last executing test programs: 53.157141468s ago: executing program 2 (id=617): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x201c}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)) 53.105296492s ago: executing program 2 (id=618): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) prlimit64(0x0, 0x1, &(0x7f00000003c0)={0x7ff, 0xffff}, 0x0) 52.896162511s ago: executing program 2 (id=620): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 52.863519684s ago: executing program 2 (id=621): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==") socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x7, 0x4, 0x7) r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 51.111603119s ago: executing program 2 (id=634): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) prlimit64(0x0, 0x1, &(0x7f00000003c0)={0x7ff, 0xffff}, 0x0) 50.777254469s ago: executing program 2 (id=641): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x2d, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, r3, 0xc}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 50.703613256s ago: executing program 32 (id=641): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x2d, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, r3, 0xc}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 36.335244392s ago: executing program 5 (id=852): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 35.928482959s ago: executing program 5 (id=858): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000000)='!sefinu\x83H\xa3Minux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xb8\"Zm\x1c8\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\xe7\x8e\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x04', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/200, 0xc8, 0xe00000000000000, 0x0) 35.256660118s ago: executing program 5 (id=870): mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x123dc9b, 0x0, 0x5, 0x0, &(0x7f0000000240)) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) 35.256513088s ago: executing program 5 (id=871): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x24020400) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 35.207240312s ago: executing program 5 (id=875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 34.871528892s ago: executing program 5 (id=879): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x81, &(0x7f0000000000)={0xa, 0x7ff, 0x100, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x6b40, 0x3, 0x0, 0x8, 0x1, 0x4000006, 0x8, 0x8080}, 0x0, 0x0) 34.78705174s ago: executing program 33 (id=879): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x81, &(0x7f0000000000)={0xa, 0x7ff, 0x100, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x6b40, 0x3, 0x0, 0x8, 0x1, 0x4000006, 0x8, 0x8080}, 0x0, 0x0) 3.367047291s ago: executing program 3 (id=1321): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x81200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) 3.316629266s ago: executing program 0 (id=1323): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0x7) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 3.073762087s ago: executing program 3 (id=1325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.012601052s ago: executing program 0 (id=1326): r0 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.817840639s ago: executing program 3 (id=1327): r0 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0x5, 0x12, 0x0, 0x3, 0x0, 0xfffffffd, 0xe}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x100, 0x5, 0x0, 0x0) 2.686423251s ago: executing program 3 (id=1328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setfsuid(0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x4c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10004800}, 0x20000000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 2.272644388s ago: executing program 0 (id=1335): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010100}}}, @ip_retopts={{0x10, 0x110, 0xd}}], 0x30}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.786772041s ago: executing program 3 (id=1342): semget(0x3, 0x3, 0x200) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000101000000000001000000000000", @ANYRES32=r3], 0x20}}, 0x2000c004) 1.477139389s ago: executing program 1 (id=1345): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000400), &(0x7f0000000440)=r4}, 0x20) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) 1.404925565s ago: executing program 1 (id=1348): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000001c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e99", 0x26}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c", 0x65}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b4", 0x3a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb8", 0x70}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f", 0x13}, {&(0x7f0000000cc0)}, {&(0x7f0000000b80)="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", 0x135}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580), 0xf78501d970e10f11, 0x1000c095, 0x0, 0x0) 700.037508ms ago: executing program 0 (id=1353): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x81200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) 699.869078ms ago: executing program 6 (id=1354): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 699.737488ms ago: executing program 3 (id=1355): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8001) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000a00)="c7885a", 0x3) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x2}]}) 564.68518ms ago: executing program 4 (id=1357): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x48, &(0x7f0000000840)=ANY=[], 0x4, 0x289, &(0x7f0000001040)="$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") r0 = creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x6, 0x7f}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 552.617001ms ago: executing program 1 (id=1358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000440)="89ddee0c7cdab9b4b07380c988cafbe863cac505237fde57ed2720ed630e42937d31247dff82f1efe6c6a605bbc326bd66e2095a978733e27d418b", 0x3b}], 0x1) 507.775995ms ago: executing program 4 (id=1359): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x255012, 0x0) 438.097191ms ago: executing program 4 (id=1360): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 437.724161ms ago: executing program 1 (id=1361): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4, r2}, 0x10) 370.910657ms ago: executing program 4 (id=1363): socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xb, 0x0, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f97c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000004}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) 370.680957ms ago: executing program 6 (id=1364): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB=':'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0x99cf, 0x3, 0x0, 0x0) 365.330348ms ago: executing program 0 (id=1365): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200080}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r4}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 344.011769ms ago: executing program 6 (id=1366): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe00003a4, 0x0, "02823f6bd900000000000097efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 280.662305ms ago: executing program 1 (id=1367): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 252.659098ms ago: executing program 6 (id=1368): bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1000000004"], 0x48) syz_read_part_table(0x5cc, &(0x7f0000000000)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x11, "0300110000000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, &(0x7f0000000dc0)=""/4107, 0x100b) 214.386071ms ago: executing program 1 (id=1369): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 214.222921ms ago: executing program 4 (id=1370): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x322f7f2843671a4a}, 0xc1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x85, 0x30, 0x800, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x3}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 157.395576ms ago: executing program 6 (id=1371): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be004429fffe8000000001000000000000000000aaff020000000000000000000000000001"], 0xfdef) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) 67.534964ms ago: executing program 4 (id=1372): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x3814004, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7bb, &(0x7f0000000f80)="$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") r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r0) r2 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0x0, 0x37d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 56.741115ms ago: executing program 6 (id=1373): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) socket(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) unshare(0x20040400) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000003140100"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) 0s ago: executing program 0 (id=1374): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0xa, r2, 0x0, r0}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1000000, 0x4) kernel console output (not intermixed with test programs): s `syz.0.152'. [ 50.923849][ T28] audit: type=1400 audit(1771532237.077:173): avc: denied { read open } for pid=3909 comm="syz.2.150" path="/37/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.103621][ T28] audit: type=1400 audit(1771532237.077:174): avc: denied { write } for pid=3909 comm="syz.2.150" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.516411][ T3945] Zero length message leads to an empty skb [ 51.585487][ T3945] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.595097][ T3945] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.695817][ T3945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.708552][ T3945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.806874][ T623] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.827258][ T623] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.844611][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.854343][ T623] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.875349][ T623] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.949068][ T3965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.170'. [ 52.007109][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 52.020772][ T3972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'. [ 52.032612][ T3974] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.052858][ T3972] netlink: 3 bytes leftover after parsing attributes in process `syz.4.174'. [ 52.205036][ T3991] netlink: 'syz.4.182': attribute type 1 has an invalid length. [ 52.236285][ T3991] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 52.247029][ T3991] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 52.265695][ T3991] bond1: (slave ip6gre1): making interface the new active one [ 52.274818][ T3991] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 52.285578][ T3997] bond1: option fail_over_mac: unable to set because the bond device has slaves [ 52.495714][ T28] audit: type=1400 audit(1771532238.657:175): avc: denied { cmd } for pid=4013 comm="syz.3.191" path="socket:[7164]" dev="sockfs" ino=7164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.519646][ T28] audit: type=1400 audit(1771532238.657:176): avc: denied { setopt } for pid=4013 comm="syz.3.191" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.841875][ T4036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 52.852246][ T4036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 52.867612][ T4030] mmap: syz.0.195 (4030) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.012503][ T28] audit: type=1400 audit(1771532239.167:177): avc: denied { read } for pid=4040 comm="syz.0.199" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.035969][ T28] audit: type=1400 audit(1771532239.167:178): avc: denied { open } for pid=4040 comm="syz.0.199" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.063596][ T28] audit: type=1326 audit(1771532239.187:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3988 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8be22c629 code=0x7fc00000 [ 53.605462][ T28] audit: type=1400 audit(1771532239.767:180): avc: denied { mounton } for pid=4065 comm="syz.1.209" path="/proc/84/task" dev="proc" ino=7583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 53.679397][ T4073] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 53.680531][ T4070] pim6reg1: entered promiscuous mode [ 53.687765][ T4073] netlink: 'syz.1.211': attribute type 4 has an invalid length. [ 53.692834][ T4070] pim6reg1: entered allmulticast mode [ 53.701507][ T4073] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.211'. [ 53.722898][ T4073] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 53.733878][ T4073] netlink: 'syz.1.211': attribute type 4 has an invalid length. [ 53.743250][ T4073] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.211'. [ 53.797964][ T4081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 53.808550][ T4081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 53.913665][ T4091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.938935][ T4091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.134265][ T4091] SELinux: failed to load policy [ 54.354655][ T4118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.229'. [ 54.450732][ T4124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'. [ 54.478073][ T2284] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.487213][ T4124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'. [ 54.505826][ T2284] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.536649][ T2284] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.575218][ T2284] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.734878][ T4133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.235'. [ 54.834640][ T4133] IPv6: Can't replace route, no match found [ 55.058601][ T4146] netlink: 'syz.2.240': attribute type 1 has an invalid length. [ 55.346978][ T4162] loop0: detected capacity change from 0 to 512 [ 55.388863][ T4162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 55.420256][ T4162] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.569922][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 55.791275][ T4146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.896920][ T4175] netlink: 'syz.0.248': attribute type 4 has an invalid length. [ 55.925065][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 55.925083][ T28] audit: type=1400 audit(1771532242.087:197): avc: denied { shutdown } for pid=4176 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.962332][ T4178] netlink: 'syz.0.248': attribute type 4 has an invalid length. [ 55.990070][ T4146] syz.2.240 (4146) used greatest stack depth: 9864 bytes left [ 56.000001][ T28] audit: type=1400 audit(1771532242.107:198): avc: denied { getopt } for pid=4176 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.026003][ T28] audit: type=1400 audit(1771532242.107:199): avc: denied { connect } for pid=4176 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.046015][ T28] audit: type=1400 audit(1771532242.107:200): avc: denied { name_connect } for pid=4176 comm="syz.3.250" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 56.068748][ T28] audit: type=1400 audit(1771532242.117:201): avc: denied { write } for pid=4176 comm="syz.3.250" lport=60755 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 56.103696][ T28] audit: type=1400 audit(1771532242.117:202): avc: denied { getopt } for pid=4176 comm="syz.3.250" lport=60755 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 56.159362][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.168429][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.321627][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.342362][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.367194][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.382771][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.030956][ T4213] netlink: 'syz.2.262': attribute type 1 has an invalid length. [ 57.056244][ T4213] netlink: 'syz.2.262': attribute type 4 has an invalid length. [ 57.667851][ T28] audit: type=1400 audit(1771532243.827:203): avc: denied { relabelfrom } for pid=4220 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 57.726203][ T28] audit: type=1400 audit(1771532243.827:204): avc: denied { relabelto } for pid=4220 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 58.288809][ T4235] __nla_validate_parse: 5 callbacks suppressed [ 58.288825][ T4235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.271'. [ 58.340115][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 58.392387][ T28] audit: type=1400 audit(1771532244.547:205): avc: denied { mount } for pid=4242 comm="syz.2.274" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.480096][ T4246] syzkaller0: entered promiscuous mode [ 58.533602][ T4246] syzkaller0: entered allmulticast mode [ 58.690455][ T4255] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.278'. [ 58.756568][ T4257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.279'. [ 59.302833][ T28] audit: type=1326 audit(1771532245.457:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6473f6c629 code=0x7ffc0000 [ 59.780218][ T4301] netlink: 'syz.4.297': attribute type 1 has an invalid length. [ 59.793329][ T4301] netlink: 'syz.4.297': attribute type 2 has an invalid length. [ 59.831904][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 59.911349][ T4309] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.299'. [ 59.993588][ T4309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'. [ 60.276168][ T4326] loop4: detected capacity change from 0 to 128 [ 60.374897][ T4335] syz.4.306: attempt to access beyond end of device [ 60.374897][ T4335] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 60.408805][ T4335] syz.4.306: attempt to access beyond end of device [ 60.408805][ T4335] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 60.441329][ T4335] syz.4.306: attempt to access beyond end of device [ 60.441329][ T4335] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 60.457848][ T4337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.310'. [ 60.472980][ T4335] syz.4.306: attempt to access beyond end of device [ 60.472980][ T4335] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 60.487204][ T4335] syz.4.306: attempt to access beyond end of device [ 60.487204][ T4335] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 60.501020][ T4335] syz.4.306: attempt to access beyond end of device [ 60.501020][ T4335] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 60.538563][ T4335] syz.4.306: attempt to access beyond end of device [ 60.538563][ T4335] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 60.573649][ T4335] syz.4.306: attempt to access beyond end of device [ 60.573649][ T4335] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 60.593728][ T4335] syz.4.306: attempt to access beyond end of device [ 60.593728][ T4335] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 60.797074][ T4335] syz.4.306: attempt to access beyond end of device [ 60.797074][ T4335] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 60.964949][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 60.964969][ T28] audit: type=1400 audit(1771532247.117:234): avc: denied { ioctl } for pid=4342 comm="syz.1.313" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 61.243783][ T28] audit: type=1400 audit(1771532247.387:235): avc: denied { block_suspend } for pid=4352 comm="syz.0.318" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.281219][ T4356] loop0: detected capacity change from 0 to 512 [ 61.307185][ T4356] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.334445][ T4356] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 61.342733][ T4356] EXT4-fs (loop0): orphan cleanup on readonly fs [ 61.356974][ T4356] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.319: corrupted inode contents [ 61.416187][ T4356] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.416380][ T4356] EXT4-fs (loop0): Remounting filesystem read-only [ 61.425622][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 61.425644][ C1] EXT4-fs (loop0): initial error at time 1771532247: ext4_do_update_inode:5569: inode 16 [ 61.425692][ C1] EXT4-fs (loop0): last error at time 1771532247: ext4_do_update_inode:5569: inode 16 [ 61.623698][ T4356] EXT4-fs (loop0): 1 truncate cleaned up [ 61.723256][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.742835][ T12] Quota error (device loop0): write_blk: dquota write failed [ 61.764834][ T12] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 61.789390][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.818983][ T12] Quota error (device loop0): write_blk: dquota write failed [ 61.836877][ T12] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 61.863395][ T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 61.891186][ T12] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 61.910701][ T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 61.931497][ T4356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.016044][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.280240][ T28] audit: type=1400 audit(1771532248.437:236): avc: denied { mount } for pid=4372 comm="syz.3.324" name="/" dev="configfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 62.304150][ T4373] netlink: 'syz.4.325': attribute type 39 has an invalid length. [ 62.327530][ T4376] loop0: detected capacity change from 0 to 1024 [ 62.342825][ T28] audit: type=1400 audit(1771532248.467:237): avc: denied { search } for pid=4372 comm="syz.3.324" name="/" dev="configfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.354978][ T4376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.409874][ T4376] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 62.432308][ T4376] System zones: 0-1, 3-36 [ 62.444502][ T4376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.526594][ T4376] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.326: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 62.597238][ T4383] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.326: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 62.698090][ T4376] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.326: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 62.768418][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.917049][ T4396] -: renamed from syzkaller0 [ 62.993146][ T4399] netlink: 'syz.0.334': attribute type 1 has an invalid length. [ 63.286421][ T4399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.555273][ T4417] loop4: detected capacity change from 0 to 8192 [ 64.193917][ T4434] loop1: detected capacity change from 0 to 512 [ 64.224295][ T4434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 64.247820][ T4434] ext4 filesystem being mounted at /61/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.344497][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 64.389116][ T4432] loop2: detected capacity change from 0 to 32768 [ 64.584480][ T4445] netlink: 'syz.4.348': attribute type 1 has an invalid length. [ 64.686605][ T4448] netlink: 'syz.2.349': attribute type 39 has an invalid length. [ 64.887182][ T4445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.034981][ T4452] netlink: 'syz.4.350': attribute type 4 has an invalid length. [ 65.049880][ T4452] netlink: 'syz.4.350': attribute type 4 has an invalid length. [ 65.128036][ T4452] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.136395][ T4452] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.216199][ T4452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.237059][ T4452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.330000][ T58] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.369651][ T58] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.413589][ T58] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.432850][ T58] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.542705][ T4462] loop4: detected capacity change from 0 to 1024 [ 65.579957][ T4462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.611446][ T4462] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 65.623625][ T4462] System zones: 0-1, 3-36 [ 65.633592][ T4462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.671905][ T4463] loop0: detected capacity change from 0 to 8192 [ 65.690687][ T4462] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.354: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 65.794494][ T4462] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.354: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 65.875809][ T4468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.356'. [ 65.884909][ T4465] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.354: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 65.908362][ T4468] IPv6: Can't replace route, no match found [ 65.938679][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.422070][ T4477] loop4: detected capacity change from 0 to 32768 [ 66.624871][ T10] IPVS: starting estimator thread 0... [ 66.626572][ T4485] IPVS: fo: FWM 3 0x00000003 - no destination available [ 66.630560][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 66.630603][ T28] audit: type=1400 audit(1771532252.787:243): avc: denied { setopt } for pid=4484 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.763644][ T4490] IPVS: using max 1920 ests per chain, 96000 per kthread [ 66.907846][ T28] audit: type=1400 audit(1771532253.067:244): avc: denied { mount } for pid=4500 comm="syz.3.377" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 67.065604][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 67.085189][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 67.757721][ T28] audit: type=1400 audit(1771532253.917:245): avc: denied { mount } for pid=4521 comm="syz.1.375" name="/" dev="ramfs" ino=8911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 67.923430][ T4527] loop1: detected capacity change from 0 to 128 [ 68.012636][ T4527] bio_check_eod: 40 callbacks suppressed [ 68.012654][ T4527] syz.1.379: attempt to access beyond end of device [ 68.012654][ T4527] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 68.032279][ T4527] syz.1.379: attempt to access beyond end of device [ 68.032279][ T4527] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 68.043031][ T4499] kexec: Could not allocate control_code_buffer [ 68.048328][ T4527] syz.1.379: attempt to access beyond end of device [ 68.048328][ T4527] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 68.067685][ T4527] syz.1.379: attempt to access beyond end of device [ 68.067685][ T4527] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 68.082440][ T4527] syz.1.379: attempt to access beyond end of device [ 68.082440][ T4527] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 68.103224][ T28] audit: type=1400 audit(1771532254.267:246): avc: denied { mounton } for pid=4528 comm="syz.2.380" path="/79/file0" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.127801][ T4527] syz.1.379: attempt to access beyond end of device [ 68.127801][ T4527] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 68.141837][ T4527] syz.1.379: attempt to access beyond end of device [ 68.141837][ T4527] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 68.173659][ T4527] syz.1.379: attempt to access beyond end of device [ 68.173659][ T4527] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 68.207538][ T4527] syz.1.379: attempt to access beyond end of device [ 68.207538][ T4527] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 68.244030][ T4527] syz.1.379: attempt to access beyond end of device [ 68.244030][ T4527] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 68.513066][ T4547] netlink: 'syz.4.386': attribute type 4 has an invalid length. [ 68.525055][ T4549] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 68.532898][ T4549] netlink: 'syz.1.385': attribute type 2 has an invalid length. [ 68.541458][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 68.552545][ T4547] netlink: 'syz.4.386': attribute type 4 has an invalid length. [ 68.804369][ T28] audit: type=1326 audit(1771532254.967:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4528 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8be22c629 code=0x7fc00000 [ 69.436944][ T4562] loop0: detected capacity change from 0 to 32768 [ 69.990653][ T4584] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 70.301282][ T4593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.333287][ T4584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.367080][ T4593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.454509][ T4594] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 70.524159][ T4599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.402'. [ 70.537633][ T4594] SELinux: failed to load policy [ 71.238726][ T28] audit: type=1400 audit(1771532257.397:248): avc: denied { listen } for pid=4611 comm="syz.4.410" lport=46165 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.315122][ T28] audit: type=1400 audit(1771532257.427:249): avc: denied { accept } for pid=4611 comm="syz.4.410" lport=46165 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.371193][ T28] audit: type=1400 audit(1771532257.427:250): avc: denied { setopt } for pid=4611 comm="syz.4.410" lport=46165 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 72.075619][ T4635] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 72.186507][ T4635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.321319][ T4647] loop4: detected capacity change from 0 to 512 [ 72.348844][ T4646] bridge_slave_1: left allmulticast mode [ 72.365980][ T4647] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.420: inode has both inline data and extents flags [ 72.368254][ T4646] bridge_slave_1: left promiscuous mode [ 72.385489][ T4646] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.452610][ T4647] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.452813][ T4647] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.420: couldn't read orphan inode 15 (err -117) [ 72.462731][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 72.462774][ C1] EXT4-fs (loop4): initial error at time 1771532258: ext4_orphan_get:1391: inode 15 [ 72.462799][ C1] EXT4-fs (loop4): last error at time 1771532258: ext4_orphan_get:1391: inode 15 [ 72.543919][ T4647] loop4: lost filesystem error report for type 5 error -117 [ 72.546416][ T4647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.593314][ T28] audit: type=1400 audit(1771532258.737:251): avc: denied { bind } for pid=4651 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.653852][ T28] audit: type=1400 audit(1771532258.737:252): avc: denied { listen } for pid=4651 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.707916][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.718034][ T28] audit: type=1400 audit(1771532258.737:253): avc: denied { connect } for pid=4651 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.740231][ T28] audit: type=1400 audit(1771532258.737:254): avc: denied { accept } for pid=4651 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.772172][ T28] audit: type=1400 audit(1771532258.737:255): avc: denied { write } for pid=4651 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.797784][ T4660] loop4: detected capacity change from 0 to 1024 [ 72.822999][ T28] audit: type=1400 audit(1771532258.737:256): avc: denied { read } for pid=4651 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.847894][ T28] audit: type=1400 audit(1771532258.807:257): avc: denied { append } for pid=4645 comm="syz.4.420" path="/82/file0/file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.849452][ T4662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.426'. [ 73.055029][ T4660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.068670][ T4660] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.121031][ T4665] loop0: detected capacity change from 0 to 2048 [ 73.158376][ T4665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.173654][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.389365][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.573695][ T28] audit: type=1400 audit(1771532259.727:258): avc: denied { mounton } for pid=4680 comm="syz.4.435" path="/file0" dev="ramfs" ino=9139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 73.639106][ T28] audit: type=1400 audit(1771532259.797:259): avc: denied { cpu } for pid=4684 comm="syz.4.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 73.747792][ T4690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.440'. [ 73.843939][ T28] audit: type=1400 audit(1771532259.997:260): avc: denied { execute } for pid=4695 comm="syz.3.443" path="/93/cpu.stat" dev="tmpfs" ino=497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.940400][ T4706] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 73.986460][ T4706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.038044][ T4706] bond2: (slave veth9): Enslaving as an active interface with a down link [ 74.057698][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 74.067185][ T4706] bond2: (slave batadv1): making interface the new active one [ 74.077125][ T4706] batadv1: entered promiscuous mode [ 74.082894][ T4706] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 74.166231][ T4725] loop1: detected capacity change from 0 to 164 [ 74.177990][ T4725] Unable to read rock-ridge attributes [ 74.253876][ T4725] Unable to read rock-ridge attributes [ 74.386531][ T4698] chnl_net:caif_netlink_parms(): no params data found [ 74.611732][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.637020][ T4698] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.644453][ T4698] bridge_slave_0: entered allmulticast mode [ 74.651198][ T4698] bridge_slave_0: entered promiscuous mode [ 74.659076][ T4698] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.666725][ T4698] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.674497][ T4698] bridge_slave_1: entered allmulticast mode [ 74.685124][ T4698] bridge_slave_1: entered promiscuous mode [ 74.734711][ T4698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.786434][ T4698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.844454][ T4698] team0: Port device team_slave_0 added [ 74.854999][ T4698] team0: Port device team_slave_1 added [ 74.886177][ T4767] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 74.899504][ T4698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.910683][ T4698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.958280][ T4698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.972520][ T4698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.980070][ T4698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.008788][ T4698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.027091][ T4767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.091806][ T4770] bond3: (slave veth5): Enslaving as an active interface with a down link [ 75.124334][ T4771] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 75.131827][ T4771] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 75.172496][ T4698] hsr_slave_0: entered promiscuous mode [ 75.179214][ T4698] hsr_slave_1: entered promiscuous mode [ 75.185402][ T4698] debugfs: 'hsr0' already exists in 'hsr' [ 75.191224][ T4698] Cannot create hsr debugfs directory [ 75.307491][ T4698] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.433380][ T4698] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.510179][ T4698] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.568828][ T4801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 75.618137][ T4698] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.947281][ T4698] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.986437][ T4698] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.002482][ T4698] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.026196][ T4698] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.155651][ T4698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.170534][ T4698] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.249450][ T623] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.256753][ T623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.292103][ T623] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.299795][ T623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.386233][ T4698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.405909][ T4698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.542615][ T4698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.639239][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 76.777001][ T4698] veth0_vlan: entered promiscuous mode [ 76.791557][ T4698] veth1_vlan: entered promiscuous mode [ 76.804957][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 76.857601][ T4698] veth0_macvtap: entered promiscuous mode [ 76.878343][ T4698] veth1_macvtap: entered promiscuous mode [ 76.917534][ T4698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.935799][ T4698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.944456][ T4872] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 76.983457][ T4872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.006273][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.015149][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.024279][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.033379][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.084363][ T4872] bond2: (slave veth9): Enslaving as an active interface with a down link [ 77.206995][ T4872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.244455][ T4872] bond2: (slave batadv0): making interface the new active one [ 77.270950][ T4872] batadv0: entered promiscuous mode [ 77.279231][ T4872] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 77.746508][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 77.746525][ T28] audit: type=1400 audit(1771532263.907:288): avc: denied { create } for pid=4929 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.798953][ T28] audit: type=1400 audit(1771532263.907:289): avc: denied { setopt } for pid=4929 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.844466][ T28] audit: type=1400 audit(1771532263.907:290): avc: denied { connect } for pid=4929 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.862757][ T4932] loop1: detected capacity change from 0 to 1024 [ 77.880429][ T4934] loop0: detected capacity change from 0 to 256 [ 77.924269][ T4932] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.934718][ T28] audit: type=1400 audit(1771532264.077:291): avc: denied { unmount } for pid=4936 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.973902][ T4932] EXT4-fs (loop1): 1 truncate cleaned up [ 78.008967][ T4932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.102581][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.606973][ T4967] hub 3-0:1.0: USB hub found [ 78.622281][ T4967] hub 3-0:1.0: 8 ports detected [ 79.156152][ T28] audit: type=1400 audit(1771532265.317:292): avc: denied { map } for pid=4979 comm="syz.2.542" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.327168][ T4987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.465722][ T4987] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.507613][ T4987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.697331][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 79.744779][ T5005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 79.790065][ T5009] loop2: detected capacity change from 0 to 1024 [ 79.807441][ T5009] EXT4-fs (loop2): orphan cleanup on readonly fs [ 79.819729][ T5009] EXT4-fs (loop2): 1 truncate cleaned up [ 79.856226][ T5009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.901256][ T4698] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.040995][ T28] audit: type=1400 audit(1771532266.197:293): avc: denied { name_connect } for pid=5021 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 80.287136][ T5043] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 80.320380][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.329239][ T28] audit: type=1400 audit(1771532266.497:294): avc: denied { bind } for pid=5045 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.357545][ T28] audit: type=1400 audit(1771532266.497:295): avc: denied { name_bind } for pid=5045 comm="syz.1.567" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 80.378741][ T28] audit: type=1400 audit(1771532266.497:296): avc: denied { node_bind } for pid=5045 comm="syz.1.567" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 80.441340][ T5061] loop1: detected capacity change from 0 to 128 [ 80.450559][ T5061] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 80.458718][ T5061] FAT-fs (loop1): Filesystem has been set read-only [ 80.470798][ T5061] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 80.614706][ T28] audit: type=1400 audit(1771532266.767:297): avc: denied { name_bind } for pid=5065 comm="syz.3.575" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.735173][ T5075] hub 3-0:1.0: USB hub found [ 80.740702][ T5075] hub 3-0:1.0: 8 ports detected [ 80.881464][ T5087] sd 0:0:1:0: device reset [ 80.932597][ T5092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.594'. [ 81.169727][ T5107] loop0: detected capacity change from 0 to 128 [ 81.441146][ T5104] loop4: detected capacity change from 0 to 512 [ 81.510227][ T5104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.525756][ T5104] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.618324][ T5117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.595'. [ 81.731360][ T3320] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 81.745455][ T3320] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 82.055092][ T5124] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.288947][ T12] bridge_slave_1: left allmulticast mode [ 82.294924][ T12] bridge_slave_1: left promiscuous mode [ 82.301287][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.309495][ T12] bridge_slave_0: left allmulticast mode [ 82.315346][ T12] bridge_slave_0: left promiscuous mode [ 82.321064][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.333710][ T12] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 82.353870][ T3820] Bluetooth: hci0: command 0x1003 tx timeout [ 82.360079][ T3503] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.457240][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.475366][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.502338][ T12] bond0 (unregistering): Released all slaves [ 82.511567][ T12] bond1 (unregistering): Released all slaves [ 82.521889][ T12] bond2 (unregistering): Released all slaves [ 82.538518][ T12] bond3 (unregistering): (slave veth5): Releasing active interface [ 82.564240][ T12] bond3 (unregistering): Released all slaves [ 82.619506][ T12] hsr_slave_0: left promiscuous mode [ 82.625909][ T12] hsr_slave_1: left promiscuous mode [ 82.631896][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.642102][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.772938][ T12] team0 (unregistering): Port device team_slave_1 removed [ 82.803900][ T12] team0 (unregistering): Port device team_slave_0 removed [ 82.839092][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 82.839112][ T28] audit: type=1400 audit(1771532268.997:307): avc: denied { add_name } for pid=5157 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.920201][ T28] audit: type=1400 audit(1771532268.997:308): avc: denied { create } for pid=5157 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.977652][ T5178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.608'. [ 83.006227][ T28] audit: type=1400 audit(1771532268.997:309): avc: denied { write } for pid=5157 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.041199][ T28] audit: type=1400 audit(1771532268.997:310): avc: denied { append } for pid=5157 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.070021][ T28] audit: type=1400 audit(1771532269.117:311): avc: denied { remove_name } for pid=5174 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.193751][ T28] audit: type=1400 audit(1771532269.117:312): avc: denied { unlink } for pid=5174 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.234990][ T28] audit: type=1400 audit(1771532269.157:313): avc: denied { bind } for pid=5181 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.260019][ T28] audit: type=1400 audit(1771532269.157:314): avc: denied { name_bind } for pid=5181 comm="syz.0.610" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 83.283623][ T28] audit: type=1400 audit(1771532269.157:315): avc: denied { node_bind } for pid=5181 comm="syz.0.610" saddr=172.20.20.34 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 83.336673][ T5144] chnl_net:caif_netlink_parms(): no params data found [ 83.352887][ T28] audit: type=1400 audit(1771532269.517:316): avc: denied { create } for pid=5199 comm="syz.1.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.468623][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.479025][ T5144] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.488382][ T5144] bridge_slave_0: entered allmulticast mode [ 83.496387][ T5144] bridge_slave_0: entered promiscuous mode [ 83.504210][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.512666][ T5144] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.520786][ T5144] bridge_slave_1: entered allmulticast mode [ 83.528994][ T5144] bridge_slave_1: entered promiscuous mode [ 83.555396][ T5144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.568001][ T5144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.590325][ T5144] team0: Port device team_slave_0 added [ 83.598576][ T5144] team0: Port device team_slave_1 added [ 83.617261][ T5144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.625086][ T5144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.673596][ T5144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.697534][ T5144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.705851][ T5144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.737518][ T5144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.801449][ T5144] hsr_slave_0: entered promiscuous mode [ 83.814323][ T5144] hsr_slave_1: entered promiscuous mode [ 83.839561][ T5144] debugfs: 'hsr0' already exists in 'hsr' [ 83.851456][ T5222] loop2: detected capacity change from 0 to 128 [ 83.878181][ T5144] Cannot create hsr debugfs directory [ 83.895965][ T5222] FAT-fs (loop2): bogus number of reserved sectors [ 83.902709][ T5222] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 83.928937][ T5222] FAT-fs (loop2): Can't find a valid FAT filesystem [ 84.341027][ T5144] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.366617][ T5144] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.385896][ T5144] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.406313][ T5144] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.501337][ T5144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.534114][ T5144] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.555733][ T2284] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.563176][ T2284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.619285][ T2284] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.630052][ T2284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.826596][ T5144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.848287][ T5259] loop2: detected capacity change from 0 to 512 [ 85.198224][ T5259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.231067][ T5259] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.283772][ T2284] batadv1: left promiscuous mode [ 85.610884][ T5144] veth0_vlan: entered promiscuous mode [ 85.657754][ T5344] process 'syz.3.624' launched '/dev/fd/3' with NULL argv: empty string added [ 85.696976][ T5144] veth1_vlan: entered promiscuous mode [ 85.732944][ T5144] veth0_macvtap: entered promiscuous mode [ 85.753701][ T5144] veth1_macvtap: entered promiscuous mode [ 85.782856][ T5144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.817076][ T5144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.913995][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.959582][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.992515][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.064036][ T4698] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 86.079680][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.089150][ T4698] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 86.214383][ T5373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 86.226168][ T5253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.383599][ T5386] sd 0:0:1:0: device reset [ 86.431046][ T2284] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.579657][ T2284] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.646773][ T2284] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.726416][ T2284] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.744216][ T5403] syzkaller1: entered promiscuous mode [ 86.755812][ T5403] syzkaller1: entered allmulticast mode [ 86.853322][ T2284] bridge_slave_1: left allmulticast mode [ 86.870446][ T2284] bridge_slave_1: left promiscuous mode [ 86.888251][ T2284] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.904699][ T2284] bridge_slave_0: left allmulticast mode [ 86.912855][ T2284] bridge_slave_0: left promiscuous mode [ 86.925733][ T2284] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.083316][ T2284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.094823][ T2284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.116150][ T2284] bond0 (unregistering): Released all slaves [ 87.173702][ T2284] hsr_slave_0: left promiscuous mode [ 87.199107][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.202970][ T2284] hsr_slave_1: left promiscuous mode [ 87.208535][ T5420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.234051][ T2284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.243806][ T5420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.254153][ T2284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.261776][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.273302][ T2284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.292402][ T2284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.316639][ T2284] veth1_macvtap: left promiscuous mode [ 87.327774][ T2284] veth0_macvtap: left promiscuous mode [ 87.345542][ T2284] veth1_vlan: left promiscuous mode [ 87.366377][ T2284] veth0_vlan: left promiscuous mode [ 87.381056][ T5427] fido_id[5427]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.478556][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 87.517901][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 87.674867][ T5445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'. [ 87.699118][ T5451] loop4: detected capacity change from 0 to 1024 [ 87.707612][ T5451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.730795][ T5451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.746721][ T2284] team0 (unregistering): Port device team_slave_1 removed [ 87.768752][ T2284] team0 (unregistering): Port device team_slave_0 removed [ 87.862996][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 87.863011][ T28] audit: type=1400 audit(1771532274.017:343): avc: denied { execute } for pid=5455 comm="syz.3.660" path="/147/net_prio.prioidx" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.042135][ T5396] chnl_net:caif_netlink_parms(): no params data found [ 88.070121][ T5144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.164832][ T28] audit: type=1400 audit(1771532274.277:344): avc: denied { create } for pid=5480 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.203584][ T28] audit: type=1400 audit(1771532274.277:345): avc: denied { create } for pid=5480 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.235519][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.273428][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.310545][ T5396] bridge_slave_0: entered allmulticast mode [ 88.334644][ T5396] bridge_slave_0: entered promiscuous mode [ 88.361907][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.373914][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.387426][ T28] audit: type=1400 audit(1771532274.547:346): avc: denied { cmd } for pid=5492 comm="syz.0.666" path="socket:[12902]" dev="sockfs" ino=12902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.421538][ T5396] bridge_slave_1: entered allmulticast mode [ 88.444733][ T5396] bridge_slave_1: entered promiscuous mode [ 88.548954][ T5396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.590843][ T5396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.658912][ T5396] team0: Port device team_slave_0 added [ 88.673920][ T5396] team0: Port device team_slave_1 added [ 88.743804][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.792512][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.821379][ T5396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.842937][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.851311][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.880437][ T5396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.989863][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 89.002662][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 89.049085][ T5396] hsr_slave_0: entered promiscuous mode [ 89.079840][ T5396] hsr_slave_1: entered promiscuous mode [ 89.115817][ T5396] debugfs: 'hsr0' already exists in 'hsr' [ 89.136303][ T5396] Cannot create hsr debugfs directory [ 89.274334][ T30] batadv0: left promiscuous mode [ 89.293705][ T28] audit: type=1400 audit(1771532275.427:347): avc: denied { mount } for pid=5526 comm="syz.4.673" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 89.486461][ T5537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.674'. [ 89.936109][ T28] audit: type=1400 audit(1771532276.097:348): avc: denied { create } for pid=5545 comm="syz.4.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.958191][ T5396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.978886][ T5396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.003028][ T5396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.030223][ T5396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.050381][ T28] audit: type=1400 audit(1771532276.207:349): avc: denied { bind } for pid=5545 comm="syz.4.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.101879][ T28] audit: type=1400 audit(1771532276.207:350): avc: denied { write } for pid=5545 comm="syz.4.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.137857][ T28] audit: type=1400 audit(1771532276.207:351): avc: denied { write } for pid=5545 comm="syz.4.676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.295613][ T5396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.341258][ T5396] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.362716][ T5571] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 90.373273][ T5584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.373502][ T5584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.397467][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.405644][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.424481][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.431774][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.564822][ T5599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'. [ 90.591593][ T5599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'. [ 90.598640][ T28] audit: type=1400 audit(1771532276.757:352): avc: denied { getopt } for pid=5602 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.603937][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 90.641784][ T5396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.187510][ T5642] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 91.303227][ T5645] loop0: detected capacity change from 0 to 512 [ 91.425140][ T5645] EXT4-fs (loop0): 1 orphan inode deleted [ 91.431831][ T5645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.445301][ T623] EXT4-fs error (device loop0): ext4_release_dquot:7039: comm kworker/u8:6: Failed to release dquot type 1 [ 91.452208][ T5396] veth0_vlan: entered promiscuous mode [ 91.467814][ T5645] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.473330][ T5396] veth1_vlan: entered promiscuous mode [ 91.531701][ T5396] veth0_macvtap: entered promiscuous mode [ 91.559537][ T5396] veth1_macvtap: entered promiscuous mode [ 91.587019][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.607983][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.631083][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.660492][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.682063][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.702950][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.713948][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.896206][ T5666] __nla_validate_parse: 2 callbacks suppressed [ 91.896221][ T5666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.705'. [ 91.911915][ T5666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.705'. [ 91.922171][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 91.932194][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 92.034170][ T5638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.708'. [ 93.167186][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 93.167214][ T28] audit: type=1400 audit(1771532279.327:358): avc: denied { ioctl } for pid=5695 comm="syz.1.717" path="socket:[13183]" dev="sockfs" ino=13183 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.211915][ T5699] IPv6: sit1: Disabled Multicast RS [ 93.352806][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 93.384262][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 93.468955][ T28] audit: type=1400 audit(1771532279.627:359): avc: denied { mount } for pid=5713 comm="syz.0.725" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 93.733293][ T5725] loop4: detected capacity change from 0 to 1024 [ 93.750299][ T5725] EXT4-fs: inline encryption not supported [ 93.798231][ T5725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.884144][ T5144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.292967][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 94.349910][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 94.468797][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 94.507603][ T5710] loop5: detected capacity change from 0 to 4096 [ 94.563583][ T5750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5750 comm=syz.4.738 [ 94.646479][ T5750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=5750 comm=syz.4.738 [ 94.656777][ T5710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.725784][ T28] audit: type=1400 audit(1771532280.887:360): avc: denied { create } for pid=5755 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.810648][ T28] audit: type=1400 audit(1771532280.917:361): avc: denied { setopt } for pid=5755 comm="syz.1.740" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.909057][ T5710] syz.5.723 (5710) used greatest stack depth: 9736 bytes left [ 94.930466][ T5761] IPv6: sit1: Disabled Multicast RS [ 94.956282][ T5396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.045297][ T28] audit: type=1400 audit(1771532281.207:362): avc: denied { connect } for pid=5765 comm="syz.5.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.103641][ T28] audit: type=1400 audit(1771532281.207:363): avc: denied { write } for pid=5765 comm="syz.5.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.224800][ T28] audit: type=1400 audit(1771532281.377:364): avc: denied { read } for pid=5768 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 95.692742][ T5791] xt_TPROXY: Can be used only with -p tcp or -p udp [ 95.994479][ T28] audit: type=1326 audit(1771532282.157:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a42e1c629 code=0x7ffc0000 [ 96.050508][ T28] audit: type=1326 audit(1771532282.187:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a42e1c629 code=0x7ffc0000 [ 96.099060][ T28] audit: type=1326 audit(1771532282.187:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2a42e1c629 code=0x7ffc0000 [ 96.242504][ T5805] loop5: detected capacity change from 0 to 512 [ 96.286825][ T5805] EXT4-fs (loop5): 1 orphan inode deleted [ 96.293349][ T5805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.306493][ T30] EXT4-fs error (device loop5): ext4_release_dquot:7039: comm kworker/u8:1: Failed to release dquot type 1 [ 96.321971][ T5805] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.446069][ T5396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.464369][ T5828] loop4: detected capacity change from 0 to 1024 [ 96.484766][ T5828] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 96.512333][ T5828] System zones: 0-1, 3-36 [ 96.544799][ T5828] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.768: bad orphan inode 134217728 [ 96.571629][ T5828] loop4: lost filesystem error report for type 5 error -117 [ 96.573541][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 96.588085][ C1] EXT4-fs (loop4): initial error at time 1771532282: ext4_orphan_get:1417 [ 96.596786][ C1] EXT4-fs (loop4): last error at time 1771532282: ext4_orphan_get:1417 [ 96.606886][ T5828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.988303][ T5144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.748236][ T5889] __nla_validate_parse: 7 callbacks suppressed [ 97.748251][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 97.784059][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 97.809177][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 97.910279][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 97.919363][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 98.274647][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 98.274665][ T28] audit: type=1400 audit(1771532284.427:411): avc: denied { ioctl } for pid=5917 comm="syz.4.803" path="socket:[15295]" dev="sockfs" ino=15295 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.461331][ T28] audit: type=1400 audit(1771532284.617:412): avc: denied { create } for pid=5933 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.639551][ T28] audit: type=1400 audit(1771532284.797:413): avc: denied { read } for pid=5941 comm="syz.1.814" laddr=172.20.20.170 lport=255 faddr=172.20.20.170 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.702798][ T28] audit: type=1400 audit(1771532284.797:414): avc: denied { shutdown } for pid=5941 comm="syz.1.814" laddr=172.20.20.170 lport=255 faddr=172.20.20.170 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.838861][ T5953] capability: warning: `syz.1.818' uses 32-bit capabilities (legacy support in use) [ 98.865307][ T28] audit: type=1400 audit(1771532285.017:415): avc: denied { mounton } for pid=5952 comm="syz.1.818" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.971238][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 99.363417][ T5991] netlink: 'syz.5.836': attribute type 22 has an invalid length. [ 99.371660][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.836'. [ 99.419057][ T5991] netlink: 'syz.5.836': attribute type 22 has an invalid length. [ 99.422200][ T30] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.436881][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.836'. [ 99.447323][ T30] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.462213][ T30] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.478203][ T30] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.574456][ T6000] loop5: detected capacity change from 0 to 512 [ 99.604857][ T6000] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 99.666198][ T6000] EXT4-fs (loop5): orphan cleanup on readonly fs [ 99.692629][ T6000] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 99.716828][ T6000] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 99.768431][ T6000] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 99.805131][ T6000] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.839: inode has both inline data and extents flags [ 99.819817][ T6000] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 99.822757][ T6000] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.839: couldn't read orphan inode 16 (err -117) [ 99.832164][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 99.832184][ C1] EXT4-fs (loop5): initial error at time 1771532285: ext4_orphan_get:1391: inode 16 [ 99.832233][ C1] EXT4-fs (loop5): last error at time 1771532285: ext4_orphan_get:1391: inode 16 [ 99.873410][ T6000] loop5: lost filesystem error report for type 5 error -117 [ 99.874482][ T6000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.833787][ T5396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.007466][ T6067] loop0: detected capacity change from 0 to 512 [ 101.014432][ T6067] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 101.028974][ T6069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.855'. [ 101.329982][ T28] audit: type=1400 audit(1771532287.487:416): avc: denied { create } for pid=6085 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.417301][ T28] audit: type=1400 audit(1771532287.517:417): avc: denied { setopt } for pid=6085 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.482634][ T28] audit: type=1400 audit(1771532287.547:418): avc: denied { bind } for pid=6085 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.652512][ T28] audit: type=1400 audit(1771532287.807:419): avc: denied { bind } for pid=6111 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.693089][ T6116] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 101.935403][ T6130] io-wq is not configured for unbound workers [ 101.962317][ T6104] loop4: detected capacity change from 0 to 1024 [ 102.048455][ T6104] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 102.070849][ T6104] System zones: 0-1, 3-8 [ 102.112344][ T6104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.146108][ T6104] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.235147][ T6152] netlink: 'syz.3.877': attribute type 1 has an invalid length. [ 102.250861][ T6104] EXT4-fs error (device loop4): ext4_free_blocks:6726: comm syz.4.864: Freeing blocks not in datazone - block = 0, count = 16 [ 102.301402][ T5144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.315338][ T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.332160][ T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.351144][ T6152] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 102.406573][ T6152] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 102.434380][ T6152] bond3: (slave vxcan3): making interface the new active one [ 102.442571][ T6152] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 102.470137][ T6158] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 102.502623][ T6158] bond3: (slave vxcan5): Enslaving as a backup interface with an up link [ 102.528583][ T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.540588][ T6169] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.549389][ T6169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.557082][ T6169] IPv6: NLM_F_CREATE should be set when creating new route [ 102.565294][ T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.634626][ T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.652513][ T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.739343][ T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.761162][ T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.784479][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 102.811238][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.892'. [ 102.842797][ T6202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.870107][ T6202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.973944][ T6163] chnl_net:caif_netlink_parms(): no params data found [ 102.997429][ T30] bridge_slave_1: left allmulticast mode [ 103.011158][ T30] bridge_slave_1: left promiscuous mode [ 103.029419][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.074571][ T30] bridge_slave_0: left allmulticast mode [ 103.080777][ T30] bridge_slave_0: left promiscuous mode [ 103.087794][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.197273][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.905'. [ 103.247071][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.258158][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.268239][ T30] bond0 (unregistering): Released all slaves [ 103.405843][ T30] hsr_slave_0: left promiscuous mode [ 103.429793][ T30] hsr_slave_1: left promiscuous mode [ 103.461960][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.490344][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.516071][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.516091][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.542139][ T30] veth1_macvtap: left promiscuous mode [ 103.542171][ T30] veth0_macvtap: left promiscuous mode [ 103.542325][ T30] veth1_vlan: left promiscuous mode [ 103.542429][ T30] veth0_vlan: left promiscuous mode [ 103.707700][ T30] team0 (unregistering): Port device team_slave_1 removed [ 103.725527][ T30] team0 (unregistering): Port device team_slave_0 removed [ 103.914405][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.921923][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.940032][ T6163] bridge_slave_0: entered allmulticast mode [ 103.957775][ T6163] bridge_slave_0: entered promiscuous mode [ 103.977149][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.993685][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.003122][ T6163] bridge_slave_1: entered allmulticast mode [ 104.010467][ T6163] bridge_slave_1: entered promiscuous mode [ 104.034843][ T6163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.045621][ T6163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.068316][ T6163] team0: Port device team_slave_0 added [ 104.084810][ T6163] team0: Port device team_slave_1 added [ 104.124530][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.141789][ T6282] loop4: detected capacity change from 0 to 512 [ 104.155295][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.220714][ T6282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.234235][ T6163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.247009][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.254421][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.283585][ T6163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.301561][ T6282] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.382881][ T6163] hsr_slave_0: entered promiscuous mode [ 104.401972][ T6163] hsr_slave_1: entered promiscuous mode [ 104.408956][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.915'. [ 104.419060][ T6163] debugfs: 'hsr0' already exists in 'hsr' [ 104.434004][ T6163] Cannot create hsr debugfs directory [ 104.443588][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.915'. [ 104.499460][ T5144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.585216][ T6314] loop4: detected capacity change from 0 to 256 [ 104.632055][ T6320] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.918'. [ 104.747442][ T6163] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 104.767211][ T6163] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 104.804003][ T6163] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 104.817969][ T6163] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 104.922446][ T6290] chnl_net:caif_netlink_parms(): no params data found [ 104.946705][ T6163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.988173][ T6163] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.012297][ T2284] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.019548][ T2284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.045759][ T2284] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.053036][ T2284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.101797][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.109192][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.116768][ T6290] bridge_slave_0: entered allmulticast mode [ 105.133783][ T6290] bridge_slave_0: entered promiscuous mode [ 105.148310][ T6163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.161243][ T6163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.182984][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.191394][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.198943][ T6290] bridge_slave_1: entered allmulticast mode [ 105.205530][ T6290] bridge_slave_1: entered promiscuous mode [ 105.225731][ T6290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.247198][ T6290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.288421][ T6290] team0: Port device team_slave_0 added [ 105.306632][ T6290] team0: Port device team_slave_1 added [ 105.344409][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.359324][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.393845][ T6290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.425736][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.434261][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.512010][ T6290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.604622][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 105.604636][ T28] audit: type=1326 audit(1771532291.767:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.3.924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f826e546417 code=0x0 [ 105.639720][ T6377] bridge_slave_0: left allmulticast mode [ 105.659543][ T6377] bridge_slave_0: left promiscuous mode [ 105.666146][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.676506][ T6377] bridge_slave_1: left allmulticast mode [ 105.682280][ T6377] bridge_slave_1: left promiscuous mode [ 105.688581][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.701100][ T6377] bond0: (slave bond_slave_0): Releasing backup interface [ 105.726238][ T6377] bond0: (slave bond_slave_1): Releasing backup interface [ 105.746746][ T6377] team0: Port device team_slave_0 removed [ 105.779052][ T6377] team0: Port device team_slave_1 removed [ 105.796878][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.814256][ T6377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.824698][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.835608][ T6377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.849544][ T6377] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.880368][ T6290] hsr_slave_0: entered promiscuous mode [ 105.890010][ T6290] hsr_slave_1: entered promiscuous mode [ 105.903107][ T6290] debugfs: 'hsr0' already exists in 'hsr' [ 105.919272][ T6290] Cannot create hsr debugfs directory [ 105.935371][ T6380] team0: Mode changed to "loadbalance" [ 105.961661][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.254995][ T6163] veth0_vlan: entered promiscuous mode [ 106.263562][ T6163] veth1_vlan: entered promiscuous mode [ 106.302834][ T6163] veth0_macvtap: entered promiscuous mode [ 106.323084][ T6290] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.345125][ T6290] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.366526][ T6163] veth1_macvtap: entered promiscuous mode [ 106.376731][ T6290] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.386704][ T6290] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.402287][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.435800][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.481028][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.502015][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.502033][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.935'. [ 106.521837][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.935'. [ 106.560698][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.603197][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.650169][ T28] audit: type=1400 audit(1771532292.807:449): avc: denied { mounton } for pid=6163 comm="syz-executor" path="/root/syzkaller.AqrdpT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 106.718986][ T6290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.758272][ T6290] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.775706][ T6415] Illegal XDP return value 474460193 on prog (id 149) dev syz_tun, expect packet loss! [ 106.796630][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.803968][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.847953][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.855248][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.093612][ T6290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.295596][ T6290] veth0_vlan: entered promiscuous mode [ 107.323160][ T6290] veth1_vlan: entered promiscuous mode [ 107.389878][ T6290] veth0_macvtap: entered promiscuous mode [ 107.416851][ T6290] veth1_macvtap: entered promiscuous mode [ 107.449324][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.480407][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.533751][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.544589][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.574053][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.583286][ T28] audit: type=1400 audit(1771532293.727:450): avc: denied { read write } for pid=6450 comm="syz.4.939" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 107.614050][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.633235][ T28] audit: type=1400 audit(1771532293.727:451): avc: denied { open } for pid=6450 comm="syz.4.939" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 107.812478][ T28] audit: type=1400 audit(1771532293.967:452): avc: denied { create } for pid=6456 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.851036][ T6459] loop0: detected capacity change from 0 to 512 [ 107.894572][ T6459] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 107.918284][ T28] audit: type=1400 audit(1771532293.967:453): avc: denied { write } for pid=6456 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.948866][ T6459] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.976735][ T6459] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 108.005935][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.013428][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.023629][ T6459] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 108.056467][ T6459] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 108.084037][ T6459] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.922: inode has both inline data and extents flags [ 108.107060][ T6459] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 108.107304][ T6459] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.922: couldn't read orphan inode 16 (err -117) [ 108.116636][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 108.116660][ C0] EXT4-fs (loop0): initial error at time 1771532294: ext4_orphan_get:1391: inode 16 [ 108.116701][ C0] EXT4-fs (loop0): last error at time 1771532294: ext4_orphan_get:1391: inode 16 [ 108.154131][ T6459] loop0: lost filesystem error report for type 5 error -117 [ 108.156025][ T6459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.196982][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.220644][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.292291][ T30] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.310512][ T30] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.329964][ T6468] loop6: detected capacity change from 0 to 512 [ 108.336912][ T30] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.358598][ T28] audit: type=1326 audit(1771532294.517:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.1.953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54d631c629 code=0x0 [ 108.387389][ T30] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.427845][ T6468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.528068][ T6468] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.739938][ T6484] loop4: detected capacity change from 0 to 512 [ 108.777023][ T6484] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 108.824817][ T6163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.837287][ T6484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 108.863970][ T6484] System zones: 1-12 [ 108.868271][ T6484] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.895868][ T6484] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.949: bg 0: block 361: padding at end of block bitmap is not set [ 108.952374][ T6484] loop4: lost filesystem error report for type 5 error -117 [ 108.952563][ T6484] EXT4-fs (loop4): Remounting filesystem read-only [ 108.960121][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 108.960141][ C0] EXT4-fs (loop4): initial error at time 1771532295: ext4_validate_block_bitmap:441 [ 108.960177][ C0] EXT4-fs (loop4): last error at time 1771532295: ext4_validate_block_bitmap:441 [ 109.001873][ T6290] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.016779][ T6484] EXT4-fs (loop4): 1 truncate cleaned up [ 109.023054][ T6484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 109.159195][ T6484] EXT4-fs (loop4): shut down requested (0) [ 109.168528][ T6484] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.949: error -117 reading directory block [ 109.182445][ T28] audit: type=1400 audit(1771532295.337:455): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 109.204556][ T28] audit: type=1400 audit(1771532295.337:456): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.242978][ T5144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 109.339238][ T6506] loop4: detected capacity change from 0 to 512 [ 109.384174][ T6506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.401664][ T6506] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.966316][ T6534] netlink: 'syz.0.968': attribute type 1 has an invalid length. [ 110.263459][ T6546] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.973'. [ 110.337661][ T36] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 110.354116][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 110.367392][ T36] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.367392][ T36] [ 110.389395][ T36] EXT4-fs (loop4): Total free blocks count 0 [ 110.397516][ T36] EXT4-fs (loop4): Free/Dirty block details [ 110.403685][ T36] EXT4-fs (loop4): free_blocks=65280 [ 110.409389][ T36] EXT4-fs (loop4): dirty_blocks=8058 [ 110.414940][ T36] EXT4-fs (loop4): Block reservation details [ 110.421150][ T36] EXT4-fs (loop4): i_reserved_data_blocks=8058 [ 110.463551][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 110.490619][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 110.564856][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 110.656320][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 110.656339][ T28] audit: type=1400 audit(1771532296.817:466): avc: denied { read } for pid=6567 comm="syz.1.982" name="file0" dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 110.718781][ T28] audit: type=1400 audit(1771532296.817:467): avc: denied { open } for pid=6567 comm="syz.1.982" path="/200/file0" dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 110.782544][ T28] audit: type=1400 audit(1771532296.937:468): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file0" dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 111.458252][ T6610] loop6: detected capacity change from 0 to 512 [ 111.484858][ T6610] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 111.518702][ T6610] EXT4-fs (loop6): orphan cleanup on readonly fs [ 111.526815][ T6610] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 111.538208][ T6610] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.554296][ T28] audit: type=1400 audit(1771532297.707:469): avc: denied { getopt } for pid=6615 comm="syz.1.999" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.574849][ T6610] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 111.599701][ T6610] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #16: comm syz.6.997: inode has both inline data and extents flags [ 111.626380][ T6618] SELinux: failed to load policy [ 111.643605][ T6610] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 111.643819][ T6610] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.997: couldn't read orphan inode 16 (err -117) [ 111.664784][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 111.664809][ C1] EXT4-fs (loop6): initial error at time 1771532297: ext4_orphan_get:1391: inode 16 [ 111.664859][ C1] EXT4-fs (loop6): last error at time 1771532297: ext4_orphan_get:1391: inode 16 [ 111.705438][ T6610] loop6: lost filesystem error report for type 5 error -117 [ 111.714469][ T6610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.891247][ T28] audit: type=1400 audit(1771532298.047:470): avc: denied { read } for pid=6632 comm="syz.4.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.000859][ T6640] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1008'. [ 112.226496][ T28] audit: type=1400 audit(1771532298.377:471): avc: denied { map } for pid=6650 comm="syz.0.1013" path="socket:[22824]" dev="sockfs" ino=22824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.290941][ T28] audit: type=1400 audit(1771532298.377:472): avc: denied { read } for pid=6650 comm="syz.0.1013" path="socket:[22824]" dev="sockfs" ino=22824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.555615][ T6163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.607942][ T6662] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1017'. [ 112.626872][ T6662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1017'. [ 112.707763][ T6669] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1019'. [ 112.789333][ T6679] netlink: 'syz.0.1024': attribute type 4 has an invalid length. [ 112.807984][ T6679] netlink: 'syz.0.1024': attribute type 4 has an invalid length. [ 112.844721][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.852044][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.914804][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.927287][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.952061][ T6689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1026'. [ 112.979364][ T30] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.993726][ T6691] raw_sendmsg: syz.3.1027 forgot to set AF_INET. Fix it! [ 113.004073][ T30] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.030687][ T30] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.043611][ T30] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.094250][ T6699] loop0: detected capacity change from 0 to 512 [ 113.124501][ T6699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.201691][ T28] audit: type=1400 audit(1771532299.357:473): avc: denied { bind } for pid=6704 comm="syz.6.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.221369][ T6699] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.787023][ T58] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.803001][ T58] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.837058][ T58] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.872774][ T58] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.970132][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1041'. [ 114.121959][ T50] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 114.153788][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 114.180072][ T50] EXT4-fs (loop0): This should not happen!! Data will be lost [ 114.180072][ T50] [ 114.199952][ T50] EXT4-fs (loop0): Total free blocks count 0 [ 114.212190][ T50] EXT4-fs (loop0): Free/Dirty block details [ 114.224452][ T50] EXT4-fs (loop0): free_blocks=65280 [ 114.233992][ T50] EXT4-fs (loop0): dirty_blocks=6292 [ 114.245617][ T50] EXT4-fs (loop0): Block reservation details [ 114.262098][ T50] EXT4-fs (loop0): i_reserved_data_blocks=6292 [ 114.295899][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 114.677742][ T28] audit: type=1400 audit(1771532300.827:474): avc: denied { getopt } for pid=6762 comm="syz.0.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.733409][ T6767] loop6: detected capacity change from 0 to 512 [ 114.752629][ T6767] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 114.774434][ T6767] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1049: bg 0: block 255: padding at end of block bitmap is not set [ 114.790662][ T6767] loop6: lost filesystem error report for type 5 error -117 [ 114.792822][ T6767] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 114.800832][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 114.800853][ C0] EXT4-fs (loop6): initial error at time 1771532300: ext4_validate_block_bitmap:441 [ 114.800873][ C0] EXT4-fs (loop6): last error at time 1771532300: ext4_validate_block_bitmap:441 [ 114.836358][ T6767] loop6: lost filesystem error report for type 5 error -117 [ 114.841778][ T6767] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1049: invalid indirect mapped block 1 (level 1) [ 114.862728][ T6767] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.863133][ T6767] EXT4-fs (loop6): 1 truncate cleaned up [ 114.878714][ T6767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.894779][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1049'. [ 114.940285][ T6163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.135618][ T6785] bridge_slave_0: left allmulticast mode [ 115.146534][ T6785] bridge_slave_0: left promiscuous mode [ 115.160304][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.234033][ T6785] bridge_slave_1: left allmulticast mode [ 115.240009][ T6785] bridge_slave_1: left promiscuous mode [ 115.263814][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.294012][ T6785] bond0: (slave bond_slave_0): Releasing backup interface [ 115.304044][ T6785] bond0: (slave bond_slave_1): Releasing backup interface [ 115.335597][ T6785] team0: Port device team_slave_0 removed [ 115.389797][ T6785] team0: Port device team_slave_1 removed [ 115.404050][ T6785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.432277][ T6785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.515004][ T6785] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.533868][ T6789] team0: Mode changed to "loadbalance" [ 115.679106][ T6798] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1062'. [ 115.690310][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1062'. [ 115.868703][ T28] audit: type=1326 audit(1771532302.027:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79f56c629 code=0x7ffc0000 [ 115.930408][ T28] audit: type=1326 audit(1771532302.027:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79f56c629 code=0x7ffc0000 [ 115.981818][ T28] audit: type=1326 audit(1771532302.027:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff79f56c629 code=0x7ffc0000 [ 116.036416][ T6822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1069'. [ 116.038113][ T28] audit: type=1326 audit(1771532302.027:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79f56c629 code=0x7ffc0000 [ 116.102650][ T28] audit: type=1326 audit(1771532302.027:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79f56c629 code=0x7ffc0000 [ 116.137339][ T6828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1072'. [ 116.160241][ T28] audit: type=1326 audit(1771532302.027:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff79f56c629 code=0x7ffc0000 [ 116.245211][ T6834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6834 comm=syz.0.1075 [ 116.271788][ T28] audit: type=1326 audit(1771532302.027:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79f56c629 code=0x7ffc0000 [ 116.312151][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 116.331945][ T28] audit: type=1326 audit(1771532302.027:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79f56c629 code=0x7ffc0000 [ 116.422163][ T28] audit: type=1326 audit(1771532302.027:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff79f56c629 code=0x7ffc0000 [ 116.513001][ T28] audit: type=1326 audit(1771532302.027:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79f56c629 code=0x7ffc0000 [ 116.847760][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1085'. [ 117.045288][ T6882] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1089'. [ 117.103763][ T6882] syzkaller1: entered promiscuous mode [ 117.119729][ T6882] syzkaller1: entered allmulticast mode [ 117.391345][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1092'. [ 117.900051][ T6928] loop6: detected capacity change from 0 to 512 [ 117.926039][ T6928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.949761][ T6928] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.041922][ T6945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1097'. [ 118.763590][ T50] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 118.804845][ T50] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 118.843587][ T50] EXT4-fs (loop6): This should not happen!! Data will be lost [ 118.843587][ T50] [ 118.860005][ T50] EXT4-fs (loop6): Total free blocks count 0 [ 118.878263][ T50] EXT4-fs (loop6): Free/Dirty block details [ 118.894224][ T50] EXT4-fs (loop6): free_blocks=65280 [ 118.900095][ T50] EXT4-fs (loop6): dirty_blocks=8192 [ 118.913674][ T50] EXT4-fs (loop6): Block reservation details [ 118.919965][ T50] EXT4-fs (loop6): i_reserved_data_blocks=8192 [ 118.956756][ T50] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 119.222583][ T6977] loop6: detected capacity change from 0 to 512 [ 119.278047][ T6977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.311681][ T6977] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.344487][ T6163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.599058][ T6967] loop0: detected capacity change from 0 to 4096 [ 119.762316][ T6967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.794258][ T6995] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1116'. [ 119.838738][ T6997] bridge_slave_0: left allmulticast mode [ 119.845094][ T6997] bridge_slave_0: left promiscuous mode [ 119.850918][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.871919][ T6997] bridge_slave_1: left allmulticast mode [ 119.893937][ T6997] bridge_slave_1: left promiscuous mode [ 119.900266][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.921870][ T6997] bond0: (slave bond_slave_0): Releasing backup interface [ 119.957119][ T6997] bond0: (slave bond_slave_1): Releasing backup interface [ 119.980286][ T6997] team0: Port device team_slave_0 removed [ 120.004398][ T6997] team0: Port device team_slave_1 removed [ 120.011597][ T6997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.033989][ T6997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.044815][ T6967] syz.0.1101 (6967) used greatest stack depth: 9352 bytes left [ 120.053585][ T6997] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.054138][ T6290] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.072772][ T6999] team0: Mode changed to "loadbalance" [ 120.274036][ T7006] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 120.517810][ T7029] loop0: detected capacity change from 0 to 512 [ 120.540664][ T7029] EXT4-fs: Ignoring removed nobh option [ 120.585738][ T7029] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 120.607501][ T7029] System zones: 1-12 [ 120.628184][ T7029] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.662992][ T7029] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 120.759807][ T7029] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.1130: corrupted inode contents [ 120.777187][ T7029] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.778235][ T7029] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.1130: mark_inode_dirty error [ 120.787570][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 120.787604][ C1] EXT4-fs (loop0): initial error at time 1771532306: ext4_do_update_inode:5569: inode 15 [ 120.787636][ C1] EXT4-fs (loop0): last error at time 1771532306: ext4_do_update_inode:5569: inode 15 [ 120.826330][ T7029] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.826583][ T7029] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.1130: corrupted inode contents [ 120.851589][ T7029] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.852594][ T7029] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.1130: mark_inode_dirty error [ 120.875531][ T7029] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.875706][ T7029] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.1130: mark inode dirty (error -117) [ 120.898821][ T7029] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.899161][ T7029] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 120.919598][ T7029] EXT4-fs (loop0): 1 orphan inode deleted [ 120.927224][ T7029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 120.959615][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 120.959634][ T28] audit: type=1400 audit(1771532307.117:503): avc: denied { ioctl } for pid=7024 comm="syz.0.1130" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.307172][ T6290] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.336113][ T7038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7038 comm=syz.1.1135 [ 121.352706][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 121.352688][ T28] audit: type=1400 audit(1771532307.507:504): avc: denied { nlmsg_read } for pid=7039 comm="syz.3.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.393706][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 121.627279][ T7058] loop4: detected capacity change from 0 to 512 [ 121.678949][ T7063] syzkaller1: entered promiscuous mode [ 121.684623][ T7063] syzkaller1: entered allmulticast mode [ 121.693117][ T7058] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 121.703782][ T7058] EXT4-fs (loop4): orphan cleanup on readonly fs [ 121.726374][ T7058] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 121.774236][ T7058] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 121.846365][ T28] audit: type=1400 audit(1771532308.007:505): avc: denied { create } for pid=7071 comm="syz.3.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 121.864482][ T7058] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 121.888754][ T7058] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.1143: inode has both inline data and extents flags [ 121.937239][ T7058] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 121.943525][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 121.959190][ C1] EXT4-fs (loop4): initial error at time 1771532308: ext4_orphan_get:1391: inode 16 [ 121.968658][ C1] EXT4-fs (loop4): last error at time 1771532308: ext4_orphan_get:1391: inode 16 [ 121.978101][ T7058] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1143: couldn't read orphan inode 16 (err -117) [ 121.994224][ T7058] loop4: lost filesystem error report for type 5 error -117 [ 121.997706][ T7058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.631293][ T5144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.661702][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 123.726980][ T7142] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1178'. [ 123.865650][ T7111] loop6: detected capacity change from 0 to 4096 [ 123.932706][ T7111] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.970761][ T28] audit: type=1400 audit(1771532310.117:506): avc: denied { read write } for pid=7109 comm="syz.6.1163" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.000672][ T28] audit: type=1400 audit(1771532310.117:507): avc: denied { open } for pid=7109 comm="syz.6.1163" path="/50/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.194687][ T6163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.209851][ T7176] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.433827][ T28] audit: type=1326 audit(1771532311.567:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a42e1c629 code=0x7ffc0000 [ 125.529937][ T28] audit: type=1326 audit(1771532311.567:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a42e1c629 code=0x7ffc0000 [ 125.570144][ T7186] netlink: 'syz.3.1191': attribute type 39 has an invalid length. [ 125.624668][ T28] audit: type=1326 audit(1771532311.567:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f2a42dd8aec code=0x7ffc0000 [ 125.656753][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'. [ 125.733242][ T28] audit: type=1326 audit(1771532311.567:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2a42dd8b4e code=0x7ffc0000 [ 126.275901][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 126.275919][ T28] audit: type=1400 audit(1771532312.437:551): avc: denied { create } for pid=7209 comm="syz.1.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 126.343994][ T28] audit: type=1400 audit(1771532312.467:552): avc: denied { ioctl } for pid=7209 comm="syz.1.1202" path="socket:[24097]" dev="sockfs" ino=24097 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 126.605231][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'. [ 127.394395][ T7234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1211'. [ 127.403684][ T7234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1211'. [ 127.935144][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1223'. [ 127.958949][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 128.006753][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 128.136501][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'. [ 128.947695][ T28] audit: type=1400 audit(1771532315.107:553): avc: denied { setopt } for pid=7299 comm="syz.4.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.994258][ T28] audit: type=1400 audit(1771532315.107:554): avc: denied { listen } for pid=7299 comm="syz.4.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.352638][ T7344] netlink: 'syz.6.1254': attribute type 13 has an invalid length. [ 130.378576][ T7344] netlink: 'syz.6.1254': attribute type 17 has an invalid length. [ 130.462321][ T7346] loop6: detected capacity change from 0 to 4096 [ 130.470521][ T7350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1258'. [ 130.495336][ T7346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.524423][ T7344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.533536][ T7344] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.544557][ T7344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.761437][ T28] audit: type=1400 audit(1771532316.917:555): avc: denied { connect } for pid=7360 comm="syz.0.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.762863][ T30] tipc: Subscription rejected, illegal request [ 130.820305][ T6735] IPVS: starting estimator thread 0... [ 130.933606][ T7364] IPVS: using max 1680 ests per chain, 84000 per kthread [ 131.141740][ T6163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.201256][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'. [ 131.286587][ T28] audit: type=1400 audit(1771532317.447:556): avc: denied { setopt } for pid=7391 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 131.773973][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'. [ 131.808265][ T7409] bond1: entered promiscuous mode [ 131.833832][ T7409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.274499][ T7446] xt_hashlimit: size too large, truncated to 1048576 [ 132.493045][ T7448] xt_hashlimit: size too large, truncated to 1048576 [ 132.577524][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1297'. [ 132.705622][ T28] audit: type=1400 audit(1771532318.867:557): avc: denied { watch watch_reads } for pid=7465 comm="syz.0.1313" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 132.830780][ T7484] loop6: detected capacity change from 0 to 128 [ 132.840298][ T7485] loop0: detected capacity change from 0 to 512 [ 132.860217][ T7485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.874925][ T7488] VFS: Mount too revealing [ 132.904570][ T7485] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.969405][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 133.067275][ T6290] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.661888][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1319'. [ 133.703291][ T7513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1320'. [ 133.733307][ T7513] netlink: 'syz.0.1320': attribute type 7 has an invalid length. [ 133.742075][ T7513] netlink: 'syz.0.1320': attribute type 8 has an invalid length. [ 133.760255][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'. [ 134.848083][ T28] audit: type=1326 audit(1771532320.997:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.6.1334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f150ca9c629 code=0x0 [ 134.880845][ T7555] netlink: 'syz.0.1335': attribute type 39 has an invalid length. [ 134.892896][ T7548] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 135.019349][ T50] tipc: Subscription rejected, illegal request [ 135.043971][ T7564] netlink: 'syz.1.1338': attribute type 4 has an invalid length. [ 135.055699][ T7564] netlink: 'syz.1.1338': attribute type 4 has an invalid length. [ 135.088986][ T7566] bridge0: entered promiscuous mode [ 135.095124][ T7566] bridge0: port 3(macsec1) entered blocking state [ 135.101704][ T7566] bridge0: port 3(macsec1) entered disabled state [ 135.108656][ T7566] macsec1: entered allmulticast mode [ 135.114174][ T7566] bridge0: entered allmulticast mode [ 135.120984][ T7566] macsec1: left allmulticast mode [ 135.126320][ T7566] bridge0: left allmulticast mode [ 135.132250][ T7566] bridge0: left promiscuous mode [ 136.486942][ T7607] netlink: 'syz.6.1354': attribute type 1 has an invalid length. [ 136.524849][ T7607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.565980][ T7614] loop4: detected capacity change from 0 to 128 [ 136.620293][ T7607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.644391][ T7607] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 136.657112][ T7607] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 136.678572][ T7617] tipc: Enabling of bearer rejected, failed to enable media [ 136.827151][ T7631] bond2: entered promiscuous mode [ 136.832485][ T7631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.883783][ T7634] syz_tun: entered allmulticast mode [ 136.962638][ T7631] bridge1: entered promiscuous mode [ 136.970194][ T7641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1370'. [ 136.990520][ T7641] netlink: 'syz.4.1370': attribute type 7 has an invalid length. [ 137.008421][ T7641] netlink: 'syz.4.1370': attribute type 8 has an invalid length. [ 137.030360][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 137.121861][ T7652] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1373'. [ 137.131476][ T28] audit: type=1400 audit(1771532323.277:559): avc: denied { create } for pid=7651 comm="syz.6.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 137.184674][ T28] audit: type=1400 audit(1771532323.277:560): avc: denied { write } for pid=7651 comm="syz.6.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 137.213377][ T7612] ================================================================== [ 137.221635][ T7612] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 137.230285][ T7612] [ 137.232651][ T7612] write to 0xffff88811a942ee8 of 8 bytes by task 7606 on cpu 1: [ 137.240327][ T7612] shmem_file_splice_read+0x470/0x600 [ 137.245783][ T7612] splice_direct_to_actor+0x26e/0x670 [ 137.251285][ T7612] do_splice_direct+0x119/0x1a0 [ 137.256162][ T7612] do_sendfile+0x382/0x650 [ 137.260621][ T7612] __x64_sys_sendfile64+0x105/0x150 [ 137.265851][ T7612] x64_sys_call+0x2dc4/0x3020 [ 137.270575][ T7612] do_syscall_64+0x12c/0x370 [ 137.275221][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.281233][ T7612] [ 137.283588][ T7612] write to 0xffff88811a942ee8 of 8 bytes by task 7612 on cpu 0: [ 137.291286][ T7612] shmem_file_splice_read+0x470/0x600 [ 137.296717][ T7612] splice_direct_to_actor+0x26e/0x670 [ 137.302159][ T7612] do_splice_direct+0x119/0x1a0 [ 137.307072][ T7612] do_sendfile+0x382/0x650 [ 137.311525][ T7612] __x64_sys_sendfile64+0x105/0x150 [ 137.316758][ T7612] x64_sys_call+0x2dc4/0x3020 [ 137.321473][ T7612] do_syscall_64+0x12c/0x370 [ 137.326124][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.332042][ T7612] [ 137.334394][ T7612] value changed: 0x000000000001054e -> 0x0000000000010551 [ 137.342038][ T7612] [ 137.344383][ T7612] Reported by Kernel Concurrency Sanitizer on: [ 137.350656][ T7612] CPU: 0 UID: 0 PID: 7612 Comm: syz.3.1355 Not tainted syzkaller #0 PREEMPT(full) [ 137.360232][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.370484][ T7612] ==================================================================