last executing test programs: 2m32.753885753s ago: executing program 32 (id=225): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000003f80)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x11, 0x0, 0x0}) 2m27.991103769s ago: executing program 33 (id=311): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) timer_create(0x0, 0x0, &(0x7f0000000000)) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 2m24.020339747s ago: executing program 4 (id=398): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 2m23.837009493s ago: executing program 4 (id=405): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) 2m23.281469583s ago: executing program 4 (id=412): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) recvmsg(r0, &(0x7f0000000740)={0x0, 0xff98, 0x0, 0x0, 0xffffffffffffffff, 0x4f}, 0x2041) 2m23.242787504s ago: executing program 4 (id=413): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0xb7848, 0x0) 2m23.182877086s ago: executing program 4 (id=416): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m23.175766366s ago: executing program 6 (id=418): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x8000, 0x4) recvmmsg$unix(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010040, 0x0) 2m23.151965787s ago: executing program 6 (id=419): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2800000, &(0x7f0000000400)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae48dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca939f4a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf100000f9ee584eba0b99cede0241d74d6468b430caee15417485b0239ca00ed0a620ab32588cf24363082c90b627b75894b33fa8f7598bc42fa23f3f7c6f535ed0ec23c67426ab727e48ec42498ba25196d33a2ee826cac9af06a231585ee95b3c9229dcc96e3f9898cfa67e42823fafd5e8309333a94ef7f54fac637bc8112a78046df988fc3951094c5d1a144da7208a6eb552f869f0050000003582dc53418d52a4c0550f8530179a10b704802154f155a773404318a40ae5dd82771abe76ffad77c60ec4252c9e1614d5df73095e389309a1c10c97f47a7a3c16418e23a35b85c2e9f83be673f2"], 0x1, 0x55a, &(0x7f0000000b80)="$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") setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0xb, 0x84, 0x7, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x5, 0x3, 0x0, 0xff}, 0xe) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 2m23.038995401s ago: executing program 6 (id=424): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) recvmsg(r0, &(0x7f0000000740)={0x0, 0xff98, 0x0, 0x0, 0xffffffffffffffff, 0x4f}, 0x2041) 2m22.962390894s ago: executing program 4 (id=426): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x310) 2m22.962037334s ago: executing program 6 (id=427): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0xb7848, 0x0) 2m22.922147275s ago: executing program 34 (id=426): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x310) 2m22.914223076s ago: executing program 6 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) 2m22.22005632s ago: executing program 6 (id=441): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000e00)={'ip_vti0\x00', 0x0, 0x70f, 0x1, 0x3, 0x6, {{0x7, 0x4, 0x2, 0x1, 0x1c, 0x64, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@cipso={0x86, 0x6, 0x1}]}}}}}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 2m22.219883499s ago: executing program 35 (id=441): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000e00)={'ip_vti0\x00', 0x0, 0x70f, 0x1, 0x3, 0x6, {{0x7, 0x4, 0x2, 0x1, 0x1c, 0x64, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@cipso={0x86, 0x6, 0x1}]}}}}}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 2m17.992610367s ago: executing program 1 (id=506): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000180)=[{r1, 0x2005}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 2m17.885839021s ago: executing program 1 (id=509): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24048000}, 0x80) r0 = socket(0x2, 0x3, 0xff) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f00000004c0)={[{@resgid}, {@nombcache}, {@noblock_validity}]}, 0xfc, 0x535, &(0x7f00000021c0)="$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") bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/23, 0x17}], 0x1, 0x0, 0x0, 0x4c880}, 0x8000) 2m17.726051676s ago: executing program 1 (id=511): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) 2m17.620513039s ago: executing program 1 (id=515): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x158) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m17.544097542s ago: executing program 1 (id=517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)={@val={0x70, 0x6000}, @val={0x0, 0x80, 0xf, 0x80, 0xfff, 0x4}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @empty, @rand_addr=0x64010100, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @private=0xa010102}}, 0x14) 2m17.288162261s ago: executing program 1 (id=523): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r0, 0x2) 2m17.271524792s ago: executing program 36 (id=523): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r0, 0x2) 1m49.983852319s ago: executing program 5 (id=1167): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) 1m49.95953218s ago: executing program 5 (id=1168): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) 1m49.929278811s ago: executing program 5 (id=1170): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000340), &(0x7f0000000440)=r1}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m49.901789652s ago: executing program 5 (id=1171): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m49.883058442s ago: executing program 5 (id=1172): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) 1m49.67610509s ago: executing program 5 (id=1173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m49.67600659s ago: executing program 37 (id=1173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9.719831952s ago: executing program 9 (id=3300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) 9.452777472s ago: executing program 9 (id=3309): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x70, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_IFALIAS={0x14, 0x14, 'team0\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 9.365346905s ago: executing program 9 (id=3312): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r3, r3) setresuid(r1, r3, 0x0) 9.319761377s ago: executing program 9 (id=3314): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 9.269226978s ago: executing program 9 (id=3317): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x28, 0x4, @tid=r0}, 0x0) 9.140810682s ago: executing program 9 (id=3320): r0 = socket$kcm(0x23, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) 9.093663334s ago: executing program 38 (id=3320): r0 = socket$kcm(0x23, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) 1.708910431s ago: executing program 3 (id=3461): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x2) 1.502113368s ago: executing program 2 (id=3467): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, 0x0, 0x1}, 0x94) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0x40001a2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/48, 0x30}], 0x50) 1.472395388s ago: executing program 2 (id=3468): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.418887401s ago: executing program 2 (id=3470): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) sendmsg$inet(r2, 0x0, 0x10) 1.418210521s ago: executing program 0 (id=3471): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r2, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) 1.408806721s ago: executing program 2 (id=3472): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010021, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003", @ANYRES32=0x0], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.346428843s ago: executing program 0 (id=3474): pread64(0xffffffffffffffff, 0x0, 0x0, 0x10000002fc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.228130537s ago: executing program 7 (id=3476): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x1c8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0xffffff56, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x8, 0x18, 0x4, 0xfffffffffe000001}) 1.066091163s ago: executing program 2 (id=3478): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 945.941177ms ago: executing program 2 (id=3480): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0xfc, 0x1f5, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 846.08331ms ago: executing program 3 (id=3481): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) 800.540082ms ago: executing program 3 (id=3482): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f900850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 708.139385ms ago: executing program 7 (id=3483): io_setup(0x2, &(0x7f0000000000)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = eventfd(0x800) ioprio_set$pid(0x3, 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x842, r1, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x3, r1, 0x0, 0x0, 0x7, 0x0, 0x1, r1}]) 589.3249ms ago: executing program 7 (id=3485): io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001cc0)={0x6, 0x0, &(0x7f0000001c00)=[{0x0}, {&(0x7f00000006c0)=""/182, 0xb6}], 0x0, 0x2}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='Z', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 541.332751ms ago: executing program 3 (id=3486): unshare(0x2040400) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 540.895561ms ago: executing program 8 (id=3487): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000100)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x337, &(0x7f0000001140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x842, 0x1ba) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c842, 0x24) sync_file_range(r0, 0x88c, 0xab10, 0x6) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}}, 0x90) 488.016143ms ago: executing program 0 (id=3488): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) io_setup(0x3, &(0x7f0000008240)) 480.852613ms ago: executing program 7 (id=3489): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x4, 0x2}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280)) 464.245913ms ago: executing program 8 (id=3490): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x108) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x14, 0xc, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x20040) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 440.023494ms ago: executing program 3 (id=3491): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x0) 423.514495ms ago: executing program 7 (id=3492): r0 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000005c0)={0x2000a210}) epoll_pwait(r1, &(0x7f0000002800)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) 395.425616ms ago: executing program 8 (id=3493): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) 344.039188ms ago: executing program 3 (id=3494): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 311.682919ms ago: executing program 7 (id=3495): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_io_uring_setup(0x495, 0x0, 0x0, 0x0, &(0x7f0000000000)) 294.46392ms ago: executing program 8 (id=3496): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0xa00, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x400a00, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x0) 239.248542ms ago: executing program 0 (id=3497): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 192.903894ms ago: executing program 8 (id=3498): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) remap_file_pages(&(0x7f000013e000/0x1000)=nil, 0x1000, 0x0, 0x1002, 0x10000) 51.899678ms ago: executing program 8 (id=3499): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 51.200728ms ago: executing program 0 (id=3509): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'dummy0\x00'}) 0s ago: executing program 0 (id=3500): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x9, 0x29, 0x80, 0x9, 0xffffffff, 0x91b1}, [@TCA_NETEM_DELAY_DIST={0x14, 0x2, "c9cb428070784c98a6d0869fffffffff"}]}}}]}, 0x60}}, 0x0) kernel console output (not intermixed with test programs): 000000000000 r/w without journal. Quota mode: none. [ 108.097539][ T28] audit: type=1400 audit(1775067010.894:1955): avc: denied { getopt } for pid=8744 comm="syz.0.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.204938][ T8756] loop8: detected capacity change from 0 to 512 [ 108.213537][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.224600][ T8756] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1691: invalid indirect mapped block 256 (level 2) [ 108.250529][ T8756] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.251106][ T8756] EXT4-fs (loop8): 2 truncates cleaned up [ 108.251227][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 108.272911][ C0] EXT4-fs (loop8): initial error at time 1775067011: ext4_free_branches:1023: inode 11 [ 108.282604][ C0] EXT4-fs (loop8): last error at time 1775067011: ext4_free_branches:1023: inode 11 [ 108.292808][ T8756] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.352864][ T8756] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1691: bg 0: block 5: invalid block bitmap [ 108.398396][ T28] audit: type=1400 audit(1775067011.194:1956): avc: denied { write } for pid=8765 comm="syz.7.1694" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.423648][ T8756] EXT4-fs error (device loop8) in ext4_setattr:6028: error 28 [ 108.521557][ T4827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.686574][ T8803] loop9: detected capacity change from 0 to 512 [ 109.746543][ T28] audit: type=1400 audit(1775067012.544:1957): avc: denied { ioctl } for pid=8805 comm="syz.2.1711" path="socket:[22520]" dev="sockfs" ino=22520 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.903170][ T8803] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.1709: inode has both inline data and extents flags [ 109.941222][ T8803] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.941532][ T8803] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.1709: couldn't read orphan inode 15 (err -117) [ 109.962728][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 109.962751][ C1] EXT4-fs (loop9): initial error at time 1775067012: ext4_orphan_get:1397: inode 15 [ 109.962782][ C1] EXT4-fs (loop9): last error at time 1775067012: ext4_orphan_get:1397: inode 15 [ 110.125353][ T8803] loop9: lost filesystem error report for type 5 error -117 [ 110.125868][ T8803] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.240033][ T8814] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 110.258989][ T8814] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 110.283170][ T8814] veth0_to_bridge: entered allmulticast mode [ 110.301907][ T8814] veth0_to_bridge: entered promiscuous mode [ 110.352826][ T8816] netlink: 'syz.2.1715': attribute type 4 has an invalid length. [ 110.397346][ T8816] netlink: 'syz.2.1715': attribute type 4 has an invalid length. [ 110.643677][ T8830] netlink: 'syz.2.1721': attribute type 15 has an invalid length. [ 110.666491][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 110.692524][ T4184] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 110.701532][ T8830] netlink: 'syz.2.1721': attribute type 15 has an invalid length. [ 110.709428][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 110.718819][ T4184] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 110.727828][ T28] audit: type=1400 audit(1775067012.994:1958): avc: denied { create } for pid=8811 comm="syz.8.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.738834][ T4184] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 110.768166][ T28] audit: type=1400 audit(1775067012.994:1959): avc: denied { connect } for pid=8811 comm="syz.8.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.815942][ T4184] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 110.888721][ T28] audit: type=1400 audit(1775067012.994:1960): avc: denied { write } for pid=8811 comm="syz.8.1713" path="socket:[22532]" dev="sockfs" ino=22532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.912543][ T28] audit: type=1400 audit(1775067013.044:1961): avc: denied { watch watch_reads } for pid=8799 comm="syz.9.1709" path="/245/file0" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.913079][ T5231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.999846][ T8840] loop2: detected capacity change from 0 to 1024 [ 111.024137][ T8840] EXT4-fs: Ignoring removed bh option [ 111.054365][ T8840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.193932][ T7159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.236348][ T8860] loop0: detected capacity change from 0 to 1024 [ 111.242886][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 111.242901][ T28] audit: type=1326 audit(1775067014.034:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4a7872d04e code=0x7ffc0000 [ 111.292331][ T8860] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 111.292331][ T8860] [ 111.302265][ T8868] netlink: 'syz.9.1736': attribute type 4 has an invalid length. [ 111.312643][ T8866] netlink: 'syz.7.1737': attribute type 14 has an invalid length. [ 111.320699][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1737'. [ 111.338848][ T28] audit: type=1326 audit(1775067014.034:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4a7876c647 code=0x7ffc0000 [ 111.352389][ T8864] netlink: 'syz.9.1736': attribute type 4 has an invalid length. [ 111.374712][ T28] audit: type=1326 audit(1775067014.034:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a7872d04e code=0x7ffc0000 [ 111.380066][ T8866] netlink: 'syz.7.1737': attribute type 14 has an invalid length. [ 111.398756][ T4201] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.411410][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1737'. [ 111.426151][ T4184] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.434479][ T28] audit: type=1326 audit(1775067014.034:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a7876c4ab code=0x7ffc0000 [ 111.446788][ T4194] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.458614][ T28] audit: type=1326 audit(1775067014.094:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4a7872d04e code=0x7ffc0000 [ 111.476059][ T4194] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.505819][ T28] audit: type=1326 audit(1775067014.094:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4a7872d04e code=0x7ffc0000 [ 111.541428][ T28] audit: type=1326 audit(1775067014.094:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4a7876b687 code=0x7ffc0000 [ 111.565294][ T28] audit: type=1326 audit(1775067014.094:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4a7876da8a code=0x7ffc0000 [ 111.590984][ T28] audit: type=1326 audit(1775067014.124:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a7872d04e code=0x7ffc0000 [ 111.618742][ T28] audit: type=1326 audit(1775067014.124:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a7876c4ab code=0x7ffc0000 [ 111.818540][ T8893] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1746'. [ 112.078132][ T8912] loop0: detected capacity change from 0 to 1024 [ 112.101474][ T8912] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 112.137860][ T8912] System zones: 0-1, 3-36 [ 112.156858][ T8912] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1756: bad orphan inode 134217728 [ 112.195092][ T8912] loop0: lost filesystem error report for type 5 error -117 [ 112.195790][ T8912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.232580][ T8920] FAT-fs (loop15): unable to read boot sector [ 112.298177][ T8912] team0: Device vxcan3 is of different type [ 112.605638][ T8938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.632015][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.643999][ T8938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.727464][ T8953] loop0: detected capacity change from 0 to 128 [ 112.763671][ T8957] netlink: 'syz.2.1775': attribute type 64 has an invalid length. [ 112.777011][ T8953] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.785550][ T8957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8957 comm=syz.2.1775 [ 112.802658][ T8953] ext4 filesystem being mounted at /359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.834900][ T8957] netlink: 'syz.2.1775': attribute type 64 has an invalid length. [ 112.846744][ T8953] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 20: comm syz.0.1774: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 112.866949][ T8953] EXT4-fs error (device loop0) in do_split:2027: Corrupt filesystem [ 112.924821][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.601634][ T5312] IPVS: starting estimator thread 0... [ 113.691349][ T8985] IPVS: using max 2592 ests per chain, 129600 per kthread [ 113.735079][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.755839][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.888812][ T8965] kexec: Could not allocate control_code_buffer [ 114.021529][ T9012] loop9: detected capacity change from 0 to 512 [ 114.038766][ T9012] EXT4-fs: inline encryption not supported [ 114.045519][ T9012] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 114.058529][ T9012] EXT4-fs (loop9): 1 truncate cleaned up [ 114.069579][ T9012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.098274][ T5231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.486776][ T9031] syz.2.1808 (9031) used greatest stack depth: 9128 bytes left [ 114.786631][ T9044] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.793934][ T9044] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.900314][ T9044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.032676][ T4198] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.056932][ T4198] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.094756][ T4198] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.121366][ T4198] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.444756][ T9133] validate_nla: 1 callbacks suppressed [ 116.444773][ T9133] netlink: 'syz.7.1853': attribute type 4 has an invalid length. [ 116.461366][ T9133] netlink: 'syz.7.1853': attribute type 4 has an invalid length. [ 118.109531][ T9175] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1872'. [ 118.807823][ T9190] ip6erspan0: entered promiscuous mode [ 118.839564][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 118.839583][ T28] audit: type=1326 audit(1775067021.634:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9191 comm="syz.8.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 118.872921][ T28] audit: type=1326 audit(1775067021.664:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9191 comm="syz.8.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 118.897641][ T28] audit: type=1326 audit(1775067021.674:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9191 comm="syz.8.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 118.921268][ T9104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.945235][ T28] audit: type=1326 audit(1775067021.674:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9191 comm="syz.8.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 118.995418][ T28] audit: type=1326 audit(1775067021.674:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="syz.8.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e989cd04e code=0x7ffc0000 [ 119.042356][ T28] audit: type=1326 audit(1775067021.694:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9191 comm="syz.8.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 119.131172][ T28] audit: type=1326 audit(1775067021.694:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9191 comm="syz.8.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 119.175351][ T28] audit: type=1326 audit(1775067021.694:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9191 comm="syz.8.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 119.214806][ T28] audit: type=1400 audit(1775067021.794:2002): avc: denied { setattr } for pid=9196 comm="syz.9.1891" name="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.237612][ T28] audit: type=1326 audit(1775067021.824:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="syz.8.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 119.261905][ T9205] netlink: 'syz.8.1884': attribute type 15 has an invalid length. [ 119.382196][ T9216] loop0: detected capacity change from 0 to 4096 [ 119.433674][ T9216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.476542][ T9216] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 119.489448][ T9216] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 119.545051][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.556002][ T9230] netlink: 'syz.7.1896': attribute type 4 has an invalid length. [ 120.018779][ T9254] Falling back ldisc for ttyS3. [ 120.320892][ T9261] loop9: detected capacity change from 0 to 4096 [ 120.345376][ T9261] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.378055][ T9261] EXT4-fs (loop9): resizing filesystem from 512 to 0 blocks [ 120.394361][ T9261] EXT4-fs warning (device loop9): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 120.433125][ T5231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.508637][ T9266] loop9: detected capacity change from 0 to 512 [ 120.535640][ T9266] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 120.560301][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.573856][ T9266] EXT4-fs (loop9): 1 truncate cleaned up [ 120.591289][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.600633][ T9266] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.782662][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1913'. [ 120.884267][ T5231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.070263][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1921'. [ 121.097690][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1921'. [ 121.122925][ T9301] netlink: 'syz.7.1921': attribute type 11 has an invalid length. [ 121.141613][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1921'. [ 121.155012][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1921'. [ 121.184536][ T9301] netlink: 'syz.7.1921': attribute type 11 has an invalid length. [ 121.327752][ T9304] Process accounting resumed [ 121.495429][ T9322] netlink: 'syz.0.1931': attribute type 12 has an invalid length. [ 121.511246][ T9322] netlink: 'syz.0.1931': attribute type 29 has an invalid length. [ 121.529279][ T9322] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1931'. [ 121.580289][ T9329] netlink: zone id is out of range [ 122.309195][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 122.506975][ T9410] can0: slcan on ttyS3. [ 122.513990][ T9410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.524350][ T9410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.571289][ T9410] can0 (unregistered): slcan off ttyS3. [ 122.620917][ T9423] loop9: detected capacity change from 0 to 512 [ 122.628551][ T9423] EXT4-fs: Invalid want_extra_isize 7 [ 122.955360][ T9434] loop9: detected capacity change from 0 to 32768 [ 122.996277][ T9434] loop9: p1 p3 < > [ 123.537461][ T9481] xt_hashlimit: size too large, truncated to 1048576 [ 123.841705][ T3399] IPVS: starting estimator thread 0... [ 123.941726][ T9496] IPVS: using max 2496 ests per chain, 124800 per kthread [ 124.193672][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2003'. [ 124.208615][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 124.208633][ T28] audit: type=1400 audit(1775067283.001:2032): avc: denied { lock } for pid=9524 comm="syz.0.2004" path="socket:[24312]" dev="sockfs" ino=24312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.210130][ T9523] vxlan0: entered promiscuous mode [ 124.933560][ T9535] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 124.941226][ T9535] vhci_hcd vhci_hcd.2: default hub control req: 030f vfffa i0001 l0 [ 125.062598][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2014'. [ 125.107949][ T9552] loop2: detected capacity change from 0 to 256 [ 126.092751][ T9468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.242220][ T9583] SELinux: failed to load policy [ 126.247337][ T28] audit: type=1400 audit(1775067285.041:2033): avc: denied { load_policy } for pid=9581 comm="syz.9.2030" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 126.474023][ T28] audit: type=1326 audit(1775067285.271:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9599 comm="syz.7.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 126.532090][ T28] audit: type=1326 audit(1775067285.271:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9599 comm="syz.7.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 126.544874][ T9607] delete_channel: no stack [ 126.596944][ T28] audit: type=1326 audit(1775067285.301:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9599 comm="syz.7.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 126.652781][ T28] audit: type=1326 audit(1775067285.301:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9599 comm="syz.7.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 126.703947][ T28] audit: type=1326 audit(1775067285.301:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9599 comm="syz.7.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 126.737904][ T28] audit: type=1400 audit(1775067285.331:2039): avc: denied { ioctl } for pid=9607 comm="syz.0.2038" path="socket:[24831]" dev="sockfs" ino=24831 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 126.768197][ T9625] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 126.779665][ T9625] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.882943][ T28] audit: type=1326 audit(1775067285.681:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.7.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7fc00000 [ 126.910937][ T9625] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 126.927057][ T9625] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.130226][ T9625] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 127.146279][ T9625] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.175928][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2054'. [ 127.199058][ T9639] bond1: entered promiscuous mode [ 127.204568][ T9639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.224092][ T9625] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 127.234552][ T9625] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.303510][ T4198] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 127.316309][ T4198] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.337278][ T4198] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 127.356988][ T4198] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.369381][ T4198] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 127.377716][ T4198] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.403958][ T9660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.408953][ T4198] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 127.413793][ T9660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.434465][ T4198] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.541249][ T28] audit: type=1326 audit(1775067286.331:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.7.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7fc00000 [ 127.762119][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2069'. [ 127.860279][ T10] Process accounting resumed [ 128.004028][ T9686] loop9: detected capacity change from 0 to 512 [ 128.026176][ T9686] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 128.051434][ T9686] EXT4-fs (loop9): orphan file too big: 4294967295 [ 128.071473][ T9686] EXT4-fs (loop9): mount failed [ 128.175084][ T9698] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2077'. [ 128.445907][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2087'. [ 129.434385][ T9801] A link change request failed with some changes committed already. Interface sit3 may have been left with an inconsistent configuration, please check. [ 129.687298][ T9829] netlink: 'syz.7.2130': attribute type 10 has an invalid length. [ 130.206977][ T9869] netlink: 'syz.9.2144': attribute type 10 has an invalid length. [ 130.232228][ T9869] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.252069][ T9869] bond0: (slave team0): Enslaving as an active interface with an up link [ 130.924204][ T9914] loop0: detected capacity change from 0 to 512 [ 130.944173][ T9914] EXT4-fs: Ignoring removed nobh option [ 130.988041][ T9914] ------------[ cut here ]------------ [ 130.993616][ T9914] EA inode 11 i_nlink=1026 [ 130.993705][ T9914] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.0.2162/9914 [ 131.008998][ T9914] Modules linked in: [ 131.013065][ T9914] CPU: 0 UID: 0 PID: 9914 Comm: syz.0.2162 Not tainted syzkaller #0 PREEMPT(full) [ 131.022653][ T9914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.032828][ T9914] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 131.039507][ T9914] Code: d4 35 99 ff 4c 8d 2d ad a1 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 2f c4 dd 03 66 66 66 66 66 66 2e [ 131.059196][ T9914] RSP: 0018:ffffc90003b075a8 EFLAGS: 00010246 [ 131.065347][ T9914] RAX: ffff888104db4dc8 RBX: ffff88811bd80608 RCX: ffffffff81c02b68 [ 131.073486][ T9914] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 131.081742][ T9914] RBP: 000000000000000b R08: 000188811bd805bb R09: 0000000000000000 [ 131.089929][ T9914] R10: 0000000000000406 R11: 0000000000000002 R12: ffff88811bd805b8 [ 131.098040][ T9914] R13: ffffffff871dcd00 R14: ffff88811bd80570 R15: 0000000000000001 [ 131.106116][ T9914] FS: 00007f4a7719e6c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 131.115130][ T9914] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.121781][ T9914] CR2: 0000200000cca000 CR3: 000000012f756000 CR4: 00000000003506f0 [ 131.129847][ T9914] DR0: 00000000000003ff DR1: 0000000000000000 DR2: 0000000000000000 [ 131.137923][ T9914] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 131.145957][ T9914] Call Trace: [ 131.149260][ T9914] [ 131.152253][ T9914] ext4_xattr_set_entry+0x77c/0x1010 [ 131.157740][ T9914] ext4_xattr_ibody_set+0x184/0x3c0 [ 131.163114][ T9914] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 131.168960][ T9914] __ext4_expand_extra_isize+0x246/0x280 [ 131.174752][ T9914] __ext4_mark_inode_dirty+0x29b/0x400 [ 131.180252][ T9914] ext4_evict_inode+0x865/0xe40 [ 131.185283][ T9914] ? __pfx_ext4_evict_inode+0x10/0x10 [ 131.190734][ T9914] evict+0x2af/0x510 [ 131.194824][ T9914] ? __dquot_initialize+0x146/0x7c0 [ 131.200156][ T9914] iput+0x41a/0x580 [ 131.204078][ T9914] ext4_process_orphan+0x1a9/0x1c0 [ 131.209348][ T9914] ext4_orphan_cleanup+0x6a8/0xa00 [ 131.215172][ T9914] ext4_fill_super+0x3414/0x37c0 [ 131.220322][ T9914] ? set_blocksize+0x14c/0x270 [ 131.225197][ T9914] ? setup_bdev_super+0x30e/0x370 [ 131.230327][ T9914] ? __pfx_ext4_fill_super+0x10/0x10 [ 131.235723][ T9914] get_tree_bdev_flags+0x291/0x300 [ 131.240876][ T9914] ? __pfx_ext4_fill_super+0x10/0x10 [ 131.246474][ T9914] get_tree_bdev+0x1f/0x30 [ 131.251000][ T9914] ext4_get_tree+0x1c/0x30 [ 131.255539][ T9914] vfs_get_tree+0x57/0x1d0 [ 131.259970][ T9914] do_new_mount+0x288/0x8d0 [ 131.264532][ T9914] path_mount+0x4d0/0xbc0 [ 131.268882][ T9914] __se_sys_mount+0x28c/0x2e0 [ 131.273670][ T9914] __x64_sys_mount+0x67/0x80 [ 131.278512][ T9914] x64_sys_call+0x2d61/0x3020 [ 131.283279][ T9914] do_syscall_64+0x12c/0x370 [ 131.287958][ T9914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.293907][ T9914] RIP: 0033:0x7f4a7876da8a [ 131.298339][ T9914] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.318281][ T9914] RSP: 002b:00007f4a7719de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 131.326767][ T9914] RAX: ffffffffffffffda RBX: 00007f4a7719dee0 RCX: 00007f4a7876da8a [ 131.334784][ T9914] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f4a7719dea0 [ 131.342783][ T9914] RBP: 0000200000000180 R08: 00007f4a7719dee0 R09: 0000000000800718 [ 131.350774][ T9914] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 131.358814][ T9914] R13: 00007f4a7719dea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 131.366854][ T9914] [ 131.369910][ T9914] ---[ end trace 0000000000000000 ]--- [ 131.376311][ T9914] EXT4-fs (loop0): 1 orphan inode deleted [ 131.382703][ T9914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.475101][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.905149][ T9935] futex_wake_op: syz.9.2173 tries to shift op by 32; fix this program [ 132.498373][ T9971] loop9: detected capacity change from 0 to 164 [ 132.506902][ T9971] Unable to read rock-ridge attributes [ 132.513986][ T9971] Unable to read rock-ridge attributes [ 132.520053][ T9971] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 132.598897][ T10] Process accounting resumed [ 132.976240][ T9993] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 133.016143][ T9995] loop9: detected capacity change from 0 to 764 [ 133.078659][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 133.078674][ T28] audit: type=1400 audit(1775067291.871:2043): avc: denied { watch watch_reads } for pid=9994 comm="syz.9.2193" path="/335/file1/file0" dev="loop9" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 133.337164][T10026] netlink: 'syz.0.2208': attribute type 7 has an invalid length. [ 133.413178][T10026] netlink: 'syz.0.2208': attribute type 7 has an invalid length. [ 133.759191][T10049] loop2: detected capacity change from 0 to 512 [ 133.766269][T10049] EXT4-fs: Ignoring removed nobh option [ 133.779628][T10049] EXT4-fs (loop2): 1 orphan inode deleted [ 133.814580][T10049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.903598][ T28] audit: type=1400 audit(1775067292.701:2044): avc: denied { read } for pid=10058 comm="syz.7.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 133.934527][ T7159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.955493][ T28] audit: type=1400 audit(1775067292.751:2045): avc: denied { ioctl } for pid=10058 comm="syz.7.2221" path="socket:[25569]" dev="sockfs" ino=25569 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 134.082752][T10069] Process accounting resumed [ 134.162681][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 134.606901][T10115] netlink: 'syz.8.2245': attribute type 2 has an invalid length. [ 134.996627][T10144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 134.997897][T10142] loop9: detected capacity change from 0 to 1024 [ 135.052185][T10142] EXT4-fs: Ignoring removed bh option [ 135.085860][T10142] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.160969][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2259'. [ 135.183187][ T5231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.342891][T10144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 135.609737][T10178] loop2: detected capacity change from 0 to 256 [ 135.681244][T10144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 135.822618][T10144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.281466][T10216] netlink: 27 bytes leftover after parsing attributes in process `syz.9.2283'. [ 136.570166][ T28] audit: type=1400 audit(1775067295.361:2046): avc: denied { read } for pid=10243 comm="syz.7.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 136.593868][T10246] netlink: 'syz.9.2295': attribute type 12 has an invalid length. [ 136.611491][T10246] netlink: 'syz.9.2295': attribute type 29 has an invalid length. [ 136.621982][T10246] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2295'. [ 136.659674][T10246] netlink: 'syz.9.2295': attribute type 2 has an invalid length. [ 136.681637][T10246] netlink: 23 bytes leftover after parsing attributes in process `syz.9.2295'. [ 136.805786][T10272] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.824136][T10272] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.840517][T10280] netlink: 'syz.2.2309': attribute type 1 has an invalid length. [ 136.853461][ T28] audit: type=1400 audit(1775067295.641:2047): avc: denied { ioctl } for pid=10281 comm="syz.7.2310" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=26368 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.892382][T10280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.917478][T10289] bond2: (slave geneve2): making interface the new active one [ 136.942598][T10289] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 136.990627][T10272] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.040557][T10272] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.117730][T10272] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.135159][T10272] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.173517][ T28] audit: type=1400 audit(1775067295.971:2048): avc: denied { bind } for pid=10305 comm="syz.2.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.194088][ T28] audit: type=1400 audit(1775067295.971:2049): avc: denied { listen } for pid=10305 comm="syz.2.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.215902][ T28] audit: type=1400 audit(1775067295.971:2050): avc: denied { connect } for pid=10305 comm="syz.2.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.282384][T10272] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.298424][T10314] netlink: 'syz.9.2324': attribute type 1 has an invalid length. [ 137.307649][T10272] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.347933][T10314] bond2: entered promiscuous mode [ 137.371336][T10314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.405776][T10320] bond2: (slave bridge1): making interface the new active one [ 137.428843][T10320] bridge1: entered promiscuous mode [ 137.444202][T10320] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 137.464243][ T4184] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.481476][ T4184] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.517083][ T4184] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.546471][ T4184] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.572654][ T4198] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.587568][ T4198] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.616185][ T4198] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.635429][ T4198] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.783559][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2339'. [ 137.871434][ T28] audit: type=1401 audit(1775067296.661:2051): op=setxattr invalid_context="" [ 137.920382][T10369] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 137.973209][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2353'. [ 138.183947][T10407] netlink: 'syz.7.2367': attribute type 1 has an invalid length. [ 138.200844][ T28] audit: type=1400 audit(1775067296.991:2052): avc: denied { getopt } for pid=10410 comm="syz.8.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.201472][T10407] bond1: entered promiscuous mode [ 138.228573][T10407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.261003][T10414] bond1: (slave bridge1): making interface the new active one [ 138.268806][T10414] bridge1: entered promiscuous mode [ 138.275608][T10414] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 138.856136][T10469] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.863497][T10469] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.903362][T10469] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.910492][T10469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.917901][T10469] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.925073][T10469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.967212][T10475] loop9: detected capacity change from 0 to 512 [ 138.984452][ T28] audit: type=1400 audit(1775067297.781:2053): avc: denied { write } for pid=3399 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27284 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 139.010144][T10469] team0: Port device bridge0 added [ 139.043291][T10481] ipip1: entered promiscuous mode [ 139.048361][T10481] ipip1: entered allmulticast mode [ 139.054135][T10475] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.067878][T10475] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.095869][ T28] audit: type=1400 audit(1775067297.891:2054): avc: denied { unlink } for pid=10474 comm="syz.9.2394" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.209824][ T5231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.282036][T10497] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2402'. [ 139.299932][T10500] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2404'. [ 139.336036][T10504] netlink: 'syz.8.2406': attribute type 1 has an invalid length. [ 139.367900][T10504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.404292][T10508] bond1: (slave geneve2): making interface the new active one [ 139.424014][T10508] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 139.508897][T10513] netlink: 'syz.8.2409': attribute type 13 has an invalid length. [ 139.526100][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2409'. [ 139.601428][T10513] netlink: 'syz.8.2409': attribute type 13 has an invalid length. [ 139.609659][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2409'. [ 139.709046][T10515] rdma_op ffff888103495980 conn xmit_rdma 0000000000000000 [ 140.148783][T10543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.161585][T10543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.277308][T10543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.311932][T10543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.387508][T10543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.411440][T10543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.491509][T10543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.506382][T10543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.616301][ T4194] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.631796][ T4194] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.666701][ T4194] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.696143][ T4194] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.741958][ T4194] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.775559][ T4194] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.792875][T10575] atomic_op ffff888104c3b928 conn xmit_atomic 0000000000000000 [ 140.805603][T10577] macvlan0: entered promiscuous mode [ 140.813974][T10579] netlink: 'syz.9.2438': attribute type 9 has an invalid length. [ 140.816068][T10577] team0: entered promiscuous mode [ 140.829426][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2438'. [ 140.851646][T10577] team_slave_0: entered promiscuous mode [ 140.873284][T10577] team_slave_1: entered promiscuous mode [ 140.886444][T10577] bridge0: entered promiscuous mode [ 140.893967][T10577] debugfs: 'hsr0' already exists in 'hsr' [ 140.899817][T10577] Cannot create hsr debugfs directory [ 140.905476][T10577] hsr0: entered promiscuous mode [ 140.910536][T10577] hsr0: entered allmulticast mode [ 140.916019][T10577] macvlan0: entered allmulticast mode [ 140.921633][T10577] veth1_vlan: entered allmulticast mode [ 140.934590][T10577] team0: entered allmulticast mode [ 140.939854][T10577] team_slave_0: entered allmulticast mode [ 140.957389][T10577] team_slave_1: entered allmulticast mode [ 140.964253][T10577] bridge0: entered allmulticast mode [ 140.971364][ T4194] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.999802][ T4194] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.043099][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2438'. [ 141.058283][ T4194] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.077013][ T4194] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.091347][ T4194] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.125986][ T4194] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.388205][ T28] audit: type=1400 audit(1775067300.181:2055): avc: denied { mount } for pid=10625 comm="syz.2.2458" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.501682][ T28] audit: type=1400 audit(1775067300.301:2056): avc: denied { unmount } for pid=7159 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.969697][T10666] sit0: entered promiscuous mode [ 142.010404][T10666] validate_nla: 1 callbacks suppressed [ 142.010420][T10666] netlink: 'syz.7.2476': attribute type 1 has an invalid length. [ 142.051838][T10666] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2476'. [ 142.093980][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2479'. [ 142.097200][T10711] loop0: detected capacity change from 0 to 512 [ 142.164500][T10711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.177418][T10711] ext4 filesystem being mounted at /494/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.320962][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.415438][ T28] audit: type=1326 audit(1775067301.211:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10732 comm="syz.0.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 142.479276][ T28] audit: type=1326 audit(1775067301.211:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10732 comm="syz.0.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 142.551401][ T28] audit: type=1326 audit(1775067301.211:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10732 comm="syz.0.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 142.609265][ T28] audit: type=1326 audit(1775067301.211:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10732 comm="syz.0.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 142.661224][ T28] audit: type=1326 audit(1775067301.211:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10732 comm="syz.0.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 143.133333][T10768] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.184832][T10768] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.206437][ T10] kernel read not supported for file /vcs (pid: 10 comm: kworker/0:1) [ 143.238516][T10768] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.266224][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 143.266241][ T28] audit: type=1400 audit(1775067302.061:2077): avc: denied { map } for pid=10785 comm="syz.0.2502" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 143.358873][T10768] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.428574][T10707] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.447855][T10707] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.491755][T10707] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.509185][T10707] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.249874][T10834] Invalid option length (63724) for dns_resolver key [ 144.661796][T10861] loop0: detected capacity change from 0 to 512 [ 144.670662][T10861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.703758][T10861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.718512][T10861] ext4 filesystem being mounted at /510/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.793065][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.139353][T10895] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 145.153376][T10895] bond0: (slave lo): Error: Device type is different from other slaves [ 145.162765][T10898] tipc: Started in network mode [ 145.171242][T10898] tipc: Node identity 00000000400000000000000000000001, cluster identity 4711 [ 145.200528][T10898] tipc: Enabling of bearer rejected, failed to enable media [ 145.512067][T10935] netlink: 9275 bytes leftover after parsing attributes in process `syz.9.2568'. [ 145.568938][ T28] audit: type=1326 audit(1775067304.361:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.8.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 145.631199][ T28] audit: type=1326 audit(1775067304.361:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.8.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 145.690216][ T28] audit: type=1326 audit(1775067304.361:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.8.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 145.747071][ T28] audit: type=1326 audit(1775067304.361:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.8.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 145.791557][ T28] audit: type=1326 audit(1775067304.361:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.8.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 145.854242][ T28] audit: type=1326 audit(1775067304.361:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.8.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 145.904359][T10958] loop2: detected capacity change from 0 to 512 [ 145.914042][ T28] audit: type=1326 audit(1775067304.361:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.8.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 145.945440][ T28] audit: type=1326 audit(1775067304.361:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.8.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 145.975213][ T28] audit: type=1326 audit(1775067304.361:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.8.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 146.001070][T10958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.014098][T10958] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.028478][T10958] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.138611][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'. [ 146.271435][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2591'. [ 146.481298][T11007] netlink: 'syz.9.2597': attribute type 1 has an invalid length. [ 146.513784][T11007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.562810][T11007] bond3: (slave geneve2): making interface the new active one [ 146.586958][T11007] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 146.597160][T10699] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.620997][T10699] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.715486][T10699] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.733444][T10699] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.307374][T11115] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2619'. [ 147.321722][T11107] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 147.614318][T11178] ipvlan2: entered promiscuous mode [ 147.618020][T11176] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2637'. [ 147.619650][T11178] ipvlan2: entered allmulticast mode [ 147.644739][T11178] erspan0: entered allmulticast mode [ 147.653142][T11178] team0: Device ipvlan2 failed to register rx_handler [ 147.792036][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.799200][T11199] bridge0: port 2(bridge_slave_1) entered listening state [ 147.806497][T11199] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.813682][T11199] bridge0: port 1(bridge_slave_0) entered listening state [ 147.823613][T11199] bridge0: entered promiscuous mode [ 147.828918][T11199] bridge0: entered allmulticast mode [ 149.944763][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 149.944784][ T28] audit: type=1400 audit(1775067308.741:2127): avc: denied { firmware_load } for pid=11302 comm="syz.7.2683" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 150.053505][T11309] netlink: 'syz.0.2686': attribute type 21 has an invalid length. [ 150.114961][T11315] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 150.475671][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 150.488721][T11338] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 150.498694][T11338] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.553296][T11338] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 150.564371][T11338] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.643197][T11338] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 150.653417][T11338] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.723180][T11338] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 150.737810][T11338] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.777608][T10669] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 150.785934][T10669] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.797951][T10669] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 150.806288][T10669] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.823690][T10706] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 150.832096][ T28] audit: type=1400 audit(1775067309.621:2128): avc: denied { name_bind } for pid=11363 comm="syz.0.2709" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 150.841207][T10706] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.872867][T10706] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 150.888202][T10706] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.004254][T11375] loop2: detected capacity change from 0 to 256 [ 151.018510][ T28] audit: type=1400 audit(1775067309.811:2129): avc: denied { watch } for pid=11374 comm="syz.2.2714" path="/286/file0/file0/file0" dev="loop2" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 151.405117][T11384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.554926][T11405] netlink: 'syz.8.2726': attribute type 4 has an invalid length. [ 151.590238][ T28] audit: type=1326 audit(1775067310.381:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.8.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 151.613995][ T28] audit: type=1326 audit(1775067310.381:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.8.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 151.637928][ T28] audit: type=1326 audit(1775067310.391:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.8.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 151.662753][ T28] audit: type=1326 audit(1775067310.391:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.8.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 151.686965][ T28] audit: type=1326 audit(1775067310.391:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.8.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 151.721271][ T28] audit: type=1326 audit(1775067310.391:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.8.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 151.745402][ T28] audit: type=1326 audit(1775067310.391:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.8.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 151.974932][T11436] netlink: 876 bytes leftover after parsing attributes in process `syz.8.2740'. [ 151.984118][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2740'. [ 152.214824][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2742'. [ 152.223846][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2742'. [ 152.232877][T11441] netlink: 'syz.8.2742': attribute type 6 has an invalid length. [ 152.240936][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2742'. [ 152.249979][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2742'. [ 152.259019][T11441] netlink: 'syz.8.2742': attribute type 6 has an invalid length. [ 152.569271][T11462] loop9: detected capacity change from 0 to 2048 [ 152.576227][T11462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.593562][T11462] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.646791][T11462] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2752: bg 0: block 2: invalid block bitmap [ 152.660077][T11462] EXT4-fs (loop9): Remounting filesystem read-only [ 152.692213][ T5231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.676987][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.685549][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.694661][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.703410][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.065767][T11377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.122268][T11488] netlink: 'syz.8.2761': attribute type 19 has an invalid length. [ 154.136272][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2761'. [ 154.201505][T11488] netlink: 'syz.8.2761': attribute type 19 has an invalid length. [ 154.209458][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2761'. [ 154.227020][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2766'. [ 154.280241][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2768'. [ 154.659944][T11536] netlink: 'syz.2.2782': attribute type 18 has an invalid length. [ 154.682211][T11536] netlink: 'syz.2.2782': attribute type 18 has an invalid length. [ 155.110695][T11560] netlink: 'syz.2.2793': attribute type 7 has an invalid length. [ 155.145240][T10706] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 155.145330][T11560] netlink: 'syz.2.2793': attribute type 7 has an invalid length. [ 155.166013][T10706] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 155.193843][T10706] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 155.221272][T10706] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 155.470391][T11578] syz.8.2800: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 155.496712][T11578] CPU: 1 UID: 0 PID: 11578 Comm: syz.8.2800 Tainted: G W syzkaller #0 PREEMPT(full) [ 155.496850][T11578] Tainted: [W]=WARN [ 155.496860][T11578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.496874][T11578] Call Trace: [ 155.496918][T11578] [ 155.496928][T11578] __dump_stack+0x1d/0x30 [ 155.496960][T11578] dump_stack_lvl+0x95/0xd0 [ 155.497031][T11578] dump_stack+0x15/0x1b [ 155.497052][T11578] warn_alloc+0x145/0x1c0 [ 155.497077][T11578] ? __schedule+0x93c/0xd40 [ 155.497180][T11578] ? __rcu_read_unlock+0x4e/0x70 [ 155.497206][T11578] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 155.497234][T11578] ? __futex_wait+0x1fd/0x260 [ 155.497303][T11578] ? __pfx_futex_wake_mark+0x10/0x10 [ 155.497324][T11578] ? __rcu_read_unlock+0x4e/0x70 [ 155.497369][T11578] ? avc_has_perm_noaudit+0xab/0x130 [ 155.497436][T11578] ? should_fail_ex+0x30/0x280 [ 155.497463][T11578] ? xskq_create+0x36/0xe0 [ 155.497488][T11578] vmalloc_user_noprof+0x7d/0xb0 [ 155.497515][T11578] ? xskq_create+0x80/0xe0 [ 155.497591][T11578] xskq_create+0x80/0xe0 [ 155.497687][T11578] xsk_init_queue+0x70/0xb0 [ 155.497709][T11578] xsk_setsockopt+0x477/0x640 [ 155.497860][T11578] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.497887][T11578] __sys_setsockopt+0x184/0x200 [ 155.497926][T11578] __x64_sys_setsockopt+0x64/0x80 [ 155.497989][T11578] x64_sys_call+0x2327/0x3020 [ 155.498038][T11578] do_syscall_64+0x12c/0x370 [ 155.498066][T11578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.498088][T11578] RIP: 0033:0x7f8e98a0c819 [ 155.498105][T11578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.498122][T11578] RSP: 002b:00007f8e9745f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.498166][T11578] RAX: ffffffffffffffda RBX: 00007f8e98c85fa0 RCX: 00007f8e98a0c819 [ 155.498179][T11578] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 155.498192][T11578] RBP: 00007f8e98aa2c91 R08: 0000000000000004 R09: 0000000000000000 [ 155.498204][T11578] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 155.498216][T11578] R13: 00007f8e98c86038 R14: 00007f8e98c85fa0 R15: 00007ffd25607a68 [ 155.498235][T11578] [ 155.498731][T11578] Mem-Info: [ 155.512750][T11576] loop9: detected capacity change from 0 to 8192 [ 155.514218][T11578] active_anon:31311 inactive_anon:2 isolated_anon:0 [ 155.514218][T11578] active_file:22197 inactive_file:7961 isolated_file:0 [ 155.514218][T11578] unevictable:0 dirty:320 writeback:0 [ 155.514218][T11578] slab_reclaimable:3806 slab_unreclaimable:27705 [ 155.514218][T11578] mapped:32003 shmem:21540 pagetables:4153 [ 155.514218][T11578] sec_pagetables:0 bounce:0 [ 155.514218][T11578] kernel_misc_reclaimable:0 [ 155.514218][T11578] free:1836030 free_pcp:6191 free_cma:0 [ 155.777331][T11578] Node 0 active_anon:113720kB inactive_anon:8kB active_file:88788kB inactive_file:32196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116644kB dirty:1524kB writeback:0kB shmem:74824kB kernel_stack:5312kB pagetables:16492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.805155][T11578] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.834956][T11578] lowmem_reserve[]: 0 2879 7857 7857 [ 155.840411][T11578] Node 0 DMA32 free:2944512kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948140kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 155.871849][T11578] lowmem_reserve[]: 0 0 4978 4978 [ 155.876945][T11578] Node 0 Normal free:4383972kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:113720kB inactive_anon:8kB active_file:88788kB inactive_file:32312kB unevictable:0kB writepending:1524kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:32676kB local_pcp:15072kB free_cma:0kB [ 155.913170][T11578] lowmem_reserve[]: 0 0 0 0 [ 155.917812][T11578] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.930648][T11578] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944512kB [ 155.946954][T11578] Node 0 Normal: 669*4kB (U) 956*8kB (UE) 593*16kB (UME) 418*32kB (UME) 315*64kB (UME) 271*128kB (UME) 173*256kB (UME) 124*512kB (UME) 106*1024kB (UME) 32*2048kB (UME) 980*4096kB (UM) = 4383972kB [ 155.966500][T11578] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 155.975928][T11578] 48915 total pagecache pages [ 155.980616][T11578] 5 pages in swap cache [ 156.010875][T11578] Free swap = 124976kB [ 156.015786][T11578] Total swap = 124996kB [ 156.020163][T11578] 2097051 pages RAM [ 156.032001][T11578] 0 pages HighMem/MovableOnly [ 156.036789][T11578] 81616 pages reserved [ 156.041732][T11582] loop0: detected capacity change from 0 to 1764 [ 156.062095][T11582] ISOFS: Unable to identify CD-ROM format. [ 156.389828][T11607] loop0: detected capacity change from 0 to 128 [ 156.426276][T11607] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.456900][T11607] ext4 filesystem being mounted at /563/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.485819][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 156.485838][ T28] audit: type=1400 audit(1775067315.281:2168): avc: denied { setattr } for pid=11606 comm="syz.0.2812" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.526789][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.859180][T11612] loop0: detected capacity change from 0 to 256 [ 156.877209][T11612] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.627112][T11645] loop2: detected capacity change from 0 to 2048 [ 157.712316][T11645] loop2: detected capacity change from 0 to 128 [ 157.987540][ T28] audit: type=1400 audit(1775067316.781:2169): avc: denied { setopt } for pid=11667 comm="syz.8.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 158.063320][ T28] audit: type=1326 audit(1775067316.861:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.8.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 158.088161][ T28] audit: type=1326 audit(1775067316.861:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.8.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 158.114674][ T28] audit: type=1326 audit(1775067316.861:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.8.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 158.142577][ T28] audit: type=1326 audit(1775067316.861:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.8.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 158.166637][ T28] audit: type=1326 audit(1775067316.861:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.8.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 158.200278][T11679] __nla_validate_parse: 10 callbacks suppressed [ 158.200295][T11679] netlink: 228 bytes leftover after parsing attributes in process `syz.9.2841'. [ 158.224822][ T28] audit: type=1326 audit(1775067316.861:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.8.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e98a0c819 code=0x7ffc0000 [ 158.540307][ T28] audit: type=1326 audit(1775067317.331:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11701 comm="syz.0.2851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x0 [ 159.378444][T11730] netlink: 'syz.0.2862': attribute type 1 has an invalid length. [ 159.392920][T11730] bond1: entered promiscuous mode [ 159.398312][T11730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.416790][T11730] bond1: (slave bridge1): making interface the new active one [ 159.424414][T11730] bridge1: entered promiscuous mode [ 159.430255][T11730] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 159.538247][T11741] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2866'. [ 159.559464][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2867'. [ 159.560242][T11741] bridge0: port 3(syz_tun) entered disabled state [ 159.575142][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.582443][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.599406][T11744] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2866'. [ 159.678448][T11749] netlink: 'syz.9.2869': attribute type 12 has an invalid length. [ 159.692684][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2869'. [ 159.707374][T11749] netlink: 'syz.9.2869': attribute type 12 has an invalid length. [ 159.731567][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2869'. [ 159.790298][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2873'. [ 159.799790][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2873'. [ 159.845525][ T28] audit: type=1400 audit(1775067318.641:2177): avc: denied { write } for pid=11764 comm="syz.0.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 160.034889][T11786] loop9: detected capacity change from 0 to 2048 [ 160.041298][ T3598] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.043290][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 160.106954][T11786] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.250201][T11795] netlink: 'syz.7.2888': attribute type 10 has an invalid length. [ 160.272145][T11795] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2888'. [ 160.285155][T11795] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 160.300972][ T5231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.552125][T11806] loop2: detected capacity change from 0 to 32768 [ 160.602784][ T6140] loop2: p1 p3 < > [ 160.614903][T11806] loop2: p1 p3 < > [ 160.645055][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 160.655820][ T6140] udevd[6140]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 160.697749][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 160.708101][ T6140] udevd[6140]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 160.739452][T11833] loop2: detected capacity change from 0 to 4096 [ 160.775822][T11833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.806795][ T7159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.328196][T11867] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2916'. [ 161.464738][T11876] loop9: detected capacity change from 0 to 128 [ 161.488499][T11876] FAT-fs (loop9): bogus logical sector size 759 [ 161.509914][T11876] FAT-fs (loop9): Can't find a valid FAT filesystem [ 161.953788][T11897] loop9: detected capacity change from 0 to 32768 [ 162.021468][ T6140] loop9: p1 p3 < > [ 162.034484][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 162.034500][ T28] audit: type=1326 audit(1775067320.831:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.0.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 162.065644][T11897] loop9: p1 p3 < > [ 162.070108][ T28] audit: type=1326 audit(1775067320.831:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.0.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 162.094360][ T28] audit: type=1326 audit(1775067320.831:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.0.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 162.118756][ T28] audit: type=1326 audit(1775067320.861:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.0.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 162.148514][ T28] audit: type=1326 audit(1775067320.861:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.0.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 162.200325][ T28] audit: type=1326 audit(1775067320.861:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.0.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 162.258817][ T28] audit: type=1326 audit(1775067320.861:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.0.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 162.290008][ T28] audit: type=1326 audit(1775067320.861:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.0.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 162.339871][T11924] netlink: 'syz.7.2938': attribute type 1 has an invalid length. [ 162.366682][ T6140] udevd[6140]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 162.366830][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 162.377322][ T28] audit: type=1326 audit(1775067320.861:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.0.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 162.410177][ T28] audit: type=1326 audit(1775067320.861:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.0.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 162.442141][ T6140] udevd[6140]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 162.466794][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 162.490653][T11924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.539309][T11925] bond2: (slave geneve2): making interface the new active one [ 162.562277][T11925] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 162.600339][T11934] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.607740][T11934] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.690051][T11942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.708728][T11942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.921170][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 162.928337][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 163.156563][T11974] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.163822][T11974] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.205339][T11976] __nla_validate_parse: 6 callbacks suppressed [ 163.205358][T11976] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2960'. [ 163.213256][T11974] bridge0: left allmulticast mode [ 163.234156][T11976] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2960'. [ 163.255396][T11976] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2960'. [ 163.289140][T11974] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2957'. [ 163.372230][T11938] Set syz1 is full, maxelem 65536 reached [ 163.658598][T11996] loop2: detected capacity change from 0 to 32768 [ 163.721174][T11996] loop2: p1 p3 < > [ 163.812433][T12022] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2976'. [ 163.831599][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.838763][T12022] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.864274][T12026] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2976'. [ 163.885755][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 163.913376][ T6140] udevd[6140]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 163.920027][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 163.971358][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 164.236601][T12045] loop0: detected capacity change from 0 to 128 [ 164.259550][T12047] loop9: detected capacity change from 0 to 2048 [ 164.324386][T12047] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.342018][T12047] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.361513][T12047] EXT4-fs (loop9): shut down requested (0) [ 164.378006][ T5231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.475541][T12053] syzkaller1: entered promiscuous mode [ 164.482102][T12053] syzkaller1: entered allmulticast mode [ 164.508040][T12043] loop2: detected capacity change from 0 to 32768 [ 164.515887][T10686] bio_check_eod: 102 callbacks suppressed [ 164.515968][T10686] kworker/u8:37: attempt to access beyond end of device [ 164.515968][T10686] loop0: rw=1, sector=145, nr_sectors = 40 limit=128 [ 164.538010][T10686] kworker/u8:37: attempt to access beyond end of device [ 164.538010][T10686] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 164.552269][T10686] kworker/u8:37: attempt to access beyond end of device [ 164.552269][T10686] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 164.566376][T10686] kworker/u8:37: attempt to access beyond end of device [ 164.566376][T10686] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 164.583136][T10686] kworker/u8:37: attempt to access beyond end of device [ 164.583136][T10686] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 164.603735][T10686] kworker/u8:37: attempt to access beyond end of device [ 164.603735][T10686] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 164.617432][T10686] kworker/u8:37: attempt to access beyond end of device [ 164.617432][T10686] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 164.631784][T10686] kworker/u8:37: attempt to access beyond end of device [ 164.631784][T10686] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 164.645578][T10686] kworker/u8:37: attempt to access beyond end of device [ 164.645578][T10686] loop0: rw=1, sector=305, nr_sectors = 8 limit=128 [ 164.659473][T10686] kworker/u8:37: attempt to access beyond end of device [ 164.659473][T10686] loop0: rw=1, sector=321, nr_sectors = 8 limit=128 [ 164.802555][T12064] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 164.802555][T12064] The task syz.0.3001 (12064) triggered the difference, watch for misbehavior. [ 164.953211][T12078] loop9: detected capacity change from 0 to 256 [ 165.211235][T12096] bridge1: entered promiscuous mode [ 165.216736][T12096] bridge1: entered allmulticast mode [ 165.350665][T12111] loop2: detected capacity change from 0 to 1024 [ 165.364639][T12111] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.3017: Failed to acquire dquot type 0 [ 165.383051][T12111] loop2: lost filesystem error report for type 5 error -117 [ 165.383452][T12111] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 165.405446][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 165.405482][ C0] EXT4-fs (loop2): initial error at time 1775067324: ext4_acquire_dquot:7026 [ 165.405509][ C0] EXT4-fs (loop2): last error at time 1775067324: ext4_acquire_dquot:7026 [ 165.430083][T12111] EXT4-fs (loop2): 1 truncate cleaned up [ 165.436393][T12111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.493730][ T7159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.607567][T12130] loop0: detected capacity change from 0 to 128 [ 165.867539][T12152] 9p: Bad value for 'wfdno' [ 165.913125][T12156] netlink: 'syz.8.3035': attribute type 3 has an invalid length. [ 166.165814][T12175] loop9: detected capacity change from 0 to 512 [ 166.208178][T12175] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.235644][T12175] ext4 filesystem being mounted at /479/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.266663][ T5231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.529558][T12199] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 166.916095][ T2388] tipc: Subscription rejected, illegal request [ 167.076594][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3069'. [ 167.160187][T12236] hsr_slave_1 (unregistering): left promiscuous mode [ 167.177019][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3072'. [ 167.238785][T12247] netlink: 'syz.2.3074': attribute type 1 has an invalid length. [ 167.265854][T12247] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.337404][T12252] bond3: (slave geneve3): making interface the new active one [ 167.370891][ T28] kauditd_printk_skb: 703 callbacks suppressed [ 167.370911][ T28] audit: type=1400 audit(1775067326.161:2898): avc: denied { map } for pid=12250 comm="syz.7.3075" path="socket:[33085]" dev="sockfs" ino=33085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 167.409372][T12154] kexec: Could not allocate control_code_buffer [ 167.422942][T12252] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 167.491721][T12262] loop0: detected capacity change from 0 to 256 [ 167.537376][T12265] loop2: detected capacity change from 0 to 128 [ 167.573554][T12265] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.594514][T12265] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.652990][T12265] EXT4-fs (loop2): shut down requested (0) [ 167.672433][ T7159] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.681695][T12269] loop9: detected capacity change from 0 to 128 [ 168.211227][T12290] loop2: detected capacity change from 0 to 32768 [ 168.291320][ T6140] loop2: p1 p3 < > [ 168.327008][T12290] loop2: p1 p3 < > [ 168.720177][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 168.738036][ T6140] udevd[6140]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 168.824635][T12327] bond4: (slave vlan0): Enslaving as a backup interface with an up link [ 168.885643][T12330] __nla_validate_parse: 2 callbacks suppressed [ 168.885661][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3104'. [ 168.974634][T12302] Set syz1 is full, maxelem 65536 reached [ 169.276318][T12338] loop9: detected capacity change from 0 to 1024 [ 169.292727][T12340] loop2: detected capacity change from 0 to 256 [ 169.315243][T12338] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.701646][ T5231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.852806][ T28] audit: type=1400 audit(1775067328.651:2899): avc: denied { ioctl } for pid=12372 comm="syz.8.3121" path="socket:[32746]" dev="sockfs" ino=32746 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 170.038729][T12386] loop0: detected capacity change from 0 to 512 [ 170.059040][T12386] EXT4-fs: Ignoring removed nobh option [ 170.080611][T12386] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.128159][T12386] EXT4-fs (loop0): 1 truncate cleaned up [ 170.157456][T12386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.294478][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.397260][T12415] loop2: detected capacity change from 0 to 2048 [ 170.431479][T12422] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3141'. [ 170.461866][ T6140] loop2: p2 < > p4 [ 170.466427][ T6140] loop2: p4 size 262144 extends beyond EOD, truncated [ 170.476577][T12415] loop2: p2 < > p4 [ 170.482797][T12415] loop2: p4 size 262144 extends beyond EOD, truncated [ 170.537667][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 170.540583][ T6140] udevd[6140]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 170.662290][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 170.662607][ T6140] udevd[6140]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 170.715502][T12435] loop9: detected capacity change from 0 to 4096 [ 170.754705][T12435] EXT4-fs: Ignoring removed bh option [ 170.781351][T12435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.949917][ T5231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.961791][ T28] audit: type=1400 audit(1775067329.751:2900): avc: denied { listen } for pid=12454 comm="syz.2.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.154043][T12467] loop0: detected capacity change from 0 to 8192 [ 171.757754][T12490] syz.9.3171 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 171.811232][T12490] CPU: 0 UID: 0 PID: 12490 Comm: syz.9.3171 Tainted: G W syzkaller #0 PREEMPT(full) [ 171.811273][T12490] Tainted: [W]=WARN [ 171.811280][T12490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.811292][T12490] Call Trace: [ 171.811298][T12490] [ 171.811369][T12490] __dump_stack+0x1d/0x30 [ 171.811400][T12490] dump_stack_lvl+0x95/0xd0 [ 171.811501][T12490] dump_stack+0x15/0x1b [ 171.811525][T12490] dump_header+0x80/0x240 [ 171.811569][T12490] oom_kill_process+0x295/0x350 [ 171.811595][T12490] out_of_memory+0x97d/0xb80 [ 171.811623][T12490] try_charge_memcg+0x62e/0xa10 [ 171.811664][T12490] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 171.811773][T12490] __swap_cache_prepare_and_add+0x67/0x460 [ 171.811806][T12490] ? alloc_pages_mpol+0x217/0x260 [ 171.811886][T12490] swap_cache_alloc_folio+0xa2/0x120 [ 171.811919][T12490] swap_cluster_readahead+0x26e/0x3d0 [ 171.811954][T12490] swapin_readahead+0xde/0x840 [ 171.811989][T12490] ? _raw_spin_unlock+0x9/0x30 [ 171.812060][T12490] ? swap_put_entries_cluster+0x385/0x3a0 [ 171.812102][T12490] ? swap_put_entries_cluster+0x71/0x3a0 [ 171.812135][T12490] ? __rcu_read_unlock+0x4e/0x70 [ 171.812157][T12490] ? swap_cache_get_folio+0x26f/0x280 [ 171.812289][T12490] do_swap_page+0x2fe/0x21e0 [ 171.812318][T12490] ? css_rstat_updated+0xbb/0x280 [ 171.812381][T12490] ? __rcu_read_lock+0x36/0x50 [ 171.812461][T12490] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 171.812501][T12490] handle_mm_fault+0xb46/0x3020 [ 171.812530][T12490] ? vma_start_read+0x1c7/0x2c0 [ 171.812578][T12490] do_user_addr_fault+0x62f/0x1050 [ 171.812615][T12490] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 171.812641][T12490] ? trace_page_fault_user+0x1f/0xe0 [ 171.812668][T12490] exc_page_fault+0x62/0xa0 [ 171.812689][T12490] asm_exc_page_fault+0x26/0x30 [ 171.812711][T12490] RIP: 0033:0x7f079f0da1cc [ 171.812729][T12490] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 171.812808][T12490] RSP: 002b:00007fffa2c39c00 EFLAGS: 00010202 [ 171.812858][T12490] RAX: 0000000000000000 RBX: 00007f079f487080 RCX: 0000555562265808 [ 171.812872][T12490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.812885][T12490] RBP: 00007f079f487da0 R08: 0000000000000000 R09: 0000000000000000 [ 171.812899][T12490] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002a0e8 [ 171.812950][T12490] R13: 00007f079f485fac R14: 0000000000029ddd R15: 00007fffa2c39d00 [ 171.812971][T12490] [ 171.812979][T12490] memory: usage 290200kB, limit 307200kB, failcnt 187 [ 172.122111][T12502] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.151536][T12502] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.184173][T12502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.218768][T12502] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.248259][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3178'. [ 172.267685][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3178'. [ 172.276943][T12490] memory+swap: usage 151332kB, limit 9007199254740988kB, failcnt 0 [ 172.293364][T12490] kmem: usage 162724kB, limit 9007199254740988kB, failcnt 0 [ 172.301616][T12508] netlink: 4676 bytes leftover after parsing attributes in process `syz.8.3178'. [ 172.321223][T12490] Memory cgroup stats for /syz9: [ 172.321508][T12490] cache 0 [ 172.351412][T12490] rss 12288 [ 172.354717][T12490] shmem 0 [ 172.359884][ T7159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.359955][T12490] mapped_file 0 [ 172.359967][T12490] dirty 0 [ 172.359976][T12490] writeback 0 [ 172.379802][T12490] workingset_refault_anon 23 [ 172.391167][T12490] workingset_refault_file 1 [ 172.395730][T12490] swap 958464 [ 172.405121][T12490] swapcached 2600960 [ 172.409041][T12490] pgpgin 132655 [ 172.431231][T12490] pgpgout 132651 [ 172.438492][T12490] pgfault 135039 [ 172.448557][T12490] pgmajfault 15 [ 172.455418][T12490] inactive_anon 12288 [ 172.469303][T12490] active_anon 0 [ 172.479206][T12490] inactive_file 4096 [ 172.493362][T12490] active_file 0 [ 172.498216][T12490] unevictable 0 [ 172.502588][T12490] hierarchical_memory_limit 314572800 [ 172.508375][ T28] audit: type=1400 audit(1775067331.301:2901): avc: denied { read } for pid=12524 comm="syz.2.3185" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 172.536926][T12525] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 172.547285][T12490] hierarchical_memsw_limit 9223372036854771712 [ 172.555000][T12490] total_cache 0 [ 172.558604][T12490] total_rss 12288 [ 172.568779][T12490] total_shmem 0 [ 172.574473][T12490] total_mapped_file 0 [ 172.578494][T12490] total_dirty 0 [ 172.582971][T12490] total_writeback 0 [ 172.586795][T12490] total_workingset_refault_anon 23 [ 172.606558][T12490] total_workingset_refault_file 1 [ 172.612528][T12490] total_swap 958464 [ 172.616407][T12490] total_swapcached 2600960 [ 172.620941][T12490] total_pgpgin 132655 [ 172.632613][T12490] total_pgpgout 132651 [ 172.636844][T12490] total_pgfault 135039 [ 172.640981][T12490] total_pgmajfault 15 [ 172.645914][T12490] total_inactive_anon 12288 [ 172.650731][T12490] total_active_anon 0 [ 172.655329][T12490] total_inactive_file 4096 [ 172.659952][T12490] total_active_file 0 [ 172.664563][T12490] total_unevictable 0 [ 172.668585][T12490] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3171,pid=12490,uid=0 [ 172.683620][T12490] Memory cgroup out of memory: Killed process 12490 (syz.9.3171) total-vm:96080kB, anon-rss:1228kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 172.736032][T12491] syz.9.3171 (12491) used greatest stack depth: 8640 bytes left [ 173.009350][T12552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.810225][T12552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.845464][T12557] set_capacity_and_notify: 1 callbacks suppressed [ 173.845487][T12557] loop0: detected capacity change from 0 to 32768 [ 173.883540][ T6140] loop0: p1 p3 < > [ 173.923737][T12557] loop0: p1 p3 < > [ 173.992741][T12589] netlink: 'syz.7.3212': attribute type 3 has an invalid length. [ 174.030576][T12594] loop0: detected capacity change from 0 to 736 [ 174.078435][T12594] rock: directory entry would overflow storage [ 174.104331][T12594] rock: sig=0x3b10, size=4, remaining=3 [ 174.137920][ T6140] udevd[6140]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 174.138630][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 174.220397][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 174.229590][ T6140] udevd[6140]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 174.385253][ T28] audit: type=1326 audit(1775067333.181:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 174.411789][ T28] audit: type=1326 audit(1775067333.201:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 174.492923][ T28] audit: type=1326 audit(1775067333.201:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 174.520012][ T28] audit: type=1326 audit(1775067333.201:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 174.551913][ T28] audit: type=1326 audit(1775067333.201:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 174.576453][ T28] audit: type=1326 audit(1775067333.211:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 174.600289][ T28] audit: type=1326 audit(1775067333.211:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 174.632016][ T28] audit: type=1326 audit(1775067333.211:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 174.655676][ T28] audit: type=1326 audit(1775067333.211:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1feac819 code=0x7ffc0000 [ 174.698112][T12550] Set syz1 is full, maxelem 65536 reached [ 174.772446][T12615] loop0: detected capacity change from 0 to 256 [ 174.814764][T12615] FAT-fs (loop0): Directory bread(block 64) failed [ 174.821597][T12615] FAT-fs (loop0): Directory bread(block 65) failed [ 174.828296][T12615] FAT-fs (loop0): Directory bread(block 66) failed [ 174.835662][T12615] FAT-fs (loop0): Directory bread(block 67) failed [ 174.843114][T12615] FAT-fs (loop0): Directory bread(block 68) failed [ 174.849935][T12615] FAT-fs (loop0): Directory bread(block 69) failed [ 174.862455][T12615] FAT-fs (loop0): Directory bread(block 70) failed [ 174.879115][T12615] FAT-fs (loop0): Directory bread(block 71) failed [ 174.885956][T12615] FAT-fs (loop0): Directory bread(block 72) failed [ 174.893428][T12615] FAT-fs (loop0): Directory bread(block 73) failed [ 174.917278][T12615] bio_check_eod: 98 callbacks suppressed [ 174.917300][T12615] syz.0.3234: attempt to access beyond end of device [ 174.917300][T12615] loop0: rw=8912896, sector=1160, nr_sectors = 4 limit=256 [ 174.937145][T12615] syz.0.3234: attempt to access beyond end of device [ 174.937145][T12615] loop0: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 174.951624][T12615] syz.0.3234: attempt to access beyond end of device [ 174.951624][T12615] loop0: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 175.038758][T12627] loop0: detected capacity change from 0 to 512 [ 175.049652][T12627] EXT4-fs: Ignoring removed nobh option [ 175.076398][T12627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.090774][T12627] ext4 filesystem being mounted at /628/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.118323][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.126773][T12634] netlink: 'syz.2.3232': attribute type 1 has an invalid length. [ 175.160862][T12638] xt_hashlimit: size too large, truncated to 1048576 [ 175.322817][T12647] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 175.346149][T12647] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 175.666098][T12670] loop9: detected capacity change from 0 to 128 [ 175.972376][T12679] netlink: 'syz.0.3251': attribute type 9 has an invalid length. [ 175.980151][T12679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3251'. [ 176.002335][T12686] batadv_slave_1: entered promiscuous mode [ 176.008941][T10669] kworker/u8:21: attempt to access beyond end of device [ 176.008941][T10669] loop9: rw=1, sector=145, nr_sectors = 40 limit=128 [ 176.031340][T12685] batadv_slave_1: left promiscuous mode [ 176.032806][T10669] kworker/u8:21: attempt to access beyond end of device [ 176.032806][T10669] loop9: rw=1, sector=193, nr_sectors = 8 limit=128 [ 176.046878][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3252'. [ 176.058163][T10669] kworker/u8:21: attempt to access beyond end of device [ 176.058163][T10669] loop9: rw=1, sector=209, nr_sectors = 8 limit=128 [ 176.073622][T10669] kworker/u8:21: attempt to access beyond end of device [ 176.073622][T10669] loop9: rw=1, sector=225, nr_sectors = 8 limit=128 [ 176.076905][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3252'. [ 176.097936][T10669] kworker/u8:21: attempt to access beyond end of device [ 176.097936][T10669] loop9: rw=1, sector=241, nr_sectors = 8 limit=128 [ 176.119084][T12690] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3257'. [ 176.126174][T10669] kworker/u8:21: attempt to access beyond end of device [ 176.126174][T10669] loop9: rw=1, sector=257, nr_sectors = 8 limit=128 [ 176.150931][T10669] kworker/u8:21: attempt to access beyond end of device [ 176.150931][T10669] loop9: rw=1, sector=273, nr_sectors = 8 limit=128 [ 176.473516][T12721] PID 12721 killed due to inadequate hugepage pool [ 176.681616][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3276'. [ 176.815782][T12745] Invalid option length (54865) for dns_resolver key [ 177.723582][T12776] loop2: detected capacity change from 0 to 128 [ 177.885053][T12778] loop0: detected capacity change from 0 to 512 [ 177.892940][T12778] EXT4-fs: Ignoring removed bh option [ 177.910770][T12778] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 177.932185][T12778] EXT4-fs (loop0): 1 truncate cleaned up [ 177.938469][T12778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.724371][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.737038][T12781] netlink: 'syz.2.3293': attribute type 1 has an invalid length. [ 179.754381][T12781] netlink: 'syz.2.3293': attribute type 22 has an invalid length. [ 179.802433][T10707] Bluetooth: hci0: Frame reassembly failed (-84) [ 179.959459][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 179.959477][ T28] audit: type=1400 audit(1775067338.751:2945): avc: denied { getopt } for pid=12806 comm="syz.7.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.147219][T12818] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 180.320689][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3316'. [ 180.420096][T12834] netlink: 1343 bytes leftover after parsing attributes in process `syz.8.3319'. [ 180.455282][T10706] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.471353][T10706] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.512386][T10706] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.531339][T10706] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.545393][T12842] syzkaller1: entered promiscuous mode [ 180.550947][T12842] syzkaller1: entered allmulticast mode [ 180.573689][T10706] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.592742][T10706] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.654091][T10706] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.671510][T10706] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.693386][T12870] loop2: detected capacity change from 0 to 128 [ 180.714130][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3335'. [ 180.723381][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3335'. [ 180.778382][T12876] 9p: Bad value for 'wfdno' [ 180.864567][T10706] bridge_slave_1: left allmulticast mode [ 180.870392][T10706] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.889614][T10706] bridge_slave_0: left allmulticast mode [ 180.904345][T10706] bridge_slave_0: left promiscuous mode [ 180.923307][T10706] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.988383][T10706] bond3 (unregistering): (slave geneve2): Releasing active interface [ 181.043758][T10706] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 181.053191][T10706] bridge1 (unregistering): left promiscuous mode [ 181.083764][T10706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.093560][T10706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.103315][T10706] bond0 (unregistering): (slave team0): Releasing backup interface [ 181.139941][T10706] bond0 (unregistering): Released all slaves [ 181.152930][T10706] bond1 (unregistering): Released all slaves [ 181.174732][T10706] bond2 (unregistering): Released all slaves [ 181.186931][T10706] bond3 (unregistering): Released all slaves [ 181.197935][T12888] netlink: 'syz.7.3340': attribute type 12 has an invalid length. [ 181.206290][T12888] netlink: 'syz.7.3340': attribute type 2 has an invalid length. [ 181.214337][T12888] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3340'. [ 181.233658][T12922] netlink: 'syz.8.3352': attribute type 4 has an invalid length. [ 181.256729][T10706] hsr_slave_0: left promiscuous mode [ 181.266892][T10706] hsr_slave_1: left promiscuous mode [ 181.273887][T10706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.306950][T10706] team0 (unregistering): Port device team_slave_1 removed [ 181.316858][T10706] team0 (unregistering): Port device team_slave_0 removed [ 181.369053][T12850] chnl_net:caif_netlink_parms(): no params data found [ 181.417198][T12850] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.424424][T12850] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.432035][T12850] bridge_slave_0: entered allmulticast mode [ 181.438551][T12850] bridge_slave_0: entered promiscuous mode [ 181.446720][T12850] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.453971][T12850] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.461414][T12850] bridge_slave_1: entered allmulticast mode [ 181.467857][T12850] bridge_slave_1: entered promiscuous mode [ 181.487207][T12850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.498054][T12850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.518066][T12850] team0: Port device team_slave_0 added [ 181.524987][T12850] team0: Port device team_slave_1 added [ 181.540658][T12850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.547808][T12850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.574064][T12850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.586606][T12850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.593693][T12850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.619728][T12850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.636680][T10706] IPVS: stop unused estimator thread 0... [ 181.648856][T12850] hsr_slave_0: entered promiscuous mode [ 181.655707][T12850] hsr_slave_1: entered promiscuous mode [ 181.661814][T12850] debugfs: 'hsr0' already exists in 'hsr' [ 181.667619][T12850] Cannot create hsr debugfs directory [ 181.891265][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 181.897350][ T3598] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 181.929214][ T28] audit: type=1326 audit(1775067340.721:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 181.960041][ T28] audit: type=1326 audit(1775067340.721:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 181.985076][ T28] audit: type=1326 audit(1775067340.751:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 182.016477][ T28] audit: type=1326 audit(1775067340.751:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 182.041674][ T28] audit: type=1326 audit(1775067340.751:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 182.074120][ T28] audit: type=1326 audit(1775067340.751:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 182.142752][ T28] audit: type=1326 audit(1775067340.751:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 182.167667][ T28] audit: type=1326 audit(1775067340.751:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 182.191689][ T28] audit: type=1326 audit(1775067340.751:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.0.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 182.478041][T12850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.497861][T12850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 182.535093][T12850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 182.553933][T12850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 182.674782][T13081] netlink: 'syz.2.3373': attribute type 5 has an invalid length. [ 182.693540][T12850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.736342][T12850] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.758964][ T2388] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.766151][ T2388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.807244][ T2388] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.814564][ T2388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.062289][T12850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.353842][T12850] veth0_vlan: entered promiscuous mode [ 183.367952][T12850] veth1_vlan: entered promiscuous mode [ 183.431856][T12850] veth0_macvtap: entered promiscuous mode [ 183.448631][T12850] veth1_macvtap: entered promiscuous mode [ 183.462321][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3385'. [ 183.486806][T12850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.525918][T12850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.541592][ T2388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.571889][ T2388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.623819][ T2388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.638540][ T2388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.718921][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3393'. [ 184.328396][T13283] loop2: detected capacity change from 0 to 128 [ 184.554084][T13315] loop2: detected capacity change from 0 to 2048 [ 184.565335][T13319] loop0: detected capacity change from 0 to 512 [ 184.586437][T13315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.601624][T13319] EXT4-fs: Ignoring removed bh option [ 184.634216][T13319] EXT4-fs: inline encryption not supported [ 184.671161][T13319] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.715583][T13319] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 184.737429][T13319] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3406: bg 0: block 248: padding at end of block bitmap is not set [ 184.752608][T13319] loop0: lost filesystem error report for type 5 error -117 [ 184.752889][T13319] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.3406: Failed to acquire dquot type 1 [ 184.760857][ T7159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.771452][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 184.771470][ C1] EXT4-fs (loop0): last error at time 1775067343: ext4_validate_block_bitmap:441 [ 184.772489][T13319] loop0: lost filesystem error report for type 5 error -28 [ 184.810475][T13319] EXT4-fs (loop0): 1 truncate cleaned up [ 184.831712][T13319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 184.987453][T10686] bond0: (slave bond_slave_0): interface is now down [ 184.997020][T13371] netlink: 'syz.8.3412': attribute type 10 has an invalid length. [ 185.006136][T10686] bond0: (slave bond_slave_1): interface is now down [ 185.041168][T10709] bond0: (slave bond_slave_0): interface is now down [ 185.052494][T10709] bond0: (slave bond_slave_1): interface is now down [ 185.082093][T10709] bond0: (slave bond_slave_0): interface is now down [ 185.093358][T10709] bond0: (slave bond_slave_1): interface is now down [ 185.131221][T10709] bond0: (slave bond_slave_0): interface is now down [ 185.140208][T10709] bond0: (slave bond_slave_1): interface is now down [ 185.148050][T13371] syz_tun: entered promiscuous mode [ 185.174216][T10709] bond0: (slave bond_slave_0): interface is now down [ 185.180948][T10709] bond0: (slave bond_slave_1): interface is now down [ 185.206619][T10709] bond0: now running without any active interface! [ 185.252964][T13400] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.3413'. [ 185.393232][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 185.393251][ T28] audit: type=1400 audit(1775067344.191:2976): avc: denied { accept } for pid=13421 comm="syz.7.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.467259][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 185.557173][ T28] audit: type=1326 audit(1775067344.351:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 185.583939][T13435] syz.0.3421 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 185.610130][ T28] audit: type=1326 audit(1775067344.351:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 185.645509][ T28] audit: type=1326 audit(1775067344.351:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 185.670278][ T28] audit: type=1326 audit(1775067344.351:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 185.694603][ T28] audit: type=1326 audit(1775067344.351:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 185.740347][T13447] loop0: detected capacity change from 0 to 512 [ 185.770758][T13447] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 185.782504][ T28] audit: type=1326 audit(1775067344.381:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 185.825186][ T28] audit: type=1326 audit(1775067344.381:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 185.849416][ T28] audit: type=1326 audit(1775067344.381:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 185.873472][T13447] EXT4-fs (loop0): 1 truncate cleaned up [ 185.879588][T13447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.892406][ T28] audit: type=1326 audit(1775067344.381:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7876c819 code=0x7ffc0000 [ 186.093804][T13462] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 186.242517][T13465] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.290517][T13465] bond5: (slave lo): Enslaving as an active interface with an up link [ 186.314890][T13465] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 186.446851][T13471] loop2: detected capacity change from 0 to 1764 [ 186.467994][T13471] ISOFS: Unable to identify CD-ROM format. [ 186.549548][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.592666][T13473] loop2: detected capacity change from 0 to 128 [ 186.957238][T13483] netlink: 'syz.8.3436': attribute type 21 has an invalid length. [ 186.976674][T13483] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.005251][T13483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.012650][T13483] IPv6: NLM_F_CREATE should be set when creating new route [ 187.019936][T13483] IPv6: NLM_F_CREATE should be set when creating new route [ 187.027158][T13483] IPv6: NLM_F_CREATE should be set when creating new route [ 187.181473][T10669] bio_check_eod: 101 callbacks suppressed [ 187.181490][T10669] kworker/u8:21: attempt to access beyond end of device [ 187.181490][T10669] loop2: rw=1, sector=145, nr_sectors = 40 limit=128 [ 187.211487][T10669] kworker/u8:21: attempt to access beyond end of device [ 187.211487][T10669] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 187.211986][T13500] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3445'. [ 187.228292][T10669] kworker/u8:21: attempt to access beyond end of device [ 187.228292][T10669] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 187.247728][T10669] kworker/u8:21: attempt to access beyond end of device [ 187.247728][T10669] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 187.275815][T10669] kworker/u8:21: attempt to access beyond end of device [ 187.275815][T10669] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 187.316108][T10669] kworker/u8:21: attempt to access beyond end of device [ 187.316108][T10669] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 187.338432][T10669] kworker/u8:21: attempt to access beyond end of device [ 187.338432][T10669] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 187.354068][T10669] kworker/u8:21: attempt to access beyond end of device [ 187.354068][T10669] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 187.370387][T10669] kworker/u8:21: attempt to access beyond end of device [ 187.370387][T10669] loop2: rw=1, sector=305, nr_sectors = 8 limit=128 [ 187.384192][T10669] kworker/u8:21: attempt to access beyond end of device [ 187.384192][T10669] loop2: rw=1, sector=321, nr_sectors = 8 limit=128 [ 187.449244][T13508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3451'. [ 187.643165][T13524] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 187.716459][T13524] bond3: (slave lo): Enslaving as an active interface with an up link [ 187.780538][T13524] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 187.869311][T13536] futex_wake_op: syz.7.3460 tries to shift op by -1; fix this program [ 187.972938][T13546] netlink: 'syz.0.3464': attribute type 21 has an invalid length. [ 187.980793][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3464'. [ 188.041994][T13546] netlink: 'syz.0.3464': attribute type 21 has an invalid length. [ 188.056164][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3464'. [ 188.172555][T13567] tipc: Started in network mode [ 188.184116][T13567] tipc: Node identity 84e, cluster identity 4711 [ 188.200927][T13567] tipc: Node number set to 2126 [ 188.281614][T13571] loop0: detected capacity change from 0 to 4096 [ 188.295897][T13571] EXT4-fs: Ignoring removed bh option [ 188.320025][T13571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.348599][T13571] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.372241][T13571] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.403246][T13577] netlink: 1315 bytes leftover after parsing attributes in process `syz.8.3475'. [ 188.433111][T13571] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.453669][T13571] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.495312][T13571] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.518285][T13571] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.530176][T10686] bond0: (slave bond_slave_0): interface is now down [ 188.532461][T13583] netlink: 'syz.2.3478': attribute type 10 has an invalid length. [ 188.544240][T10686] bond0: (slave bond_slave_1): interface is now down [ 188.557859][T13583] syz_tun: entered promiscuous mode [ 188.581657][T10686] bond0: (slave bond_slave_0): interface is now down [ 188.590509][T10686] bond0: (slave bond_slave_1): interface is now down [ 188.604962][T10686] bond0: now running without any active interface! [ 188.634411][T13571] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.649258][T13585] loop2: detected capacity change from 0 to 256 [ 188.668186][T13571] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.793766][T10686] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.802509][T10686] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.855153][T10709] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.871899][T10709] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.887044][T10709] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.896000][T10709] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.916205][T10709] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.954130][T10709] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.065273][T13602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.091839][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.696733][T10669] ================================================================== [ 189.704891][T10669] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 189.714390][T10669] [ 189.716729][T10669] write to 0xffff8881515f270b of 1 bytes by task 13585 on cpu 1: [ 189.724463][T10669] copy_folio_from_iter_atomic+0x75f/0x1170 [ 189.730566][T10669] generic_perform_write+0x2c1/0x490 [ 189.736052][T10669] __generic_file_write_iter+0x9e/0x120 [ 189.741630][T10669] generic_file_write_iter+0x8d/0x310 [ 189.747039][T10669] iter_file_splice_write+0x6c4/0xa80 [ 189.752441][T10669] direct_splice_actor+0x156/0x2a0 [ 189.757563][T10669] splice_direct_to_actor+0x311/0x670 [ 189.762941][T10669] do_splice_direct+0x119/0x1a0 [ 189.767794][T10669] do_sendfile+0x382/0x650 [ 189.772224][T10669] __x64_sys_sendfile64+0x105/0x150 [ 189.777432][T10669] x64_sys_call+0x2dc4/0x3020 [ 189.782117][T10669] do_syscall_64+0x12c/0x370 [ 189.786714][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.792610][T10669] [ 189.794933][T10669] read to 0xffff8881515f2000 of 2048 bytes by task 10669 on cpu 0: [ 189.802828][T10669] copy_folio_from_iter_atomic+0x75f/0x1170 [ 189.808840][T10669] generic_perform_write+0x2c1/0x490 [ 189.814221][T10669] shmem_file_write_iter+0xc5/0xf0 [ 189.819347][T10669] lo_rw_aio+0x67d/0x730 [ 189.823604][T10669] loop_process_work+0x56c/0xac0 [ 189.828661][T10669] loop_workfn+0x31/0x40 [ 189.832929][T10669] process_scheduled_works+0x513/0xa10 [ 189.838409][T10669] worker_thread+0x58a/0x780 [ 189.843118][T10669] kthread+0x22a/0x280 [ 189.847282][T10669] ret_from_fork+0x150/0x360 [ 189.851894][T10669] ret_from_fork_asm+0x1a/0x30 [ 189.856776][T10669] [ 189.859103][T10669] Reported by Kernel Concurrency Sanitizer on: [ 189.865256][T10669] CPU: 0 UID: 0 PID: 10669 Comm: kworker/u8:21 Tainted: G W syzkaller #0 PREEMPT(full) [ 189.876456][T10669] Tainted: [W]=WARN [ 189.880256][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.890419][T10669] Workqueue: loop2 loop_workfn [ 189.895300][T10669] ================================================================== [ 198.131406][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!