998] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 43133 - 0 [ 208.351498][ T7393] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.353552][ T70] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.370450][ T70] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.390880][ T70] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.399658][ T70] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.409388][T10998] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 43133 - 0 [ 208.473837][T10998] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 43133 - 0 [ 208.523706][T10998] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 43133 - 0 [ 208.555580][T11012] loop6: detected capacity change from 0 to 1024 [ 208.583114][T11012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.645980][T11012] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.2427: Allocating blocks 497-513 which overlap fs metadata [ 208.666436][ T5183] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 43133 - 0 [ 208.678139][T11012] EXT4-fs (loop6): Remounting filesystem read-only [ 208.684207][ T5183] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 43133 - 0 [ 208.702116][ T5183] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 43133 - 0 [ 208.729646][ T5183] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 43133 - 0 [ 208.774980][T11011] EXT4-fs (loop6): pa ffff8881004b6380: logic 304, phys. 433, len 5 [ 208.819142][ T7520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.836339][T11032] netlink: 'syz.5.2433': attribute type 1 has an invalid length. [ 209.230066][T11050] loop7: detected capacity change from 0 to 1024 [ 209.310266][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 209.315419][T11050] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.401262][ T7393] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.562531][T11061] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2455'. [ 209.599128][T11067] netlink: 'syz.7.2447': attribute type 1 has an invalid length. [ 209.658751][T11073] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 50927 - 0 [ 209.714393][T11073] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 50927 - 0 [ 209.790364][T11073] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 50927 - 0 [ 209.851561][T11073] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 50927 - 0 [ 209.907424][T11093] loop7: detected capacity change from 0 to 256 [ 209.931127][ T5169] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 50927 - 0 [ 209.955663][ T5169] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 50927 - 0 [ 209.978410][ T5169] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 50927 - 0 [ 209.987263][ T5169] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 50927 - 0 [ 211.209454][T11143] netlink: 'syz.4.2479': attribute type 11 has an invalid length. [ 211.424040][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 211.424054][ T28] audit: type=1326 audit(1772892937.826:15319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.4.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 211.510992][T11148] loop3: detected capacity change from 0 to 512 [ 211.523652][ T28] audit: type=1326 audit(1772892937.856:15320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.4.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 211.555197][T11148] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.3.2482: corrupted xattr block 95: invalid header [ 211.582503][ T28] audit: type=1326 audit(1772892937.856:15321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.4.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 211.583562][T11148] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 211.607985][ T28] audit: type=1326 audit(1772892937.856:15322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.4.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6acdbe007 code=0x7ffc0000 [ 211.641053][ T28] audit: type=1326 audit(1772892937.856:15323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.4.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 211.673537][ T28] audit: type=1326 audit(1772892937.856:15324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.4.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 211.697473][ T28] audit: type=1326 audit(1772892937.856:15325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.4.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 211.711925][T11148] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 211.721159][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 211.721179][ C0] EXT4-fs (loop3): initial error at time 1772892938: ext4_expand_extra_isize_ea:2808: inode 11 [ 211.721212][ C0] EXT4-fs (loop3): last error at time 1772892938: ext4_expand_extra_isize_ea:2808: inode 11 [ 211.731710][ T28] audit: type=1326 audit(1772892937.856:15326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.4.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 211.832970][T11148] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2482: bg 0: block 7: invalid block bitmap [ 211.868064][T11148] loop3: lost filesystem error report for type 5 error -117 [ 211.869545][ T28] audit: type=1326 audit(1772892937.856:15327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.4.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 211.870850][T11148] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 211.877388][ T28] audit: type=1326 audit(1772892937.856:15328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11144 comm="syz.4.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6acdbc799 code=0x7ffc0000 [ 211.935882][T11148] loop3: lost filesystem error report for type 5 error -117 [ 211.936136][T11148] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2970: inode #11: comm syz.3.2482: corrupted xattr block 95: invalid header [ 211.972530][T11148] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 211.972827][T11148] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 212.003586][T11148] EXT4-fs (loop3): 1 orphan inode deleted [ 212.014118][T11148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.081598][T11163] all: renamed from bridge_slave_1 [ 212.129648][T11167] netlink: 'syz.5.2489': attribute type 13 has an invalid length. [ 212.159792][ T6138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.545719][T11184] loop3: detected capacity change from 0 to 512 [ 212.558420][T11184] EXT4-fs: Ignoring removed nobh option [ 212.718043][T11184] EXT4-fs (loop3): orphan cleanup on readonly fs [ 212.796046][T11184] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2496: EA inode hash validation failed [ 212.810855][T11184] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 212.827231][T11184] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2496: corrupted inode contents [ 212.840672][T11184] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.842565][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 212.858795][ C0] EXT4-fs (loop3): initial error at time 1772892939: ext4_do_update_inode:5569: inode 15 [ 212.869128][ C0] EXT4-fs (loop3): last error at time 1772892939: ext4_do_update_inode:5569: inode 15 [ 212.879899][T11184] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.2496: mark_inode_dirty error [ 212.893374][T11184] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.896179][T11184] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2496: corrupted inode contents [ 212.921474][T11184] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.932374][T11184] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.2496: mark_inode_dirty error [ 212.956789][T11184] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.963381][T11184] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.2496: mark inode dirty (error -117) [ 213.020030][T11184] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 213.059142][T11199] loop7: detected capacity change from 0 to 512 [ 213.077839][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2502'. [ 213.087820][T11205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.112296][T11184] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 213.123350][T11184] EXT4-fs (loop3): 1 orphan inode deleted [ 213.151476][T11184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 213.220155][T11206] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 43133 - 0 [ 213.238797][T11199] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.326709][T11206] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 43133 - 0 [ 213.338602][T11209] syz_tun: entered allmulticast mode [ 213.347215][T11209] pimreg: entered allmulticast mode [ 213.353726][T11208] syz_tun: left allmulticast mode [ 213.376188][T11199] EXT4-fs error (device loop7): ext4_quota_enable:7188: comm syz.7.2500: Bad quota inum: 2, type: 1 [ 213.398425][T11206] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 43133 - 0 [ 213.423593][T11199] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 213.450109][ T6138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.471220][T11212] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 213.484204][T11206] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 43133 - 0 [ 213.518902][T11212] EXT4-fs error (device loop7): ext4_quota_enable:7188: comm syz.7.2500: Bad quota inum: 2, type: 1 [ 213.536449][T11212] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 213.583566][ T5174] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 43133 - 0 [ 213.592219][ T5174] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 43133 - 0 [ 213.658252][ T5174] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 43133 - 0 [ 213.666874][ T5174] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 43133 - 0 [ 213.715534][ T7393] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 213.783698][T11233] loop7: detected capacity change from 0 to 128 [ 213.838479][T11233] syz.7.2514 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 214.070871][T11242] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 214.876576][T11260] loop3: detected capacity change from 0 to 512 [ 214.934755][T11260] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.996458][T11260] EXT4-fs error (device loop3): ext4_quota_enable:7188: comm syz.3.2525: Bad quota inum: 2, type: 1 [ 215.026864][T11260] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 215.106825][T11265] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 215.123833][T11265] EXT4-fs error (device loop3): ext4_quota_enable:7188: comm syz.3.2525: Bad quota inum: 2, type: 1 [ 215.135193][T11265] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 215.184848][ T6138] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 215.440638][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 215.452301][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 215.606377][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2544'. [ 215.973816][T11324] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2551'. [ 216.107877][T11340] loop3: detected capacity change from 0 to 1024 [ 216.118484][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2558'. [ 216.128581][T11340] EXT4-fs: Ignoring removed nobh option [ 216.128651][T11340] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.161039][T11340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.453800][T11364] netlink: 'syz.6.2564': attribute type 1 has an invalid length. [ 216.509188][T11364] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 216.520443][T11364] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 216.532012][T11364] bond2: (slave ip6gre1): making interface the new active one [ 216.562686][T11364] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 217.234283][ T6138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.289742][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2570'. [ 217.534336][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 217.534355][ T28] audit: type=1400 audit(1772892943.936:15372): avc: denied { create } for pid=11398 comm="syz.6.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 217.609395][ T28] audit: type=1400 audit(1772892943.966:15373): avc: denied { write } for pid=11398 comm="syz.6.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 217.637372][T11393] loop3: detected capacity change from 0 to 512 [ 217.729679][T11393] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 217.828173][T11393] EXT4-fs (loop3): 1 truncate cleaned up [ 217.837492][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2582'. [ 217.869179][T11393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.325972][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2590'. [ 218.360663][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2590'. [ 218.434568][T11432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2591'. [ 218.538173][T11434] SELinux: failed to load policy [ 218.604354][ T6138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.391061][T11460] uprobe: syz.7.2603:11460 failed to unregister, leaking uprobe [ 219.409610][T11459] uprobe: syz.7.2603:11459 failed to unregister, leaking uprobe [ 220.505652][T11477] loop6: detected capacity change from 0 to 512 [ 220.570365][T11477] EXT4-fs: Ignoring removed nobh option [ 220.599762][T11477] EXT4-fs (loop6): orphan cleanup on readonly fs [ 220.679775][T11477] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.2610: EA inode hash validation failed [ 220.695781][T11477] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2610: corrupted inode contents [ 220.713643][T11477] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.716678][T11477] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.2610: mark_inode_dirty error [ 220.726381][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 220.726478][ C0] EXT4-fs (loop6): initial error at time 1772892947: ext4_do_update_inode:5569: inode 15 [ 220.726748][ C0] EXT4-fs (loop6): last error at time 1772892947: ext4_do_update_inode:5569: inode 15 [ 220.773065][T11477] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.786762][T11477] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2610: corrupted inode contents [ 220.810580][T11477] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.815627][T11477] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.2610: mark_inode_dirty error [ 220.841333][T11477] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.844411][T11477] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #15: comm syz.6.2610: mark inode dirty (error -117) [ 220.869900][T11477] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.873058][T11477] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 220.894390][T11477] EXT4-fs (loop6): 1 orphan inode deleted [ 220.906337][T11477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 221.081203][ T7520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.210758][T11501] netlink: 'syz.5.2621': attribute type 4 has an invalid length. [ 221.312555][T11501] netlink: 'syz.5.2621': attribute type 4 has an invalid length. [ 221.825065][T11522] netlink: 'syz.5.2627': attribute type 3 has an invalid length. [ 222.189022][T11526] lo speed is unknown, defaulting to 1000 [ 222.309691][ T28] audit: type=1400 audit(1772892948.706:15374): avc: denied { mount } for pid=11531 comm="syz.4.2632" name="/" dev="mqueue" ino=2520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 222.541557][T11546] loop6: detected capacity change from 0 to 512 [ 222.584825][T11546] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 222.622516][T11546] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 222.644593][T11561] __nla_validate_parse: 1 callbacks suppressed [ 222.644663][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'. [ 222.652721][T11546] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2638: Corrupt directory, running e2fsck is recommended [ 222.660678][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'. [ 222.726597][T11546] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 222.737053][T11546] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.2638: corrupted in-inode xattr: invalid ea_ino [ 222.853283][T11546] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 222.853473][T11546] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2638: couldn't read orphan inode 15 (err -117) [ 222.862724][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 222.862746][ C1] EXT4-fs (loop6): initial error at time 1772892949: ext4_iget_extra_inode:5025: inode 15 [ 222.862782][ C1] EXT4-fs (loop6): last error at time 1772892949: ext4_iget_extra_inode:5025: inode 15 [ 222.924509][T11546] loop6: lost filesystem error report for type 5 error -117 [ 222.925180][T11546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.945603][T11546] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #2: comm syz.6.2638: corrupted xattr block 255: invalid header [ 222.959190][T11546] SELinux: (dev loop6, type ext4) getxattr errno 117 [ 222.967166][T11546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.254491][T11587] loop6: detected capacity change from 0 to 1024 [ 223.629138][T11587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.668283][ T28] audit: type=1400 audit(1772893206.062:15375): avc: denied { create } for pid=11586 comm="syz.6.2651" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 223.740330][T11591] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2652'. [ 223.752746][ T7520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.779192][ T28] audit: type=1400 audit(1772893206.102:15376): avc: denied { add_name } for pid=11586 comm="syz.6.2651" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 224.004446][T11593] lo speed is unknown, defaulting to 1000 [ 224.082472][ T28] audit: type=1400 audit(1772893206.452:15377): avc: denied { write } for pid=11594 comm="syz.3.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 224.137684][ T28] audit: type=1400 audit(1772893206.492:15378): avc: denied { setopt } for pid=11594 comm="syz.3.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 224.294933][T11606] netlink: 11522 bytes leftover after parsing attributes in process `syz.3.2659'. [ 224.410547][T11608] lo speed is unknown, defaulting to 1000 [ 226.185492][ T28] audit: type=1326 audit(1772893208.572:15379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.3.2678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f981459c799 code=0x0 [ 226.231999][T11655] lo speed is unknown, defaulting to 1000 [ 226.877226][T11677] lo speed is unknown, defaulting to 1000 [ 227.043579][T11686] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 37836 - 0 [ 227.113602][T11686] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 37836 - 0 [ 227.163663][T11686] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 37836 - 0 [ 227.213899][T11686] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 37836 - 0 [ 227.288978][ T2161] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 37836 - 0 [ 227.302331][ T2161] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 37836 - 0 [ 227.316258][ T2161] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 37836 - 0 [ 227.329816][ T2161] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 37836 - 0 [ 228.154462][T11718] lo speed is unknown, defaulting to 1000 [ 228.164720][ T9] IPVS: starting estimator thread 0... [ 228.262542][T11720] IPVS: using max 1680 ests per chain, 84000 per kthread [ 229.128059][T11731] loop6: detected capacity change from 0 to 512 [ 229.141119][T11731] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 229.232656][T11731] EXT4-fs error (device loop6): __ext4_iget:5378: inode #11: block 2: comm syz.6.2708: invalid block [ 229.243785][T11731] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 229.252422][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 229.268115][ C0] EXT4-fs (loop6): initial error at time 1772893211: __ext4_iget:5378: inode 11: block 2 [ 229.278043][ C0] EXT4-fs (loop6): last error at time 1772893211: __ext4_iget:5378: inode 11: block 2 [ 229.288086][T11731] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2708: couldn't read orphan inode 11 (err -117) [ 229.300140][T11731] loop6: lost filesystem error report for type 5 error -117 [ 229.301557][T11731] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.325786][ T28] audit: type=1326 audit(1772893211.722:15380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz.6.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 229.352660][ T28] audit: type=1326 audit(1772893211.722:15381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz.6.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 229.376422][ T28] audit: type=1326 audit(1772893211.722:15382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz.6.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 229.400139][ T28] audit: type=1326 audit(1772893211.722:15383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz.6.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 229.434107][ T28] audit: type=1326 audit(1772893211.752:15384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz.6.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 229.465090][ T7520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.477468][T11735] geneve2: entered promiscuous mode [ 229.493658][ T2161] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.497495][ T28] audit: type=1326 audit(1772893211.752:15385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz.6.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 229.525614][ T28] audit: type=1326 audit(1772893211.752:15386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz.6.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 229.539524][ T2161] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.591680][ T28] audit: type=1326 audit(1772893211.752:15387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz.6.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 229.619964][ T2161] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.649534][ T2161] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.683723][ T28] audit: type=1326 audit(1772893211.752:15388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz.6.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 229.875496][ T28] audit: type=1326 audit(1772893211.752:15389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz.6.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ccbc799 code=0x7ffc0000 [ 230.038295][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2715'. [ 230.789291][ T9] IPVS: starting estimator thread 0... [ 230.833361][T11778] netlink: 'syz.6.2722': attribute type 4 has an invalid length. [ 230.874032][ T2161] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 43133 - 0 [ 230.890598][ T2161] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 43133 - 0 [ 230.899578][T11772] IPVS: using max 2400 ests per chain, 120000 per kthread [ 230.922013][T11784] netlink: 'syz.6.2722': attribute type 4 has an invalid length. [ 230.924312][ T2161] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 43133 - 0 [ 230.956916][ T2161] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 43133 - 0 [ 231.803935][T11826] netlink: 'syz.4.2739': attribute type 4 has an invalid length. [ 231.814574][T11826] netlink: 'syz.4.2739': attribute type 4 has an invalid length. [ 231.849458][T11828] loop3: detected capacity change from 0 to 1024 [ 231.857048][T11828] EXT4-fs: Ignoring removed oldalloc option [ 231.863472][T11828] EXT4-fs: Ignoring removed bh option [ 231.920034][T11828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.060690][T11845] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2745'. [ 232.103146][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2745'. [ 232.116735][T11847] loop6: detected capacity change from 0 to 1024 [ 232.133052][T11847] EXT4-fs: Ignoring removed bh option [ 232.151571][T11847] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 232.163113][T11847] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 232.172702][T11847] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.2746: lblock 2 mapped to illegal pblock 2 (length 1) [ 232.186849][T11847] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 232.187040][T11847] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.2746: lblock 0 mapped to illegal pblock 48 (length 1) [ 232.196200][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 232.196221][ C0] EXT4-fs (loop6): initial error at time 1772893214: ext4_map_blocks:776: inode 3: block 2 [ 232.196258][ C0] EXT4-fs (loop6): last error at time 1772893214: ext4_map_blocks:776: inode 3: block 2 [ 232.237352][T11847] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 232.241200][T11847] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2746: Failed to acquire dquot type 0 [ 232.271786][T11847] loop6: lost filesystem error report for type 5 error -117 [ 232.282227][T11847] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 232.307444][T11847] loop6: lost filesystem error report for type 5 error -117 [ 232.307837][T11847] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.2746: mark_inode_dirty error [ 232.345637][T11847] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 232.346374][T11847] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 232.470634][T11847] EXT4-fs (loop6): 1 orphan inode deleted [ 232.477505][T11847] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.491096][T10565] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 232.582733][T10565] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:15: Failed to release dquot type 0 [ 232.600779][ T7520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.613606][ T7520] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 232.631995][ T7520] loop6: lost filesystem error report for type 5 error -117 [ 232.632135][ T7520] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 232.667526][ T7520] loop6: lost filesystem error report for type 5 error -117 [ 232.667608][ T7520] EXT4-fs error (device loop6): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 232.695463][ T7520] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 233.083077][ T6138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.216715][T11908] lo speed is unknown, defaulting to 1000 [ 234.341744][T11915] loop6: detected capacity change from 0 to 512 [ 234.353048][T11915] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2769: inode has both inline data and extents flags [ 234.381601][T11919] loop3: detected capacity change from 0 to 512 [ 234.411828][T11915] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.412135][T11915] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2769: couldn't read orphan inode 15 (err -117) [ 234.421398][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 234.421421][ C1] EXT4-fs (loop6): initial error at time 1772893216: ext4_orphan_get:1391: inode 15 [ 234.421457][ C1] EXT4-fs (loop6): last error at time 1772893216: ext4_orphan_get:1391: inode 15 [ 234.472474][T11919] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 234.526600][T11915] loop6: lost filesystem error report for type 5 error -117 [ 234.528464][T11915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.576478][T11919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2770'. [ 234.641162][ T7520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.708652][T11934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2776'. [ 234.870640][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 234.870670][ T28] audit: type=1400 audit(1772893217.262:15405): avc: denied { create } for pid=11941 comm="syz.3.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 234.912321][T11932] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2775'. [ 234.933268][T11932] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 234.968412][ T28] audit: type=1400 audit(1772893217.302:15406): avc: denied { write } for pid=11941 comm="syz.3.2779" path="socket:[61987]" dev="sockfs" ino=61987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 235.314976][T11957] uprobe: syz.3.2785:11957 failed to unregister, leaking uprobe [ 235.349809][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2786'. [ 235.427062][ T9610] hid_parser_main: 9 callbacks suppressed [ 235.427081][ T9610] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 235.442026][ T9610] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 235.494110][T11966] loop3: detected capacity change from 0 to 4096 [ 235.515230][T11966] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 236.156280][T11985] loop3: detected capacity change from 0 to 512 [ 236.224825][T11985] EXT4-fs: Ignoring removed nobh option [ 236.328391][T11985] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 236.456930][T11985] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 236.504405][T11985] EXT4-fs (loop3): 1 truncate cleaned up [ 236.510482][T11985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.080797][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2810'. [ 237.106636][ T6138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.259731][T12041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.362622][T12041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.380328][T12052] netlink: 'syz.6.2823': attribute type 1 has an invalid length. [ 238.488107][T12052] bond3: (slave veth7): Enslaving as an active interface with a down link [ 238.510826][T12052] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2823'. [ 238.970022][T12074] loop3: detected capacity change from 0 to 512 [ 239.038749][T12074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.051499][T12074] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.263107][ T6138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.856368][T12106] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2842'. [ 239.867620][T12108] xt_hashlimit: size too large, truncated to 1048576 [ 240.013767][ T28] audit: type=1400 audit(1772893222.402:15407): avc: denied { listen } for pid=12114 comm="syz.6.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.939000][ T28] audit: type=1400 audit(1772893223.332:15408): avc: denied { lock } for pid=12132 comm="syz.6.2854" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 241.511759][T12144] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2857'. [ 241.540708][T12146] netlink: 'syz.7.2858': attribute type 4 has an invalid length. [ 243.737110][ T28] audit: type=1400 audit(1772893226.122:15409): avc: denied { ioctl } for pid=12188 comm="syz.4.2877" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64516 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 244.371233][T12210] batadv_slave_1: entered promiscuous mode [ 244.385875][T12209] batadv_slave_1: left promiscuous mode [ 245.263150][T12208] kexec: Could not allocate control_code_buffer [ 245.946232][T12256] lo speed is unknown, defaulting to 1000 [ 246.066471][T12258] sit0: Caught tx_queue_len zero misconfig [ 246.275427][T12261] lo speed is unknown, defaulting to 1000 [ 246.630964][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2908'. [ 246.660591][ T28] audit: type=1400 audit(1772893229.042:15410): avc: denied { ioctl } for pid=12272 comm="syz.3.2909" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 247.994073][T12307] loop3: detected capacity change from 0 to 2048 [ 248.115607][ T9881] loop3: p1 < > p4 [ 248.120228][ T9881] loop3: p4 size 8388608 extends beyond EOD, truncated [ 248.159060][T12307] loop3: p1 < > p4 [ 248.167805][T12307] loop3: p4 size 8388608 extends beyond EOD, truncated [ 248.192903][ T28] audit: type=1400 audit(1772893230.592:15411): avc: denied { read } for pid=12303 comm="syz.3.2920" name="loop3p1" dev="devtmpfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.214620][T12304] EXT4-fs (loop3p1): unable to read superblock [ 248.265530][ T28] audit: type=1400 audit(1772893230.592:15412): avc: denied { open } for pid=12303 comm="syz.3.2920" path="/dev/loop3p1" dev="devtmpfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.492138][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.534932][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.553805][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2927'. [ 249.453930][T12347] lo speed is unknown, defaulting to 1000 [ 249.673892][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2938'. [ 249.825368][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2940'. [ 249.851155][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2940'. [ 249.875088][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2941'. [ 249.903338][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2941'. [ 250.073781][ T28] audit: type=1400 audit(1772893232.462:15413): avc: denied { ioctl } for pid=12369 comm="syz.6.2943" path="socket:[64879]" dev="sockfs" ino=64879 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 250.202204][T12379] loop6: detected capacity change from 0 to 512 [ 250.239901][T12379] EXT4-fs: Ignoring removed nobh option [ 250.285136][T12379] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 250.326143][T12379] EXT4-fs (loop6): 1 truncate cleaned up [ 250.344880][T12379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.186144][ T7520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.600702][T12394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2951'. [ 251.645142][T12399] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2953'. [ 251.776080][T12403] batadv_slave_1: entered promiscuous mode [ 251.806149][T12403] pimreg: entered allmulticast mode [ 251.824166][T12403] pimreg: left allmulticast mode [ 251.852066][T12373] syz.4.2944 (12373) used greatest stack depth: 7256 bytes left [ 251.914398][T12401] batadv_slave_1: left promiscuous mode [ 251.921573][T12406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.972439][T12406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.195458][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2960'. [ 252.396941][T12424] netlink: 'syz.5.2964': attribute type 13 has an invalid length. [ 252.412592][T12424] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.2964'. [ 254.539808][ T28] audit: type=1400 audit(1772893492.802:15414): avc: denied { read } for pid=12499 comm="syz.6.2991" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 254.602511][ T28] audit: type=1400 audit(1772893492.802:15415): avc: denied { open } for pid=12499 comm="syz.6.2991" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 254.991236][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2996'. [ 256.734540][T12532] loop3: detected capacity change from 0 to 8192 [ 257.507082][T12531] syz.3.3002 (12531) used greatest stack depth: 6672 bytes left [ 257.565702][T12545] 8021q: VLANs not supported on bond0 [ 257.572172][T12545] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3008'. [ 257.624721][T12545] bond0 (unregistering): (slave lo): Releasing backup interface [ 257.637620][T12545] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 257.666205][T12545] bond0 (unregistering): Released all slaves [ 257.685466][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3007'. [ 257.708223][ T9610] lo speed is unknown, defaulting to 1000 [ 257.714128][ T9611] lo speed is unknown, defaulting to 1000 [ 257.719869][ T9611] syz2: Port: 1 Link DOWN [ 257.769197][T12552] netlink: 'syz.5.3010': attribute type 13 has an invalid length. [ 257.915118][T12559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3013'. [ 257.985055][T12559] ip6gre1: entered promiscuous mode [ 257.990407][T12559] ip6gre1: entered allmulticast mode [ 257.999322][T12559] netlink: 'syz.3.3013': attribute type 6 has an invalid length. [ 258.052471][T12559] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3013'. [ 258.157195][T12571] loop3: detected capacity change from 0 to 1024 [ 258.173205][T12571] EXT4-fs: Ignoring removed oldalloc option [ 258.182860][T12571] EXT4-fs: Ignoring removed bh option [ 258.233578][T12571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.473719][T12571] ================================================================== [ 258.481886][T12571] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 258.491392][T12571] [ 258.493738][T12571] read to 0xffff888128921c00 of 1024 bytes by task 10565 on cpu 0: [ 258.501671][T12571] copy_folio_from_iter_atomic+0x75f/0x1170 [ 258.507614][T12571] generic_perform_write+0x2c1/0x490 [ 258.512945][T12571] shmem_file_write_iter+0xc5/0xf0 [ 258.518108][T12571] lo_rw_aio+0x67d/0x730 [ 258.522378][T12571] loop_process_work+0x56c/0xac0 [ 258.527343][T12571] loop_workfn+0x31/0x40 [ 258.531619][T12571] process_scheduled_works+0x4de/0x9e0 [ 258.537180][T12571] worker_thread+0x581/0x770 [ 258.541801][T12571] kthread+0x22a/0x280 [ 258.545888][T12571] ret_from_fork+0x150/0x360 [ 258.550504][T12571] ret_from_fork_asm+0x1a/0x30 [ 258.555291][T12571] [ 258.557631][T12571] write to 0xffff888128921fc8 of 50 bytes by task 12571 on cpu 1: [ 258.565460][T12571] copy_folio_from_iter_atomic+0x75f/0x1170 [ 258.571383][T12571] generic_perform_write+0x2c1/0x490 [ 258.576697][T12571] ext4_buffered_write_iter+0x1ee/0x3c0 [ 258.582261][T12571] ext4_file_write_iter+0x380/0xfa0 [ 258.587477][T12571] iter_file_splice_write+0x6c4/0xa80 [ 258.592868][T12571] direct_splice_actor+0x156/0x2a0 [ 258.598008][T12571] splice_direct_to_actor+0x311/0x670 [ 258.603405][T12571] do_splice_direct+0x119/0x1a0 [ 258.608274][T12571] do_sendfile+0x382/0x650 [ 258.612715][T12571] __x64_sys_sendfile64+0x105/0x150 [ 258.617940][T12571] x64_sys_call+0x2dc4/0x3020 [ 258.622647][T12571] do_syscall_64+0x12c/0x370 [ 258.627253][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.633340][T12571] [ 258.635680][T12571] Reported by Kernel Concurrency Sanitizer on: [ 258.641875][T12571] CPU: 1 UID: 0 PID: 12571 Comm: syz.3.3018 Tainted: G W syzkaller #0 PREEMPT(full) [ 258.652838][T12571] Tainted: [W]=WARN [ 258.656673][T12571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.666743][T12571] ================================================================== [ 259.107321][T12571] ================================================================== [ 259.115536][T12571] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 259.123468][T12571] [ 259.125811][T12571] write to 0xffff88811ac9e9ec of 4 bytes by task 12584 on cpu 1: [ 259.133551][T12571] xas_set_mark+0x12b/0x140 [ 259.138083][T12571] __folio_start_writeback+0x17b/0x370 [ 259.143566][T12571] ext4_bio_write_folio+0x5ad/0x9f0 [ 259.148801][T12571] mpage_process_page_bufs+0x4a1/0x620 [ 259.154293][T12571] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 259.160116][T12571] ext4_do_writepages+0x70f/0x2840 [ 259.165245][T12571] ext4_writepages+0x18f/0x320 [ 259.170030][T12571] do_writepages+0x1c6/0x310 [ 259.174642][T12571] file_write_and_wait_range+0x178/0x2f0 [ 259.180291][T12571] generic_buffers_fsync_noflush+0x45/0x130 [ 259.186204][T12571] ext4_sync_file+0x1aa/0x6b0 [ 259.190899][T12571] vfs_fsync_range+0xc5/0xe0 [ 259.195505][T12571] ext4_buffered_write_iter+0x34f/0x3c0 [ 259.201070][T12571] ext4_file_write_iter+0x380/0xfa0 [ 259.206275][T12571] iter_file_splice_write+0x6c4/0xa80 [ 259.211662][T12571] direct_splice_actor+0x156/0x2a0 [ 259.216788][T12571] splice_direct_to_actor+0x311/0x670 [ 259.222180][T12571] do_splice_direct+0x119/0x1a0 [ 259.227040][T12571] do_sendfile+0x382/0x650 [ 259.231482][T12571] __x64_sys_sendfile64+0x105/0x150 [ 259.236690][T12571] x64_sys_call+0x2dc4/0x3020 [ 259.241393][T12571] do_syscall_64+0x12c/0x370 [ 259.246002][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.251921][T12571] [ 259.254260][T12571] read to 0xffff88811ac9e9ec of 4 bytes by task 12571 on cpu 0: [ 259.261914][T12571] __writeback_single_inode+0x26b/0x860 [ 259.267488][T12571] writeback_single_inode+0x16d/0x3f0 [ 259.272926][T12571] sync_inode_metadata+0x6e/0xa0 [ 259.277912][T12571] generic_buffers_fsync_noflush+0xee/0x130 [ 259.283850][T12571] ext4_sync_file+0x1aa/0x6b0 [ 259.288562][T12571] vfs_fsync_range+0xc5/0xe0 [ 259.293187][T12571] ext4_buffered_write_iter+0x34f/0x3c0 [ 259.298760][T12571] ext4_file_write_iter+0x380/0xfa0 [ 259.303974][T12571] iter_file_splice_write+0x6c4/0xa80 [ 259.309368][T12571] direct_splice_actor+0x156/0x2a0 [ 259.314490][T12571] splice_direct_to_actor+0x311/0x670 [ 259.319908][T12571] do_splice_direct+0x119/0x1a0 [ 259.324772][T12571] do_sendfile+0x382/0x650 [ 259.329220][T12571] __x64_sys_sendfile64+0x105/0x150 [ 259.334446][T12571] x64_sys_call+0x2dc4/0x3020 [ 259.339164][T12571] do_syscall_64+0x12c/0x370 [ 259.343787][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.349702][T12571] [ 259.352051][T12571] value changed: 0x0a000021 -> 0x04000021 [ 259.357774][T12571] [ 259.360123][T12571] Reported by Kernel Concurrency Sanitizer on: [ 259.366300][T12571] CPU: 0 UID: 0 PID: 12571 Comm: syz.3.3018 Tainted: G W syzkaller #0 PREEMPT(full) [ 259.377266][T12571] Tainted: [W]=WARN [ 259.381082][T12571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.391164][T12571] ================================================================== [ 259.442379][ T6138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.