last executing test programs: 2m9.999514022s ago: executing program 32 (id=227): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0xc, 0x2, 0x0, 0x80000000000300, 0xc, 0x0, 0xffffffffffffff04, 0x8}, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={r1}) 2m2.147821139s ago: executing program 5 (id=392): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0xeb}}, {@noblock_validity}]}, 0x1, 0x511, &(0x7f0000000a80)="$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") set_mempolicy_home_node(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a31000000002c000000020a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000faff000000000109000100"], 0xc8}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2m1.595595122s ago: executing program 5 (id=397): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x6, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 2m1.474175099s ago: executing program 5 (id=402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m1.297566699s ago: executing program 5 (id=407): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000680)={[{@nombcache}, {@jqfmt_vfsv0}, {@nojournal_checksum}, {@errors_remount}, {@usrjquota}, {@acl}]}, 0x1, 0x4e4, &(0x7f0000001c40)="$eJzs3M9vVNUeAPDvnXbaAo/3+hBREKWAxsbElhYUFm4wMXGhiREXsGzaQioFDO1CCJGSGFyTuDcujTtN3OrSuPIPwIWJJoaEGDaAqzF35t7p/GxnoD8o8/kk055z77n3nHPvOXfOvWdmAuhZI+mfJOI/EXE7Iv5XidYnGKn8e3Dv2vTDe9emY6lUOvV3Uk53P41n8u12ZJHRQkTh86RhhxULV66en5qfn72cxccXL3wyvnDl6utzF6bOzZ6bvTh54sSxoxPH35x8o/tKtcgvrdf9fZ9d2r/33TO33p/uz5cPZf9r69FWf3fFGFlh3Svd7eqJt7MmnDQfp+sbWhg6NpQ162La/6/NHzqz2QUCNkypVCoNtl+9VGp0o2kJsGUlsdklADZH/kaf3v/mrw0aejwR7p6s3ACl9X6QvSpr+qOQpSk23N+upZGIOL30z1fpK+qeQ/xxsa824e/rVAAAoOf8dDIfCTaO/wqxpybdf7M5lOGI+H9E7IqIZyJid0Q8G1FO+1xEPN+YQRJRWiH/3Q3x5fy/z2YRCnceu5IrSMd/b2VzW/Xjv3z0F8N9WWxnRD5gnj2SHZPRKA6endsxO9Fm/wMRfSvlXzv+S19p/vlYMCvHnf6GB3QzU4tTj1zhBndvROzrb6x/0p+euHwaJ4mIvRGxr4v9DteE5177Zn81UqxPt3r9y0otpvS6no9rpfR1xKuV878Uded/Ocdk5fnJ8aGYnz0yfnZuvtwqmv3y680P2uW/av1/+LNxk3eO/3jqcatdlZ7/7TXtP/L52+X6DycRSXW+diGitGKLbnbzty/K+x053LzuUdv/QPJROTyQLft0anHx8kTEQPJe8/LJ5W3zeJ4+rf/o4db9f1e2TXokXoiItBG/GBEvRcSBrOwHI+JQRLSoWtXPb7/8cbt1I0Mdtf91k9Z/puX1r+78L8/XdxjIN06X9J0/ePthm4tHZ+f/WDk0mi1pff1L6i4RnZb08Y4eAAAAbA2FKH/2vzBWDRcKY2OVZ0C7Y3th/tLC4oGIuDhT+Y7AcBQL+ZOuyvPgYpLGJ7JnfsNxunz3PVmNV9YfzZ4bfxlRjo9NX5qf2ezKQ4/bUe7zSVP/T/3V5XNeYAtag3k0YItarf/vubVBBQE2XN7/jfeh99S8/y+1STLokzLwdHL/D72rVf+/Ht8OdLsNsLWU9GXoafo/9K7++LAaLn/tueW3bYGnkfd/6Endfq+/u0BpsPWqoWjxiwFD61OMbS3y2pRAOrJawx0WI6KzxNseJYt8CNj+Fx4K3e1wMJpX9UU5MNQ6r6SL33HIA+lRWTXxuT1r3vjz30RZ62bz3XI/LXZ4utcosOGXIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHXxbwAAAP//aizTCw==") socket$inet6(0xa, 0x2, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 2m1.128276489s ago: executing program 3 (id=411): pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x1, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x588402, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2m0.963801289s ago: executing program 5 (id=413): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = dup(0xffffffffffffffff) bind$unix(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1}}}}}}}, 0x0) 2m0.883321084s ago: executing program 3 (id=415): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) sendto$inet(r0, &(0x7f00000002c0)="abc7", 0x2, 0x4000805, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x2}], 0x1, 0x22, 0x0) 2m0.823861887s ago: executing program 3 (id=417): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000080)="ef", 0x1}], 0x1, &(0x7f0000000380)=ANY=[], 0x1e0}}], 0x1, 0x5d2dd0c54751f8e3) 2m0.779009749s ago: executing program 3 (id=419): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x10, 0x37eb, 0x683) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 2m0.675862625s ago: executing program 5 (id=421): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 2m0.675725585s ago: executing program 33 (id=421): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 2m0.675292715s ago: executing program 3 (id=423): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 2m0.609732829s ago: executing program 3 (id=426): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000340), 0x0}, 0x20) 1m48.709288822s ago: executing program 0 (id=658): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x1, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}], 0x18}, 0x40048d0) 1m48.645814126s ago: executing program 0 (id=662): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='io\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 1m48.562402841s ago: executing program 0 (id=675): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0x88}}, 0x0) 1m48.490065715s ago: executing program 0 (id=668): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1m48.426934319s ago: executing program 0 (id=669): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1m48.162500414s ago: executing program 0 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 1m48.162333374s ago: executing program 34 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 1m45.461481512s ago: executing program 35 (id=426): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000340), 0x0}, 0x20) 1m29.892059078s ago: executing program 8 (id=1047): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 1m29.766651846s ago: executing program 8 (id=1049): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) unshare(0x26020480) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r1, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r1}}, 0x1c) 1m29.593153216s ago: executing program 8 (id=1052): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 1m29.488345732s ago: executing program 8 (id=1053): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x24020400) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) 1m29.394624667s ago: executing program 8 (id=1057): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xc) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000001c0)=""/55, 0x37) getdents(r2, 0xfffffffffffffffd, 0x58) 1m28.710320697s ago: executing program 8 (id=1067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d0, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 1m28.687861169s ago: executing program 36 (id=1067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d0, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 43.504437848s ago: executing program 2 (id=2095): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x692bb, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1) 43.340083508s ago: executing program 2 (id=2098): gettid() timer_create(0x8, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 43.326997459s ago: executing program 2 (id=2099): sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x643e97b876294af) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x3, @broadcast, 'ip6gre0\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x8b78e000) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 43.190770067s ago: executing program 2 (id=2102): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000800)={[{@fat=@time_offset={'time_offset', 0x3d, 0x3bf}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@discard}, {@fat=@debug}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x2a5, &(0x7f0000000540)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000001900)=""/4079, 0xfef, 0x66) 43.061836794s ago: executing program 2 (id=2104): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 41.851036345s ago: executing program 2 (id=2123): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x4ffffff) r2 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r2, 0x15, 0x0) 41.810009657s ago: executing program 37 (id=2123): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x4ffffff) r2 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r2, 0x15, 0x0) 1.440132846s ago: executing program 4 (id=2954): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0xb}]}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 1.390460229s ago: executing program 4 (id=2955): r0 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0721, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffa, 0x83}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x62136, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x4}, 0x288, 0x0, 0x1000, 0x1, 0x7, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 1.320819593s ago: executing program 4 (id=2956): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x26004808) socket$inet_mptcp(0x2, 0x1, 0x106) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.290847265s ago: executing program 4 (id=2957): ptrace$getregset(0x4205, 0x0, 0x200, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0xb9ddd000) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 1.264931287s ago: executing program 9 (id=2958): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4608c6040d002000000000000003000300ff0000001500000038000000e601000009000000a700200003000700cf3107000000000007000000020000000e00000000040000000000000000000000800000040000000500000000800000d10b000007000000ff0f000002000000ff0300000900000003"], 0x98) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.245439738s ago: executing program 9 (id=2959): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000000080)=""/52) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.218983779s ago: executing program 9 (id=2960): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0xffffffffffffff99, 0x1b, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.19874055s ago: executing program 4 (id=2961): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x5c7, &(0x7f0000000000)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1.107452246s ago: executing program 9 (id=2962): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x40048c0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1.004962942s ago: executing program 4 (id=2966): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202326, @empty, 0x4000008}, 0x1c) r1 = dup(r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) 947.602235ms ago: executing program 7 (id=2968): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x7000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x1aca, 0x1f480, 0x0, 0x396}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x440e0}, 0x48010) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) io_uring_enter(r0, 0x3ab, 0x6933, 0x17, 0x0, 0x0) 883.290179ms ago: executing program 9 (id=2971): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x20002, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x0, {@ip4=@dev={0xac, 0x14, 0x14, 0x1a}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) 860.8835ms ago: executing program 6 (id=2972): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = inotify_init() ioperm(0x2, 0x9, 0x8) readv(r1, &(0x7f00000001c0), 0x55) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269ba, 0x8032, 0xffffffffffffffff, 0x99cef000) 802.363793ms ago: executing program 9 (id=2973): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x32}], 0x1, 0x122, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 801.078863ms ago: executing program 7 (id=2974): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) capset(0x0, &(0x7f0000000080)) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) 723.276278ms ago: executing program 6 (id=2975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8004) 690.30141ms ago: executing program 6 (id=2977): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000003c0), 0x10) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r1 = syz_io_uring_setup(0x5c4, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r1, 0x6e2, 0xc5e1, 0x40, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 597.508355ms ago: executing program 6 (id=2978): syz_io_uring_setup(0x49d, &(0x7f0000000080)={0x0, 0x79ae, 0x400, 0x0, 0x32f}, 0x0, 0x0) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 524.79067ms ago: executing program 6 (id=2979): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6745208e00103aff00000000000000000000ffb1"], 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 457.878593ms ago: executing program 7 (id=2981): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) 457.281533ms ago: executing program 6 (id=2982): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 378.394598ms ago: executing program 7 (id=2983): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 378.011978ms ago: executing program 1 (id=2984): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd75, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) 358.090359ms ago: executing program 7 (id=2985): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004004}, 0x8010) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 337.5292ms ago: executing program 1 (id=2986): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 301.539812ms ago: executing program 7 (id=2987): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) unshare(0x400) epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 241.685196ms ago: executing program 1 (id=2988): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x9}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) read(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x0, 0x0) 200.173588ms ago: executing program 1 (id=2989): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 71.257426ms ago: executing program 1 (id=2990): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x8cf, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f0000000100)) 0s ago: executing program 1 (id=2991): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000900)="a9", 0x1}], 0x1}}], 0x1, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Cannot create hsr debugfs directory [ 91.135352][ T6904] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.182480][ T6913] loop4: detected capacity change from 0 to 512 [ 91.196788][ T6904] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 91.238518][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 91.259236][ T6913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.268202][ T6904] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 91.276214][ T6904] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8042c018, mo2=0002] [ 91.288979][ T6904] EXT4-fs (loop7): orphan cleanup on readonly fs [ 91.307327][ T6904] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1102: Failed to acquire dquot type 1 [ 91.334602][ T6904] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1102: Invalid block bitmap block 0 in block_group 0 [ 91.352260][ T6904] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1102: Invalid block bitmap block 0 in block_group 0 [ 91.368925][ T6913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.405928][ T6904] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1102: Invalid block bitmap block 0 in block_group 0 [ 91.424920][ T6913] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.443103][ T6784] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 91.455409][ T6784] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 91.462958][ T6904] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1102: Failed to acquire dquot type 1 [ 91.474768][ T6904] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1102: Failed to acquire dquot type 1 [ 91.488655][ T6784] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 91.500189][ T6784] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 91.511877][ T6904] EXT4-fs (loop7): 1 orphan inode deleted [ 91.519201][ T6904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.573732][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.587078][ T6784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.633246][ T6784] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.666493][ T5405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.677598][ T4063] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.684712][ T4063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.708425][ T6953] netlink: 'syz.7.1110': attribute type 27 has an invalid length. [ 91.759877][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.767215][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.854952][ T6922] loop6: detected capacity change from 0 to 32768 [ 91.903216][ T6953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.911776][ T3305] loop6: p1 p2 p3 < p5 > [ 91.917097][ T3305] loop6: p1 size 242222080 extends beyond EOD, truncated [ 91.935421][ T3305] loop6: p2 start 16777215 is beyond EOD, truncated [ 91.945875][ T6953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.963972][ T6922] loop6: p1 p2 p3 < p5 > [ 91.975448][ T6922] loop6: p1 size 242222080 extends beyond EOD, truncated [ 92.011280][ T6922] loop6: p2 start 16777215 is beyond EOD, truncated [ 92.151325][ T4063] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.158485][ T4063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.171487][ T6975] loop4: detected capacity change from 0 to 512 [ 92.211917][ T6975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.285253][ T6960] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.299659][ T3731] udevd[3731]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 92.299975][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 92.328721][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 92.356201][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.373593][ T6960] net_ratelimit: 48 callbacks suppressed [ 92.373607][ T6960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.403786][ T4071] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.440262][ T4071] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.480732][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 92.488257][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 92.490860][ T4071] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.550777][ T4071] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.644847][ T6784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.728665][ T7005] loop6: detected capacity change from 0 to 512 [ 92.778167][ T7005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.796649][ T7005] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.968134][ T4640] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.173374][ T6784] veth0_vlan: entered promiscuous mode [ 93.198963][ T6784] veth1_vlan: entered promiscuous mode [ 93.239930][ T6784] veth0_macvtap: entered promiscuous mode [ 93.259706][ T6784] veth1_macvtap: entered promiscuous mode [ 93.292272][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.319278][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.345213][ T4071] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.354043][ T4073] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.365927][ T4073] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.374774][ T4073] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.402671][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 93.402693][ T29] audit: type=1326 audit(1769867973.053:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7068 comm="syz.6.1135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x0 [ 93.726136][ T7084] loop9: detected capacity change from 0 to 512 [ 93.732621][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 93.741653][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 93.751629][ T7084] EXT4-fs: inline encryption not supported [ 93.798085][ T7084] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.813459][ T7084] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.833931][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 93.847816][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 93.887361][ T6784] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.110300][ T29] audit: type=1400 audit(1769867973.763:1298): avc: denied { bind } for pid=7118 comm="syz.7.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.130655][ T29] audit: type=1400 audit(1769867973.783:1299): avc: denied { listen } for pid=7118 comm="syz.7.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.150367][ T29] audit: type=1400 audit(1769867973.783:1300): avc: denied { accept } for pid=7118 comm="syz.7.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.333902][ T7133] netlink: 'syz.9.1157': attribute type 27 has an invalid length. [ 94.342426][ T4064] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.372937][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.380289][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.421912][ T7133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.433227][ T7133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.499826][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.518164][ T7135] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.538199][ T7135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.554068][ T4071] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.564950][ T4071] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.573883][ T4071] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.601744][ T29] audit: type=1326 audit(1769867974.253:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7136 comm="syz.2.1159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x0 [ 94.624823][ T4071] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.997420][ T7151] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1165'. [ 95.079221][ T29] audit: type=1400 audit(1769867974.733:1302): avc: denied { read } for pid=7157 comm="syz.7.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.254086][ T7173] netlink: 'syz.7.1174': attribute type 1 has an invalid length. [ 95.262070][ T7173] netlink: 'syz.7.1174': attribute type 4 has an invalid length. [ 95.269923][ T7173] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1174'. [ 95.480742][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 95.496764][ T7198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.512949][ T7198] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 95.556029][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 95.639806][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1186'. [ 95.648952][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1186'. [ 95.924133][ T7227] geneve0: entered promiscuous mode [ 95.929456][ T7227] geneve0: entered allmulticast mode [ 96.008665][ T29] audit: type=1400 audit(1769867975.663:1303): avc: denied { getopt } for pid=7217 comm="syz.9.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.049752][ T4063] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.069316][ T4063] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.096200][ T4063] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.112983][ T7238] netlink: 'syz.4.1199': attribute type 3 has an invalid length. [ 96.125121][ T4063] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.143052][ T7238] netlink: 'syz.4.1199': attribute type 3 has an invalid length. [ 96.368199][ T29] audit: type=1400 audit(1769867976.023:1304): avc: denied { append } for pid=7257 comm="syz.4.1207" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.392125][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.395294][ T7134] Bluetooth: hci0: command 0x1003 tx timeout [ 96.505185][ T7264] netlink: 'syz.4.1209': attribute type 4 has an invalid length. [ 96.524920][ T7264] netlink: 'syz.4.1209': attribute type 4 has an invalid length. [ 97.114878][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.140645][ T7303] loop2: detected capacity change from 0 to 512 [ 97.177262][ T7303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.193490][ T7303] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.242009][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.588876][ T29] audit: type=1400 audit(1769867977.223:1305): avc: denied { ioctl } for pid=7318 comm="syz.6.1233" path="socket:[18154]" dev="sockfs" ino=18154 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.646132][ T7322] loop9: detected capacity change from 0 to 1024 [ 97.670985][ T7322] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.732562][ T7322] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: comm syz.9.1235: inode #1919248754: comm syz.9.1235: iget: illegal inode # [ 97.766389][ T7322] EXT4-fs (loop9): Remounting filesystem read-only [ 97.773087][ T7322] EXT4-fs warning (device loop9): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.9.1235: cleanup dec ref error -30 [ 97.786332][ T7322] EXT4-fs warning (device loop9): ext4_xattr_block_set:2200: inode #19: comm syz.9.1235: dec ref error=-30 [ 97.826111][ T6784] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.251747][ T7350] loop6: detected capacity change from 0 to 256 [ 98.471678][ T29] audit: type=1326 audit(1769867978.123:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.7.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a39bcaeb9 code=0x7ffc0000 [ 98.495272][ T29] audit: type=1326 audit(1769867978.123:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.7.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a39bcaeb9 code=0x7ffc0000 [ 98.531382][ T7382] policy can only be matched on NF_INET_PRE_ROUTING [ 98.531401][ T7382] unable to load match [ 98.543201][ T29] audit: type=1326 audit(1769867978.183:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.7.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8a39bcaeb9 code=0x7ffc0000 [ 98.566826][ T29] audit: type=1326 audit(1769867978.183:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.7.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a39bcaeb9 code=0x7ffc0000 [ 98.590653][ T29] audit: type=1326 audit(1769867978.183:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.7.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a39bcaeb9 code=0x7ffc0000 [ 98.614157][ T29] audit: type=1326 audit(1769867978.183:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.7.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f8a39bcaeb9 code=0x7ffc0000 [ 98.637691][ T29] audit: type=1326 audit(1769867978.183:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.7.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a39bcaeb9 code=0x7ffc0000 [ 98.661873][ T29] audit: type=1326 audit(1769867978.183:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.7.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a39bcaeb9 code=0x7ffc0000 [ 98.685399][ T29] audit: type=1326 audit(1769867978.183:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.7.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8a39bcaeb9 code=0x7ffc0000 [ 98.708926][ T29] audit: type=1326 audit(1769867978.183:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.7.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a39bcaeb9 code=0x7ffc0000 [ 98.994208][ T7405] loop9: detected capacity change from 0 to 1024 [ 99.034309][ T7405] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.045386][ T7405] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 99.070576][ T7405] JBD2: no valid journal superblock found [ 99.076500][ T7405] EXT4-fs (loop9): Could not load journal inode [ 99.155076][ T7405] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 99.392133][ T7432] uprobe: syz.2.1285:7432 failed to unregister, leaking uprobe [ 99.444576][ T7439] netlink: 'syz.2.1286': attribute type 6 has an invalid length. [ 99.452474][ T7439] __nla_validate_parse: 4 callbacks suppressed [ 99.452495][ T7439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1286'. [ 99.814737][ T7468] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1298'. [ 99.825879][ T7468] loop6: detected capacity change from 0 to 128 [ 99.896086][ T4063] kworker/u8:15: attempt to access beyond end of device [ 99.896086][ T4063] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 100.605145][ T7508] loop7: detected capacity change from 0 to 32768 [ 100.636287][ T3305] loop7: p1 p3 < p5 p6 > [ 100.640721][ T3305] loop7: partition table partially beyond EOD, truncated [ 100.702980][ T7508] loop7: p1 p3 < p5 p6 > [ 100.707622][ T7508] loop7: partition table partially beyond EOD, truncated [ 100.868341][ T3731] udevd[3731]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 100.868986][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 100.882382][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 100.892220][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 100.935619][ T3731] udevd[3731]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 100.947365][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 100.958930][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 100.959049][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 101.143138][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1331'. [ 101.152187][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1331'. [ 101.187318][ T7550] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1332'. [ 101.738239][ T7575] loop4: detected capacity change from 0 to 128 [ 101.749736][ T7575] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.779110][ T7575] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.843525][ T5784] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.451455][ T7613] netlink: 'syz.2.1357': attribute type 2 has an invalid length. [ 102.459334][ T7613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1357'. [ 102.632494][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 102.742183][ T7632] loop4: detected capacity change from 0 to 1024 [ 102.775680][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1368'. [ 102.786551][ T7632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.808610][ T7636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.816444][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.828350][ T7636] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 102.925466][ T7645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1369'. [ 103.528014][ T7679] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1383'. [ 103.606955][ T7683] loop6: detected capacity change from 0 to 2048 [ 103.627102][ T7683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.803392][ T4640] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.455582][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 104.455602][ T29] audit: type=1400 audit(1769867984.113:1381): avc: denied { name_bind } for pid=7758 comm="syz.9.1403" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 104.743541][ T29] audit: type=1326 audit(1769867984.393:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 104.767044][ T29] audit: type=1326 audit(1769867984.393:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 104.827829][ T29] audit: type=1326 audit(1769867984.393:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 104.851312][ T29] audit: type=1326 audit(1769867984.393:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 104.874847][ T29] audit: type=1326 audit(1769867984.393:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 104.918602][ T7776] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 105.714514][ T7816] syzkaller0: entered promiscuous mode [ 105.720172][ T7816] syzkaller0: entered allmulticast mode [ 105.794271][ T29] audit: type=1400 audit(1769867985.443:1387): avc: denied { unmount } for pid=7827 comm="syz.9.1428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 105.824487][ T29] audit: type=1400 audit(1769867985.473:1388): avc: denied { associate } for pid=7831 comm="syz.9.1428" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 105.898229][ T7833] tipc: Failed to remove unknown binding: 66,1,1/0:923877326/923877328 [ 105.906637][ T7833] tipc: Failed to remove unknown binding: 66,1,1/0:923877326/923877328 [ 106.013490][ T7841] __nla_validate_parse: 2 callbacks suppressed [ 106.013509][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'. [ 106.030426][ T7841] netlink: 'syz.4.1432': attribute type 1 has an invalid length. [ 106.560160][ T29] audit: type=1400 audit(1769867986.213:1389): avc: denied { create } for pid=7876 comm="syz.4.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.592788][ T29] audit: type=1400 audit(1769867986.233:1390): avc: denied { ioctl } for pid=7876 comm="syz.4.1443" path="socket:[20069]" dev="sockfs" ino=20069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.868611][ T7895] loop2: detected capacity change from 0 to 512 [ 106.910502][ T7895] journal_path: Non-blockdev passed as './bus' [ 106.916827][ T7895] EXT4-fs: error: could not find journal device path [ 107.033691][ T7908] loop7: detected capacity change from 0 to 512 [ 107.088202][ T7908] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.101080][ T7908] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.122509][ T7908] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #2: comm syz.7.1458: corrupted inode contents [ 107.161051][ T7908] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #2: comm syz.7.1458: mark_inode_dirty error [ 107.176160][ T7908] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #2: comm syz.7.1458: corrupted inode contents [ 107.189203][ T7908] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.1458: mark_inode_dirty error [ 107.241960][ T5405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.285766][ T7922] loop7: detected capacity change from 0 to 512 [ 107.327727][ T7922] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.354936][ T7922] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.420758][ T5405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.130692][ T7964] loop6: detected capacity change from 0 to 1024 [ 108.167264][ T7964] EXT4-fs: inline encryption not supported [ 108.183596][ T7964] EXT4-fs: Ignoring removed nobh option [ 108.189368][ T7964] EXT4-fs: Ignoring removed bh option [ 108.227875][ T7964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.279407][ T4640] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.396338][ T7975] netlink: 'syz.6.1481': attribute type 3 has an invalid length. [ 108.404129][ T7975] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1481'. [ 108.577892][ T7995] ipip1: entered promiscuous mode [ 108.584566][ T7997] netlink: 'syz.6.1493': attribute type 20 has an invalid length. [ 108.592515][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1493'. [ 108.607291][ T4055] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.616290][ T7997] netlink: 'syz.6.1493': attribute type 20 has an invalid length. [ 108.624152][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1493'. [ 108.647930][ T4055] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.657092][ T4055] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.666116][ T4055] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.732830][ T8007] loop2: detected capacity change from 0 to 2048 [ 108.760581][ T8007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.773033][ T8007] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.890210][ T8022] loop7: detected capacity change from 0 to 256 [ 108.921621][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1502'. [ 109.308643][ T4063] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:15: bg 0: block 345: padding at end of block bitmap is not set [ 109.345260][ T4063] EXT4-fs (loop2): Remounting filesystem read-only [ 109.452625][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.643460][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 109.643494][ T29] audit: type=1326 audit(1769867989.293:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 109.677456][ T8053] loop4: detected capacity change from 0 to 736 [ 109.693938][ T29] audit: type=1326 audit(1769867989.323:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 109.717415][ T29] audit: type=1326 audit(1769867989.323:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 109.741019][ T29] audit: type=1326 audit(1769867989.323:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 109.764539][ T29] audit: type=1326 audit(1769867989.323:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 109.777717][ T8053] iso9660: Unknown parameter 'såssion' [ 109.788100][ T29] audit: type=1326 audit(1769867989.323:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 109.817034][ T29] audit: type=1326 audit(1769867989.333:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 109.840499][ T29] audit: type=1326 audit(1769867989.333:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 109.864041][ T29] audit: type=1326 audit(1769867989.333:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 110.055754][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1521'. [ 110.370062][ T8100] loop7: detected capacity change from 0 to 1024 [ 110.417403][ T8100] ext4: Unknown parameter 'func' [ 110.477572][ T8106] netlink: 'syz.6.1537': attribute type 4 has an invalid length. [ 110.497546][ T8106] netlink: 'syz.6.1537': attribute type 4 has an invalid length. [ 110.758289][ T8124] loop2: detected capacity change from 0 to 256 [ 110.782480][ T8124] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 110.795662][ T8123] netlink: 7 bytes leftover after parsing attributes in process `syz.9.1545'. [ 110.862208][ T8127] loop7: detected capacity change from 0 to 736 [ 110.873594][ T8127] iso9660: Unknown parameter 'såssion' [ 111.539610][ T29] audit: type=1400 audit(1769867991.193:1412): avc: denied { write } for pid=8173 comm="syz.2.1556" name="file0" dev="tmpfs" ino=1815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.464881][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.968962][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 113.019701][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.725468][ T8321] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1589'. [ 113.965527][ T8338] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 114.192573][ T8343] loop4: detected capacity change from 0 to 8192 [ 114.246405][ T8364] all: renamed from bridge_slave_0 [ 114.257302][ T8343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 114.265249][ T8343] FAT-fs (loop4): Filesystem has been set read-only [ 114.271963][ T8343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 114.279919][ T8343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 114.300910][ T8343] syz.4.1599: attempt to access beyond end of device [ 114.300910][ T8343] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 114.314962][ T8343] Buffer I/O error on dev loop4, logical block 57847, async page read [ 114.323163][ T8343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 114.403454][ T8343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 114.411392][ T8343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 114.749029][ T8390] loop2: detected capacity change from 0 to 4096 [ 114.766047][ T8390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.821666][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.874693][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1620'. [ 114.885181][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1620'. [ 114.936819][ T8399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1621'. [ 114.998318][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 114.998336][ T29] audit: type=1326 audit(1769867994.653:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 115.028163][ T29] audit: type=1326 audit(1769867994.653:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 115.065306][ T29] audit: type=1326 audit(1769867994.703:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 115.088818][ T29] audit: type=1326 audit(1769867994.703:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 115.112454][ T29] audit: type=1326 audit(1769867994.703:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 115.136032][ T29] audit: type=1326 audit(1769867994.713:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 115.159405][ T29] audit: type=1326 audit(1769867994.723:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 115.186136][ T29] audit: type=1326 audit(1769867994.833:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 115.209791][ T29] audit: type=1326 audit(1769867994.833:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 115.408675][ T29] audit: type=1400 audit(1769867995.063:1441): avc: denied { mount } for pid=8421 comm="syz.6.1631" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 115.713254][ T8442] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 115.787512][ T8445] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 115.794093][ T8445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.801765][ T8445] vhci_hcd vhci_hcd.0: Device attached [ 115.823462][ T8445] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 115.830133][ T8445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.837727][ T8445] vhci_hcd vhci_hcd.0: Device attached [ 115.868237][ T8453] netlink: 'syz.9.1640': attribute type 3 has an invalid length. [ 115.876163][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1640'. [ 115.890937][ T8453] bond1: option miimon: invalid value (18446744073709551615) [ 115.898553][ T8453] bond1: option miimon: allowed values 0 - 2147483647 [ 115.906979][ T8453] bond1 (unregistering): Released all slaves [ 115.929146][ T8445] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 115.935767][ T8445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.943377][ T8445] vhci_hcd vhci_hcd.0: Device attached [ 115.987911][ T8459] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 115.994593][ T8459] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.002251][ T8459] vhci_hcd vhci_hcd.0: Device attached [ 116.044837][ T3396] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 116.054991][ T8445] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(9) [ 116.061568][ T8445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.069181][ T8445] vhci_hcd vhci_hcd.0: Device attached [ 116.095559][ T8445] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 116.118289][ T8445] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(15) [ 116.124964][ T8445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.132676][ T8445] vhci_hcd vhci_hcd.0: Device attached [ 116.143798][ T8471] loop2: detected capacity change from 0 to 512 [ 116.150778][ T8468] bridge_slave_1: left allmulticast mode [ 116.156490][ T8468] bridge_slave_1: left promiscuous mode [ 116.162232][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.183239][ T8446] vhci_hcd: connection reset by peer [ 116.186908][ T8467] vhci_hcd: connection closed [ 116.188664][ T8464] vhci_hcd: connection closed [ 116.188667][ T8460] vhci_hcd: connection closed [ 116.189008][ T8449] vhci_hcd: connection closed [ 116.193643][ T8456] vhci_hcd: connection closed [ 116.210873][ T4071] vhci_hcd vhci_hcd.4: stop threads [ 116.211792][ T8468] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 116.215661][ T4071] vhci_hcd vhci_hcd.4: release socket [ 116.235945][ T4071] vhci_hcd vhci_hcd.4: disconnect device [ 116.243627][ T4071] vhci_hcd vhci_hcd.4: stop threads [ 116.248950][ T4071] vhci_hcd vhci_hcd.4: release socket [ 116.254423][ T4071] vhci_hcd vhci_hcd.4: disconnect device [ 116.260915][ T4071] vhci_hcd vhci_hcd.4: stop threads [ 116.266357][ T4071] vhci_hcd vhci_hcd.4: release socket [ 116.271788][ T4071] vhci_hcd vhci_hcd.4: disconnect device [ 116.278262][ T4071] vhci_hcd vhci_hcd.4: stop threads [ 116.283543][ T4071] vhci_hcd vhci_hcd.4: release socket [ 116.289106][ T4071] vhci_hcd vhci_hcd.4: disconnect device [ 116.307852][ T4071] vhci_hcd vhci_hcd.4: stop threads [ 116.313144][ T4071] vhci_hcd vhci_hcd.4: release socket [ 116.318705][ T4071] vhci_hcd vhci_hcd.4: disconnect device [ 116.325302][ T4071] vhci_hcd vhci_hcd.4: stop threads [ 116.330553][ T4071] vhci_hcd vhci_hcd.4: release socket [ 116.336069][ T4071] vhci_hcd vhci_hcd.4: disconnect device [ 116.375729][ T8413] syz.7.1627 (8413) used greatest stack depth: 6400 bytes left [ 116.397939][ T8477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8477 comm=syz.2.1649 [ 116.419623][ T8477] netlink: 'syz.2.1649': attribute type 1 has an invalid length. [ 116.435672][ T8479] xt_hashlimit: size too large, truncated to 1048576 [ 116.480181][ T8477] bond3: (slave bridge1): making interface the new active one [ 116.513157][ T8477] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 116.851093][ T8522] rtc_cmos 00:00: Alarms can be up to one day in the future [ 116.981086][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 116.991677][ T8524] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 117.298711][ T802] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.306504][ T802] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.314300][ T802] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.322104][ T802] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.329456][ T802] rtc rtc0: __rtc_set_alarm: err=-22 [ 117.587758][ T8560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=8560 comm=syz.9.1682 [ 117.673136][ T4064] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x61 [ 117.882170][ T8600] netlink: 'syz.6.1698': attribute type 4 has an invalid length. [ 117.900006][ T8600] netlink: 'syz.6.1698': attribute type 4 has an invalid length. [ 118.054932][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1707'. [ 118.501126][ T8639] netlink: 'syz.6.1714': attribute type 4 has an invalid length. [ 118.647850][ T8656] netlink: 7 bytes leftover after parsing attributes in process `syz.9.1723'. [ 118.667906][ T8656] netlink: 7 bytes leftover after parsing attributes in process `syz.9.1723'. [ 118.817233][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1729'. [ 118.826412][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1729'. [ 118.895101][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1729'. [ 118.904043][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1729'. [ 119.390139][ T8713] loop4: detected capacity change from 0 to 1024 [ 119.409301][ T8713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.430497][ T8713] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 119.445697][ T8713] EXT4-fs (loop4): Remounting filesystem read-only [ 119.536447][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.648471][ T8731] loop2: detected capacity change from 0 to 128 [ 119.655491][ T8731] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 119.956158][ T8741] IPv6: sit1: Disabled Multicast RS [ 120.195352][ T8751] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1759'. [ 120.953132][ T8787] xt_hashlimit: max too large, truncated to 1048576 [ 121.020549][ T8787] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 121.081507][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 121.081527][ T29] audit: type=1326 audit(1769868000.733:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 121.115061][ T3396] usb 9-1: enqueue for inactive port 0 [ 121.121791][ T3396] usb 9-1: enqueue for inactive port 0 [ 121.141843][ T29] audit: type=1326 audit(1769868000.763:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 121.165601][ T29] audit: type=1326 audit(1769868000.763:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 121.189304][ T29] audit: type=1326 audit(1769868000.763:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 121.213059][ T29] audit: type=1326 audit(1769868000.763:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 121.215408][ T3396] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 121.242525][ T29] audit: type=1326 audit(1769868000.843:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bf4d8b78e code=0x7ffc0000 [ 121.262134][ T8813] geneve2: entered promiscuous mode [ 121.266867][ T29] audit: type=1326 audit(1769868000.843:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 121.266897][ T29] audit: type=1326 audit(1769868000.843:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 121.275838][ T4063] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 121.357042][ T29] audit: type=1326 audit(1769868000.993:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 121.380592][ T29] audit: type=1326 audit(1769868000.993:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 121.404290][ T4066] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 121.416983][ T4066] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 121.437767][ T4069] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 121.864095][ T8869] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1813'. [ 121.931217][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1807'. [ 122.967833][ T8911] mmap: syz.7.1826 (8911) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.043034][ T8916] loop2: detected capacity change from 0 to 128 [ 123.099477][ T8921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8921 comm=syz.2.1832 [ 123.113812][ T8921] netlink: 'syz.2.1832': attribute type 1 has an invalid length. [ 123.137124][ T8921] bond4: (slave bridge2): making interface the new active one [ 123.145349][ T8921] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 123.203247][ T8930] syz_tun: entered allmulticast mode [ 123.268897][ T8936] __nla_validate_parse: 2 callbacks suppressed [ 123.268938][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1838'. [ 123.422631][ T8958] loop2: detected capacity change from 0 to 256 [ 123.505744][ T8964] loop2: detected capacity change from 0 to 128 [ 123.554171][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'. [ 123.563199][ T8969] netlink: 'syz.4.1854': attribute type 8 has an invalid length. [ 123.574230][ T8969] geneve2: entered promiscuous mode [ 123.579682][ T8969] geneve2: entered allmulticast mode [ 123.606287][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1855'. [ 123.620543][ T4071] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.620598][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1855'. [ 123.642950][ T4071] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.668706][ T4071] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.681042][ T4071] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.820082][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1867'. [ 123.829199][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1867'. [ 123.912374][ T9006] loop2: detected capacity change from 0 to 128 [ 124.893638][ T9060] loop2: detected capacity change from 0 to 512 [ 124.900447][ T9060] EXT4-fs: Ignoring removed nobh option [ 124.915608][ T9060] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1888: iget: bad i_size value: 38620345925642 [ 124.929587][ T9060] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1888: couldn't read orphan inode 15 (err -117) [ 124.943212][ T9060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.055154][ T9060] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1888: bg 0: block 5: invalid block bitmap [ 125.068111][ T9060] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 16 with error 28 [ 125.080586][ T9060] EXT4-fs (loop2): This should not happen!! Data will be lost [ 125.080586][ T9060] [ 125.090285][ T9060] EXT4-fs (loop2): Total free blocks count 0 [ 125.096403][ T9060] EXT4-fs (loop2): Free/Dirty block details [ 125.102423][ T9060] EXT4-fs (loop2): free_blocks=0 [ 125.107475][ T9060] EXT4-fs (loop2): dirty_blocks=2480 [ 125.112790][ T9060] EXT4-fs (loop2): Block reservation details [ 125.118821][ T9060] EXT4-fs (loop2): i_reserved_data_blocks=2480 [ 125.125380][ T4064] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 12 with error 28 [ 126.151972][ T9097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1903'. [ 126.273632][ T9104] loop2: detected capacity change from 0 to 128 [ 126.289590][ T9104] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 126.300013][ T9104] FAT-fs (loop2): Filesystem has been set read-only [ 126.410194][ T9106] loop2: detected capacity change from 0 to 2048 [ 126.459572][ T3305] Alternate GPT is invalid, using primary GPT. [ 126.466527][ T3305] loop2: p2 p3 p7 [ 126.478870][ T9106] Alternate GPT is invalid, using primary GPT. [ 126.485378][ T9106] loop2: p2 p3 p7 [ 126.496735][ T9106] loop6: detected capacity change from 0 to 7 [ 126.505478][ T9106] loop6: [ 126.550984][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 126.552801][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 126.563613][ T3731] udevd[3731]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 126.609425][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 126.609446][ T29] audit: type=1400 audit(1769868006.263:1503): avc: denied { ioctl } for pid=9115 comm="syz.2.1911" path="socket:[23552]" dev="sockfs" ino=23552 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.671386][ T8977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.704425][ T29] audit: type=1326 audit(1769868006.353:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.2.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 126.728068][ T29] audit: type=1326 audit(1769868006.353:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.2.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 126.751786][ T29] audit: type=1326 audit(1769868006.353:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.2.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 126.775534][ T29] audit: type=1326 audit(1769868006.353:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.2.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 126.802881][ T29] audit: type=1326 audit(1769868006.353:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.2.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 126.826492][ T29] audit: type=1326 audit(1769868006.353:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.2.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 126.850030][ T29] audit: type=1326 audit(1769868006.353:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.2.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 126.873632][ T29] audit: type=1326 audit(1769868006.353:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.2.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 126.897205][ T29] audit: type=1326 audit(1769868006.353:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.2.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c6bcaeb9 code=0x7ffc0000 [ 127.175676][ T9157] VFS: Mount too revealing [ 127.220254][ T9160] xt_hashlimit: size too large, truncated to 1048576 [ 127.702722][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1940'. [ 127.719789][ T9185] 8021q: adding VLAN 0 to HW filter on device bond5 [ 127.735363][ T9185] bond5: option ad_select: unable to set because the bond device is up [ 127.946352][ T9197] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 128.158281][ T9210] loop4: detected capacity change from 0 to 128 [ 128.185209][ T9210] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 128.506604][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'. [ 128.515663][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1957'. [ 128.698997][ T9242] loop4: detected capacity change from 0 to 512 [ 128.737780][ T9242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.808684][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.083528][ T9268] sock: sock_timestamping_bind_phc: sock not bind to device [ 129.427670][ T9289] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1978'. [ 129.940566][ T9320] netlink: 'syz.2.1990': attribute type 12 has an invalid length. [ 129.948520][ T9320] netlink: 'syz.2.1990': attribute type 29 has an invalid length. [ 129.956406][ T9320] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1990'. [ 129.965674][ T9320] netlink: 'syz.2.1990': attribute type 2 has an invalid length. [ 129.973425][ T9320] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1990'. [ 130.675447][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2002'. [ 130.701839][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2002'. [ 131.172648][ T3491] IPVS: starting estimator thread 0... [ 131.264927][ T9372] IPVS: using max 2256 ests per chain, 112800 per kthread [ 131.361330][ T9383] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 131.639933][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 131.639951][ T29] audit: type=1326 audit(1769868011.293:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.9.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 131.718359][ T29] audit: type=1326 audit(1769868011.343:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.9.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 131.741939][ T29] audit: type=1326 audit(1769868011.343:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.9.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 131.765588][ T29] audit: type=1326 audit(1769868011.343:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.9.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 131.789050][ T29] audit: type=1326 audit(1769868011.343:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.9.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 131.813598][ T29] audit: type=1326 audit(1769868011.343:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.9.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 131.837081][ T29] audit: type=1326 audit(1769868011.343:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.9.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 131.860477][ T29] audit: type=1326 audit(1769868011.343:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.9.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 131.883938][ T29] audit: type=1326 audit(1769868011.343:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.9.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 131.907478][ T29] audit: type=1326 audit(1769868011.343:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.9.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fea9469ac22 code=0x7ffc0000 [ 131.975817][ T9427] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2037'. [ 131.993880][ T9427] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2037'. [ 132.218411][ T9445] netlink: 'syz.2.2044': attribute type 4 has an invalid length. [ 132.240201][ T9445] netlink: 'syz.2.2044': attribute type 4 has an invalid length. [ 132.319186][ T9454] loop2: detected capacity change from 0 to 512 [ 132.327861][ T9454] EXT4-fs: Ignoring removed i_version option [ 132.333983][ T9454] EXT4-fs: Ignoring removed bh option [ 132.370668][ T9454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.387305][ T9454] ext4 filesystem being mounted at /458/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.502300][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.806713][ T9478] gretap0: entered promiscuous mode [ 132.812827][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2056'. [ 132.821835][ T9478] gretap0: left promiscuous mode [ 133.557556][ T9516] bridge_slave_0: left allmulticast mode [ 133.563356][ T9516] bridge_slave_0: left promiscuous mode [ 133.569247][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.588151][ T9516] bridge_slave_1: left allmulticast mode [ 133.593901][ T9516] bridge_slave_1: left promiscuous mode [ 133.599806][ T9516] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.632582][ T9516] bond0: (slave bond_slave_0): Releasing backup interface [ 133.659773][ T9516] bond0: (slave bond_slave_1): Releasing backup interface [ 133.683937][ T9516] team0: Port device team_slave_0 removed [ 133.720863][ T9516] team0: Port device team_slave_1 removed [ 133.737363][ T9516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.744841][ T9516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.754136][ T9516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.761695][ T9516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.775983][ T9516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.023113][ T9552] ref_ctr_offset mismatch. inode: 0x567 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x989680 [ 134.435027][ T9606] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 134.673796][ T9630] __nla_validate_parse: 1 callbacks suppressed [ 134.673817][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2097'. [ 134.689262][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2097'. [ 134.842839][ T9646] netlink: 'syz.9.2101': attribute type 1 has an invalid length. [ 134.864582][ T9650] loop2: detected capacity change from 0 to 128 [ 135.002644][ T9646] bond1: (slave geneve2): making interface the new active one [ 135.052920][ T9646] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 135.065356][ T1817] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 135.108876][ T1817] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 135.128838][ T1817] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 135.217410][ T9688] netlink: 'syz.6.2107': attribute type 1 has an invalid length. [ 135.273808][ T9688] smc: adding net device bond0 with user defined pnetid SYZ2 [ 135.317533][ T1817] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 135.329434][ T9692] bond0: entered promiscuous mode [ 135.334549][ T9692] bond0: entered allmulticast mode [ 135.354994][ T9692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.139136][ T9725] all: renamed from veth0_macvtap [ 136.187405][ T9723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2121'. [ 136.198268][ T4065] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.208672][ T4065] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.237111][ T9723] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2121'. [ 136.280734][ T4065] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.291282][ T4065] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.389211][ T4065] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.399700][ T4065] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.471953][ T4065] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.482369][ T4065] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.643714][ T4065] bridge_slave_1: left allmulticast mode [ 136.649490][ T4065] bridge_slave_1: left promiscuous mode [ 136.655434][ T4065] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.675372][ T4065] bridge_slave_0: left allmulticast mode [ 136.681096][ T4065] bridge_slave_0: left promiscuous mode [ 136.686939][ T4065] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.116209][ T4065] bond3 (unregistering): (slave bridge1): Releasing active interface [ 137.174624][ T4065] bond4 (unregistering): (slave bridge2): Releasing active interface [ 137.235072][ T4065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.255866][ T4065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.277348][ T4065] bond0 (unregistering): Released all slaves [ 137.285596][ T4065] bond1 (unregistering): Released all slaves [ 137.318735][ T4065] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 137.355136][ T4065] bond2 (unregistering): Released all slaves [ 137.364658][ T4065] bond3 (unregistering): Released all slaves [ 137.390585][ T4065] bond4 (unregistering): Released all slaves [ 137.408313][ T4065] bond5 (unregistering): Released all slaves [ 137.557072][ T4065] hsr_slave_0: left promiscuous mode [ 137.573232][ T4065] hsr_slave_1: left promiscuous mode [ 137.583306][ T4065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.590823][ T4065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.617514][ T4065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.624983][ T4065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.638158][ T4065] veth1_macvtap: left promiscuous mode [ 137.646775][ T4065] veth0_macvtap: left promiscuous mode [ 137.657405][ T4065] veth1_vlan: left promiscuous mode [ 137.678384][ T4065] veth0_vlan: left promiscuous mode [ 137.917808][ T4062] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.926927][ T4062] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 137.936084][ T4062] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 137.945954][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2138'. [ 137.962258][ T4062] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.971586][ T4062] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 137.980860][ T4062] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 138.000717][ T4062] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.009724][ T4062] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 138.018873][ T4062] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 138.035755][ T4062] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.044734][ T4062] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 138.054129][ T4062] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 138.073484][ T9734] chnl_net:caif_netlink_parms(): no params data found [ 138.277432][ T9734] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.284579][ T9734] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.342171][ T9734] bridge_slave_0: entered allmulticast mode [ 138.385666][ T9734] bridge_slave_0: entered promiscuous mode [ 138.412950][ T9734] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.420166][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.428941][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2149'. [ 138.445396][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2149'. [ 138.454519][ T9734] bridge_slave_1: entered allmulticast mode [ 138.472502][ T9734] bridge_slave_1: entered promiscuous mode [ 138.493182][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 138.493200][ T29] audit: type=1326 audit(1769868018.143:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9836 comm="syz.9.2151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea9469aeb9 code=0x0 [ 138.501860][ T9734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.553377][ T9734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.581075][ T9734] team0: Port device team_slave_0 added [ 138.588327][ T9734] team0: Port device team_slave_1 added [ 138.616740][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.623759][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.649843][ T9734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.667076][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.674099][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.700099][ T9734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.754973][ T9734] hsr_slave_0: entered promiscuous mode [ 138.761299][ T9734] hsr_slave_1: entered promiscuous mode [ 138.767846][ T9734] debugfs: 'hsr0' already exists in 'hsr' [ 138.773624][ T9734] Cannot create hsr debugfs directory [ 139.044893][ T9734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.062181][ T9734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.080058][ T9734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.101640][ T9734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.201657][ T9734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.225402][ T9734] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.250372][ T4059] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.257558][ T4059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.294977][ T4066] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.302193][ T4066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.345768][ T29] audit: type=1400 audit(1769868019.003:1591): avc: denied { load_policy } for pid=9889 comm="syz.4.2159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 139.346069][ T9890] SELinux: failed to load policy [ 139.399607][ T9734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.420163][ T9898] wireguard0: entered promiscuous mode [ 139.425777][ T9898] wireguard0: entered allmulticast mode [ 139.576818][ T9734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.644233][ T9924] loop3: detected capacity change from 0 to 1 [ 139.795675][ T9734] veth0_vlan: entered promiscuous mode [ 139.838854][ T9734] veth1_vlan: entered promiscuous mode [ 139.916111][ T9734] veth0_macvtap: entered promiscuous mode [ 139.945495][ T9734] veth1_macvtap: entered promiscuous mode [ 139.960058][ T29] audit: type=1400 audit(1769868019.603:1592): avc: denied { firmware_load } for pid=9947 comm="syz.4.2173" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 139.999885][ T9954] ipip1: entered promiscuous mode [ 140.014257][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.032981][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.060813][ T4065] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.094095][ T4065] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.127768][ T4065] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.167139][ T4065] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.264682][ T9970] loop1: detected capacity change from 0 to 1024 [ 140.329632][ T9970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.431319][ T9985] sch_fq: defrate 7 ignored. [ 140.554443][ T9734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.645458][ T3423] kernel write not supported for file [eventfd] (pid: 3423 comm: kworker/1:3) [ 140.889555][ T29] audit: type=1400 audit(1769868020.543:1593): avc: denied { ioctl } for pid=10025 comm="syz.1.2190" path="socket:[28519]" dev="sockfs" ino=28519 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.264877][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.430631][T10087] loop1: detected capacity change from 0 to 1024 [ 141.448974][T10087] EXT4-fs: Ignoring removed bh option [ 141.454650][T10087] EXT4-fs: inline encryption not supported [ 141.464014][T10087] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 141.481858][T10087] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 141.495738][T10087] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.2204: lblock 2 mapped to illegal pblock 2 (length 1) [ 141.521938][T10087] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 141.550616][T10087] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.2204: lblock 0 mapped to illegal pblock 48 (length 1) [ 141.603366][ T29] audit: type=1400 audit(1769868021.243:1594): avc: denied { read } for pid=10102 comm="syz.7.2209" path="socket:[29240]" dev="sockfs" ino=29240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.627064][T10087] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 141.635976][T10087] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2204: Failed to acquire dquot type 0 [ 141.649353][T10087] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 141.662263][T10087] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.2204: mark_inode_dirty error [ 141.705331][T10087] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 141.748644][T10087] EXT4-fs (loop1): 1 orphan inode deleted [ 141.774475][T10087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.791172][ T1817] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.843226][ T1817] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 141.851852][ T1817] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 141.873994][ T29] audit: type=1400 audit(1769868021.523:1595): avc: denied { remount } for pid=10086 comm="syz.1.2204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 141.898623][T10087] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 141.995449][ T9734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.013318][ T9734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 142.036464][ T9734] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 142.060731][ T9734] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 142.259393][T10166] loop4: detected capacity change from 0 to 128 [ 143.197527][T10228] loop4: detected capacity change from 0 to 512 [ 143.205673][T10228] EXT4-fs: Ignoring removed orlov option [ 143.211375][T10228] EXT4-fs: Ignoring removed i_version option [ 143.217897][T10234] IPv6: addrconf: prefix option has invalid lifetime [ 143.271194][T10228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.338896][T10228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.355114][T10228] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.395213][T10228] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.2239: corrupted inode contents [ 143.407253][T10228] EXT4-fs (loop4): Remounting filesystem read-only [ 143.465502][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.503909][ T4059] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 143.637088][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2250'. [ 143.651778][T10269] bond1: Invalid ad_actor_system MAC address. [ 143.657964][T10269] bond1: option ad_actor_system: invalid value (4294967295) [ 143.667487][T10269] bond1 (unregistering): Released all slaves [ 143.795027][ T29] audit: type=1326 audit(1769868023.443:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 143.818727][ T29] audit: type=1326 audit(1769868023.443:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 143.865291][ T29] audit: type=1326 audit(1769868023.453:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 143.889024][ T29] audit: type=1326 audit(1769868023.453:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 143.912583][ T29] audit: type=1326 audit(1769868023.453:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 143.936113][ T29] audit: type=1326 audit(1769868023.473:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 143.959760][ T29] audit: type=1326 audit(1769868023.473:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 143.983343][ T29] audit: type=1326 audit(1769868023.473:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 144.007106][ T29] audit: type=1326 audit(1769868023.473:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 144.038060][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2257'. [ 144.106133][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2257'. [ 144.128227][T10309] netlink: 'syz.6.2259': attribute type 12 has an invalid length. [ 144.136258][T10309] netlink: 'syz.6.2259': attribute type 29 has an invalid length. [ 144.144143][T10309] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2259'. [ 144.153567][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2259'. [ 144.340184][ T3395] IPVS: starting estimator thread 0... [ 144.435896][T10326] IPVS: using max 2112 ests per chain, 105600 per kthread [ 144.465326][T10330] tipc: Started in network mode [ 144.470338][T10330] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 144.477679][T10330] tipc: Enabled bearer , priority 18 [ 144.497122][ T4062] IPVS: stop unused estimator thread 0... [ 144.507296][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 144.516318][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 144.645003][T10350] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 144.645003][T10350] The task syz.7.2274 (10350) triggered the difference, watch for misbehavior. [ 144.936392][ T4066] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 144.952546][T10369] loop4: detected capacity change from 0 to 128 [ 144.958041][ T4066] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 144.971042][T10369] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 144.979835][ T4059] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 144.990702][ T4059] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 145.001946][T10369] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.014501][T10369] ext2 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.029051][T10369] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.4.2285: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 145.062612][ T5784] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.119211][T10381] loop4: detected capacity change from 0 to 1024 [ 145.136517][T10381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 145.154921][T10381] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.179272][T10381] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.2287: lblock 3 mapped to illegal pblock 3 (length 3) [ 145.195339][T10381] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 145.207714][T10381] EXT4-fs (loop4): This should not happen!! Data will be lost [ 145.207714][T10381] [ 145.223578][T10381] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.2287: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 145.242273][T10381] EXT4-fs error (device loop4) in ext4_setattr:6035: Corrupt filesystem [ 145.254130][T10381] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2287: bg 0: block 112: padding at end of block bitmap is not set [ 145.269957][T10381] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 117 [ 145.282491][T10381] EXT4-fs (loop4): This should not happen!! Data will be lost [ 145.282491][T10381] [ 145.312385][ T4066] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:18: lblock 8 mapped to illegal pblock 8 (length 8) [ 145.350629][ T4066] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 145.363182][ T4066] EXT4-fs (loop4): This should not happen!! Data will be lost [ 145.363182][ T4066] [ 145.378088][ T4066] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 28 [ 145.390944][ T4066] EXT4-fs (loop4): This should not happen!! Data will be lost [ 145.390944][ T4066] [ 145.400668][ T4066] EXT4-fs (loop4): Total free blocks count 0 [ 145.604848][ T5963] tipc: Node number set to 10463914 [ 145.739529][T10407] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.746929][T10407] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.893489][T10407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.906174][T10407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.969406][ T4065] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.984993][ T4065] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.004106][ T4065] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.014187][ T4065] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.076208][T10421] loop1: detected capacity change from 0 to 128 [ 146.280690][T10434] loop1: detected capacity change from 0 to 128 [ 146.318092][T10437] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 146.547372][T10464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2321'. [ 146.623542][T10471] loop1: detected capacity change from 0 to 1024 [ 146.656201][T10471] EXT4-fs: inline encryption not supported [ 146.685804][T10471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.767587][ T9734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.434698][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2346'. [ 147.684459][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2355'. [ 148.105723][T10575] syzkaller1: entered promiscuous mode [ 148.111265][T10575] syzkaller1: entered allmulticast mode [ 148.141546][T10580] netlink: 'syz.6.2371': attribute type 29 has an invalid length. [ 148.153384][T10580] netlink: 'syz.6.2371': attribute type 29 has an invalid length. [ 148.163194][T10580] netlink: 'syz.6.2371': attribute type 32 has an invalid length. [ 148.316416][ T4059] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.326024][ T4059] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.339173][ T4059] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.370996][ T4059] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.506147][T10608] team1: entered promiscuous mode [ 148.511368][T10608] team1: entered allmulticast mode [ 148.518650][T10608] 8021q: adding VLAN 0 to HW filter on device team1 [ 148.666769][T10622] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.669641][T10620] __nla_validate_parse: 11 callbacks suppressed [ 148.669693][T10620] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2390'. [ 148.689513][T10622] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.697271][T10622] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.758724][T10622] infiniband syz2: set down [ 148.763387][T10622] infiniband syz2: added ip6_vti0 [ 148.768620][ T3395] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.781371][T10622] RDS/IB: syz2: added [ 148.785552][T10622] smc: adding ib device syz2 with port count 1 [ 148.791781][T10622] smc: ib device syz2 port 1 has no pnetid [ 148.798012][ T3395] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.805064][T10622] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.842565][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 148.851570][T10636] netlink: 'syz.4.2396': attribute type 5 has an invalid length. [ 148.859382][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2396'. [ 148.871062][T10636] geneve3: entered promiscuous mode [ 148.876375][T10636] geneve3: entered allmulticast mode [ 148.892299][ T4059] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 65535 - 0 [ 148.930869][ T4059] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 65535 - 0 [ 148.945517][ T4059] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 65535 - 0 [ 148.954368][ T4059] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 65535 - 0 [ 148.979552][T10622] ip6_vti0 speed is unknown, defaulting to 1000 [ 149.039900][T10622] ip6_vti0 speed is unknown, defaulting to 1000 [ 149.124547][T10622] ip6_vti0 speed is unknown, defaulting to 1000 [ 149.209102][T10622] ip6_vti0 speed is unknown, defaulting to 1000 [ 149.289784][T10657] loop4: detected capacity change from 0 to 128 [ 149.318211][T10657] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.337396][T10657] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.404994][ T4059] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.434374][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2406'. [ 149.448349][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2406'. [ 149.606408][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2413'. [ 149.818389][T10691] team0: Device gtp0 is of different type [ 149.886866][T10696] netlink: 'syz.6.2422': attribute type 15 has an invalid length. [ 149.894740][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2422'. [ 149.915097][T10696] netlink: 'syz.6.2422': attribute type 15 has an invalid length. [ 149.922980][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2422'. [ 149.990381][T10702] netlink: 'syz.1.2425': attribute type 9 has an invalid length. [ 149.998239][T10702] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.2425'. [ 150.044851][T10707] ref_ctr_offset mismatch. inode: 0x52a offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 150.081905][T10713] loop1: detected capacity change from 0 to 128 [ 150.146606][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 150.146625][ T29] audit: type=1326 audit(1769868029.793:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 150.176450][ T29] audit: type=1326 audit(1769868029.793:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 150.199994][ T29] audit: type=1326 audit(1769868029.793:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 150.223589][ T29] audit: type=1326 audit(1769868029.803:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 150.247210][ T29] audit: type=1326 audit(1769868029.803:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 150.270761][ T29] audit: type=1326 audit(1769868029.803:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 150.294397][ T29] audit: type=1326 audit(1769868029.803:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 150.318131][ T29] audit: type=1326 audit(1769868029.803:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 150.341796][ T29] audit: type=1326 audit(1769868029.803:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 150.365420][ T29] audit: type=1326 audit(1769868029.803:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.6.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 150.393737][T10731] loop4: detected capacity change from 0 to 128 [ 150.426024][T10731] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.438614][T10731] ext4 filesystem being mounted at /351/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.490887][ T5784] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.458817][T10795] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2458'. [ 151.866379][T10814] loop1: detected capacity change from 0 to 164 [ 151.902691][T10814] iso9660: Unknown parameter '‘ä ¥;F¼G•ìy]|Û¦¬.×ïÚ‘âó¼XˆòÛº»„ÒŸ<­åñmÅ‚¿ÀÜé¢kžESI85 Jv°' [ 152.065855][T10818] syz_tun: entered allmulticast mode [ 152.082409][T10817] syz_tun: left allmulticast mode [ 152.181802][T10829] ip6_vti0 speed is unknown, defaulting to 1000 [ 152.227311][T10836] geneve2: entered promiscuous mode [ 152.233441][ T4059] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.245490][ T4059] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.266660][ T4059] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.288508][ T4059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.472605][T10856] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 152.694258][T10884] netlink: 'syz.1.2498': attribute type 1 has an invalid length. [ 152.710543][T10884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.352388][T10914] loop1: detected capacity change from 0 to 512 [ 153.366719][T10914] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 153.378695][T10914] EXT4-fs (loop1): orphan cleanup on readonly fs [ 153.385993][T10914] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.403022][T10914] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 153.411174][T10914] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2510: corrupted inode contents [ 153.424077][T10914] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.2510: mark_inode_dirty error [ 153.436194][T10914] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2510: corrupted inode contents [ 153.450026][T10914] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2510: mark_inode_dirty error [ 153.461916][T10914] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2510: corrupted inode contents [ 153.474419][T10914] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 153.483556][T10914] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2510: corrupted inode contents [ 153.496195][T10914] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.2510: mark_inode_dirty error [ 153.509460][T10914] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 153.521085][T10914] EXT4-fs (loop1): 1 truncate cleaned up [ 153.527870][T10914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.575755][T10914] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 153.607103][ T9734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.903811][T10944] __nla_validate_parse: 4 callbacks suppressed [ 153.903836][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2518'. [ 153.919143][T10944] netlink: 'syz.6.2518': attribute type 30 has an invalid length. [ 154.044536][T10961] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2523'. [ 154.058129][T10961] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 154.071712][T10961] batman_adv: batadv0: Adding interface: ip6gretap1 [ 154.078382][T10961] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.114925][T10961] batman_adv: batadv0: Interface activated: ip6gretap1 [ 154.372313][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2537'. [ 155.057894][T11009] syzkaller0: entered allmulticast mode [ 155.063762][T11009] syzkaller0: entered promiscuous mode [ 155.071729][T11009] syzkaller0 (unregistering): left allmulticast mode [ 155.078669][T11009] syzkaller0 (unregistering): left promiscuous mode [ 155.222722][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 155.222742][ T29] audit: type=1400 audit(1769868290.871:1691): avc: denied { mount } for pid=11013 comm="syz.1.2549" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 155.699303][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2560'. [ 156.269672][ T29] audit: type=1400 audit(1769868291.921:1692): avc: denied { listen } for pid=11060 comm="syz.7.2564" lport=39255 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 156.794733][ T29] audit: type=1326 audit(1769868292.441:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11100 comm="syz.4.2572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x0 [ 156.917059][ T29] audit: type=1400 audit(1769868292.571:1694): avc: denied { read } for pid=11100 comm="syz.4.2572" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 156.940657][ T29] audit: type=1400 audit(1769868292.571:1695): avc: denied { open } for pid=11100 comm="syz.4.2572" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.400798][T11120] lo speed is unknown, defaulting to 1000 [ 157.407519][T11120] lo speed is unknown, defaulting to 1000 [ 157.413537][T11120] lo speed is unknown, defaulting to 1000 [ 157.421875][T11120] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.735507][T11120] infiniband «;”: RDMA CMA: cma_listen_on_dev, error -98 [ 157.775717][T11120] lo speed is unknown, defaulting to 1000 [ 157.782719][T11120] lo speed is unknown, defaulting to 1000 [ 157.797211][T11120] lo speed is unknown, defaulting to 1000 [ 157.823840][T11120] lo speed is unknown, defaulting to 1000 [ 157.836877][T11120] lo speed is unknown, defaulting to 1000 [ 157.867183][T11124] netlink: 'syz.4.2578': attribute type 1 has an invalid length. [ 157.875083][T11124] netlink: 'syz.4.2578': attribute type 2 has an invalid length. [ 158.127509][T11140] loop4: detected capacity change from 0 to 512 [ 158.150433][ T29] audit: type=1326 audit(1769868293.801:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.1.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a97caeb9 code=0x7ffc0000 [ 158.218431][ T29] audit: type=1326 audit(1769868293.831:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.1.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb3a97caeb9 code=0x7ffc0000 [ 158.242029][ T29] audit: type=1326 audit(1769868293.831:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.1.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a97caeb9 code=0x7ffc0000 [ 158.265629][ T29] audit: type=1326 audit(1769868293.831:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.1.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a97caeb9 code=0x7ffc0000 [ 158.289185][ T29] audit: type=1326 audit(1769868293.841:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.1.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fb3a97caeb9 code=0x7ffc0000 [ 158.330668][T11140] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #3: comm syz.4.2588: corrupted inode contents [ 158.348341][T11140] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #3: comm syz.4.2588: mark_inode_dirty error [ 158.370587][T11140] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #3: comm syz.4.2588: corrupted inode contents [ 158.417649][T11140] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.2588: mark_inode_dirty error [ 158.435670][T11140] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2588: Failed to acquire dquot type 0 [ 158.485521][T11140] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2588: corrupted inode contents [ 158.515198][T11140] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.2588: mark_inode_dirty error [ 158.546217][T11140] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2588: corrupted inode contents [ 158.584732][T11140] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2588: mark_inode_dirty error [ 158.604841][T11140] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2588: corrupted inode contents [ 158.617478][T11140] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 158.640030][T11140] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2588: corrupted inode contents [ 158.679069][T11140] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.2588: mark_inode_dirty error [ 158.711458][T11140] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 158.748633][T11140] EXT4-fs (loop4): 1 truncate cleaned up [ 158.770377][T11140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.800802][T11140] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.856791][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2598'. [ 158.868886][T11166] vlan2: entered promiscuous mode [ 158.873971][T11166] dummy0: entered promiscuous mode [ 158.955530][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.078229][T11174] netlink: 'syz.4.2602': attribute type 29 has an invalid length. [ 159.105179][T11174] netlink: 'syz.4.2602': attribute type 29 has an invalid length. [ 159.123568][T11174] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2602'. [ 159.132819][T11174] unsupported nla_type 58 [ 159.168971][T11177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2603'. [ 159.261985][T11175] io-wq is not configured for unbound workers [ 159.602834][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2612'. [ 159.674810][T11205] loop1: detected capacity change from 0 to 128 [ 159.715564][T11211] netlink: 'syz.6.2616': attribute type 10 has an invalid length. [ 159.751583][T11205] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.776542][T11205] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.830336][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2617'. [ 159.890080][ T9734] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.982708][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'. [ 160.159555][T11237] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2627'. [ 160.194741][T11240] loop4: detected capacity change from 0 to 128 [ 160.269653][ T3395] kernel read not supported for file bpf-prog (pid: 3395 comm: kworker/0:3) [ 160.316213][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 160.316228][ T29] audit: type=1326 audit(1769868295.971:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.9.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 160.368079][ T29] audit: type=1326 audit(1769868296.001:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.9.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 160.391718][ T29] audit: type=1326 audit(1769868296.001:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.9.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 160.415317][ T29] audit: type=1326 audit(1769868296.001:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.9.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 160.438780][ T29] audit: type=1326 audit(1769868296.001:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.9.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 160.462373][ T29] audit: type=1326 audit(1769868296.001:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.9.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 160.485979][ T29] audit: type=1326 audit(1769868296.001:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.9.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 160.509802][ T29] audit: type=1326 audit(1769868296.001:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.9.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 160.533336][ T29] audit: type=1326 audit(1769868296.001:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.9.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9469aeb9 code=0x7ffc0000 [ 160.636403][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2635'. [ 161.044939][ T29] audit: type=1400 audit(1769868296.691:1751): avc: denied { getopt } for pid=11276 comm="syz.9.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.505378][T11305] syzkaller1: entered promiscuous mode [ 161.510933][T11305] syzkaller1: entered allmulticast mode [ 161.704715][T11310] loop1: detected capacity change from 0 to 128 [ 161.712358][T11310] FAT-fs (loop1): bogus number of directory entries (390) [ 161.719602][T11310] FAT-fs (loop1): Can't find a valid FAT filesystem [ 161.804546][T11316] ip6_vti0 speed is unknown, defaulting to 1000 [ 161.882204][T11316] lo speed is unknown, defaulting to 1000 [ 161.928733][T11326] tipc: Started in network mode [ 161.933693][T11326] tipc: Node identity 4, cluster identity 4711 [ 161.939928][T11326] tipc: Node number set to 4 [ 162.095822][T11332] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 162.896188][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2679'. [ 162.997387][T11369] SELinux: Context system_u: is not valid (left unmapped). [ 163.045345][T11363] netlink: 'syz.6.2679': attribute type 1 has an invalid length. [ 163.126497][T11376] ip6_vti0 speed is unknown, defaulting to 1000 [ 163.269306][T11376] lo speed is unknown, defaulting to 1000 [ 163.788934][T11407] loop4: detected capacity change from 0 to 512 [ 163.827810][T11407] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 163.845000][T11407] EXT4-fs (loop4): orphan cleanup on readonly fs [ 163.852755][T11407] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2697: Failed to acquire dquot type 1 [ 163.889143][T11407] EXT4-fs (loop4): Remounting filesystem read-only [ 163.896178][T11413] syz_tun: entered allmulticast mode [ 163.902391][T11412] syz_tun: left allmulticast mode [ 163.905562][T11407] EXT4-fs (loop4): 1 truncate cleaned up [ 163.913525][ T4066] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 163.924114][ T4066] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 163.944490][ T4066] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 163.955334][T11407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 164.006499][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 164.692353][T11443] wireguard0: entered promiscuous mode [ 164.698890][T11443] wireguard0: entered allmulticast mode [ 165.015406][T11456] xt_hashlimit: size too large, truncated to 1048576 [ 165.369458][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 165.369475][ T29] audit: type=1400 audit(1769868301.021:1804): avc: denied { setopt } for pid=11471 comm="syz.6.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.812494][T11485] netlink: 'syz.9.2727': attribute type 4 has an invalid length. [ 165.827450][T11485] netlink: 'syz.9.2727': attribute type 4 has an invalid length. [ 165.850166][T11485] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 166.068551][T11494] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2731'. [ 166.209277][T11505] syz_tun: entered allmulticast mode [ 166.215697][T11503] syz_tun: left allmulticast mode [ 166.319603][ T29] audit: type=1326 audit(1769868301.971:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.6.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 166.344107][ T29] audit: type=1326 audit(1769868301.971:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.6.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 166.391707][ T29] audit: type=1326 audit(1769868302.021:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.6.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 166.416031][ T29] audit: type=1326 audit(1769868302.021:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.6.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 166.439604][ T29] audit: type=1326 audit(1769868302.021:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.6.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 166.463768][ T29] audit: type=1326 audit(1769868302.031:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.6.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 166.488119][ T29] audit: type=1326 audit(1769868302.031:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.6.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 166.511782][ T29] audit: type=1326 audit(1769868302.031:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.6.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 166.536110][ T29] audit: type=1326 audit(1769868302.031:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.6.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a6a72aeb9 code=0x7ffc0000 [ 166.544234][T11517] siw: device registration error -23 [ 166.572717][T11518] batman_adv: batadv0: Adding interface: dummy0 [ 166.579157][T11518] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 166.598843][T11518] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 166.732694][T11531] netlink: 'syz.1.2746': attribute type 29 has an invalid length. [ 166.742102][T11531] netlink: 'syz.1.2746': attribute type 29 has an invalid length. [ 166.751218][T11531] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2746'. [ 167.258796][T11576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.270059][T11576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.328273][T11576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.338732][T11576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.387346][T11576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.397832][T11576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.415972][T11582] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2768'. [ 167.444620][T11585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2769'. [ 167.461780][T11576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.472272][T11576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.511788][ T4066] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.520938][ T4066] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.532929][ T4066] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.541236][ T4066] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.559343][ T4059] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.567697][ T4059] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.580214][ T4059] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.588528][ T4059] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.877380][T11600] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 168.031963][T11615] netlink: 'syz.7.2782': attribute type 1 has an invalid length. [ 168.039914][T11615] netlink: 'syz.7.2782': attribute type 2 has an invalid length. [ 168.048061][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2782'. [ 168.072451][T11615] ip6_vti0 speed is unknown, defaulting to 1000 [ 168.113449][T11615] lo speed is unknown, defaulting to 1000 [ 168.283276][T11629] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2788'. [ 168.300777][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2789'. [ 168.322996][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2789'. [ 168.395429][T11637] ref_ctr_offset mismatch. inode: 0x6a6 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 168.733664][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2806'. [ 168.749620][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2806'. [ 169.266978][T11717] netlink: 'syz.1.2823': attribute type 4 has an invalid length. [ 169.283761][T11717] netlink: 'syz.1.2823': attribute type 4 has an invalid length. [ 169.326759][ T4062] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.336017][ T4062] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.354717][ T4062] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.363304][ T4062] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.399954][ T4062] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.408571][ T4062] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.427651][ T4062] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.436218][ T4062] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.051334][T11779] syzkaller0: entered promiscuous mode [ 170.057111][T11779] syzkaller0: entered allmulticast mode [ 170.398393][T11797] xt_hashlimit: max too large, truncated to 1048576 [ 171.083564][T11837] __nla_validate_parse: 6 callbacks suppressed [ 171.083587][T11837] netlink: 391 bytes leftover after parsing attributes in process `syz.6.2870'. [ 171.099636][T11837] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 171.107837][T11837] openvswitch: netlink: Message has 4 unknown bytes. [ 171.233259][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 171.233347][ T29] audit: type=1400 audit(1769868306.881:1853): avc: denied { read } for pid=11850 comm="syz.1.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 171.364243][T11868] netlink: 'syz.4.2884': attribute type 4 has an invalid length. [ 171.381859][T11862] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2882'. [ 171.425734][T11868] netlink: 'syz.4.2884': attribute type 4 has an invalid length. [ 171.883708][ T4071] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.892816][ T4071] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.901862][ T4071] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 65535 - 0 [ 171.972298][ T4071] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.981389][ T4071] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.990371][ T4071] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 65535 - 0 [ 172.020476][ T4071] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.029500][ T4071] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.038555][ T4071] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 65535 - 0 [ 172.078705][ T4071] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.087828][ T4071] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.096780][ T4071] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 65535 - 0 [ 172.145873][ T29] audit: type=1400 audit(1769868307.771:1854): avc: denied { execute } for pid=11911 comm="syz.4.2895" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=37622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 172.148063][T11914] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2896'. [ 172.397202][T11929] netlink: 'syz.7.2903': attribute type 4 has an invalid length. [ 172.878360][ T29] audit: type=1326 audit(1769868308.521:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.4.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 172.902948][ T29] audit: type=1326 audit(1769868308.531:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.4.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 172.927315][ T29] audit: type=1326 audit(1769868308.531:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.4.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 172.951119][ T29] audit: type=1326 audit(1769868308.531:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.4.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 172.975585][ T29] audit: type=1326 audit(1769868308.531:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.4.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 172.999147][ T29] audit: type=1326 audit(1769868308.531:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.4.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 173.023520][ T29] audit: type=1326 audit(1769868308.531:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.4.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 173.047997][ T29] audit: type=1326 audit(1769868308.531:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.4.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 173.182026][T11960] netlink: 'syz.7.2915': attribute type 4 has an invalid length. [ 173.220338][T11960] netlink: 'syz.7.2915': attribute type 4 has an invalid length. [ 173.230665][ T3403] lo speed is unknown, defaulting to 1000 [ 173.237313][ T3403] «;”: Port: 1 Link ACTIVE [ 173.268690][ T3403] lo speed is unknown, defaulting to 1000 [ 173.274611][ T3403] «;”: Port: 1 Link DOWN [ 174.469758][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2930'. [ 174.634236][T11997] netlink: 'syz.7.2931': attribute type 1 has an invalid length. [ 174.716294][T11997] bond1: entered promiscuous mode [ 174.780977][T11997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.862892][T11997] bond1: (slave bridge6): making interface the new active one [ 174.870518][T11997] bridge6: entered promiscuous mode [ 174.881562][T11997] bridge6: left promiscuous mode [ 175.552335][T12019] netlink: 'syz.9.2937': attribute type 83 has an invalid length. [ 176.169926][T12068] batadv_slave_1: entered promiscuous mode [ 176.190820][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2949'. [ 176.247455][T12068] bond0: (slave bridge_slave_1): Releasing backup interface [ 176.309161][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 176.309180][ T29] audit: type=1326 audit(1769868311.961:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 176.340372][ T29] audit: type=1326 audit(1769868311.971:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 176.364073][ T29] audit: type=1326 audit(1769868311.991:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 176.380870][T12060] batadv_slave_1: left promiscuous mode [ 176.387710][ T29] audit: type=1326 audit(1769868311.991:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 176.389429][ T29] audit: type=1326 audit(1769868311.991:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 176.441164][ T29] audit: type=1326 audit(1769868311.991:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 176.464804][ T29] audit: type=1326 audit(1769868311.991:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 176.488376][ T29] audit: type=1326 audit(1769868311.991:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 176.511993][ T29] audit: type=1326 audit(1769868311.991:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 176.535642][ T29] audit: type=1326 audit(1769868311.991:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4dcaeb9 code=0x7ffc0000 [ 176.833704][T12096] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2960'. [ 176.855920][T12096] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2960'. [ 176.891581][T12098] loop4: detected capacity change from 0 to 2048 [ 176.938291][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 176.957527][T12102] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2962'. [ 176.967213][T12098] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2961'. [ 176.994238][T12104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2965'. [ 177.006795][T12104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2965'. [ 177.086616][T12109] ip6tnl1: entered promiscuous mode [ 177.731169][T12156] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2986'. [ 177.762985][T12156] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2986'. [ 178.114950][T12150] ================================================================== [ 178.123098][T12150] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 178.131487][T12150] [ 178.133842][T12150] write to 0xffff88811b8af82c of 4 bytes by task 12147 on cpu 1: [ 178.142023][T12150] inode_update_timestamps+0x147/0x270 [ 178.147612][T12150] file_update_time_flags+0x269/0x300 [ 178.153034][T12150] file_update_time+0x17/0x20 [ 178.157760][T12150] shmem_file_write_iter+0x9c/0xf0 [ 178.163011][T12150] iter_file_splice_write+0x6bc/0xa80 [ 178.168424][T12150] direct_splice_actor+0x156/0x2a0 [ 178.173582][T12150] splice_direct_to_actor+0x311/0x670 [ 178.178994][T12150] do_splice_direct+0x119/0x1a0 [ 178.183885][T12150] do_sendfile+0x382/0x650 [ 178.188355][T12150] __x64_sys_sendfile64+0x105/0x150 [ 178.193604][T12150] x64_sys_call+0x2db1/0x3000 [ 178.198348][T12150] do_syscall_64+0xc0/0x2a0 [ 178.202906][T12150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.208842][T12150] [ 178.211202][T12150] read to 0xffff88811b8af82c of 4 bytes by task 12150 on cpu 0: [ 178.218858][T12150] atime_needs_update+0x2a8/0x3e0 [ 178.223932][T12150] touch_atime+0x4a/0x340 [ 178.228314][T12150] shmem_file_read_iter+0x477/0x540 [ 178.233566][T12150] copy_splice_read+0x471/0x6c0 [ 178.238477][T12150] splice_direct_to_actor+0x28f/0x670 [ 178.243884][T12150] do_splice_direct+0x119/0x1a0 [ 178.248767][T12150] do_sendfile+0x382/0x650 [ 178.253235][T12150] __x64_sys_sendfile64+0x105/0x150 [ 178.258485][T12150] x64_sys_call+0x2db1/0x3000 [ 178.263216][T12150] do_syscall_64+0xc0/0x2a0 [ 178.267787][T12150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.273717][T12150] [ 178.276085][T12150] value changed: 0x2d5f9ef7 -> 0x2df83578 [ 178.282087][T12150] [ 178.284449][T12150] Reported by Kernel Concurrency Sanitizer on: [ 178.290659][T12150] CPU: 0 UID: 0 PID: 12150 Comm: syz.6.2982 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.302069][T12150] Tainted: [W]=WARN [ 178.306004][T12150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.316099][T12150] ==================================================================