last executing test programs: 4m54.728843494s ago: executing program 32 (id=144): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) lsm_list_modules(0x0, &(0x7f0000000000), 0x0) 4m38.572388232s ago: executing program 33 (id=485): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001440)=""/100, 0x64}], 0x1}, 0xfffe}], 0x1, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) 4m29.845836394s ago: executing program 34 (id=679): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10010000, 0x40000, 0x5, 0xe8a, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x875b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) 4m9.440896961s ago: executing program 35 (id=1208): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x14a900, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 3m37.77190929s ago: executing program 36 (id=1652): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x7, 0x0, &(0x7f00000000c0)) 3m34.153772272s ago: executing program 37 (id=2029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1m43.395121012s ago: executing program 7 (id=4816): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) 1m43.204823753s ago: executing program 7 (id=4822): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) sendmmsg$unix(r1, &(0x7f000000f7c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0xf000, 0x800) 1m43.114156939s ago: executing program 7 (id=4825): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x58) 1m43.059221762s ago: executing program 7 (id=4827): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x5, 0x12, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204, 0xff]}) write$UHID_INPUT2(r0, 0x0, 0x90) 1m42.807570307s ago: executing program 7 (id=4833): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m42.550776801s ago: executing program 7 (id=4836): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x5, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000000c0)="a931", &(0x7f0000000100)=@tcp6=r0, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1m42.550659092s ago: executing program 38 (id=4836): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x5, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000000c0)="a931", &(0x7f0000000100)=@tcp6=r0, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1m11.439180707s ago: executing program 5 (id=5541): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m11.336520674s ago: executing program 5 (id=5543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m11.077687819s ago: executing program 3 (id=5548): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xf0, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m11.035733431s ago: executing program 5 (id=5549): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$nci(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x18d6, &(0x7f0000000440)={0x0, 0x5352, 0x1, 0x2000, 0x397}, &(0x7f0000000400), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) 1m10.555169699s ago: executing program 3 (id=5552): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_io_uring_setup(0x495, 0x0, 0x0, 0x0) 1m10.38191098s ago: executing program 5 (id=5555): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@noquota}, {@norecovery}, {@nodiscard}, {@lazytime}, {@quota}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x560, &(0x7f0000001240)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x1b0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0xffffffffffffffff]}) write$UHID_INPUT2(r0, 0x0, 0x90) 1m10.163973333s ago: executing program 5 (id=5557): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 1m9.822480503s ago: executing program 5 (id=5560): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 1m9.822151202s ago: executing program 39 (id=5560): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 1m9.69154716s ago: executing program 3 (id=5562): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) 1m9.595837106s ago: executing program 3 (id=5564): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m9.51720043s ago: executing program 3 (id=5566): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1c87d73b8d213064}, 0x20048000) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0xffff, r1, 0x0}]) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 1m8.898877567s ago: executing program 3 (id=5572): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @private2, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x1}], 0x1}}], 0x2, 0x20000800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000180)=0x8) 1m8.875103768s ago: executing program 40 (id=5572): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @private2, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x1}], 0x1}}], 0x2, 0x20000800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000180)=0x8) 53.256481094s ago: executing program 4 (id=5807): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x70bd2c, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 53.198612168s ago: executing program 4 (id=5809): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 52.99285982s ago: executing program 4 (id=5816): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x20000054) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x20040) 52.892534796s ago: executing program 4 (id=5822): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@noquota}, {@norecovery}, {@nodiscard}, {@lazytime}, {@quota}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x560, &(0x7f0000001240)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x1b0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0xffffffffffffffff]}) write$UHID_INPUT2(r0, 0x0, 0x90) 52.598594363s ago: executing program 4 (id=5830): r0 = socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000000101040008001b0000000000dc4090dae74fd283b96f7fae7710062d6ea9e7e195d27f089971e4e6d3f4bffe"], 0x28}}, 0x0) 52.327659839s ago: executing program 4 (id=5838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x2}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 52.277701382s ago: executing program 41 (id=5838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x2}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 33.809636476s ago: executing program 9 (id=6271): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x4000423) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents(r2, &(0x7f0000000380)=""/4084, 0xff4) 33.751386789s ago: executing program 9 (id=6273): r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) readv(r0, &(0x7f0000000bc0)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1) 32.669100363s ago: executing program 9 (id=6286): r0 = io_uring_setup(0x1d47, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x1, 0x83}) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r1, &(0x7f0000000000)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'team_slave_0\x00'}}, 0x80, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 32.616666266s ago: executing program 9 (id=6289): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@jqfmt_vfsold}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 32.390483219s ago: executing program 9 (id=6297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[], 0x22) 31.941328436s ago: executing program 9 (id=6302): unshare(0x6020400) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x282000, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) 31.941055436s ago: executing program 42 (id=6302): unshare(0x6020400) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x282000, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) 1.345116991s ago: executing program 1 (id=7110): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x2, r2, 0x33, r0}, 0x10) 1.294220644s ago: executing program 1 (id=7112): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000000000000001"], 0x84}}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd13381600000000000000", @ANYRES32=0x0, @ANYBLOB="0800050004000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) 1.270968026s ago: executing program 1 (id=7113): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = msgget$private(0x0, 0x480) msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x401, 0x0) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000000004"], 0x42, 0x0) msgsnd(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x401, 0x0) msgrcv(r0, &(0x7f0000000080)={0x0, ""/211}, 0xdb, 0x3, 0x3800) 1.211102669s ago: executing program 6 (id=7115): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002440)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3dfc1b1f1b25eadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc8501ea4500001018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a32102a3fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f900"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.181035571s ago: executing program 8 (id=7116): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) write$bt_hci(r0, 0x0, 0xb) 1.173024011s ago: executing program 8 (id=7118): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xf2, 0x5, 0xa0fe, 0x6, 0xd, 0x7fff}, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={[0x10000]}, 0x8}) 1.133687154s ago: executing program 6 (id=7119): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 1.133196013s ago: executing program 8 (id=7120): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2c020400) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x351e, 0x483, 0x0, 0x0, 0x0) 1.096255756s ago: executing program 2 (id=7121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000004c0)="11", 0x1, 0x2000c841, &(0x7f0000000440)={0xa, 0x2, 0xfffffffd, @empty, 0x40000004}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) sendto$inet6(r0, &(0x7f0000000000)='-', 0x1, 0x800, 0x0, 0x0) 987.573262ms ago: executing program 2 (id=7122): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) 902.723737ms ago: executing program 8 (id=7123): socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082) 902.275197ms ago: executing program 8 (id=7124): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 831.830181ms ago: executing program 6 (id=7125): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) shmdt(0x0) msgget(0x1, 0x20) 831.646532ms ago: executing program 8 (id=7126): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 788.012284ms ago: executing program 2 (id=7127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e20, 0x81, @remote, 0x72ea}}, 0x0, 0x0, 0x4a, 0x0, "042f769c1583509786a1752ef58eefbbf87661ecaaf2bcc41cad50354af04429c8e421c366e225b6346991e3b85c4f4fea1cd596373d8cb077756e8516b1b8b4c7e698232f9b99fc3a902918d935a942"}, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 731.238387ms ago: executing program 6 (id=7129): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0x401, 0xffffffff}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) 611.268844ms ago: executing program 6 (id=7130): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000001080)={{0x1d, @multicast2, 0x2, 0x0, 'fo\x00', 0x0, 0x5, 0x2000000}, {@broadcast, 0x2, 0x2000, 0x7ffffff, 0x0, 0x20100}}, 0x44) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) 562.130327ms ago: executing program 2 (id=7131): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) time(&(0x7f0000000f40)) 561.586437ms ago: executing program 6 (id=7132): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40080000, 0x0, 0x0, 0xce0, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 525.85009ms ago: executing program 2 (id=7134): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@init_itable, 0x0}, {}, {@journal_dev={'journal_dev', 0x3d, 0x10}}, {@i_version}, {@nobarrier}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 410.866986ms ago: executing program 1 (id=7135): mmap(&(0x7f0000d96000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0x94) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 374.595768ms ago: executing program 0 (id=7136): memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000000000000001"], 0x84}}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x3) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd13381600000000000000", @ANYRES32=0x0, @ANYBLOB="0800050004000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) 355.669139ms ago: executing program 0 (id=7137): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, 0x0, 0x0) 331.86169ms ago: executing program 1 (id=7138): connect$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 226.459337ms ago: executing program 0 (id=7139): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x2, r2, 0x33, r0}, 0x10) 225.732907ms ago: executing program 1 (id=7140): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="faff0200050012"], 0xc) 169.06853ms ago: executing program 0 (id=7141): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[@ANYRES32=0x41424344], 0x0) 101.804754ms ago: executing program 0 (id=7142): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x38, @mcast2, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e574da93883e8c628a60eb17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x404c880) 101.521304ms ago: executing program 0 (id=7143): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xce23, 0x3000000, @dev={0xfe, 0x80, '\x00', 0x29}, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0x37, "ad21613e5a5df4a1c42e7675f3cb2a326b5d85cc4ae5ddd01b7fe724c8f88d2bcb49767bd7bc309a8c3c3a53857b95b2c4ba334bd40624"}, &(0x7f0000000040)=0x3f) 0s ago: executing program 2 (id=7144): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0x9, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): subj=root:sysadm_r:sysadm_t pid=18191 comm="syz.5.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1d70a7b78e code=0x7ffc0000 [ 256.213875][ T3423] net_ratelimit: 2 callbacks suppressed [ 256.213892][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.259234][T18194] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 256.270774][T18201] netlink: 'syz.1.5234': attribute type 1 has an invalid length. [ 256.302138][T18194] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 256.304623][T18201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.322165][T18194] System zones: 0-2, 18-18, 34-35 [ 256.332996][T18194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.338003][T18201] bond1: (slave gretap2): making interface the new active one [ 256.353658][T18201] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 256.491066][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 256.499351][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 256.597049][T16916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.654368][T18240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18240 comm=syz.3.5250 [ 256.692336][T18240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18240 comm=syz.3.5250 [ 256.745895][T18242] loop9: detected capacity change from 0 to 512 [ 256.782689][T18242] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.814599][T18242] ext4 filesystem being mounted at /511/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.849884][T18249] loop5: detected capacity change from 0 to 2048 [ 256.902269][T18249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.931230][T18223] hid-generic 0000:0000:0000.0003: pid 18223 passed too short report [ 256.974272][T11193] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.996662][T18257] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 256.996706][T16916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.127835][T18265] netlink: 'syz.2.5259': attribute type 29 has an invalid length. [ 257.163270][T18265] netlink: 'syz.2.5259': attribute type 29 has an invalid length. [ 257.181425][T18265] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5259'. [ 257.218424][T18273] batadv_slave_1: entered promiscuous mode [ 257.228448][T18272] batadv_slave_1: left promiscuous mode [ 257.250574][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.269320][T18275] loop3: detected capacity change from 0 to 1024 [ 257.287861][T18278] loop5: detected capacity change from 0 to 128 [ 257.299870][T18275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.330154][T18275] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5264'. [ 257.340042][T18278] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.360038][ T4551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.397396][T18278] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 257.527640][T18288] netlink: 'syz.3.5268': attribute type 21 has an invalid length. [ 257.535523][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5268'. [ 257.560263][T16916] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.571509][T15881] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.579985][T18288] netlink: 'syz.3.5268': attribute type 21 has an invalid length. [ 257.590206][T15881] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.612739][T15881] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.636121][T18300] loop1: detected capacity change from 0 to 512 [ 257.654854][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.666591][T15881] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.735983][T18309] __nla_validate_parse: 1 callbacks suppressed [ 257.736000][T18309] netlink: 304 bytes leftover after parsing attributes in process `syz.9.5274'. [ 257.871180][T18328] netlink: 'syz.9.5284': attribute type 7 has an invalid length. [ 257.897670][T15881] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.897706][T18328] netlink: 'syz.9.5284': attribute type 7 has an invalid length. [ 257.908221][T15881] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.953385][T15881] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.987838][T15881] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.116267][T18342] loop9: detected capacity change from 0 to 128 [ 258.125939][T18342] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 258.155041][T18342] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 258.163012][T18342] FAT-fs (loop9): Filesystem has been set read-only [ 258.204890][T18342] bio_check_eod: 58 callbacks suppressed [ 258.204912][T18342] syz.9.5291: attempt to access beyond end of device [ 258.204912][T18342] loop9: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 258.239804][T18342] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 258.247798][T18342] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 258.258481][T18342] syz.9.5291: attempt to access beyond end of device [ 258.258481][T18342] loop9: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 258.272987][T18342] syz.9.5291: attempt to access beyond end of device [ 258.272987][T18342] loop9: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 258.287274][T18342] syz.9.5291: attempt to access beyond end of device [ 258.287274][T18342] loop9: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 258.304150][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.315158][T18342] syz.9.5291: attempt to access beyond end of device [ 258.315158][T18342] loop9: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 258.348522][T18342] syz.9.5291: attempt to access beyond end of device [ 258.348522][T18342] loop9: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 258.382209][T18342] syz.9.5291: attempt to access beyond end of device [ 258.382209][T18342] loop9: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 258.410775][T18342] syz.9.5291: attempt to access beyond end of device [ 258.410775][T18342] loop9: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 258.425545][T18342] syz.9.5291: attempt to access beyond end of device [ 258.425545][T18342] loop9: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 258.439669][T18342] syz.9.5291: attempt to access beyond end of device [ 258.439669][T18342] loop9: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 258.507782][T18358] loop1: detected capacity change from 0 to 256 [ 258.828559][T18371] team0: Port device syz_tun added [ 258.840404][T18371] team0: Port device syz_tun removed [ 258.852592][T18371] dummy0: left allmulticast mode [ 258.867588][T18371] bridge0: port 4(dummy0) entered disabled state [ 258.881923][T18371] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.903133][T18371] bridge_slave_1: left allmulticast mode [ 258.908906][T18371] bridge_slave_1: left promiscuous mode [ 258.914679][T18371] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.953727][T18371] bond0: (slave bond_slave_0): Releasing backup interface [ 258.972064][T18371] bond0: (slave bond_slave_1): Releasing backup interface [ 258.986296][T18371] team0: Port device team_slave_0 removed [ 258.993255][T18371] team0: Port device team_slave_1 removed [ 258.999347][T18371] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.403808][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.404306][T18388] futex_wake_op: syz.1.5310 tries to shift op by -3; fix this program [ 259.459139][T18393] loop1: detected capacity change from 0 to 512 [ 259.479578][T18393] ext2: Unexpected value for 'debug' [ 260.207486][T18435] loop5: detected capacity change from 0 to 1024 [ 260.214581][T18435] EXT4-fs: Ignoring removed nobh option [ 260.220312][T18435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.267633][T18435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.346233][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5333'. [ 260.458866][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.668590][T16916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.686796][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.836507][T18484] af_packet: tpacket_rcv: packet too big, clamped from 2902 to 4294967280. macoff=96 [ 260.923729][T18490] loop1: detected capacity change from 0 to 256 [ 260.930202][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.964559][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 260.964579][ T29] audit: type=1326 audit(1770576880.208:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18489 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb732d1b78e code=0x7ffc0000 [ 260.997422][T18490] vfat: Unknown parameter 'nnonumtail' [ 261.053889][ T29] audit: type=1326 audit(1770576880.248:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18489 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb732d1b78e code=0x7ffc0000 [ 261.078148][ T29] audit: type=1326 audit(1770576880.248:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18489 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb732d59d97 code=0x7ffc0000 [ 261.101743][ T29] audit: type=1326 audit(1770576880.248:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18489 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb732d5c14a code=0x7ffc0000 [ 261.126258][ T29] audit: type=1326 audit(1770576880.248:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18489 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb732d1b78e code=0x7ffc0000 [ 261.150436][ T29] audit: type=1326 audit(1770576880.248:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18489 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb732d5ab4b code=0x7ffc0000 [ 261.173907][ T29] audit: type=1326 audit(1770576880.248:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18489 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb732d1b78e code=0x7ffc0000 [ 261.198064][ T29] audit: type=1326 audit(1770576880.248:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18489 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 261.222396][ T29] audit: type=1326 audit(1770576880.248:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18489 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 261.246756][ T29] audit: type=1326 audit(1770576880.258:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18489 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 261.298069][T18508] loop1: detected capacity change from 0 to 128 [ 261.356750][T18510] loop9: detected capacity change from 0 to 512 [ 261.392581][T18510] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.459408][T11193] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.494838][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.914493][T18543] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5374'. [ 262.186785][T18554] 9p: Unknown uid 00000000004294967295 [ 262.365298][T18562] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 262.403488][ T9474] kernel write not supported for file bpf-prog (pid: 9474 comm: kworker/0:6) [ 262.531439][ T9474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.730963][T18586] loop1: detected capacity change from 0 to 1024 [ 262.758623][T18586] EXT4-fs: Ignoring removed bh option [ 262.846627][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 263.059824][T18610] loop9: detected capacity change from 0 to 2048 [ 263.092553][T18610] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 263.124533][T18610] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 263.192168][T18610] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 263.204824][T18610] EXT4-fs (loop9): This should not happen!! Data will be lost [ 263.204824][T18610] [ 263.214847][T18610] EXT4-fs (loop9): Total free blocks count 0 [ 263.221094][T18610] EXT4-fs (loop9): Free/Dirty block details [ 263.227200][T18610] EXT4-fs (loop9): free_blocks=2415919104 [ 263.232991][T18610] EXT4-fs (loop9): dirty_blocks=32 [ 263.238279][T18610] EXT4-fs (loop9): Block reservation details [ 263.244385][T18610] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 263.257551][T18618] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 263.570449][ T9474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.726663][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.735123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.743396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.751651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.764448][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.126616][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.134294][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.316956][T18656] xt_hashlimit: size too large, truncated to 1048576 [ 264.543557][T18664] SELinux: failed to load policy [ 264.930217][T18702] SELinux: failed to load policy [ 265.028278][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5442'. [ 265.185341][T18726] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5448'. [ 265.203211][T18726] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 265.496777][T18739] Falling back ldisc for ptm0. [ 265.645139][T18580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.725577][T18754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18754 comm=syz.3.5461 [ 265.782588][T18761] netlink: 'syz.1.5462': attribute type 4 has an invalid length. [ 265.830310][T18765] loop3: detected capacity change from 0 to 512 [ 265.863047][T18765] EXT4-fs: Ignoring removed bh option [ 265.900346][T18765] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 265.925081][T18765] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 265.950185][T18765] EXT4-fs (loop3): failed to open journal device unknown-block(8,224) -6 [ 266.116195][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 266.116215][ T29] audit: type=1400 audit(1770576885.358:2719): avc: denied { accept } for pid=18787 comm="syz.1.5471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 266.290495][T18802] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 266.676717][ T29] audit: type=1326 audit(1770576885.898:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.1.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 266.701335][T18826] loop9: detected capacity change from 0 to 2048 [ 266.701347][ T29] audit: type=1326 audit(1770576885.898:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.1.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 266.731919][ T29] audit: type=1326 audit(1770576885.898:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.1.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 266.755658][ T29] audit: type=1326 audit(1770576885.898:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.1.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 266.779258][ T29] audit: type=1326 audit(1770576885.898:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.1.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 266.802742][ T29] audit: type=1326 audit(1770576885.898:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.1.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 266.826291][ T29] audit: type=1326 audit(1770576885.898:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.1.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 266.850113][ T29] audit: type=1326 audit(1770576885.898:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.1.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 266.873737][ T29] audit: type=1326 audit(1770576885.898:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18820 comm="syz.1.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 266.940958][ T9474] net_ratelimit: 8 callbacks suppressed [ 266.940976][ T9474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.966920][ T3307] loop9: p1 p3 p4 [ 266.972182][ T3307] loop9: p4 size 589824 extends beyond EOD, truncated [ 267.051628][T18826] loop9: p1 p3 p4 [ 267.057280][T18826] loop9: p4 size 589824 extends beyond EOD, truncated [ 267.153081][ T9029] udevd[9029]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 267.167755][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 267.189157][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 267.304232][ T9029] udevd[9029]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 267.315607][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 267.328844][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 267.806908][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.841385][T18860] loop9: detected capacity change from 0 to 1024 [ 267.869257][T18860] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.901858][T11193] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.934335][T18871] loop5: detected capacity change from 0 to 128 [ 267.954010][T18871] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.968196][ T9474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.978047][T18871] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 268.017528][T18874] netlink: 'syz.9.5499': attribute type 12 has an invalid length. [ 268.061122][T18878] loop9: detected capacity change from 0 to 1024 [ 268.087409][T18878] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.103843][T16916] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.179315][T11193] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.292546][T18891] netlink: 'syz.1.5507': attribute type 1 has an invalid length. [ 268.306658][T18889] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 268.339232][T18891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.372581][T18898] bond2: (slave geneve2): making interface the new active one [ 268.397075][T18898] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 268.526132][T18920] loop9: detected capacity change from 0 to 512 [ 268.534349][T18920] EXT4-fs (loop9): orphan cleanup on readonly fs [ 268.541568][T18920] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 268.550458][T18920] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 268.565133][T18920] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.5516: attempt to clear invalid blocks 2 len 1 [ 268.586593][T18920] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.5516: invalid indirect mapped block 1819239214 (level 0) [ 268.604271][T18920] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.5516: invalid indirect mapped block 1819239214 (level 1) [ 268.620005][T18920] EXT4-fs (loop9): 1 truncate cleaned up [ 268.626364][T18920] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.643955][T18920] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 268.653905][T18920] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 268.671043][T18926] loop1: detected capacity change from 0 to 128 [ 268.689438][T18920] EXT4-fs: user quota file already specified [ 268.703146][T18928] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5519'. [ 268.718733][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5519'. [ 268.746677][T11193] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.017293][ T9474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.082980][T18946] loop1: detected capacity change from 0 to 512 [ 269.089750][T18946] EXT4-fs: Ignoring removed bh option [ 269.123685][T18948] loop1: detected capacity change from 0 to 1024 [ 269.131389][T18948] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 269.142107][T18948] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 269.152953][T18948] EXT4-fs (loop1): invalid journal inode [ 269.162566][T18948] EXT4-fs (loop1): can't get journal size [ 269.177160][T18948] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 17104912: comm syz.1.5528: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 269.205668][T18948] EXT4-fs (loop1): failed to initialize system zone (-117) [ 269.213931][T18948] EXT4-fs (loop1): mount failed [ 269.298537][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5533'. [ 269.308294][T18960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5533'. [ 269.317268][T18960] netlink: 'syz.5.5533': attribute type 6 has an invalid length. [ 269.325042][T18960] netlink: 'syz.5.5533': attribute type 5 has an invalid length. [ 269.348042][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5533'. [ 269.348033][T15884] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.348083][T15884] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.357038][T18960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5533'. [ 269.357069][T18960] netlink: 'syz.5.5533': attribute type 6 has an invalid length. [ 269.391863][T18960] netlink: 'syz.5.5533': attribute type 5 has an invalid length. [ 269.401069][T16093] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.414070][T16093] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.527970][T18978] sd 0:0:1:0: device reset [ 269.580833][T18976] syzkaller0: entered promiscuous mode [ 269.586615][T18976] syzkaller0: entered allmulticast mode [ 269.668702][T18986] syzkaller1: entered promiscuous mode [ 269.674467][T18986] syzkaller1: entered allmulticast mode [ 270.047350][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.565509][T19041] loop5: detected capacity change from 0 to 1024 [ 270.592038][T19041] EXT4-fs: Ignoring removed bh option [ 270.630920][T19041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 270.710251][T19041] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5555: bg 0: block 3: invalid block bitmap [ 270.758500][T16916] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /137/file1: bad entry in directory: directory entry overrun - offset=0, inode=16780288, rec_len=142848, size=1024 fake=0 [ 270.812006][T16916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 270.822500][T19044] bio_check_eod: 8308 callbacks suppressed [ 270.822514][T19044] kmmpd-loop5: attempt to access beyond end of device [ 270.822514][T19044] loop5: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 270.842201][T19044] buffer_io_error: 18 callbacks suppressed [ 270.842233][T19044] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 270.857144][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.045035][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5559'. [ 271.069954][T16098] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.080369][T16098] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.096653][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.133941][T19049] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.167910][T19051] bond3: (slave batadv1): Opening slave failed [ 271.185313][T16098] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.195728][T16098] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.331074][T16098] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.341561][T16098] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.420720][T16098] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.431260][T16098] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.534759][T19053] chnl_net:caif_netlink_parms(): no params data found [ 271.629698][T16098] bridge_slave_1: left allmulticast mode [ 271.635596][T16098] bridge_slave_1: left promiscuous mode [ 271.641576][T16098] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.655825][T16098] bridge_slave_0: left allmulticast mode [ 271.661785][T16098] bridge_slave_0: left promiscuous mode [ 271.667733][T16098] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.797719][T16098] erspan0 (unregistering): left promiscuous mode [ 271.808094][T16098] gretap0 (unregistering): left promiscuous mode [ 271.870311][T16098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.880866][T16098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.892034][T16098] bond0 (unregistering): Released all slaves [ 271.901292][T16098] bond1 (unregistering): Released all slaves [ 271.933311][T19053] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.940503][T19053] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.948199][T19053] bridge_slave_0: entered allmulticast mode [ 271.956470][T19053] bridge_slave_0: entered promiscuous mode [ 271.972369][T16098] hsr_slave_0: left promiscuous mode [ 271.978714][T16098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.986130][T16098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.007803][T16098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.015291][T16098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.061780][T16098] veth1_macvtap: left promiscuous mode [ 272.067552][T16098] veth0_macvtap: left promiscuous mode [ 272.073131][T16098] veth1_vlan: left promiscuous mode [ 272.079685][T16098] veth0_vlan: left promiscuous mode [ 272.126765][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.200554][T16098] team0 (unregistering): Port device team_slave_1 removed [ 272.213232][T16098] team0 (unregistering): Port device team_slave_0 removed [ 272.273809][T19053] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.281219][T19053] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.289954][T19053] bridge_slave_1: entered allmulticast mode [ 272.297103][T19053] bridge_slave_1: entered promiscuous mode [ 272.379169][T19105] set_capacity_and_notify: 1 callbacks suppressed [ 272.379195][T19105] loop1: detected capacity change from 0 to 1024 [ 272.393561][T19105] EXT4-fs: Ignoring removed orlov option [ 272.405451][T19053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.451342][T19053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.508250][T19053] team0: Port device team_slave_0 added [ 272.528426][T19053] team0: Port device team_slave_1 added [ 272.582710][T19053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.590480][T19053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.617352][T19053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.659676][T19053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.666730][T19053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.693645][T19053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.837540][T19053] hsr_slave_0: entered promiscuous mode [ 272.843808][T19053] hsr_slave_1: entered promiscuous mode [ 272.878236][T19053] debugfs: 'hsr0' already exists in 'hsr' [ 272.884021][T19053] Cannot create hsr debugfs directory [ 272.960000][T16098] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.970018][T16098] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.992572][T19143] loop1: detected capacity change from 0 to 512 [ 273.033192][T16098] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.043159][T16098] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.079297][T19146] loop1: detected capacity change from 0 to 512 [ 273.164201][T16098] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.174076][T16098] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.184045][ T9474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.260805][T16098] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.270796][T16098] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.337865][T19091] chnl_net:caif_netlink_parms(): no params data found [ 273.442326][T19091] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.450156][T19091] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.457662][T19091] bridge_slave_0: entered allmulticast mode [ 273.464172][T19091] bridge_slave_0: entered promiscuous mode [ 273.471593][T19091] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.479548][T19091] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.487394][T19091] bridge_slave_1: entered allmulticast mode [ 273.494059][T19091] bridge_slave_1: entered promiscuous mode [ 273.521997][T19091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.532929][T19091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.559569][T19091] team0: Port device team_slave_0 added [ 273.567543][T19091] team0: Port device team_slave_1 added [ 273.573591][T16098] vlan2: left promiscuous mode [ 273.578468][T16098] bridge_slave_0: left promiscuous mode [ 273.584216][T16098] bridge0: port 3(vlan2) entered disabled state [ 273.592200][T16098] hsr0: left allmulticast mode [ 273.597043][T16098] hsr_slave_0: left allmulticast mode [ 273.602545][T16098] hsr_slave_1: left allmulticast mode [ 273.608042][T16098] hsr0: left promiscuous mode [ 273.612877][T16098] nr0: port 1(hsr0) entered disabled state [ 273.644689][T16098] bond1 (unregistering): (slave geneve3): Releasing backup interface [ 273.727826][ T3402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.828552][T16098] bond0 (unregistering): Released all slaves [ 273.836264][T16098] bond1 (unregistering): Released all slaves [ 273.855270][T19091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.862386][T19091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.888475][T19091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.899430][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.903299][T19091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.914810][T19091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.940795][T19091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.976665][T16098] hsr_slave_0: left promiscuous mode [ 273.982032][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 273.982048][ T29] audit: type=1326 audit(1770576893.228:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19174 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 274.012235][ T29] audit: type=1326 audit(1770576893.228:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19174 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 274.035932][ T29] audit: type=1326 audit(1770576893.228:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19174 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 274.059610][ T29] audit: type=1326 audit(1770576893.228:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19174 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 274.083398][ T29] audit: type=1326 audit(1770576893.228:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19174 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 274.107110][ T29] audit: type=1326 audit(1770576893.228:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19174 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 274.130760][ T29] audit: type=1326 audit(1770576893.228:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19174 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 274.154659][ T29] audit: type=1326 audit(1770576893.228:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19174 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 274.178574][ T29] audit: type=1326 audit(1770576893.228:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19174 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 274.202362][ T29] audit: type=1326 audit(1770576893.228:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19174 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 274.226232][T16098] hsr_slave_1: left promiscuous mode [ 274.231926][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.321588][T19091] hsr_slave_0: entered promiscuous mode [ 274.358725][T19091] hsr_slave_1: entered promiscuous mode [ 274.456017][T19192] loop1: detected capacity change from 0 to 1024 [ 274.539868][T16098] IPVS: stop unused estimator thread 0... [ 274.566724][T19201] loop1: detected capacity change from 0 to 4096 [ 274.870504][T19053] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 274.882603][T19053] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 274.895293][T19053] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 274.925837][T19053] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.978083][T19053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.990117][T19053] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.001531][T16093] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.008696][T16093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.020376][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.029199][T15884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.038680][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.044359][T16093] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.053966][T16093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.063011][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.150930][T19091] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.169423][T19091] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 275.192226][T19091] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 275.205538][T19053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.213457][T19091] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.246546][ T3547] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 275.246928][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.334429][T19091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.364693][T19091] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.386832][T16098] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.394015][T16098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.420153][T16098] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.427346][T16098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.592154][T19053] veth0_vlan: entered promiscuous mode [ 275.598082][T16100] tipc: Subscription rejected, illegal request [ 275.610631][T19053] veth1_vlan: entered promiscuous mode [ 275.638209][T19318] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5608'. [ 275.657744][T19091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.693354][T19318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.738421][T19318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.762856][T19318] bond0 (unregistering): Released all slaves [ 275.782153][T19053] veth0_macvtap: entered promiscuous mode [ 275.796218][T19053] veth1_macvtap: entered promiscuous mode [ 275.838022][T19053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.868079][T19053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.898898][T16100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.925754][T16100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.955614][T16100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.987566][T16100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.033773][T19091] veth0_vlan: entered promiscuous mode [ 276.070893][T19091] veth1_vlan: entered promiscuous mode [ 276.119392][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5616'. [ 276.145068][T19091] veth0_macvtap: entered promiscuous mode [ 276.154453][T19091] veth1_macvtap: entered promiscuous mode [ 276.177549][T19091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.197886][T19091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.245063][T16093] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.264826][T16093] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.275734][T19384] loop5: detected capacity change from 0 to 6 [ 276.305431][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 276.315086][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.325724][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 276.335456][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.347823][T16093] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.356756][T19384] loop5: unable to read partition table [ 276.369224][T19384] loop_reread_partitions: partition scan of loop5 (󱢛8ۮ *P3"G) failed (rc=-5) [ 276.379221][T16093] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.392078][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 276.401801][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.410923][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 276.420584][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.430301][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 276.439961][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.452128][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 276.461774][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.472001][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 276.481652][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 276.810782][T19409] SELinux: failed to load policy [ 277.328134][ T3423] net_ratelimit: 1 callbacks suppressed [ 277.328151][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.746621][T19476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.757000][T19469] loop4: detected capacity change from 0 to 4096 [ 277.781008][T19469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.824983][T19483] loop9: detected capacity change from 0 to 2048 [ 277.847083][T19483] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.876844][T19483] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.917777][T19053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.940844][T19494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5643'. [ 277.963560][T11193] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.127769][ T3409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.449493][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.764128][T19563] netlink: 'syz.2.5660': attribute type 4 has an invalid length. [ 279.321010][T19595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5669'. [ 279.337790][T19593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5667'. [ 279.401365][T19591] SELinux: failed to load policy [ 279.449883][T19607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5673'. [ 279.549850][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5673'. [ 279.560718][T19619] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.571316][T19619] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.582566][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5679'. [ 279.591527][T19622] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5679'. [ 279.601671][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5673'. [ 279.654815][T16093] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.663995][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5679'. [ 279.675151][T16093] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.688768][T16093] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.763884][T19638] loop6: detected capacity change from 0 to 512 [ 279.782680][T19619] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.793129][T19619] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.809734][T19638] EXT4-fs: Ignoring removed orlov option [ 279.815577][T19638] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.856796][T19638] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.5683: corrupted in-inode xattr: e_value size too large [ 279.893766][T16093] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.907965][T19638] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5683: couldn't read orphan inode 15 (err -117) [ 279.924192][T19638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.951316][T19619] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.961751][T19619] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.012626][T19638] Invalid ELF header magic: != ELF [ 280.018081][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 280.018116][ T29] audit: type=1400 audit(1770576899.258:2847): avc: denied { module_load } for pid=19637 comm="syz.6.5683" path="/15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 280.098903][T19091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.121554][T19619] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.132979][T19619] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.199674][T19671] loop4: detected capacity change from 0 to 2048 [ 280.231778][T16099] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.240105][T16099] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.261271][T16099] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.269616][T16099] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.278509][ T9029] loop4: p1 p3 p4 [ 280.285759][ T9029] loop4: p4 size 589824 extends beyond EOD, truncated [ 280.301031][T19671] loop4: p1 p3 p4 [ 280.306365][T19671] loop4: p4 size 589824 extends beyond EOD, truncated [ 280.327662][T16098] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.336180][T16098] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.362210][ T29] audit: type=1400 audit(1770576899.608:2848): avc: denied { read write } for pid=19669 comm="syz.4.5692" name="loop4p4" dev="devtmpfs" ino=2375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.386145][ T29] audit: type=1400 audit(1770576899.608:2849): avc: denied { open } for pid=19669 comm="syz.4.5692" path="/dev/loop4p4" dev="devtmpfs" ino=2375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.448580][T16098] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.456888][T16098] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.519667][ T9029] udevd[9029]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 280.536677][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 280.558558][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 280.607099][ T29] audit: type=1326 audit(1770576899.718:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5fb71aeb9 code=0x7ffc0000 [ 280.630805][ T29] audit: type=1326 audit(1770576899.728:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fb5fb71aeb9 code=0x7ffc0000 [ 280.654754][ T29] audit: type=1326 audit(1770576899.728:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5fb71aeb9 code=0x7ffc0000 [ 280.678737][ T29] audit: type=1326 audit(1770576899.728:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fb5fb71aeb9 code=0x7ffc0000 [ 280.702953][ T29] audit: type=1326 audit(1770576899.728:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5fb71aeb9 code=0x7ffc0000 [ 280.726649][ T29] audit: type=1326 audit(1770576899.728:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19688 comm="syz.4.5695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5fb71aeb9 code=0x7ffc0000 [ 281.218930][T19728] __nla_validate_parse: 2 callbacks suppressed [ 281.218947][T19728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5704'. [ 281.869276][T19772] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5715'. [ 283.195564][T19824] loop9: detected capacity change from 0 to 256 [ 283.321573][T19822] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 283.982010][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 284.264156][T19907] loop9: detected capacity change from 0 to 1024 [ 284.274972][T19903] pim6reg1: entered promiscuous mode [ 284.280517][T19903] pim6reg1: entered allmulticast mode [ 284.299668][T19907] EXT4-fs: Ignoring removed bh option [ 284.361075][T19907] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 284.456384][T11193] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 284.617045][T19936] netlink: 27 bytes leftover after parsing attributes in process `syz.9.5753'. [ 285.174017][T19976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5762'. [ 285.186850][T19976] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 285.197563][T19976] bridge2: entered promiscuous mode [ 285.202807][T19976] bridge2: entered allmulticast mode [ 285.554996][ T29] audit: type=1400 audit(1770576904.798:2856): avc: denied { mount } for pid=19996 comm="syz.1.5767" name="/" dev="autofs" ino=61148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 285.647115][T16093] Bluetooth: hci0: Frame reassembly failed (-84) [ 285.725460][T20013] netlink: 'syz.4.5772': attribute type 13 has an invalid length. [ 285.829004][T20022] loop6: detected capacity change from 0 to 512 [ 285.853892][T20022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.946813][T19091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.001115][ T29] audit: type=1326 audit(1770576905.248:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20035 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 286.024744][ T29] audit: type=1326 audit(1770576905.248:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20035 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 286.048388][ T29] audit: type=1326 audit(1770576905.248:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20035 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 286.071945][ T29] audit: type=1326 audit(1770576905.248:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20035 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 286.104310][ T29] audit: type=1326 audit(1770576905.248:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20035 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 286.128447][ T29] audit: type=1326 audit(1770576905.248:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20035 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 286.151993][ T29] audit: type=1326 audit(1770576905.248:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20035 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 286.175878][ T29] audit: type=1326 audit(1770576905.248:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20035 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 286.199419][ T29] audit: type=1326 audit(1770576905.298:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20035 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b14bfac22 code=0x7ffc0000 [ 286.647231][T20083] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5781'. [ 286.926917][T20110] loop6: detected capacity change from 0 to 512 [ 286.949683][T20110] EXT4-fs: Ignoring removed nobh option [ 286.978838][T20110] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 287.009988][T20110] EXT4-fs (loop6): 1 truncate cleaned up [ 287.020175][T20110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.049539][T20110] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.135061][T20120] loop9: detected capacity change from 0 to 128 [ 287.525372][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5804'. [ 287.534512][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5804'. [ 287.543516][T20156] netlink: 'syz.9.5804': attribute type 6 has an invalid length. [ 287.619539][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5804'. [ 287.628507][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5804'. [ 287.637424][T20156] netlink: 'syz.9.5804': attribute type 6 has an invalid length. [ 287.646596][ T3547] Bluetooth: hci0: command 0x1003 tx timeout [ 287.657944][ T3505] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 287.807388][T20178] loop9: detected capacity change from 0 to 128 [ 287.836299][T20178] sg_write: data in/out 32732/8 bytes for SCSI command 0xbd-- guessing data in; [ 287.836299][T20178] program syz.9.5812 not setting count and/or reply_len properly [ 287.885110][T20181] netlink: 46 bytes leftover after parsing attributes in process `syz.1.5813'. [ 288.043386][T20199] loop4: detected capacity change from 0 to 1024 [ 288.088842][T20199] EXT4-fs: Ignoring removed bh option [ 288.139019][T20199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 288.276562][T20199] loop4: detected capacity change from 1024 to 64 [ 288.291972][T20216] syzkaller0: entered promiscuous mode [ 288.297580][T20216] syzkaller0: entered allmulticast mode [ 288.321916][T19053] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /50/file1: bad entry in directory: directory entry overrun - offset=0, inode=16780288, rec_len=142848, size=1024 fake=0 [ 288.357440][T19053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 288.375329][T20206] kmmpd-loop4: attempt to access beyond end of device [ 288.375329][T20206] loop4: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 288.389102][T20206] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 288.609722][T16099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.670565][T16099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.742732][T16099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.853567][T16099] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.956771][T16099] bridge_slave_1: left allmulticast mode [ 288.962519][T16099] bridge_slave_1: left promiscuous mode [ 288.968440][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.979915][T16099] bridge_slave_0: left allmulticast mode [ 288.985643][T16099] bridge_slave_0: left promiscuous mode [ 288.991377][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.149470][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5849'. [ 289.229658][T16099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.239954][T16099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.249160][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5848'. [ 289.259819][T16099] bond0 (unregistering): Released all slaves [ 289.270065][T20246] chnl_net:caif_netlink_parms(): no params data found [ 289.336626][T16099] hsr_slave_0: left promiscuous mode [ 289.363159][T16099] hsr_slave_1: left promiscuous mode [ 289.378041][T16099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.385562][T16099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.393761][T16099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.401435][T16099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.415274][T16099] veth1_macvtap: left promiscuous mode [ 289.422317][T16099] veth0_macvtap: left promiscuous mode [ 289.428552][T16099] veth1_vlan: left promiscuous mode [ 289.442449][T16099] veth0_vlan: left promiscuous mode [ 289.524130][T16099] team0 (unregistering): Port device team_slave_1 removed [ 289.535525][T16099] team0 (unregistering): Port device team_slave_0 removed [ 289.621355][T20246] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.628725][T20246] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.640574][T20246] bridge_slave_0: entered allmulticast mode [ 289.647484][T20246] bridge_slave_0: entered promiscuous mode [ 289.654804][T20246] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.661950][T20246] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.669445][T20246] bridge_slave_1: entered allmulticast mode [ 289.676098][T20246] bridge_slave_1: entered promiscuous mode [ 289.697084][T20246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.714786][T20246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.756917][T20246] team0: Port device team_slave_0 added [ 289.783404][T20246] team0: Port device team_slave_1 added [ 289.859668][T20246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.866787][T20246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.892981][T20246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.978829][T20246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.985867][T20246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.011920][T20246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.091361][T20246] hsr_slave_0: entered promiscuous mode [ 290.097922][T20246] hsr_slave_1: entered promiscuous mode [ 290.104031][T20246] debugfs: 'hsr0' already exists in 'hsr' [ 290.109832][T20246] Cannot create hsr debugfs directory [ 290.218776][T20357] loop6: detected capacity change from 0 to 512 [ 290.367291][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.449251][T20366] syz.6.5873: attempt to access beyond end of device [ 290.449251][T20366] loop6: rw=0, sector=432, nr_sectors = 128 limit=512 [ 290.559518][T20246] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 290.570286][T15881] kworker/u8:15: attempt to access beyond end of device [ 290.570286][T15881] loop6: rw=1, sector=560, nr_sectors = 2048 limit=512 [ 290.587876][T20246] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 290.598109][T20246] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 290.608155][T15881] kworker/u8:15: attempt to access beyond end of device [ 290.608155][T15881] loop6: rw=1, sector=2608, nr_sectors = 2072 limit=512 [ 290.630605][T20246] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 290.637641][T15881] kworker/u8:15: attempt to access beyond end of device [ 290.637641][T15881] loop6: rw=1, sector=4680, nr_sectors = 2048 limit=512 [ 290.660734][T15881] kworker/u8:15: attempt to access beyond end of device [ 290.660734][T15881] loop6: rw=1, sector=6728, nr_sectors = 2048 limit=512 [ 290.710901][T15881] kworker/u8:15: attempt to access beyond end of device [ 290.710901][T15881] loop6: rw=1, sector=8776, nr_sectors = 2048 limit=512 [ 290.728936][T15881] kworker/u8:15: attempt to access beyond end of device [ 290.728936][T15881] loop6: rw=1, sector=10824, nr_sectors = 2048 limit=512 [ 290.752464][T20246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.761573][T15881] kworker/u8:15: attempt to access beyond end of device [ 290.761573][T15881] loop6: rw=1, sector=12872, nr_sectors = 2064 limit=512 [ 290.778933][T20246] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.779200][T15881] kworker/u8:15: attempt to access beyond end of device [ 290.779200][T15881] loop6: rw=1, sector=14936, nr_sectors = 1528 limit=512 [ 290.795090][T16100] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.806581][T16100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.834443][T20246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.845086][T20246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.879981][T16100] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.887160][T16100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.902715][T20417] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5882'. [ 290.983394][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5887'. [ 291.040240][T20246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.157355][T20455] veth0: entered promiscuous mode [ 291.168750][T20455] veth0: left promiscuous mode [ 291.210255][T20462] loop6: detected capacity change from 0 to 256 [ 291.221921][T20246] veth0_vlan: entered promiscuous mode [ 291.245106][T20246] veth1_vlan: entered promiscuous mode [ 291.262116][T20246] veth0_macvtap: entered promiscuous mode [ 291.297535][T20246] veth1_macvtap: entered promiscuous mode [ 291.322699][T20246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.345322][T20246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.360941][T16098] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.381468][T16098] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.416153][T16098] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.435254][T16098] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.477387][T20485] loop8: detected capacity change from 0 to 512 [ 291.484455][T20485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 291.504480][T20485] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.5839: iget: bad i_size value: 38620345925642 [ 291.528094][T20485] EXT4-fs (loop8): Remounting filesystem read-only [ 291.535021][T20485] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.608423][T20246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.869431][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 291.869448][ T29] audit: type=1326 audit(1770577167.111:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20525 comm="syz.2.5906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f639218aeb9 code=0x0 [ 291.931454][T20532] loop6: detected capacity change from 0 to 1024 [ 291.992380][T20541] __nla_validate_parse: 5 callbacks suppressed [ 291.992397][T20541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5910'. [ 292.020726][T20532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.077084][T20551] loop8: detected capacity change from 0 to 1024 [ 292.093309][T20551] EXT4-fs: Ignoring removed orlov option [ 292.101298][T20551] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 292.117551][T19091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.144274][T20551] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.286586][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 292.318791][T20246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.357316][T20583] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5918'. [ 292.378958][T20583] chnl_net:caif_netlink_parms(): no params data found [ 292.413019][T20593] loop6: detected capacity change from 0 to 128 [ 292.497585][T20606] netlink: 'syz.1.5925': attribute type 6 has an invalid length. [ 292.505667][T20606] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5925'. [ 292.651222][ T29] audit: type=1400 audit(1770577167.891:2888): avc: denied { ioctl } for pid=20629 comm="syz.9.5931" path="socket:[63298]" dev="sockfs" ino=63298 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 292.677674][T20630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.684920][T20630] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 292.696622][T20630] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 293.011299][ T29] audit: type=1326 audit(1770577168.251:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20683 comm="syz.9.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750093aeb9 code=0x7ffc0000 [ 293.035176][ T29] audit: type=1326 audit(1770577168.251:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20683 comm="syz.9.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750093aeb9 code=0x7ffc0000 [ 293.058814][ T29] audit: type=1326 audit(1770577168.251:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20683 comm="syz.9.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750093aeb9 code=0x7ffc0000 [ 293.093303][ T29] audit: type=1326 audit(1770577168.331:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20683 comm="syz.9.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750093aeb9 code=0x7ffc0000 [ 293.117153][ T29] audit: type=1326 audit(1770577168.331:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20683 comm="syz.9.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750093aeb9 code=0x7ffc0000 [ 293.140760][ T29] audit: type=1326 audit(1770577168.331:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20683 comm="syz.9.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75008fb78e code=0x7ffc0000 [ 293.164409][ T29] audit: type=1326 audit(1770577168.331:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20683 comm="syz.9.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75008fb78e code=0x7ffc0000 [ 293.188058][ T29] audit: type=1326 audit(1770577168.331:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20683 comm="syz.9.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750093aeb9 code=0x7ffc0000 [ 293.337913][T20707] SELinux: failed to load policy [ 293.558869][T20740] vhci_hcd vhci_hcd.0: invalid port number 0 [ 293.693021][T20760] netlink: 'syz.1.5956': attribute type 1 has an invalid length. [ 293.712941][T20760] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.998448][T20807] loop1: detected capacity change from 0 to 512 [ 294.206627][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.290395][T20849] sg_write: data in/out 32732/14 bytes for SCSI command 0x0-- guessing data in; [ 294.290395][T20849] program syz.1.5978 not setting count and/or reply_len properly [ 294.383063][T20852] netlink: 5 bytes leftover after parsing attributes in process `syz.8.5980'. [ 294.409490][T20852] ..0{X: renamed from gretap0 (while UP) [ 294.418374][T20852] ..0{X: entered allmulticast mode [ 294.424641][T20852] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 294.863754][T20921] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 294.870876][T20921] syzkaller0: linktype set to 823 [ 294.968269][T20934] loop8: detected capacity change from 0 to 1024 [ 294.978482][T20934] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.985147][T20934] EXT4-fs: Ignoring removed bh option [ 295.001909][T20934] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.022681][T20934] xt_hashlimit: size too large, truncated to 1048576 [ 295.185469][T20246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.245679][T20954] netlink: 'syz.9.6001': attribute type 3 has an invalid length. [ 295.254111][T20954] netlink: 'syz.9.6001': attribute type 3 has an invalid length. [ 295.289437][T20958] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 295.539955][T20975] openvswitch: netlink: Missing key (keys=40, expected=80) [ 295.910234][T20666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.322102][T21029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6034'. [ 296.331124][T21029] netlink: 'syz.1.6034': attribute type 5 has an invalid length. [ 296.338915][T21029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6034'. [ 296.352989][T21029] geneve3: entered promiscuous mode [ 296.358476][T21029] geneve3: entered allmulticast mode [ 296.365617][T16098] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 65535 - 0 [ 296.376623][T16098] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 65535 - 0 [ 296.405838][T16098] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 65535 - 0 [ 296.414457][T16098] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 65535 - 0 [ 296.579114][ T3423] kernel read not supported for file /vcs (pid: 3423 comm: kworker/0:4) [ 297.533043][T21131] loop8: detected capacity change from 0 to 512 [ 297.556106][T21131] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.634235][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 297.634255][ T29] audit: type=1400 audit(1770577172.871:2948): avc: denied { write } for pid=21143 comm="syz.6.6075" path="socket:[64860]" dev="sockfs" ino=64860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 297.634604][T21143] delete_channel: no stack [ 298.459991][T21226] loop1: detected capacity change from 0 to 1024 [ 298.472964][T21226] EXT4-fs: Ignoring removed orlov option [ 300.381824][T21113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.395263][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6070'. [ 300.433866][T20246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.539040][T21339] loop9: detected capacity change from 0 to 4096 [ 300.553498][T21339] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.627100][T11193] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.953187][T21364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.962495][T21364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.205158][T21377] loop1: detected capacity change from 0 to 4096 [ 301.522768][T21391] loop8: detected capacity change from 0 to 256 [ 302.075164][T21415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.090880][T21415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.112789][T21417] loop8: detected capacity change from 0 to 512 [ 302.128493][T21417] EXT4-fs: Ignoring removed nobh option [ 302.147372][T21417] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 302.162616][T21421] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 302.184651][T21417] EXT4-fs (loop8): 1 truncate cleaned up [ 302.199506][T21417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.235008][T21417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.818809][T21460] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6174'. [ 303.961557][ T3395] IPVS: starting estimator thread 0... [ 304.072892][T21525] IPVS: using max 2064 ests per chain, 103200 per kthread [ 304.286128][T21553] loop8: detected capacity change from 0 to 128 [ 304.761224][T21589] loop8: detected capacity change from 0 to 512 [ 304.786917][T21589] EXT4-fs: inline encryption not supported [ 304.823098][T21589] EXT4-fs (loop8): 1 orphan inode deleted [ 304.839390][T16093] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 304.841908][T21589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.849240][T16093] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 1 [ 304.874218][T21589] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.966671][T21597] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 305.005546][T20246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.106199][T21613] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 305.113877][ T3402] IPVS: starting estimator thread 0... [ 305.217181][T21615] IPVS: using max 2208 ests per chain, 110400 per kthread [ 305.250853][T21631] syz_tun: entered allmulticast mode [ 305.264724][T21631] syz_tun: left allmulticast mode [ 305.342012][T21644] loop8: detected capacity change from 0 to 512 [ 305.371055][T21644] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.6224: iget: bad i_size value: 38620345925642 [ 305.396776][T21644] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.6224: couldn't read orphan inode 15 (err -117) [ 305.412054][T21644] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.449338][ T29] audit: type=1400 audit(1770577692.693:2949): avc: denied { execute } for pid=21642 comm="syz.8.6224" path="/67/file1/cpu.stat" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 305.483842][T21653] tipc: Started in network mode [ 305.489006][T21653] tipc: Node identity ac14140f, cluster identity 4711 [ 305.506685][T21653] tipc: New replicast peer: 100.1.1.0 [ 305.512198][T21653] tipc: Enabled bearer , priority 10 [ 305.518983][ T29] audit: type=1400 audit(1770577692.723:2950): avc: denied { ioctl } for pid=21642 comm="syz.8.6224" path="socket:[65640]" dev="sockfs" ino=65640 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 305.567356][T16099] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:28: bg 0: block 5: invalid block bitmap [ 305.586955][T16099] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 305.599341][T16099] EXT4-fs (loop8): This should not happen!! Data will be lost [ 305.599341][T16099] [ 305.609222][T16099] EXT4-fs (loop8): Total free blocks count 0 [ 305.615714][T16099] EXT4-fs (loop8): Free/Dirty block details [ 305.621761][T16099] EXT4-fs (loop8): free_blocks=0 [ 305.626946][T16099] EXT4-fs (loop8): dirty_blocks=1 [ 305.632115][T16099] EXT4-fs (loop8): Block reservation details [ 305.638214][T16099] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 305.699771][T20246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 305.986437][T21706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6238'. [ 305.995545][T21706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6238'. [ 306.018363][T21706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6238'. [ 306.027483][T21706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6238'. [ 306.061085][T21710] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6239'. [ 306.126650][T21718] batadv_slave_1: entered promiscuous mode [ 306.157753][T21717] batadv_slave_1: left promiscuous mode [ 306.463678][T21737] loop9: detected capacity change from 0 to 128 [ 306.498303][T21739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6253'. [ 306.507318][T21739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6253'. [ 306.523914][T21739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6253'. [ 306.533007][T21739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6253'. [ 306.629432][ T3402] tipc: Node number set to 2886997007 [ 306.677676][T21753] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6259'. [ 307.014451][T21772] netlink: 'syz.9.6278': attribute type 4 has an invalid length. [ 307.027102][T21772] netlink: 'syz.9.6278': attribute type 4 has an invalid length. [ 307.217562][T15884] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.390497][T15884] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.480668][T15884] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.590320][T15884] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.696839][T15884] bridge_slave_1: left allmulticast mode [ 307.702619][T15884] bridge_slave_1: left promiscuous mode [ 307.708412][T15884] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.732489][T15884] bridge_slave_0: left allmulticast mode [ 307.738240][T15884] bridge_slave_0: left promiscuous mode [ 307.743970][T15884] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.890901][T15884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.902419][T15884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.913006][T15884] bond0 (unregistering): Released all slaves [ 307.920311][T21822] batadv_slave_1: entered promiscuous mode [ 307.982917][T15884] hsr_slave_0: left promiscuous mode [ 307.990240][T15884] hsr_slave_1: left promiscuous mode [ 307.996060][T15884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.003653][T15884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.012019][T15884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.019569][T15884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.032758][T15884] veth1_macvtap: left promiscuous mode [ 308.038580][T15884] veth0_macvtap: left promiscuous mode [ 308.044189][T15884] veth1_vlan: left promiscuous mode [ 308.050015][T15884] veth0_vlan: left promiscuous mode [ 308.135363][T15884] team0 (unregistering): Port device team_slave_1 removed [ 308.147245][T15884] team0 (unregistering): Port device team_slave_0 removed [ 308.189509][T21819] batadv_slave_1: left promiscuous mode [ 308.359989][T21862] loop9: detected capacity change from 0 to 2048 [ 308.369095][T21794] chnl_net:caif_netlink_parms(): no params data found [ 308.383204][T21862] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.424615][T21862] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.463436][T15884] IPVS: stop unused estimator thread 0... [ 308.529273][T11193] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 34: comm syz-executor: path /758/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=66560, size=2048 fake=0 [ 308.548211][T21794] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.557673][T21794] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.566842][T11193] EXT4-fs (loop9): Remounting filesystem read-only [ 308.575246][T21794] bridge_slave_0: entered allmulticast mode [ 308.600482][T21794] bridge_slave_0: entered promiscuous mode [ 308.634505][T12171] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.650063][T21794] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.657214][T21794] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.676706][T21794] bridge_slave_1: entered allmulticast mode [ 308.690230][T21794] bridge_slave_1: entered promiscuous mode [ 308.981307][T21794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.995954][ T1675] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.006415][ T1675] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.154627][T21794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.183356][T21899] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 309.214961][T21899] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 309.238383][ T1675] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.248915][ T1675] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.298241][T21794] team0: Port device team_slave_0 added [ 309.308936][ T1675] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.319299][ T1675] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.366259][T21794] team0: Port device team_slave_1 added [ 309.422605][ T1675] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.433019][ T1675] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.507172][T21794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.514173][T21794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.540223][T21794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.619807][T21794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.626861][T21794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.653054][T21794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.769063][T21794] hsr_slave_0: entered promiscuous mode [ 309.777790][T21794] hsr_slave_1: entered promiscuous mode [ 309.805150][T21794] debugfs: 'hsr0' already exists in 'hsr' [ 309.811172][T21794] Cannot create hsr debugfs directory [ 309.827920][T21947] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 309.841728][T21947] syzkaller0: linktype set to 823 [ 310.049161][T21962] loop1: detected capacity change from 0 to 512 [ 310.063414][T21963] netlink: 'syz.2.6318': attribute type 1 has an invalid length. [ 310.077499][T21962] ext2: Unknown parameter 'smackfsroot' [ 310.097872][ T1675] bridge_slave_1: left allmulticast mode [ 310.103731][ T1675] bridge_slave_1: left promiscuous mode [ 310.109539][ T1675] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.136587][ T29] audit: type=1326 audit(1770577697.373:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21959 comm="syz.1.6317" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb732d5aeb9 code=0x0 [ 310.188338][ T1675] bridge_slave_0: left allmulticast mode [ 310.194160][ T1675] bridge_slave_0: left promiscuous mode [ 310.200101][ T1675] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.538026][ T1675] bond1 (unregistering): (slave gretap1): Releasing active interface [ 310.601139][T22007] netlink: 'syz.6.6334': attribute type 1 has an invalid length. [ 310.612692][ T1675] bond1 (unregistering): Released all slaves [ 310.683417][ T1675] hsr_slave_0: left promiscuous mode [ 310.697232][ T1675] hsr_slave_1: left promiscuous mode [ 310.708058][ T1675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.715516][ T1675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.724878][ T1675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.732445][ T1675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.751131][ T1675] veth1_macvtap: left promiscuous mode [ 310.756933][ T1675] veth0_macvtap: left promiscuous mode [ 310.762789][ T1675] veth1_vlan: left promiscuous mode [ 310.768498][ T1675] veth0_vlan: left promiscuous mode [ 310.849163][ T1675] team0 (unregistering): Port device team_slave_1 removed [ 310.859847][ T1675] team0 (unregistering): Port device team_slave_0 removed [ 310.931236][T21900] chnl_net:caif_netlink_parms(): no params data found [ 311.008901][T22033] xt_hashlimit: size too large, truncated to 1048576 [ 311.068683][T21900] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.075915][T21900] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.097914][T21900] bridge_slave_0: entered allmulticast mode [ 311.112686][T21900] bridge_slave_0: entered promiscuous mode [ 311.139211][T21900] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.146369][T21900] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.174196][T21900] bridge_slave_1: entered allmulticast mode [ 311.182942][T21900] bridge_slave_1: entered promiscuous mode [ 311.208326][T21900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.219514][T21900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.260034][T21794] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 311.270064][T21900] team0: Port device team_slave_0 added [ 311.277506][ T1675] IPVS: stop unused estimator thread 0... [ 311.277613][T21900] team0: Port device team_slave_1 added [ 311.289059][T21794] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 311.298648][T21794] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 311.319111][T21794] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 311.330646][T21900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.337772][T21900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.363899][T21900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.380486][T21900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.387651][T21900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.413676][T21900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.454129][T21900] hsr_slave_0: entered promiscuous mode [ 311.460444][T21900] hsr_slave_1: entered promiscuous mode [ 311.466921][T21900] debugfs: 'hsr0' already exists in 'hsr' [ 311.472755][T21900] Cannot create hsr debugfs directory [ 311.538162][T21794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.564457][T21794] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.586197][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.593485][T16099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.619599][T16100] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.626829][T16100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.746337][T21794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.813978][ T29] audit: type=1326 audit(1770577699.053:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22093 comm="syz.6.6349" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b14bfaeb9 code=0x0 [ 311.866141][T21900] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.875464][T21900] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.885825][T21900] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.896637][T21900] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.018575][T21900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.056962][T21900] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.073885][T16100] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.081150][T16100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.105234][T16100] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.112446][T16100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.164944][T21794] veth0_vlan: entered promiscuous mode [ 312.189171][T21794] veth1_vlan: entered promiscuous mode [ 312.249751][T21794] veth0_macvtap: entered promiscuous mode [ 312.266180][T21794] veth1_macvtap: entered promiscuous mode [ 312.309944][T21794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.351482][T21794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.367689][T16099] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.380566][T21900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.391813][T16099] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.407976][T16099] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.444914][T16099] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.519648][T22178] loop8: detected capacity change from 0 to 512 [ 312.544777][T22178] xt_hashlimit: size too large, truncated to 1048576 [ 312.646255][T21900] veth0_vlan: entered promiscuous mode [ 312.654376][T21900] veth1_vlan: entered promiscuous mode [ 312.702283][T21900] veth0_macvtap: entered promiscuous mode [ 312.710482][T21900] veth1_macvtap: entered promiscuous mode [ 312.722796][T21900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.737603][T21900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.750074][T16099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.808932][T16099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.822102][T16099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.832520][T16082] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.855079][T22197] netlink: 'syz.6.6368': attribute type 4 has an invalid length. [ 312.894643][T22204] __nla_validate_parse: 4 callbacks suppressed [ 312.894662][T22204] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6370'. [ 312.902648][T22209] netlink: 'syz.6.6368': attribute type 4 has an invalid length. [ 313.230258][T22247] loop8: detected capacity change from 0 to 256 [ 313.373365][T22259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6382'. [ 313.382412][T22259] netlink: 'syz.2.6382': attribute type 5 has an invalid length. [ 313.390321][T22259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6382'. [ 313.490266][T22274] netlink: 'syz.2.6385': attribute type 18 has an invalid length. [ 313.498309][T22274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6385'. [ 313.537692][T22274] netlink: 'syz.2.6385': attribute type 18 has an invalid length. [ 313.545663][T22274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6385'. [ 313.960342][T22335] delete_channel: no stack [ 314.063621][T22347] loop8: detected capacity change from 0 to 512 [ 314.092297][T22347] EXT4-fs (loop8): blocks per group (35) and clusters per group (32768) inconsistent [ 314.292656][T22371] pim6reg1: entered promiscuous mode [ 314.298106][T22371] pim6reg1: entered allmulticast mode [ 315.473290][ T29] audit: type=1400 audit(1770577702.713:2953): avc: denied { create } for pid=22454 comm="syz.8.6429" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 316.168422][T22529] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6450'. [ 316.335098][T22551] loop1: detected capacity change from 0 to 128 [ 317.200018][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6469'. [ 317.440822][T22654] loop8: detected capacity change from 0 to 128 [ 317.701516][T22683] loop1: detected capacity change from 0 to 128 [ 317.757873][ T29] audit: type=1400 audit(1770577704.993:2954): avc: denied { setopt } for pid=22685 comm="syz.2.6489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 317.851461][T22695] loop0: detected capacity change from 0 to 128 [ 318.550963][T22757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6510'. [ 318.574185][ T29] audit: type=1400 audit(1770577705.813:2955): avc: denied { setattr } for pid=22758 comm="syz.2.6511" name="/" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 318.712374][T22768] ip6gre1: entered allmulticast mode [ 318.736813][T22765] netlink: 'syz.6.6514': attribute type 6 has an invalid length. [ 318.903797][ T3402] kernel read not supported for file /mdstat (pid: 3402 comm: kworker/1:4) [ 318.961597][T22789] tls_set_device_offload_rx: netdev not found [ 319.057119][T22799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6529'. [ 319.066271][T22799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6529'. [ 319.102301][T22802] ip6gre2: entered allmulticast mode [ 319.119063][T22804] netlink: 'syz.8.6531': attribute type 6 has an invalid length. [ 319.209890][T22811] loop1: detected capacity change from 0 to 1024 [ 319.226932][T22811] EXT4-fs: inline encryption not supported [ 319.422848][T22834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6544'. [ 319.464760][T22837] loop1: detected capacity change from 0 to 512 [ 319.645430][T22849] loop0: detected capacity change from 0 to 128 [ 319.674508][T22849] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 319.700531][T22849] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.735211][T21900] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.889251][T22869] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6559'. [ 319.898499][T22869] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6559'. [ 319.947442][T22875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6563'. [ 319.956402][T22875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6563'. [ 319.998195][T22881] loop8: detected capacity change from 0 to 512 [ 320.017677][T22881] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.6565: corrupted in-inode xattr: invalid ea_ino [ 320.053443][T22881] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.6565: couldn't read orphan inode 15 (err -117) [ 320.069227][T22881] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.123713][T21794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.177176][T22897] loop0: detected capacity change from 0 to 1024 [ 320.184072][T22897] EXT4-fs: inline encryption not supported [ 320.202490][T22897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.234413][T22897] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 320.249905][T22897] EXT4-fs (loop0): Remounting filesystem read-only [ 320.272137][T21900] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.401405][T22915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6577'. [ 321.270374][ T29] audit: type=1400 audit(1770577708.513:2956): avc: denied { write } for pid=22993 comm="syz.0.6611" lport=35505 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 321.406164][T23011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6618'. [ 321.875099][T23054] batadv0: entered promiscuous mode [ 321.884590][T23054] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 321.942473][ T29] audit: type=1326 audit(1770577709.183:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23062 comm="syz.6.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 321.969816][ T29] audit: type=1326 audit(1770577709.183:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23062 comm="syz.6.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 321.993529][ T29] audit: type=1326 audit(1770577709.183:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23062 comm="syz.6.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 322.017282][ T29] audit: type=1326 audit(1770577709.213:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23062 comm="syz.6.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 322.041535][ T29] audit: type=1326 audit(1770577709.213:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23062 comm="syz.6.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 322.065257][ T29] audit: type=1326 audit(1770577709.213:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23062 comm="syz.6.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 322.089027][ T29] audit: type=1326 audit(1770577709.213:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23062 comm="syz.6.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 322.112683][ T29] audit: type=1326 audit(1770577709.213:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23062 comm="syz.6.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 322.136133][ T29] audit: type=1326 audit(1770577709.213:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23062 comm="syz.6.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 322.841814][T23107] SELinux: failed to load policy [ 323.161950][T23124] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.173269][T23124] bridge0: entered allmulticast mode [ 323.182543][T23124] bridge_slave_1: left allmulticast mode [ 323.188410][T23124] bridge_slave_1: left promiscuous mode [ 323.194160][T23124] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.202747][T23124] bridge_slave_0: left allmulticast mode [ 323.208492][T23124] bridge_slave_0: left promiscuous mode [ 323.214288][T23124] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.984466][T23190] __nla_validate_parse: 3 callbacks suppressed [ 323.984532][T23190] netlink: 92 bytes leftover after parsing attributes in process `syz.8.6698'. [ 324.060028][T23196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6701'. [ 324.171766][T23207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6705'. [ 324.686423][T23228] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6714'. [ 324.781023][T23232] loop8: detected capacity change from 0 to 512 [ 324.822132][T23232] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.858405][T23232] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.944556][T21794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.105569][T23259] loop8: detected capacity change from 0 to 512 [ 325.117731][T23259] SELinux: security_context_str_to_sid (unconfined_usmackfsfloor=lt{uY(Μ:v_?BAА%3֎Rww/锺J$bJe<,fsuuid=2ee7,errors=continue) failed with errno=-22 [ 325.150862][T23263] xt_hashlimit: size too large, truncated to 1048576 [ 325.420618][T23275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6733'. [ 325.429615][T23275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6733'. [ 325.462602][T23275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6733'. [ 325.471581][T23275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6733'. [ 326.227199][T23328] 9pnet: p9_errstr2errno: server reported unknown error  [ 326.379664][T23342] loop0: detected capacity change from 0 to 512 [ 326.396670][T23342] SELinux: security_context_str_to_sid (unconfined_usmackfsfloor=lt{uY(Μ:v_?BAА%3֎Rww/锺J$bJe<,fsuuid=2ee7,errors=continue) failed with errno=-22 [ 326.517834][T23356] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.6767'. [ 326.605633][T23361] 9pnet: p9_errstr2errno: server reported unknown error  [ 326.685446][T23368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 326.728053][T16098] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.743138][T16098] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.752436][T16098] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.761553][T16098] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.847263][ T3505] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 326.849225][ T3547] Bluetooth: hci0: command 0x1003 tx timeout [ 326.922125][T23384] loop1: detected capacity change from 0 to 512 [ 326.957667][T23384] EXT4-fs: Ignoring removed oldalloc option [ 327.121271][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 327.121290][ T29] audit: type=1400 audit(1770577714.363:2988): avc: denied { ioctl } for pid=23396 comm="syz.0.6787" path="socket:[71237]" dev="sockfs" ino=71237 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 327.271040][T23409] loop0: detected capacity change from 0 to 512 [ 327.278500][T23409] EXT4-fs: Ignoring removed i_version option [ 327.284638][T23409] EXT4-fs: Ignoring removed bh option [ 327.319251][T23409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.383624][T23409] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.482805][T21900] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.691004][T23428] loop8: detected capacity change from 0 to 512 [ 327.724533][T23428] EXT4-fs: Ignoring removed oldalloc option [ 327.759519][T23428] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.780926][T23430] xt_hashlimit: size too large, truncated to 1048576 [ 327.991118][T21794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.299085][ T29] audit: type=1326 audit(1770577715.543:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23463 comm="syz.8.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cabdaeb9 code=0x7ffc0000 [ 328.323096][ T29] audit: type=1326 audit(1770577715.543:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23463 comm="syz.8.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cabdaeb9 code=0x7ffc0000 [ 328.382233][ T29] audit: type=1326 audit(1770577715.543:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23463 comm="syz.8.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb7cabdaeb9 code=0x7ffc0000 [ 328.406175][ T29] audit: type=1326 audit(1770577715.543:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23463 comm="syz.8.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cabdaeb9 code=0x7ffc0000 [ 328.429753][ T29] audit: type=1326 audit(1770577715.543:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23463 comm="syz.8.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cabdaeb9 code=0x7ffc0000 [ 328.453352][ T29] audit: type=1326 audit(1770577715.563:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23463 comm="syz.8.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fb7cabdaeb9 code=0x7ffc0000 [ 328.477219][ T29] audit: type=1326 audit(1770577715.563:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23463 comm="syz.8.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cabdaeb9 code=0x7ffc0000 [ 328.500960][ T29] audit: type=1326 audit(1770577715.563:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23463 comm="syz.8.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cabdaeb9 code=0x7ffc0000 [ 329.017382][T23537] __nla_validate_parse: 9 callbacks suppressed [ 329.017401][T23537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6840'. [ 329.164772][T23546] netlink: 391 bytes leftover after parsing attributes in process `syz.1.6844'. [ 329.174388][T23546] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 329.182600][T23546] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 329.213118][T23548] sctp: [Deprecated]: syz.1.6846 (pid 23548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.213118][T23548] Use struct sctp_sack_info instead [ 329.249882][ T29] audit: type=1326 audit(1770577716.493:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23549 comm="syz.1.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb732d5aeb9 code=0x7ffc0000 [ 329.405313][T23558] team0: entered promiscuous mode [ 329.410838][T23558] team_slave_0: entered promiscuous mode [ 329.416737][T23558] team_slave_1: entered promiscuous mode [ 329.432295][T23558] team0: Cannot enslave team device to itself [ 329.873475][T23576] loop8: detected capacity change from 0 to 1024 [ 329.897365][T23576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.932847][T23583] veth0: entered promiscuous mode [ 329.938940][T23583] veth0: left promiscuous mode [ 330.066061][T21794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.187975][T23621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6871'. [ 330.400392][T23587] loop0: detected capacity change from 0 to 512 [ 330.549586][T23587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.563236][T23587] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.589790][T21900] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.722394][T23669] netlink: 'syz.0.6891': attribute type 3 has an invalid length. [ 330.730325][T23669] netlink: 'syz.0.6891': attribute type 1 has an invalid length. [ 330.738254][T23669] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6891'. [ 330.852855][T23680] loop8: detected capacity change from 0 to 8192 [ 330.903228][T23680] xt_NFQUEUE: number of total queues is 0 [ 331.292721][T23732] loop1: detected capacity change from 0 to 1024 [ 331.626129][T23759] loop1: detected capacity change from 0 to 1024 [ 332.598510][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 332.598530][ T29] audit: type=1400 audit(1770577719.843:3086): avc: denied { module_load } for pid=23847 comm="syz.1.6951" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=72238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 332.830322][T23858] loop1: detected capacity change from 0 to 8192 [ 332.869835][ T29] audit: type=1400 audit(1770577720.103:3087): avc: denied { getopt } for pid=23857 comm="syz.1.6955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 332.950013][ T29] audit: type=1400 audit(1770577720.193:3088): avc: denied { getopt } for pid=23859 comm="syz.1.6956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 333.014235][ T29] audit: type=1326 audit(1770577720.253:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23867 comm="syz.2.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639218aeb9 code=0x7ffc0000 [ 333.039221][ T29] audit: type=1326 audit(1770577720.253:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23867 comm="syz.2.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639218aeb9 code=0x7ffc0000 [ 333.062900][ T29] audit: type=1326 audit(1770577720.253:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23867 comm="syz.2.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f639218aeb9 code=0x7ffc0000 [ 333.086451][ T29] audit: type=1326 audit(1770577720.253:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23867 comm="syz.2.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639218aeb9 code=0x7ffc0000 [ 333.110108][ T29] audit: type=1326 audit(1770577720.253:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23867 comm="syz.2.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f639218aeb9 code=0x7ffc0000 [ 333.133837][ T29] audit: type=1326 audit(1770577720.253:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23867 comm="syz.2.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639218aeb9 code=0x7ffc0000 [ 333.157574][ T29] audit: type=1326 audit(1770577720.253:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23867 comm="syz.2.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639218aeb9 code=0x7ffc0000 [ 333.297712][T23880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6965'. [ 333.309284][T23876] loop0: detected capacity change from 0 to 4096 [ 333.332979][T23876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.460213][T21900] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.547995][T23870] loop1: detected capacity change from 0 to 512 [ 334.445783][T23941] loop0: detected capacity change from 0 to 32768 [ 334.513331][ T3307] loop0: p1 p3 < > [ 334.545969][T23941] loop0: p1 p3 < > [ 334.610906][T23963] netlink: 'syz.0.6999': attribute type 27 has an invalid length. [ 334.723714][T23963] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.731086][T23963] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.745861][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 334.756680][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 334.804481][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 334.814864][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 334.832763][T23963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.846207][T23963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.900469][T16082] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.909581][T16082] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.972102][T23973] loop8: detected capacity change from 0 to 4096 [ 334.979051][T16082] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.988033][T16082] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.004754][T16082] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.013914][T16082] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.032966][T23973] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.070664][T16082] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.079808][T16082] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.104418][T21794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.377510][T24004] loop8: detected capacity change from 0 to 512 [ 335.505073][T24013] loop0: detected capacity change from 0 to 256 [ 335.540615][T24013] FAT-fs (loop0): Directory bread(block 64) failed [ 335.550659][T24013] FAT-fs (loop0): Directory bread(block 65) failed [ 335.579309][T24013] FAT-fs (loop0): Directory bread(block 66) failed [ 335.585944][T24013] FAT-fs (loop0): Directory bread(block 67) failed [ 335.623163][T24013] FAT-fs (loop0): Directory bread(block 68) failed [ 335.637268][T24013] FAT-fs (loop0): Directory bread(block 69) failed [ 335.654441][T24013] FAT-fs (loop0): Directory bread(block 70) failed [ 335.671805][T24013] FAT-fs (loop0): Directory bread(block 71) failed [ 335.681611][T24013] FAT-fs (loop0): Directory bread(block 72) failed [ 335.696793][T24013] FAT-fs (loop0): Directory bread(block 73) failed [ 335.738438][T24021] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7024'. [ 335.755973][T24013] syz.0.7021: attempt to access beyond end of device [ 335.755973][T24013] loop0: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 336.644098][T24095] loop1: detected capacity change from 0 to 512 [ 336.876368][T24102] loop0: detected capacity change from 0 to 2048 [ 336.930003][T24102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.984683][T16099] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 337.061082][T16099] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 337.073362][T16099] EXT4-fs (loop0): This should not happen!! Data will be lost [ 337.073362][T16099] [ 337.083218][T16099] EXT4-fs (loop0): Total free blocks count 0 [ 337.089438][T16099] EXT4-fs (loop0): Free/Dirty block details [ 337.095478][T16099] EXT4-fs (loop0): free_blocks=2415919504 [ 337.101355][T16099] EXT4-fs (loop0): dirty_blocks=16 [ 337.106532][T16099] EXT4-fs (loop0): Block reservation details [ 337.112549][T16099] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 337.201521][T21900] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.366147][T15884] Bluetooth: hci0: Frame reassembly failed (-84) [ 337.945480][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 337.945509][ T29] audit: type=1400 audit(1770577725.183:3104): avc: denied { mounton } for pid=24146 comm="syz.2.7076" path="/1065/file0" dev="tmpfs" ino=5512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 338.437816][T24169] tipc: Enabling of bearer rejected, failed to enable media [ 338.558962][T24179] loop0: detected capacity change from 0 to 4096 [ 338.579759][T24179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.604698][T24177] SELinux: failed to load policy [ 338.663742][T21900] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.153505][T24203] tipc: Started in network mode [ 339.158580][T24203] tipc: Node identity 405d, cluster identity 4711 [ 339.165044][T24203] tipc: Enabling of bearer rejected, failed to enable media [ 339.222297][T24205] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.7102'. [ 339.241768][T24205] netlink: zone id is out of range [ 339.247365][T24205] netlink: zone id is out of range [ 339.255066][T24205] netlink: zone id is out of range [ 339.262864][ T29] audit: type=1400 audit(1770577726.503:3105): avc: denied { mount } for pid=24208 comm="syz.6.7104" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 339.302755][T24205] netlink: zone id is out of range [ 339.316167][ T29] audit: type=1326 audit(1770577726.553:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24213 comm="syz.6.7106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 339.339742][ T29] audit: type=1326 audit(1770577726.553:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24213 comm="syz.6.7106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 339.365131][ T29] audit: type=1326 audit(1770577726.563:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24213 comm="syz.6.7106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 339.388864][ T29] audit: type=1326 audit(1770577726.563:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24213 comm="syz.6.7106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 339.406977][ T3547] Bluetooth: hci0: command 0x1003 tx timeout [ 339.412644][ T29] audit: type=1326 audit(1770577726.563:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24213 comm="syz.6.7106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 339.441958][ T29] audit: type=1326 audit(1770577726.563:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24213 comm="syz.6.7106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 339.465502][ T29] audit: type=1326 audit(1770577726.563:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24213 comm="syz.6.7106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 339.488395][ T3505] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 339.489238][ T29] audit: type=1326 audit(1770577726.563:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24213 comm="syz.6.7106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b14bfaeb9 code=0x7ffc0000 [ 339.520577][T24205] netlink: set zone limit has 8 unknown bytes [ 339.779476][T24243] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.7119'. [ 339.821543][T24243] netlink: zone id is out of range [ 339.835822][T24243] netlink: zone id is out of range [ 339.860268][T24243] netlink: zone id is out of range [ 339.921150][T24243] netlink: zone id is out of range [ 340.065195][T24243] netlink: set zone limit has 8 unknown bytes [ 340.925546][ T2] ================================================================== [ 340.933706][ T2] BUG: KCSAN: data-race in alloc_pid / copy_process [ 340.940344][ T2] [ 340.942685][ T2] read-write to 0xffffffff86a60018 of 4 bytes by task 15884 on cpu 1: [ 340.951206][ T2] alloc_pid+0x54c/0x760 [ 340.955477][ T2] copy_process+0xdd2/0x1f10 [ 340.960099][ T2] kernel_clone+0x16b/0x5b0 [ 340.964626][ T2] user_mode_thread+0x9c/0xd0 [ 340.969346][ T2] call_usermodehelper_exec_work+0x7a/0x160 [ 340.975263][ T2] process_scheduled_works+0x4cd/0x9d0 [ 340.980757][ T2] worker_thread+0x6bc/0x8b0 [ 340.985384][ T2] kthread+0x488/0x510 [ 340.989489][ T2] ret_from_fork+0x148/0x280 [ 340.994125][ T2] ret_from_fork_asm+0x1a/0x30 [ 340.998925][ T2] [ 341.001306][ T2] read to 0xffffffff86a60018 of 4 bytes by task 2 on cpu 0: [ 341.008604][ T2] copy_process+0x16e4/0x1f10 [ 341.013325][ T2] kernel_clone+0x16b/0x5b0 [ 341.017849][ T2] kernel_thread+0xe5/0x120 [ 341.022378][ T2] kthreadd+0x26b/0x330 [ 341.026572][ T2] ret_from_fork+0x148/0x280 [ 341.031191][ T2] ret_from_fork_asm+0x1a/0x30 [ 341.035997][ T2] [ 341.038334][ T2] value changed: 0x80000151 -> 0x80000152 [ 341.044094][ T2] [ 341.046431][ T2] Reported by Kernel Concurrency Sanitizer on: [ 341.052610][ T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Not tainted syzkaller #0 PREEMPT(voluntary) [ 341.061935][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 341.072021][ T2] ==================================================================