last executing test programs: 8m7.350193291s ago: executing program 32 (id=146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 7m55.634200333s ago: executing program 33 (id=424): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1e7) mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x103) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x60006a4) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') 7m1.45921822s ago: executing program 34 (id=1688): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffbff, 0x0, @perf_bp={0x0, 0x8}, 0x1076f0, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x103, 0x87, 0x2}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x40, 0x0, &(0x7f00000000c0)) 6m41.524760219s ago: executing program 35 (id=2153): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r0, &(0x7f0000008e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006040)=""/8, 0x8}, 0x7fffffff}], 0x1, 0x20, 0x0) 6m28.740879411s ago: executing program 36 (id=2465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb, 0x3d3}) r1 = io_uring_setup(0x4dc2, &(0x7f0000000400)={0x0, 0x0, 0x100}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 5m21.536926656s ago: executing program 37 (id=3945): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000002, &(0x7f0000000180)=[{0x1000, 0x60d, 0xda5a}, {0x8000000000000001, 0x5, 0x1000000000000a2}], 0x2, 0x237, 0x0, 0x2, 0x0, 0x2}) 5m15.900980054s ago: executing program 38 (id=3982): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@delchain={0x24, 0x65, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x7}, {0x9, 0xa}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20004815) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) 4m32.843366605s ago: executing program 39 (id=4985): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0x9) readv(r0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/153, 0x99}], 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 3m51.413174213s ago: executing program 1 (id=5820): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000e80)="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", 0xfe49, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x121, 0x0, 0x0) 3m51.381088825s ago: executing program 1 (id=5821): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m51.346698007s ago: executing program 1 (id=5822): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x3) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000440)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 3m51.308093679s ago: executing program 1 (id=5823): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0) 3m51.280640741s ago: executing program 1 (id=5824): openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES64, @ANYRESOCT=0x0], 0x3c, 0x2f7, &(0x7f0000000140)="$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") syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 3m51.022280736s ago: executing program 1 (id=5828): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "9d09b974e9060a3c", "46a278ba392c53fa29a17543c440dc8a", "01a55c10", "969509a9c9f65fc4"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e4099107323f5", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) 3m51.009749656s ago: executing program 40 (id=5828): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "9d09b974e9060a3c", "46a278ba392c53fa29a17543c440dc8a", "01a55c10", "969509a9c9f65fc4"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e4099107323f5", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) 3m45.166539896s ago: executing program 0 (id=5939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @loopback, 0x6}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @empty, 0x23}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000180)) 3m45.10118523s ago: executing program 0 (id=5941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="083c000d0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES16=r1], 0xfdef) 3m44.92644156s ago: executing program 0 (id=5944): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4a, 0x6, 0x3, 0x80, 0x80, 0x19, 0x9, 0x2, 0x3, 0x7, 0x7, 0x0, 0xff, 0x6}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000440)={r1, 0x262}, 0x8) 3m44.819661976s ago: executing program 0 (id=5948): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) 3m44.449668948s ago: executing program 0 (id=5963): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x4000c, @loopback, 0x1}, 0x1c) close(r0) 3m44.149006545s ago: executing program 0 (id=5968): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x4) getdents(r2, &(0x7f0000001400)=""/4091, 0xffb) 3m44.148641535s ago: executing program 41 (id=5968): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x4) getdents(r2, &(0x7f0000001400)=""/4091, 0xffb) 2m58.587806263s ago: executing program 8 (id=6886): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) readv(r0, &(0x7f0000001c40)=[{&(0x7f00000005c0)=""/232, 0xe8}, {0x0}], 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) 2m58.437824451s ago: executing program 8 (id=6888): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)='Y', 0x1}], 0x1}, 0x1) 2m58.401040524s ago: executing program 8 (id=6890): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000180)={0xab000500, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 2m58.237872943s ago: executing program 8 (id=6894): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800082, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0x191, &(0x7f00000002c0)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 2m58.12502178s ago: executing program 8 (id=6896): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0xffffffffdffffffc, 0x4, 0x4000000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000000080)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x0, 0x0, 0x6, 0x5, 0x6, 0x0, 0x400, 0x2, 0x4cb, 0x7fff}) 2m57.930554351s ago: executing program 8 (id=6900): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 2m57.844706026s ago: executing program 42 (id=6900): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 2m38.081180364s ago: executing program 4 (id=7345): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x9, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/205, 0xcd}, 0x3}], 0x1, 0x40000140, 0x0) 2m38.068920535s ago: executing program 4 (id=7348): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) 2m37.879081646s ago: executing program 4 (id=7352): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0xc17a) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x185240, 0x148) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 2m37.661315879s ago: executing program 4 (id=7361): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) r0 = syz_io_uring_setup(0x1a0, &(0x7f0000000380)={0x0, 0x60d0, 0x1, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) 2m37.326469688s ago: executing program 4 (id=7369): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2007f000000693bc1e6000c11fffc010000000000000000000000000001"], 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 2m37.194261035s ago: executing program 4 (id=7373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "696335283bf79057", "5615c6250f36550293b1f5bd2e006a7a1b6ea19e0000000000000800", "0100", "ffffffffe000"}, 0x38) close(0x3) 2m37.147558079s ago: executing program 43 (id=7373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "696335283bf79057", "5615c6250f36550293b1f5bd2e006a7a1b6ea19e0000000000000800", "0100", "ffffffffe000"}, 0x38) close(0x3) 2m14.014341243s ago: executing program 5 (id=7877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m13.985929334s ago: executing program 5 (id=7879): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110) 2m13.964352196s ago: executing program 5 (id=7880): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10) 2m13.943373587s ago: executing program 5 (id=7882): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 2m13.915121998s ago: executing program 5 (id=7883): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="0962d3ffc6", 0x5, 0x100400c1, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) read(r0, &(0x7f0000000000)=""/149, 0xaa) 2m13.815807544s ago: executing program 5 (id=7886): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000003000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x2, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 2m13.790279126s ago: executing program 44 (id=7886): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000003000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x2, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 3.08972722s ago: executing program 3 (id=10440): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000001c0)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) 3.025123354s ago: executing program 3 (id=10441): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x7, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, 0xffffffffffffffff, 0xb) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) 2.610170308s ago: executing program 6 (id=10446): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2, 0x4028}], 0x1, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 2.401958401s ago: executing program 6 (id=10448): r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file2\x00', 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64=r0, @ANYRES16], 0x1, 0x25c, &(0x7f0000000a00)="$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") truncate(&(0x7f0000002540)='./file2\x00', 0xe) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.194776122s ago: executing program 6 (id=10451): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111c10000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 2.184121263s ago: executing program 6 (id=10452): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)='l', 0x1}], 0x1, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x4ccd4) write$cgroup_pid(r0, &(0x7f0000000400)=r2, 0x12) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 2.108787078s ago: executing program 6 (id=10453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.985019074s ago: executing program 2 (id=10454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x7}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x5, 0x3, 0x10000, 0x2, 0x8e, 0x0, 0x6, 0x4, 0x7, 0x7d9e, 0x12, 0x20, 0x0, 0x63, 0x1, 0x1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) 1.951723836s ago: executing program 3 (id=10455): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 1.868178012s ago: executing program 3 (id=10456): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) 1.830647804s ago: executing program 6 (id=10458): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd2) creat(&(0x7f0000012b80)='./file0\x00', 0x1be) 1.821582854s ago: executing program 2 (id=10459): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x2, 0x6) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80000000, 0x0) write(r2, 0x0, 0x0) 1.624928696s ago: executing program 7 (id=10463): socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x3, 0xffffffff}]}, 0x10) close(r1) 1.501425903s ago: executing program 7 (id=10465): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x107642, 0x85) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1d31, &(0x7f0000000040)={0x0, 0xc8a3, 0xc001, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_enter(r0, 0x63a, 0x7721, 0x16, 0x0, 0x0) 1.408306598s ago: executing program 7 (id=10466): add_key(0x0, 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d01007866068", 0x87, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1.139963704s ago: executing program 7 (id=10468): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x78) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000600)={0x20000001}) close(r2) socket(0x10, 0x803, 0x0) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 1.127353274s ago: executing program 9 (id=10469): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'vlan1\x00', {0x3}, 0x7fff}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x758a, &(0x7f00000002c0)={0x0, 0xf657, 0x1, 0x9, 0x80000}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[r0], 0x1) 1.081680107s ago: executing program 7 (id=10470): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) read(r0, &(0x7f0000000180)=""/108, 0x6c) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) 1.070674718s ago: executing program 9 (id=10471): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r0, 0x402, 0x8000002d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) tee(r2, r3, 0x7ff, 0x5) 1.004644341s ago: executing program 9 (id=10472): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = io_uring_setup(0x70c5, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x8000001, 0xffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r1) 1.004170651s ago: executing program 3 (id=10473): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000, 0x800, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 929.004506ms ago: executing program 2 (id=10474): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) 924.063916ms ago: executing program 2 (id=10475): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r4, 0x1}, 0x18) sendmsg$sock(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="1288678d911649139125dec85f11ec2fbe24d9da89ff", 0x16}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000300)="3c54f84bdd3130eb59cba8111986dd6321f64dc4fc8fff2c8f88af27218cd6", 0x1f}, {&(0x7f0000000340)="116ce5171529edc2fad49117dd048bc215847691e8c0d936c7a9bc11718e7b00e6208c3071c17256cec6190b1689b21e69667b6afe2bb71804bbb62d640641f1e10a5864bcefdafed3826c059bf6d4a536f919f40b9a459882ff948c3f80a1693e64571f7e45ce90ab3e62c75f6985", 0x6f}, {&(0x7f0000001940)="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", 0xfc9}], 0x5}, 0x4800) 909.149167ms ago: executing program 9 (id=10476): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_clone(0xc020500, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) tkill(r1, 0x3) 844.681291ms ago: executing program 3 (id=10477): syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) tkill(r0, 0x8) 844.213481ms ago: executing program 9 (id=10478): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) socket$can_raw(0x1d, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 747.807406ms ago: executing program 2 (id=10479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) syz_clone(0x80008000, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) 618.531814ms ago: executing program 9 (id=10480): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 189.149109ms ago: executing program 7 (id=10481): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmsg$NFT_BATCH(r1, 0x0, 0x40008884) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 0s ago: executing program 2 (id=10482): setuid(0xee01) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x9, 0x800) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x4040011) kernel console output (not intermixed with test programs): 4654][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 417.164633][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 417.526133][ T28] audit: type=1400 audit(1771102956.401:2922): avc: denied { lock } for pid=27694 comm="syz.6.8351" path="socket:[101608]" dev="sockfs" ino=101608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 417.876688][T27716] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 417.968188][T27724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27724 comm=syz.6.8355 [ 418.014728][T27724] netlink: 'syz.6.8355': attribute type 1 has an invalid length. [ 418.077714][T27724] bond4: (slave bridge2): making interface the new active one [ 418.114514][T27724] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 418.204626][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 418.696998][T27785] netlink: 'syz.3.8370': attribute type 1 has an invalid length. [ 418.725953][T27788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8372'. [ 418.735195][T27785] 8021q: adding VLAN 0 to HW filter on device bond6 [ 419.234635][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 419.712230][T27849] geneve3: entered promiscuous mode [ 419.717761][T27849] geneve3: entered allmulticast mode [ 419.724153][ T4541] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 419.738837][ T4541] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 419.754224][ T4541] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 419.769968][ T4541] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 420.007889][T27860] netlink: 'syz.6.8398': attribute type 1 has an invalid length. [ 420.023873][T27860] 8021q: adding VLAN 0 to HW filter on device bond5 [ 420.268259][T27873] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8404'. [ 420.278560][T27873] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8404'. [ 420.284843][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 420.323455][T27877] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8406'. [ 420.345373][T27877] gtp0: entered promiscuous mode [ 420.415093][T27885] netlink: 'syz.6.8410': attribute type 1 has an invalid length. [ 420.423477][T27885] netlink: 'syz.6.8410': attribute type 4 has an invalid length. [ 420.432000][T27885] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.8410'. [ 420.498562][T27891] netlink: 'syz.6.8412': attribute type 1 has an invalid length. [ 420.529955][T27891] 8021q: adding VLAN 0 to HW filter on device bond6 [ 420.570902][T27896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8414'. [ 420.753992][T27913] loop6: detected capacity change from 0 to 1024 [ 420.763012][T27913] EXT4-fs: Ignoring removed orlov option [ 420.817945][T27913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.873951][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.024088][T27935] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8429'. [ 421.246074][T27939] bond3: option xmit_hash_policy: invalid value (46) [ 421.270590][T27939] bond3 (unregistering): Released all slaves [ 421.314653][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 421.395060][T27946] netlink: 'syz.2.8433': attribute type 1 has an invalid length. [ 421.455376][T27946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.501498][T27953] bond1: (slave syz_tun): making interface the new active one [ 421.534186][T27953] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 422.354651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 422.543609][T28018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8461'. [ 422.568884][T28018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8461'. [ 422.644922][T28018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8461'. [ 423.404649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 424.315989][T28091] netlink: 'syz.3.8493': attribute type 4 has an invalid length. [ 424.357850][T28091] netlink: 'syz.3.8493': attribute type 17 has an invalid length. [ 424.434611][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 424.722038][T28105] __nla_validate_parse: 3 callbacks suppressed [ 424.722056][T28105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8499'. [ 424.827485][T28105] ip6gre2: entered promiscuous mode [ 424.842932][T28105] ip6gre2: entered allmulticast mode [ 424.854684][ T4543] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 424.863503][ T4543] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 424.884788][ T23] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 425.094902][T23389] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 425.364745][T23389] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 425.474639][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 425.984504][T28142] loop9: detected capacity change from 0 to 128 [ 426.119417][T28142] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.137946][T28142] ext4 filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 426.264442][T24502] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 426.348334][T28164] netlink: 'syz.2.8524': attribute type 6 has an invalid length. [ 426.373858][T28164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8524'. [ 426.514615][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 426.905635][T28189] loop6: detected capacity change from 0 to 128 [ 426.962930][T28189] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.985922][T28189] ext4 filesystem being mounted at /1553/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 427.122219][ T4733] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 427.385610][T28211] 9pnet: p9_errstr2errno: server reported unknown error [ 427.554633][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 427.567993][T28229] syzkaller0: entered allmulticast mode [ 427.584970][T28229] syzkaller0: entered promiscuous mode [ 427.606658][T28229] syzkaller0 (unregistering): left allmulticast mode [ 427.614647][T28229] syzkaller0 (unregistering): left promiscuous mode [ 427.738700][T28238] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 427.800782][T28238] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 427.831701][T28238] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 427.848926][T28238] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 427.859658][T28238] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 427.871794][T28238] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 427.882578][T28238] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 427.912649][T28238] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 427.923642][T28238] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 427.952456][T28248] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8557'. [ 427.991756][T28238] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.226837][T28257] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 428.248995][T28257] SELinux: failed to load policy [ 428.481464][T28268] 9pnet_fd: p9_fd_create_tcp (28268): problem connecting socket to 127.0.0.1 [ 428.491314][T28254] loop6: detected capacity change from 0 to 1024 [ 428.620780][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 428.678186][T28254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.729022][T28254] EXT4-fs (loop6): shut down requested (0) [ 429.005618][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 429.425059][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.485658][T28293] netlink: 'syz.3.8575': attribute type 3 has an invalid length. [ 429.510319][T28293] netlink: 'syz.3.8575': attribute type 1 has an invalid length. [ 429.521361][T28295] bond1: (slave syz_tun): Releasing active interface [ 429.524716][T28293] netlink: 198116 bytes leftover after parsing attributes in process `syz.3.8575'. [ 429.551997][T28295] bridge_slave_0: left allmulticast mode [ 429.557990][T28295] bridge_slave_0: left promiscuous mode [ 429.563856][T28295] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.576089][T28295] bridge_slave_1: left allmulticast mode [ 429.581847][ T28] audit: type=1400 audit(1771102968.451:2923): avc: denied { read write } for pid=28300 comm="syz.9.8579" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 429.606627][T28295] bridge_slave_1: left promiscuous mode [ 429.612437][T28295] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.620072][ T28] audit: type=1400 audit(1771102968.451:2924): avc: denied { open } for pid=28300 comm="syz.9.8579" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 429.644645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 429.656752][T28295] bond0: (slave bond_slave_0): Releasing backup interface [ 429.687630][T28295] bond0: (slave bond_slave_1): Releasing backup interface [ 429.700978][T28295] team0: Port device team_slave_0 removed [ 429.712378][T28295] team0: Port device team_slave_1 removed [ 429.719695][T28295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.728927][T28295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.737911][T28295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.745720][T28295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.757649][T28295] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 429.790154][T28299] team0: Mode changed to "broadcast" [ 429.844830][T28318] xt_hashlimit: size too large, truncated to 1048576 [ 429.993379][T28328] netlink: 'syz.9.8589': attribute type 13 has an invalid length. [ 430.067464][T28328] sch_tbf: burst 6 is lower than device gretap0 mtu (82) ! [ 430.395097][ T10] IPVS: starting estimator thread 0... [ 430.529173][ T70] IPVS: stop unused estimator thread 0... [ 430.642375][T28376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28376 comm=syz.2.8610 [ 430.674619][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 430.883968][ T28] audit: type=1400 audit(1771102969.751:2925): avc: denied { setopt } for pid=28394 comm="syz.3.8619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 431.129619][T28412] 9pnet_fd: p9_fd_create_tcp (28412): problem connecting socket to 127.0.0.1 [ 431.170904][T28416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28416 comm=syz.7.8626 [ 431.271016][T28400] loop9: detected capacity change from 0 to 1024 [ 431.296452][ T23] IPVS: starting estimator thread 0... [ 431.380284][T28400] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.395634][T28426] IPVS: using max 2256 ests per chain, 112800 per kthread [ 431.417846][T28400] EXT4-fs (loop9): shut down requested (0) [ 431.441972][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.472471][ T4555] IPVS: stop unused estimator thread 0... [ 431.615319][ T28] audit: type=1400 audit(1771102970.491:2926): avc: denied { remount } for pid=28450 comm="syz.9.8636" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 431.724632][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 432.101363][T28464] geneve3: left promiscuous mode [ 432.120594][T28464] geneve3: left allmulticast mode [ 432.139793][ T4533] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 432.171175][ T4533] netdevsim netdevsim9 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 432.226217][ T4533] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 432.245894][ T4533] netdevsim netdevsim9 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 432.273542][ T4533] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 432.283599][ T4533] netdevsim netdevsim9 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 432.296347][ T4533] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 432.296529][T28482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8648'. [ 432.306764][ T4533] netdevsim netdevsim9 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 432.337799][T28484] gretap0: entered promiscuous mode [ 432.344680][T28482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8648'. [ 432.359768][T28484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8650'. [ 432.414674][T28484] gretap0: left promiscuous mode [ 432.434380][T28482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8648'. [ 432.455529][T28482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8648'. [ 432.474434][T28497] netlink: 'syz.3.8655': attribute type 1 has an invalid length. [ 432.524349][T28497] bond7: (slave ip6gretap1): making interface the new active one [ 432.544947][T28497] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 432.754709][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 433.165254][T28542] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.195854][T28536] netlink: 'syz.7.8669': attribute type 13 has an invalid length. [ 433.243597][T28542] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.270626][T28536] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 433.313691][T28542] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.406361][T28542] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.470357][ T4555] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.492111][ T4555] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.513665][ T4555] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.524346][T28561] loop9: detected capacity change from 0 to 512 [ 433.534432][ T4555] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.571824][T28561] EXT4-fs: Ignoring removed oldalloc option [ 433.637628][T28561] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.8681: Parent and EA inode have the same ino 15 [ 433.688508][T28568] ipip1: entered promiscuous mode [ 433.742525][T28561] loop9: lost filesystem error report for type 5 error -117 [ 433.744578][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 433.758411][ C0] EXT4-fs (loop9): initial error at time 1771102972: ext4_xattr_inode_iget:437 [ 433.767407][ C0] EXT4-fs (loop9): last error at time 1771102972: ext4_xattr_inode_iget:437 [ 433.780654][T28561] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.8681: Parent and EA inode have the same ino 15 [ 433.794648][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 433.801783][T28561] loop9: lost filesystem error report for type 5 error -117 [ 433.803958][T28561] EXT4-fs (loop9): 1 orphan inode deleted [ 433.828498][T28561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.851405][T28561] EXT4-fs error (device loop9): ext4_lookup:1789: inode #2: comm syz.9.8681: deleted inode referenced: 15 [ 433.864086][T28561] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8681'. [ 433.957160][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.225568][T28608] can0: slcan on ttyS3. [ 434.294788][T28607] can0 (unregistered): slcan off ttyS3. [ 434.474533][T28632] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8707'. [ 434.491042][T28636] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8706'. [ 434.524154][T28636] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8706'. [ 434.638078][T28650] loop6: detected capacity change from 0 to 1024 [ 434.699857][T28650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 434.738377][T28650] ext4 filesystem being mounted at /1570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.802755][T28650] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.8711: lblock 0 mapped to illegal pblock 0 (length 6) [ 434.834641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 434.852453][T28650] EXT4-fs error (device loop6): ext4_ext_remove_space:2956: inode #15: comm syz.6.8711: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 434.893055][T28679] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.8711: lblock 0 mapped to illegal pblock 0 (length 1) [ 434.930559][T28679] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 434.943538][T28679] EXT4-fs (loop6): This should not happen!! Data will be lost [ 434.943538][T28679] [ 435.110097][T28696] loop9: detected capacity change from 0 to 128 [ 435.147686][T28696] FAT-fs (loop9): Directory bread(block 32) failed [ 435.155689][T28696] FAT-fs (loop9): Directory bread(block 33) failed [ 435.162313][T28696] FAT-fs (loop9): Directory bread(block 34) failed [ 435.169586][T28696] FAT-fs (loop9): Directory bread(block 35) failed [ 435.177743][T28696] FAT-fs (loop9): Directory bread(block 36) failed [ 435.184356][T28696] FAT-fs (loop9): Directory bread(block 37) failed [ 435.191561][T28696] FAT-fs (loop9): Directory bread(block 38) failed [ 435.198210][T28696] FAT-fs (loop9): Directory bread(block 39) failed [ 435.205783][T28696] FAT-fs (loop9): Directory bread(block 40) failed [ 435.212383][T28696] FAT-fs (loop9): Directory bread(block 41) failed [ 435.301752][T28696] bridge_slave_0: Caught tx_queue_len zero misconfig [ 435.411163][T28709] loop9: detected capacity change from 0 to 512 [ 435.445332][T28709] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.543086][T28709] ext4 filesystem being mounted at /231/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.596325][ T4541] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 112: padding at end of block bitmap is not set [ 435.612361][T28709] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8729'. [ 435.622809][ T4541] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 117 [ 435.636388][ T4541] EXT4-fs (loop6): This should not happen!! Data will be lost [ 435.636388][ T4541] [ 435.663625][ T4555] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2088 with max blocks 2048 with error 28 [ 435.676990][ T4555] EXT4-fs (loop6): This should not happen!! Data will be lost [ 435.676990][ T4555] [ 435.687159][ T4555] EXT4-fs (loop6): Total free blocks count 0 [ 435.693204][ T4555] EXT4-fs (loop6): Free/Dirty block details [ 435.700174][ T4555] EXT4-fs (loop6): free_blocks=0 [ 435.750778][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.874633][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 435.897629][T28734] loop6: detected capacity change from 0 to 128 [ 435.925339][T28732] veth0_macvtap: left promiscuous mode [ 435.962182][T28734] FAT-fs (loop6): Directory bread(block 32) failed [ 435.969386][T28734] FAT-fs (loop6): Directory bread(block 33) failed [ 435.986777][T28734] FAT-fs (loop6): Directory bread(block 34) failed [ 436.003775][T28734] FAT-fs (loop6): Directory bread(block 35) failed [ 436.022185][T28734] FAT-fs (loop6): Directory bread(block 36) failed [ 436.049169][ T28] audit: type=1400 audit(1771102974.921:2927): avc: denied { create } for pid=28722 comm="syz.9.8735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 436.070129][T28734] FAT-fs (loop6): Directory bread(block 37) failed [ 436.104658][T28734] FAT-fs (loop6): Directory bread(block 38) failed [ 436.111227][T28734] FAT-fs (loop6): Directory bread(block 39) failed [ 436.120510][T28734] FAT-fs (loop6): Directory bread(block 40) failed [ 436.145005][T28734] FAT-fs (loop6): Directory bread(block 41) failed [ 436.296979][T28746] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.366144][T28760] loop6: detected capacity change from 0 to 128 [ 436.537690][T28770] loop9: detected capacity change from 0 to 512 [ 436.642124][ T70] kworker/u8:4: attempt to access beyond end of device [ 436.642124][ T70] loop6: rw=1, sector=129, nr_sectors = 8 limit=128 [ 436.674976][ T70] kworker/u8:4: attempt to access beyond end of device [ 436.674976][ T70] loop6: rw=1, sector=145, nr_sectors = 8 limit=128 [ 436.699870][ T70] kworker/u8:4: attempt to access beyond end of device [ 436.699870][ T70] loop6: rw=1, sector=161, nr_sectors = 8 limit=128 [ 436.732300][ T70] kworker/u8:4: attempt to access beyond end of device [ 436.732300][ T70] loop6: rw=1, sector=177, nr_sectors = 8 limit=128 [ 436.751157][ T70] kworker/u8:4: attempt to access beyond end of device [ 436.751157][ T70] loop6: rw=1, sector=193, nr_sectors = 8 limit=128 [ 436.764778][ T70] kworker/u8:4: attempt to access beyond end of device [ 436.764778][ T70] loop6: rw=1, sector=209, nr_sectors = 8 limit=128 [ 436.779005][ T70] kworker/u8:4: attempt to access beyond end of device [ 436.779005][ T70] loop6: rw=1, sector=225, nr_sectors = 8 limit=128 [ 436.807739][ T70] kworker/u8:4: attempt to access beyond end of device [ 436.807739][ T70] loop6: rw=1, sector=241, nr_sectors = 8 limit=128 [ 436.837600][ T70] kworker/u8:4: attempt to access beyond end of device [ 436.837600][ T70] loop6: rw=1, sector=257, nr_sectors = 8 limit=128 [ 436.859284][ T70] kworker/u8:4: attempt to access beyond end of device [ 436.859284][ T70] loop6: rw=1, sector=273, nr_sectors = 8 limit=128 [ 436.924611][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 436.994894][ T5278] IPVS: starting estimator thread 0... [ 437.000553][T28786] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 437.094632][T28792] IPVS: using max 2256 ests per chain, 112800 per kthread [ 437.257101][ T4555] Bluetooth: hci0: Frame reassembly failed (-84) [ 437.554742][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 437.642653][T28851] netlink: 'syz.3.8786': attribute type 10 has an invalid length. [ 437.660461][T28851] batman_adv: batadv0: Interface deactivated: dummy0 [ 437.673192][T28851] batman_adv: batadv0: Removing interface: dummy0 [ 437.687482][T28851] team0: Failed to send options change via netlink (err -105) [ 437.695295][T28851] team0: Port device dummy0 added [ 437.702790][T28851] netlink: 'syz.3.8786': attribute type 10 has an invalid length. [ 437.712242][T28851] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 437.730635][T28851] team0: Failed to send options change via netlink (err -105) [ 437.749171][T28851] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 437.760918][T28851] team0: Port device dummy0 removed [ 437.770931][T28851] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 437.954628][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 438.122127][ T28] audit: type=1326 audit(1771102976.991:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28863 comm="syz.3.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 438.191728][ T28] audit: type=1326 audit(1771102977.021:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28863 comm="syz.3.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 438.222296][T28866] syzkaller1: entered promiscuous mode [ 438.226625][ T28] audit: type=1326 audit(1771102977.021:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28863 comm="syz.3.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 438.251626][T28866] syzkaller1: entered allmulticast mode [ 438.257975][ T28] audit: type=1326 audit(1771102977.021:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28863 comm="syz.3.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 438.291388][ T28] audit: type=1326 audit(1771102977.021:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28863 comm="syz.3.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 438.316413][ T28] audit: type=1326 audit(1771102977.021:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28863 comm="syz.3.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f92d7f5bce2 code=0x7ffc0000 [ 438.340479][ T28] audit: type=1326 audit(1771102977.041:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28863 comm="syz.3.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f92d7f1c84e code=0x7ffc0000 [ 438.364935][ T28] audit: type=1326 audit(1771102977.131:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28863 comm="syz.3.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f92d7f5bda7 code=0x7ffc0000 [ 438.406910][ T28] audit: type=1326 audit(1771102977.131:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28863 comm="syz.3.8792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92d7f1c84e code=0x7ffc0000 [ 438.516252][T28877] __nla_validate_parse: 3 callbacks suppressed [ 438.516271][T28877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8799'. [ 438.756654][T28898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8804'. [ 438.758899][T28900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8805'. [ 438.774743][T28898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8804'. [ 438.774935][T28898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8804'. [ 438.794304][ T70] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 438.803467][T28900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8805'. [ 438.812611][ T70] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 438.813325][T28898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8804'. [ 438.825403][ T70] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 438.874468][ T70] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 438.920688][T28903] xt_hashlimit: size too large, truncated to 1048576 [ 438.994654][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 439.314633][ T6351] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 440.034621][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 440.195769][ T4541] Bluetooth: hci0: Frame reassembly failed (-84) [ 440.900126][T28955] ipip0: entered promiscuous mode [ 441.074635][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 441.185921][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 441.185941][ T28] audit: type=1400 audit(1771102980.051:2946): avc: denied { map } for pid=28965 comm="syz.9.8840" path="socket:[113237]" dev="sockfs" ino=113237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 441.416127][T28970] loop9: detected capacity change from 0 to 1024 [ 441.513973][T28970] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.554264][T28970] EXT4-fs (loop9): shut down requested (0) [ 441.582098][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.114635][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 442.194627][T28814] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 442.196080][ T6351] Bluetooth: hci0: command 0x1003 tx timeout [ 442.593974][T29022] netlink: 'syz.2.8853': attribute type 10 has an invalid length. [ 442.633814][T29022] team0: Failed to send options change via netlink (err -105) [ 442.641888][T29022] team0: Port device dummy0 added [ 442.652872][T29031] netlink: 'syz.2.8853': attribute type 10 has an invalid length. [ 442.676034][T29031] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 442.677143][ T28] audit: type=1400 audit(1771102981.551:2947): avc: denied { bind } for pid=29029 comm="syz.9.8856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 442.719999][ T28] audit: type=1400 audit(1771102981.551:2948): avc: denied { listen } for pid=29029 comm="syz.9.8856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 442.720019][T29031] team0: Failed to send options change via netlink (err -105) [ 442.720056][T29031] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 442.743022][ T28] audit: type=1400 audit(1771102981.551:2949): avc: denied { accept } for pid=29029 comm="syz.9.8856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 442.755530][T29031] team0: Port device dummy0 removed [ 442.791516][T29031] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 442.947959][ T28] audit: type=1400 audit(1771102981.821:2950): avc: denied { read } for pid=29047 comm="syz.6.8863" path="socket:[112094]" dev="sockfs" ino=112094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 443.129122][T29058] netlink: 240 bytes leftover after parsing attributes in process `syz.6.8863'. [ 443.164622][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 443.271572][T29071] netlink: 236 bytes leftover after parsing attributes in process `syz.7.8868'. [ 443.508539][T29085] batadv_slave_0: entered promiscuous mode [ 443.516354][T29084] batadv_slave_0: left promiscuous mode [ 444.015594][T29101] netlink: 236 bytes leftover after parsing attributes in process `syz.6.8882'. [ 444.194611][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 444.260108][T29127] program syz.9.8902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.346494][T29132] xt_hashlimit: size too large, truncated to 1048576 [ 445.177323][T29152] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8903'. [ 445.184498][ T28] audit: type=1400 audit(1771102984.051:2951): avc: denied { read } for pid=29153 comm="syz.6.8901" path="socket:[112268]" dev="sockfs" ino=112268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 445.244682][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 445.368635][T29160] xt_hashlimit: size too large, truncated to 1048576 [ 445.460692][T29162] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.468009][T29162] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.645954][T29176] loop9: detected capacity change from 0 to 1024 [ 445.689630][T29176] EXT4-fs: Ignoring removed orlov option [ 445.729243][T29176] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.796321][ T4555] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.843062][ T4555] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 445.901875][ T4555] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 445.932427][ T4555] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.987440][ T4555] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 446.014661][ T4555] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 446.054587][ T4555] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.062999][ T4555] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 446.103611][ T4555] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 446.127576][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.134741][ T4555] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.172743][ T4555] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 446.194668][ T4555] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 446.274627][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 447.324609][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 447.829931][T29241] loop6: detected capacity change from 0 to 1024 [ 447.921595][T29241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 447.984689][T29241] ext4 filesystem being mounted at /1605/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.046406][T29241] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 1: comm syz.6.8930: lblock 1 mapped to illegal pblock 1 (length 5) [ 448.095886][T29241] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 448.144685][T29241] EXT4-fs (loop6): This should not happen!! Data will be lost [ 448.144685][T29241] [ 448.187370][T29245] EXT4-fs error (device loop6): ext4_free_blocks:6726: comm syz.6.8930: Freeing blocks not in datazone - block = 1, count = 5 [ 448.218093][T29245] EXT4-fs error (device loop6): ext4_free_blocks:6726: comm syz.6.8930: Freeing blocks not in datazone - block = 0, count = 16 [ 448.354616][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 448.395522][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 448.439175][T29251] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8935'. [ 448.468287][T29251] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8935'. [ 449.394649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 449.845712][T29323] Set syz1 is full, maxelem 2 reached [ 449.986443][T29333] gretap0: entered promiscuous mode [ 450.221357][T29348] loop6: detected capacity change from 0 to 512 [ 450.281343][T29348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.307773][T29348] ext4 filesystem being mounted at /1611/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.434635][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 450.474646][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.606299][T29367] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29367 comm=syz.3.8982 [ 450.707446][T29377] loop6: detected capacity change from 0 to 512 [ 450.715768][T29377] ext4: Unknown parameter 'dont_appraise' [ 450.922844][T29388] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.8991'. [ 450.933017][T29388] netlink: zone id is out of range [ 450.939177][T29388] netlink: zone id is out of range [ 451.474642][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 451.750808][T29433] loop9: detected capacity change from 0 to 512 [ 451.789290][T29433] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.810139][T29433] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.020737][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.118686][T29453] netlink: 'syz.9.9012': attribute type 1 has an invalid length. [ 452.177044][T29453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 452.231661][T29457] netlink: 7 bytes leftover after parsing attributes in process `syz.2.9014'. [ 452.250900][T29456] bond3: (slave gretap2): making interface the new active one [ 452.285479][T29457] netlink: 7 bytes leftover after parsing attributes in process `syz.2.9014'. [ 452.331267][T29456] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 452.514783][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 452.528028][ T28] audit: type=1326 audit(1771102991.401:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29464 comm="syz.9.9018" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a90a6bf79 code=0x0 [ 453.366568][ T28] audit: type=1400 audit(1771102992.241:2953): avc: denied { name_connect } for pid=29497 comm="syz.6.9031" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 453.554625][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 453.831472][T29523] loop9: detected capacity change from 0 to 32768 [ 453.875833][ T8274] loop9: p1 p3 < > [ 453.889425][T29523] loop9: p1 p3 < > [ 453.953586][ T28] audit: type=1400 audit(1771102992.821:2954): avc: denied { setopt } for pid=29535 comm="syz.9.9046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 454.064181][ T8274] udevd[8274]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 454.075907][ T3956] udevd[3956]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 454.108891][ T28] audit: type=1400 audit(1771102992.981:2955): avc: denied { mounton } for pid=29542 comm="syz.3.9051" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.132299][ T3956] udevd[3956]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 454.142652][ T8274] udevd[8274]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 454.325318][ T28] audit: type=1326 audit(1771102993.201:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.6.9055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60faeebf79 code=0x7ffc0000 [ 454.374277][ T28] audit: type=1326 audit(1771102993.201:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.6.9055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60faeebf79 code=0x7ffc0000 [ 454.400192][ T28] audit: type=1326 audit(1771102993.231:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.6.9055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60faeebf79 code=0x7ffc0000 [ 454.454146][ T28] audit: type=1326 audit(1771102993.231:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.6.9055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60faeebf79 code=0x7ffc0000 [ 454.477227][T29563] loop9: detected capacity change from 0 to 764 [ 454.532761][ T28] audit: type=1326 audit(1771102993.231:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.6.9055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f60faeebf79 code=0x7ffc0000 [ 454.604603][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 454.604710][ T28] audit: type=1326 audit(1771102993.231:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29558 comm="syz.6.9055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60faeebf79 code=0x7ffc0000 [ 454.690423][T29574] netlink: 'syz.3.9061': attribute type 2 has an invalid length. [ 455.634632][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 455.906764][T29625] netlink: 'syz.7.9083': attribute type 1 has an invalid length. [ 455.930349][T29625] netlink: 'syz.7.9083': attribute type 4 has an invalid length. [ 455.944585][T29625] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.9083'. [ 455.983073][T29615] loop6: detected capacity change from 0 to 512 [ 456.040197][T29633] batadv0: entered promiscuous mode [ 456.105897][T29615] EXT4-fs: Ignoring removed i_version option [ 456.163292][T29615] EXT4-fs (loop6): 1 truncate cleaned up [ 456.205739][T29645] ip6tnl0: Caught tx_queue_len zero misconfig [ 456.214674][T29615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.235235][T29646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9090'. [ 456.305758][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.458112][T29662] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 456.674619][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 457.364256][T29681] loop6: detected capacity change from 0 to 128 [ 457.415502][T29684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29684 comm=syz.6.9105 [ 457.660941][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 457.661025][ T28] audit: type=1326 audit(1771102996.531:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29687 comm="syz.6.9107" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60faeebf79 code=0x0 [ 457.724839][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 457.987962][T29712] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9118'. [ 457.999917][T29712] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9118'. [ 458.177405][T29725] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9124'. [ 458.261643][T29732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9128'. [ 458.276288][T29732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9128'. [ 458.287554][T29732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9128'. [ 458.296552][T29732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9128'. [ 458.754947][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 459.313273][ T28] audit: type=1326 audit(1771102998.181:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29770 comm="syz.3.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d7f5bf79 code=0x7fc00000 [ 459.343257][ T28] audit: type=1326 audit(1771102998.181:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29770 comm="syz.3.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92d7f5bf79 code=0x7fc00000 [ 459.368078][ T28] audit: type=1326 audit(1771102998.191:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29770 comm="syz.3.9144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d7f5bf79 code=0x7fc00000 [ 459.563411][T29793] gretap3: entered promiscuous mode [ 459.603386][ T28] audit: type=1400 audit(1771102998.471:3009): avc: denied { connect } for pid=29797 comm="syz.6.9156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 459.658364][ T28] audit: type=1400 audit(1771102998.531:3010): avc: denied { read } for pid=29797 comm="syz.6.9156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 459.705694][ T28] audit: type=1400 audit(1771102998.581:3011): avc: denied { write } for pid=29797 comm="syz.6.9156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 459.783792][T29808] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9160'. [ 459.804636][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 459.867840][T29813] sch_fq: defrate 7 ignored. [ 459.987427][T29821] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 460.306399][ T28] audit: type=1400 audit(1771102999.181:3012): avc: denied { read } for pid=29835 comm="syz.9.9172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 460.464584][T29849] loop6: detected capacity change from 0 to 128 [ 460.478094][T29849] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 460.556150][ T28] audit: type=1400 audit(1771102999.421:3013): avc: denied { remount } for pid=29848 comm="syz.6.9177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 460.834614][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 461.286058][T29906] __nla_validate_parse: 3 callbacks suppressed [ 461.286079][T29906] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9200'. [ 461.875400][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 462.218663][ T28] audit: type=1400 audit(1771103001.091:3014): avc: denied { mount } for pid=29963 comm="syz.3.9223" name="/" dev="rpc_pipefs" ino=116928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 462.708928][T29983] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9232'. [ 462.714784][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 462.714828][ T28] audit: type=1400 audit(1771103001.581:3016): avc: denied { create } for pid=29982 comm="syz.9.9232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 462.766206][ T28] audit: type=1400 audit(1771103001.581:3017): avc: denied { write } for pid=29982 comm="syz.9.9232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 462.914604][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 463.060178][T29997] sctp: [Deprecated]: syz.9.9237 (pid 29997) Use of int in max_burst socket option. [ 463.060178][T29997] Use struct sctp_assoc_value instead [ 463.189692][ T28] audit: type=1400 audit(1771103002.061:3018): avc: denied { remount } for pid=30010 comm="syz.3.9243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 463.222047][T30014] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 463.273181][T30019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9246'. [ 463.329341][T30021] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.9247'. [ 463.432065][T30032] 9p: Bad value for 'rfdno' [ 463.468972][T30040] loop6: detected capacity change from 0 to 512 [ 463.494148][T30040] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 463.515809][T30040] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c09c, mo2=0002] [ 463.523860][T30040] EXT4-fs (loop6): orphan cleanup on readonly fs [ 463.546092][T30040] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.9254: iget: bad i_size value: 12154761577498 [ 463.569586][T30040] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 463.569817][T30040] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.9254: couldn't read orphan inode 13 (err -117) [ 463.579074][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 463.579115][ C0] EXT4-fs (loop6): initial error at time 1771103002: ext4_orphan_get:1391: inode 13 [ 463.579142][ C0] EXT4-fs (loop6): last error at time 1771103002: ext4_orphan_get:1391: inode 13 [ 463.640488][T30049] loop9: detected capacity change from 0 to 2048 [ 463.691642][T30040] loop6: lost filesystem error report for type 5 error -117 [ 463.692239][T30040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 463.741588][T30040] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.9254: dx entry: limit 65535 != root limit 120 [ 463.754458][T30040] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.9254: Corrupt directory, running e2fsck is recommended [ 463.789226][T30040] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.9254: path /1662/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 463.893554][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.904184][T30049] loop9: p3 < > p4 < > [ 463.925217][T30049] loop9: partition table partially beyond EOD, truncated [ 463.943624][T30049] loop9: p3 start 4284289 is beyond EOD, truncated [ 463.955296][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 464.026090][ T8274] udevd[8274]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 464.070392][T30064] smc: net device hsr0 applied user defined pnetid SYZ2 [ 464.308307][T30073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9267'. [ 464.345384][T30073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9267'. [ 464.362069][T30073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9267'. [ 464.388309][T30073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9267'. [ 464.994597][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 465.053715][T30087] loop9: detected capacity change from 0 to 512 [ 465.070939][T30087] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 465.090793][T30087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c09c, mo2=0002] [ 465.106772][T30087] EXT4-fs (loop9): orphan cleanup on readonly fs [ 465.119011][T30087] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.9273: iget: bad i_size value: 12154761577498 [ 465.234664][T30087] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 465.236401][T30087] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.9273: couldn't read orphan inode 13 (err -117) [ 465.245599][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 465.245643][ C0] EXT4-fs (loop9): initial error at time 1771103004: ext4_orphan_get:1391: inode 13 [ 465.245678][ C0] EXT4-fs (loop9): last error at time 1771103004: ext4_orphan_get:1391: inode 13 [ 465.335335][T30087] loop9: lost filesystem error report for type 5 error -117 [ 465.336134][T30087] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 465.403048][T30087] EXT4-fs warning (device loop9): dx_probe:861: inode #2: comm syz.9.9273: dx entry: limit 65535 != root limit 120 [ 465.454424][T30087] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.9273: Corrupt directory, running e2fsck is recommended [ 465.486397][T30087] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 3: comm syz.9.9273: path /348/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 465.584994][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.631641][T30097] lo: Caught tx_queue_len zero misconfig [ 466.034629][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 466.076203][T30113] netlink: 'syz.6.9283': attribute type 1 has an invalid length. [ 466.217052][ T28] audit: type=1326 audit(1771103005.091:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7ffc0000 [ 466.241600][ T28] audit: type=1326 audit(1771103005.091:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7ffc0000 [ 466.266124][ T28] audit: type=1326 audit(1771103005.091:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6d1b6cbf79 code=0x7ffc0000 [ 466.290492][ T28] audit: type=1326 audit(1771103005.161:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30122 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d1b68c84e code=0x7ffc0000 [ 466.323781][T30125] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 466.330389][T30125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 466.330490][ T28] audit: type=1326 audit(1771103005.201:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7ffc0000 [ 466.354117][T30125] vhci_hcd vhci_hcd.0: Device attached [ 466.417837][T30125] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 466.424489][T30125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 466.426639][ T28] audit: type=1326 audit(1771103005.201:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7ffc0000 [ 466.468854][T30125] vhci_hcd vhci_hcd.0: Device attached [ 466.502088][T30133] bond0: (slave bond_slave_1): Releasing backup interface [ 466.519903][T30125] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 466.526484][T30125] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 466.542259][T30125] vhci_hcd vhci_hcd.0: Device attached [ 466.546852][ T28] audit: type=1326 audit(1771103005.301:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30122 comm="syz.7.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6d1b6cbf79 code=0x7ffc0000 [ 466.576644][T30125] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(9) [ 466.583199][T30125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 466.601945][T30125] vhci_hcd vhci_hcd.0: Device attached [ 466.606435][ T5273] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 466.637882][T30141] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(12) [ 466.644519][T30141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 466.652725][T30141] vhci_hcd vhci_hcd.0: Device attached [ 466.663138][T30125] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 466.695994][T30125] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(15) [ 466.702710][T30125] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 466.733269][T30125] vhci_hcd vhci_hcd.0: Device attached [ 466.748985][T30151] vhci_hcd: connection closed [ 466.749161][ T4543] vhci_hcd vhci_hcd.6: stop threads [ 466.749355][T30142] vhci_hcd: connection closed [ 466.753957][ T4543] vhci_hcd vhci_hcd.6: release socket [ 466.765408][T30137] vhci_hcd: connection closed [ 466.770416][T30130] vhci_hcd: connection closed [ 466.772354][T30126] vhci_hcd: connection reset by peer [ 466.786393][T30135] vhci_hcd: connection closed [ 466.789046][ T4543] vhci_hcd vhci_hcd.6: disconnect device [ 466.807336][ T4543] vhci_hcd vhci_hcd.6: stop threads [ 466.812634][ T4543] vhci_hcd vhci_hcd.6: release socket [ 466.818822][ T4543] vhci_hcd vhci_hcd.6: disconnect device [ 466.825034][ T4543] vhci_hcd vhci_hcd.6: stop threads [ 466.830569][ T4543] vhci_hcd vhci_hcd.6: release socket [ 466.851431][ T4543] vhci_hcd vhci_hcd.6: disconnect device [ 466.857419][ T4543] vhci_hcd vhci_hcd.6: stop threads [ 466.864907][ T4543] vhci_hcd vhci_hcd.6: release socket [ 466.875558][ T4543] vhci_hcd vhci_hcd.6: disconnect device [ 466.888064][ T4543] vhci_hcd vhci_hcd.6: stop threads [ 466.898738][ T4543] vhci_hcd vhci_hcd.6: release socket [ 466.916418][ T4543] vhci_hcd vhci_hcd.6: disconnect device [ 466.931039][ T4543] vhci_hcd vhci_hcd.6: stop threads [ 466.944734][ T4543] vhci_hcd vhci_hcd.6: release socket [ 466.962491][ T4543] vhci_hcd vhci_hcd.6: disconnect device [ 467.074612][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 467.429924][T30183] loop6: detected capacity change from 0 to 512 [ 467.459078][T30183] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #11: block 530: comm syz.6.9305: lblock 4 mapped to illegal pblock 530 (length 1) [ 467.495654][T30183] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 467.496147][T30183] EXT4-fs (loop6): 1 orphan inode deleted [ 467.505318][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 467.505339][ C1] EXT4-fs (loop6): initial error at time 1771103006: ext4_map_blocks:776: inode 11: block 530 [ 467.505411][ C1] EXT4-fs (loop6): last error at time 1771103006: ext4_map_blocks:776: inode 11: block 530 [ 467.609078][T30183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.680270][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.856355][ T28] audit: type=1400 audit(1771103006.731:3026): avc: denied { firmware_load } for pid=30203 comm="syz.3.9313" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 468.124670][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 468.246356][T30215] syz.3.9317 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 468.303051][T30215] CPU: 0 UID: 0 PID: 30215 Comm: syz.3.9317 Tainted: G W syzkaller #0 PREEMPT(full) [ 468.303179][T30215] Tainted: [W]=WARN [ 468.303186][T30215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 468.303270][T30215] Call Trace: [ 468.303278][T30215] [ 468.303286][T30215] __dump_stack+0x1d/0x30 [ 468.303325][T30215] dump_stack_lvl+0x95/0xd0 [ 468.303357][T30215] dump_stack+0x15/0x1b [ 468.303378][T30215] dump_header+0x80/0x240 [ 468.303418][T30215] oom_kill_process+0x295/0x350 [ 468.303458][T30215] out_of_memory+0x97d/0xb80 [ 468.303574][T30215] try_charge_memcg+0x62e/0xa10 [ 468.303659][T30215] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 468.303690][T30215] __swap_cache_prepare_and_add+0x386/0x530 [ 468.303798][T30215] swap_cache_alloc_folio+0xa2/0x120 [ 468.303830][T30215] swap_cluster_readahead+0x26e/0x3d0 [ 468.303874][T30215] swapin_readahead+0xde/0x840 [ 468.303916][T30215] ? _raw_spin_unlock+0x9/0x30 [ 468.303943][T30215] ? swap_put_entries_cluster+0x385/0x3a0 [ 468.304036][T30215] ? swap_put_entries_cluster+0x161/0x3a0 [ 468.304071][T30215] ? __rcu_read_unlock+0x4e/0x70 [ 468.304095][T30215] ? swap_cache_get_folio+0x26f/0x280 [ 468.304120][T30215] do_swap_page+0x309/0x2210 [ 468.304199][T30215] ? css_rstat_updated+0xbb/0x280 [ 468.304283][T30215] ? __rcu_read_lock+0x36/0x50 [ 468.304379][T30215] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 468.304439][T30215] handle_mm_fault+0xb40/0x3020 [ 468.304469][T30215] ? vma_start_read+0x1c7/0x2c0 [ 468.304496][T30215] do_user_addr_fault+0x62f/0x1050 [ 468.304587][T30215] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 468.304614][T30215] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 468.304666][T30215] ? trace_page_fault_user+0x1f/0xe0 [ 468.304707][T30215] exc_page_fault+0x62/0xa0 [ 468.304821][T30215] asm_exc_page_fault+0x26/0x30 [ 468.304843][T30215] RIP: 0033:0x7f92d7e29a0c [ 468.304930][T30215] Code: ca 30 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 468.304954][T30215] RSP: 002b:00007ffc796c96f0 EFLAGS: 00010206 [ 468.304975][T30215] RAX: 0000000000000000 RBX: 00007f92d81d5fa0 RCX: 000055557068a808 [ 468.305019][T30215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.305037][T30215] RBP: 00007f92d81d7da0 R08: 0000000000000000 R09: 0000000000000000 [ 468.305050][T30215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000072732 [ 468.305099][T30215] R13: 00007f92d81d609c R14: 0000000000072479 R15: 00007f92d81d6090 [ 468.305126][T30215] [ 468.730134][T30215] memory: usage 153020kB, limit 307200kB, failcnt 1220 [ 468.768642][T30215] memory+swap: usage 117100kB, limit 9007199254740988kB, failcnt 0 [ 468.808017][T30215] kmem: usage 77844kB, limit 9007199254740988kB, failcnt 0 [ 468.831089][T30215] Memory cgroup stats for /syz3: [ 468.831491][T30215] cache 0 [ 468.860185][T30215] rss 20480 [ 468.872701][T30215] shmem 0 [ 468.899376][T30215] mapped_file 0 [ 468.910576][T30215] dirty 0 [ 468.926702][T30215] writeback 0 [ 468.942025][T30215] workingset_refault_anon 5054 [ 468.959548][T30240] hub 2-0:1.0: USB hub found [ 468.964493][T30215] workingset_refault_file 730 [ 468.979550][T30240] hub 2-0:1.0: 8 ports detected [ 468.995873][T30215] swap 1024000 [ 468.999365][T30215] swapcached 4886528 [ 469.019094][T30215] pgpgin 395648 [ 469.022598][T30215] pgpgout 395640 [ 469.050577][T30215] pgfault 340800 [ 469.057724][T30215] pgmajfault 1325 [ 469.074649][T30215] inactive_anon 0 [ 469.099812][T30215] active_anon 28672 [ 469.112451][T30215] inactive_file 0 [ 469.133033][T30215] active_file 4096 [ 469.141246][T30215] unevictable 0 [ 469.148047][T30215] hierarchical_memory_limit 314572800 [ 469.154614][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 469.169070][T30215] hierarchical_memsw_limit 9223372036854771712 [ 469.183054][T30215] total_cache 0 [ 469.192905][T30215] total_rss 20480 [ 469.201175][T30215] total_shmem 0 [ 469.207892][T30215] total_mapped_file 0 [ 469.218025][T30215] total_dirty 0 [ 469.230726][T30215] total_writeback 0 [ 469.241280][T30215] total_workingset_refault_anon 5054 [ 469.253906][T30215] total_workingset_refault_file 730 [ 469.276139][T30215] total_swap 1024000 [ 469.287938][T30215] total_swapcached 4886528 [ 469.302249][T30215] total_pgpgin 395648 [ 469.319534][T30215] total_pgpgout 395640 [ 469.336122][T30215] total_pgfault 340802 [ 469.357620][T30215] total_pgmajfault 1325 [ 469.374955][T30215] total_inactive_anon 0 [ 469.393744][T30215] total_active_anon 28672 [ 469.411170][T30215] total_inactive_file 0 [ 469.423127][T30215] total_active_file 4096 [ 469.455607][T30215] total_unevictable 0 [ 469.471976][T30215] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6099,pid=21038,uid=0 [ 469.517856][T30215] Memory cgroup out of memory: Killed process 21038 (syz.3.6099) total-vm:96072kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 469.649906][T30270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9337'. [ 469.718234][T30270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9337'. [ 469.870387][T30292] netlink: 'syz.7.9345': attribute type 3 has an invalid length. [ 469.887569][T30296] loop6: detected capacity change from 0 to 128 [ 469.905719][T30292] netlink: 'syz.7.9345': attribute type 3 has an invalid length. [ 470.094195][T30311] netlink: 'syz.6.9354': attribute type 2 has an invalid length. [ 470.132338][T30311] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9354'. [ 470.194715][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 470.953805][T30366] netlink: 'syz.6.9379': attribute type 1 has an invalid length. [ 470.971953][T30366] netlink: 'syz.6.9379': attribute type 1 has an invalid length. [ 471.072717][T30374] netlink: 52 bytes leftover after parsing attributes in process `syz.9.9382'. [ 471.088637][T30374] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9382'. [ 471.226793][T30385] netlink: 'syz.9.9385': attribute type 1 has an invalid length. [ 471.234661][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 471.255560][T30385] bond5: entered promiscuous mode [ 471.260834][T30385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 471.274128][T30385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 471.304450][T30385] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 471.315389][T30385] bond5: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 471.327107][T30385] bond5: (slave vcan0): making interface the new active one [ 471.334507][T30385] vcan0: entered promiscuous mode [ 471.339747][ T28] audit: type=1400 audit(1771103010.211:3027): avc: denied { lock } for pid=30391 comm="syz.6.9389" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 471.365827][T30385] bond5: (slave vcan0): Enslaving as an active interface with an up link [ 471.634780][ T5273] usb 13-1: enqueue for inactive port 0 [ 471.640415][ T5273] usb 13-1: enqueue for inactive port 0 [ 471.715494][ T5273] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 472.284616][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 472.520473][T30449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.561427][T30449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.314589][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 473.497174][T30487] netlink: 'syz.7.9425': attribute type 1 has an invalid length. [ 473.506457][T30489] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9426'. [ 473.522160][T30487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.564650][T30493] bond4: option tlb_dynamic_lb: unable to set because the bond device is up [ 474.042783][T30521] netlink: 'syz.6.9441': attribute type 1 has an invalid length. [ 474.136606][T30529] bond8: (slave ip6gretap1): making interface the new active one [ 474.164286][T30529] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 474.204603][T30529] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 474.214388][T30529] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 474.231125][T30540] geneve2: entered promiscuous mode [ 474.354628][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 474.499673][ T28] audit: type=1400 audit(1771103013.371:3028): avc: denied { getopt } for pid=30559 comm="syz.2.9456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 475.085730][ T28] audit: type=1400 audit(1771103013.961:3029): avc: denied { connect } for pid=30590 comm="syz.7.9471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 475.394585][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 475.432889][T30616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9480'. [ 475.822670][ T28] audit: type=1326 audit(1771103014.691:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30639 comm="syz.2.9489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6176d9bf79 code=0x0 [ 475.994474][T30636] loop9: detected capacity change from 0 to 32768 [ 476.029491][ T28] audit: type=1326 audit(1771103014.901:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30613 comm="syz.6.9479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60faeebf79 code=0x0 [ 476.345453][T30646] veth0: entered promiscuous mode [ 476.356400][T30646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9490'. [ 476.377983][T30646] veth0 (unregistering): left promiscuous mode [ 476.434587][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 476.530419][T30654] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9494'. [ 476.623774][T30657] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9497'. [ 476.642674][ T28] audit: type=1326 audit(1771103015.511:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30661 comm="syz.7.9498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x0 [ 476.693416][T30665] loop9: detected capacity change from 0 to 512 [ 477.293227][T30696] loop6: detected capacity change from 0 to 1024 [ 477.410405][T30696] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 477.419577][T30696] System zones: 0-1, 3-36 [ 477.424982][T30696] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.9511: bad orphan inode 134217728 [ 477.436009][T30696] loop6: lost filesystem error report for type 5 error -117 [ 477.436656][T30696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.474588][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 477.571236][T30707] netlink: 'syz.7.9515': attribute type 83 has an invalid length. [ 477.712114][T30718] geneve4: entered promiscuous mode [ 477.722536][ T4541] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.744620][ T4541] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.759434][ T4541] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.802035][ T4541] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.153235][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.515208][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 479.293863][T30787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9547'. [ 479.554659][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 480.594596][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 481.187059][T30855] loop6: detected capacity change from 0 to 4096 [ 481.225578][T30855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.444140][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.634637][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 482.154578][ T28] audit: type=1400 audit(1771103021.021:3033): avc: denied { mount } for pid=30880 comm="syz.6.9587" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 482.214666][ T28] audit: type=1400 audit(1771103021.021:3034): avc: denied { search } for pid=30880 comm="syz.6.9587" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 482.244917][T30887] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9599'. [ 482.283139][ T28] audit: type=1400 audit(1771103021.021:3035): avc: denied { search } for pid=30880 comm="syz.6.9587" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 482.324620][T30887] netlink: 'syz.9.9599': attribute type 5 has an invalid length. [ 482.332424][T30887] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9599'. [ 482.348992][ T28] audit: type=1400 audit(1771103021.021:3036): avc: denied { read open } for pid=30880 comm="syz.6.9587" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 482.378218][T30887] geneve5: entered promiscuous mode [ 482.389144][T30887] geneve5: entered allmulticast mode [ 482.406335][ T4541] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 58721 - 0 [ 482.437358][ T4541] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 58721 - 0 [ 482.466076][ T4541] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 58721 - 0 [ 482.507178][ T4541] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 58721 - 0 [ 482.674619][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 483.114723][T30905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.186667][T30905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.245064][T30905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.253529][T30905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.316687][T30905] netlink: 566 bytes leftover after parsing attributes in process `syz.9.9595'. [ 483.714592][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 483.945510][T30929] loop9: detected capacity change from 0 to 512 [ 484.011840][T30929] EXT4-fs: Ignoring removed oldalloc option [ 484.057028][T30929] EXT4-fs (loop9): 1 truncate cleaned up [ 484.099044][T30929] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.178569][ T28] audit: type=1400 audit(1771103023.051:3037): avc: denied { read } for pid=30928 comm="syz.9.9605" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 484.250547][ T28] audit: type=1400 audit(1771103023.071:3038): avc: denied { open } for pid=30928 comm="syz.9.9605" path="/" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 484.326059][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.391836][ T28] audit: type=1400 audit(1771103023.261:3039): avc: denied { ioctl } for pid=30939 comm="syz.9.9607" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 484.764641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 485.003187][T30968] loop6: detected capacity change from 0 to 128 [ 485.049701][T30968] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 485.124869][T30968] ext4 filesystem being mounted at /1748/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 485.212908][ T4733] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 485.660957][T30993] loop9: detected capacity change from 0 to 1024 [ 485.697528][T30993] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.794595][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 486.233905][T31017] loop6: detected capacity change from 0 to 4096 [ 486.256227][T31017] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 486.495453][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.675416][ T28] audit: type=1400 audit(1771103025.541:3040): avc: denied { override_creds } for pid=31058 comm="syz.3.9638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 486.834592][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 487.023828][ T28] audit: type=1400 audit(1771103025.891:3041): avc: denied { read } for pid=31108 comm="syz.3.9642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 487.076643][T31114] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9644'. [ 487.197112][ T28] audit: type=1400 audit(1771103026.071:3042): avc: denied { listen } for pid=31125 comm="syz.9.9647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 487.275309][ T28] audit: type=1400 audit(1771103026.101:3043): avc: denied { read } for pid=31125 comm="syz.9.9647" path="socket:[119732]" dev="sockfs" ino=119732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 487.299767][T31134] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9649'. [ 487.319725][T31134] netlink: 'syz.6.9649': attribute type 5 has an invalid length. [ 487.354495][T31134] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9649'. [ 487.382310][T31134] geneve5: entered promiscuous mode [ 487.387993][T31134] geneve5: entered allmulticast mode [ 487.408644][ T70] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 40677 - 0 [ 487.423891][ T70] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 40677 - 0 [ 487.453037][ T70] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 40677 - 0 [ 487.482407][ T70] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 40677 - 0 [ 487.604792][T31161] loop6: detected capacity change from 0 to 128 [ 487.649889][T31161] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 487.678561][T31161] ext4 filesystem being mounted at /1763/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.750597][ T28] audit: type=1400 audit(1771103026.621:3044): avc: denied { create } for pid=31160 comm="syz.6.9654" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 487.829942][ T4733] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 487.846735][ T28] audit: type=1400 audit(1771103026.671:3045): avc: denied { rename } for pid=31160 comm="syz.6.9654" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 487.895323][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 488.053773][ T28] audit: type=1400 audit(1771103026.911:3046): avc: denied { getopt } for pid=31173 comm="syz.6.9655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 488.165704][T31213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9658'. [ 488.223400][T31224] loop9: detected capacity change from 0 to 1024 [ 488.247471][T31224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 488.265680][T31224] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.298378][T31224] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9661: bg 0: block 112: padding at end of block bitmap is not set [ 488.315570][T31222] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: comm syz.9.9661: lblock 0 mapped to illegal pblock 0 (length 1) [ 488.340214][T31222] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #15: comm syz.9.9661: lblock 0 mapped to illegal pblock 0 (length 1) [ 488.353659][T31230] pim6reg1: entered allmulticast mode [ 488.394915][T31222] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #15: comm syz.9.9661: lblock 0 mapped to illegal pblock 0 (length 1) [ 488.425017][T31222] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #15: comm syz.9.9661: lblock 0 mapped to illegal pblock 0 (length 1) [ 488.456345][T31222] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #15: comm syz.9.9661: lblock 0 mapped to illegal pblock 0 (length 1) [ 488.490588][T31222] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #15: comm syz.9.9661: lblock 0 mapped to illegal pblock 0 (length 1) [ 488.525251][T31224] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #15: comm syz.9.9661: lblock 0 mapped to illegal pblock 0 (length 1) [ 488.804994][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 488.924611][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 488.969447][T31249] loop9: detected capacity change from 0 to 1024 [ 489.005861][T31249] EXT4-fs: inline encryption not supported [ 489.012150][T31249] EXT4-fs: Ignoring removed nobh option [ 489.024685][T31249] EXT4-fs: Ignoring removed bh option [ 489.060651][T31249] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.228043][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.361711][T31283] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9690'. [ 489.662402][T31304] loop6: detected capacity change from 0 to 1024 [ 489.670711][T31304] EXT4-fs: inline encryption not supported [ 489.678365][T31305] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9708'. [ 489.691154][T31304] EXT4-fs: Ignoring removed nobh option [ 489.706538][T31305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.720480][T31304] EXT4-fs: Ignoring removed bh option [ 489.756890][T31304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.815927][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.855790][T31326] bond0: Device is already in use. [ 489.964618][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 490.114564][ T28] audit: type=1400 audit(1771103028.981:3047): avc: denied { shutdown } for pid=31357 comm="syz.6.9723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 490.235631][T31366] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9727'. [ 490.353163][ T28] audit: type=1400 audit(1771103029.221:3048): avc: denied { map } for pid=31372 comm="syz.6.9729" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 490.405499][T31373] loop6: detected capacity change from 0 to 2048 [ 490.423835][ T28] audit: type=1400 audit(1771103029.221:3049): avc: denied { execute } for pid=31372 comm="syz.6.9729" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 490.477727][T31373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.528844][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.003950][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 492.035310][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 492.260000][T31435] loop9: detected capacity change from 0 to 128 [ 492.294879][T31435] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 492.968604][T31468] netlink: 'syz.2.9765': attribute type 16 has an invalid length. [ 492.988620][T31468] netlink: 'syz.2.9765': attribute type 17 has an invalid length. [ 493.084628][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 493.314306][ T28] audit: type=1400 audit(1771103032.181:3050): avc: denied { lock } for pid=31486 comm="syz.3.9773" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=120121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 493.343269][T31468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.360833][T31476] netlink: 'syz.9.9769': attribute type 5 has an invalid length. [ 494.115324][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 494.440860][T31532] netlink: 'syz.9.9794': attribute type 29 has an invalid length. [ 494.450740][T31532] netlink: 'syz.9.9794': attribute type 29 has an invalid length. [ 494.461963][T31532] netlink: 500 bytes leftover after parsing attributes in process `syz.9.9794'. [ 494.495170][T31532] unsupported nla_type 66 [ 494.647865][ T28] audit: type=1326 audit(1771103033.521:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31538 comm="syz.7.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7fc00000 [ 494.676714][ T28] audit: type=1326 audit(1771103033.521:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31538 comm="syz.7.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d1b6cbf79 code=0x7fc00000 [ 494.701316][ T28] audit: type=1326 audit(1771103033.541:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31538 comm="syz.7.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7fc00000 [ 494.771776][ T28] audit: type=1326 audit(1771103033.541:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31538 comm="syz.7.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7fc00000 [ 494.817311][ T28] audit: type=1326 audit(1771103033.541:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31538 comm="syz.7.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7fc00000 [ 494.856461][ T28] audit: type=1326 audit(1771103033.541:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31538 comm="syz.7.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7fc00000 [ 494.882142][T31563] all: renamed from veth1_to_bond (while UP) [ 494.888415][ T28] audit: type=1326 audit(1771103033.541:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31538 comm="syz.7.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7fc00000 [ 494.913467][ T28] audit: type=1326 audit(1771103033.541:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31538 comm="syz.7.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7fc00000 [ 494.954570][ T28] audit: type=1326 audit(1771103033.541:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31538 comm="syz.7.9798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7fc00000 [ 495.164737][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 495.563649][T31602] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9821'. [ 495.573595][T31602] 8021q: VLANs not supported on lo [ 496.204621][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 497.148889][T31682] xt_hashlimit: size too large, truncated to 1048576 [ 497.210376][T31687] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9855'. [ 497.234584][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 497.507028][T31699] loop9: detected capacity change from 0 to 4096 [ 497.565181][T31699] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.723459][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.840509][T31712] tipc: Failed to remove unknown binding: 66,1,1/0:2007994264/2007994266 [ 497.875285][T31712] tipc: Failed to remove unknown binding: 66,1,1/0:2007994264/2007994266 [ 498.284594][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 498.339337][T31722] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9871'. [ 498.358541][T31722] netlink: 'syz.7.9871': attribute type 12 has an invalid length. [ 498.374883][T31722] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9871'. [ 498.394040][T31722] netlink: 'syz.7.9871': attribute type 12 has an invalid length. [ 498.456681][ T28] kauditd_printk_skb: 193 callbacks suppressed [ 498.456698][ T28] audit: type=1326 audit(1771103037.331:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31724 comm="syz.7.9872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x0 [ 498.805472][T31735] loop9: detected capacity change from 0 to 512 [ 498.866462][T31735] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.914119][T31735] ext4 filesystem being mounted at /464/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 499.102961][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.314585][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 499.360216][T31759] uprobe: syz.7.9884:31759 failed to unregister, leaking uprobe [ 499.400468][T31705] loop6: detected capacity change from 0 to 2048 [ 499.561642][T31705] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.606434][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.637724][ T28] audit: type=1326 audit(1771103038.511:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31790 comm="syz.6.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60faeebf79 code=0x7ffc0000 [ 499.661823][T31791] loop6: detected capacity change from 0 to 164 [ 499.668648][ T28] audit: type=1326 audit(1771103038.531:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31790 comm="syz.6.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f60faeebf79 code=0x7ffc0000 [ 499.693450][T31791] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 499.699229][ T28] audit: type=1326 audit(1771103038.531:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31790 comm="syz.6.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f60faeebce2 code=0x7ffc0000 [ 499.729390][T31791] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 499.729857][ T28] audit: type=1326 audit(1771103038.531:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31790 comm="syz.6.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f60faeac84e code=0x7ffc0000 [ 499.758458][T31791] Symlink component flag not implemented [ 499.763939][ T28] audit: type=1326 audit(1771103038.531:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31790 comm="syz.6.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f60faeebda7 code=0x7ffc0000 [ 499.780505][T31791] Symlink component flag not implemented [ 499.792797][ T28] audit: type=1326 audit(1771103038.531:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31790 comm="syz.6.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60faeac84e code=0x7ffc0000 [ 499.806649][T31791] Symlink component flag not implemented (7) [ 499.822526][ T28] audit: type=1326 audit(1771103038.531:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31790 comm="syz.6.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f60faeebc0b code=0x7ffc0000 [ 499.846081][T31791] Symlink component flag not implemented (116) [ 499.851067][ T28] audit: type=1326 audit(1771103038.531:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31790 comm="syz.6.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f60faeac84e code=0x7ffc0000 [ 499.879177][ T28] audit: type=1326 audit(1771103038.531:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31790 comm="syz.6.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f60faeac84e code=0x7ffc0000 [ 500.023700][T31800] loop6: detected capacity change from 0 to 1024 [ 500.066848][T31800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.106253][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.354605][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 500.600935][T31821] loop9: detected capacity change from 0 to 512 [ 500.745666][T31831] loop9: detected capacity change from 0 to 256 [ 500.797635][T31831] FAT-fs (loop9): Directory bread(block 64) failed [ 500.819695][T31831] FAT-fs (loop9): Directory bread(block 65) failed [ 500.846587][T31831] FAT-fs (loop9): Directory bread(block 66) failed [ 500.870543][T31831] FAT-fs (loop9): Directory bread(block 67) failed [ 500.904647][T31831] FAT-fs (loop9): Directory bread(block 68) failed [ 500.925321][T31831] FAT-fs (loop9): Directory bread(block 69) failed [ 500.962332][T31831] FAT-fs (loop9): Directory bread(block 70) failed [ 501.000929][T31831] FAT-fs (loop9): Directory bread(block 71) failed [ 501.016720][T31831] FAT-fs (loop9): Directory bread(block 72) failed [ 501.030788][T31831] FAT-fs (loop9): Directory bread(block 73) failed [ 501.249726][T31850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9921'. [ 501.357278][T31855] batadv_slave_1: entered promiscuous mode [ 501.372614][T31855] batadv_slave_0: entered promiscuous mode [ 501.386388][T31854] batadv_slave_0: left promiscuous mode [ 501.392094][T31854] batadv_slave_1: left promiscuous mode [ 501.404587][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 501.652820][T31872] loop9: detected capacity change from 0 to 2048 [ 501.683166][T31872] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.726242][T31872] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.780499][T31881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9933'. [ 501.795186][T31882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 501.838077][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.110512][ T5286] kernel write not supported for file bpf-prog (pid: 5286 comm: kworker/1:9) [ 502.266394][T31911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9945'. [ 502.444606][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 502.476424][T31924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9951'. [ 502.496156][T31924] team1: entered promiscuous mode [ 502.501252][T31924] team1: entered allmulticast mode [ 502.526695][T31924] 8021q: adding VLAN 0 to HW filter on device team1 [ 502.886862][T31967] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9965'. [ 502.919085][T31971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9966'. [ 503.004337][T31982] netlink: 'syz.3.9972': attribute type 1 has an invalid length. [ 503.071965][T31982] gretap1: entered allmulticast mode [ 503.092336][T31982] bond8: (slave gretap1): making interface the new active one [ 503.129060][T31982] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 503.153050][T31988] VFS: Mount too revealing [ 503.308112][T31999] netlink: 'syz.6.9977': attribute type 4 has an invalid length. [ 503.328194][T31998] sock: sock_set_timeout: `syz.3.9978' (pid 31998) tries to set negative timeout [ 503.339365][T31999] netlink: 'syz.6.9977': attribute type 4 has an invalid length. [ 503.484736][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 504.288833][T32040] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9993'. [ 504.514580][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 504.911359][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 504.911374][ T28] audit: type=1400 audit(1771103043.781:3274): avc: denied { ioctl } for pid=32077 comm="syz.7.10009" path="socket:[122987]" dev="sockfs" ino=122987 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 505.098180][ T3417] kernel read not supported for file bpf-prog (pid: 3417 comm: kworker/1:4) [ 505.125297][T32096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10015'. [ 505.137820][T32096] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 505.175406][T32096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10015'. [ 505.189669][T32096] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 505.554600][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 505.613599][T32131] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10029'. [ 506.594600][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 506.938889][T32179] __nla_validate_parse: 1 callbacks suppressed [ 506.938908][T32179] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10049'. [ 506.974125][T31201] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.983787][T32179] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10049'. [ 506.994760][T31201] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.014661][T31201] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.023708][T32177] infiniband syz1: set active [ 507.028315][T31201] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.041290][T32177] infiniband syz1: added syz_tun [ 507.073758][T32177] RDS/IB: syz1: added [ 507.083380][T32177] smc: adding ib device syz1 with port count 1 [ 507.105417][T32177] smc: ib device syz1 port 1 has no pnetid [ 507.322431][T32191] loop9: detected capacity change from 0 to 128 [ 507.336480][T32191] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 507.354828][T32191] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 507.419614][T32193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10055'. [ 507.445619][T32193] erspan0: entered promiscuous mode [ 507.456784][T32193] macvtap0: entered promiscuous mode [ 507.471087][T32193] macvtap0: entered allmulticast mode [ 507.494041][T32193] erspan0: entered allmulticast mode [ 507.505659][T32196] erspan0: left allmulticast mode [ 507.510930][T32196] erspan0: left promiscuous mode [ 507.581077][T32201] loop6: detected capacity change from 0 to 1024 [ 507.634622][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 507.682800][T32201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.757540][T32201] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4224: comm syz.6.10057: Allocating blocks 385-513 which overlap fs metadata [ 507.890174][T32201] EXT4-fs (loop6): pa ffff88810859f0e0: logic 16, phys. 129, len 24 [ 507.898281][T32201] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5467: group 0, free 0, pa_free 8 [ 508.129987][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.621784][T32245] tipc: Enabled bearer , priority 18 [ 508.675235][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 509.052849][ T28] audit: type=1326 audit(1771103047.921:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32274 comm="syz.3.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 509.081879][ T28] audit: type=1326 audit(1771103047.921:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32274 comm="syz.3.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 509.123411][ T28] audit: type=1326 audit(1771103047.921:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32274 comm="syz.3.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 509.170538][ T28] audit: type=1326 audit(1771103047.951:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32274 comm="syz.3.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 509.201941][ T28] audit: type=1326 audit(1771103047.951:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32274 comm="syz.3.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 509.229282][ T28] audit: type=1326 audit(1771103047.951:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32274 comm="syz.3.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 509.229492][T32281] lo: Caught tx_queue_len zero misconfig [ 509.252972][ T28] audit: type=1326 audit(1771103047.951:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32274 comm="syz.3.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 509.253024][ T28] audit: type=1326 audit(1771103047.951:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32274 comm="syz.3.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 509.253059][ T28] audit: type=1326 audit(1771103047.951:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32274 comm="syz.3.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f92d7f5bf79 code=0x7ffc0000 [ 509.339689][T32289] tipc: Failed to remove unknown binding: 66,1,1/0:771794425/771794427 [ 509.348060][T32289] tipc: Failed to remove unknown binding: 66,1,1/0:771794425/771794427 [ 509.724569][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 509.818441][T32316] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10103'. [ 509.991392][T32329] netlink: 'syz.7.10108': attribute type 1 has an invalid length. [ 510.000100][T32329] netlink: 64475 bytes leftover after parsing attributes in process `syz.7.10108'. [ 510.031629][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 510.031676][ T28] audit: type=1326 audit(1771103048.901:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32330 comm="syz.7.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7ffc0000 [ 510.062851][ T28] audit: type=1326 audit(1771103048.901:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32330 comm="syz.7.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7ffc0000 [ 510.087805][ T28] audit: type=1326 audit(1771103048.901:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32330 comm="syz.7.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7ffc0000 [ 510.112357][ T28] audit: type=1326 audit(1771103048.901:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32330 comm="syz.7.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7ffc0000 [ 510.141366][ T28] audit: type=1326 audit(1771103048.901:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32330 comm="syz.7.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1b6cbf79 code=0x7ffc0000 [ 510.209395][ T28] audit: type=1326 audit(1771103048.931:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32330 comm="syz.7.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6d1b6cbf79 code=0x7ffc0000 [ 510.243905][ T28] audit: type=1326 audit(1771103048.961:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32330 comm="syz.7.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d1b68c84e code=0x7ffc0000 [ 510.268955][ T28] audit: type=1326 audit(1771103048.981:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32330 comm="syz.7.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d1b68c84e code=0x7ffc0000 [ 510.322003][ T28] audit: type=1326 audit(1771103049.011:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32330 comm="syz.7.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d1b68c84e code=0x7ffc0000 [ 510.348646][ T28] audit: type=1326 audit(1771103049.021:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32330 comm="syz.7.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6d1b68c84e code=0x7ffc0000 [ 510.754574][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 511.335549][T32405] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10140'. [ 511.595315][T32418] bond5: entered allmulticast mode [ 511.604604][T32418] vcan0: entered allmulticast mode [ 511.615347][T32416] bond5: left allmulticast mode [ 511.620233][T32416] vcan0: left allmulticast mode [ 511.804636][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 511.887152][T32428] netlink: 'syz.9.10150': attribute type 2 has an invalid length. [ 511.895312][T32428] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10150'. [ 511.905190][T32428] netlink: 'syz.9.10150': attribute type 2 has an invalid length. [ 511.924177][T32428] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10150'. [ 512.030777][T32437] loop6: detected capacity change from 0 to 512 [ 512.053581][T32437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.075737][T32437] ext4 filesystem being mounted at /1851/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.223464][T32454] EXT4-fs (loop6): shut down requested (2) [ 512.350498][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.409759][T32462] loop6: detected capacity change from 0 to 512 [ 512.438129][T32462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.451450][T32462] ext4 filesystem being mounted at /1852/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 512.623935][T32470] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 512.657283][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.834596][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 513.161206][T32518] batadv_slave_0: entered promiscuous mode [ 513.179551][T32518] batadv_slave_1: entered promiscuous mode [ 513.193611][T32516] batadv_slave_1: left promiscuous mode [ 513.207188][T32516] batadv_slave_0: left promiscuous mode [ 513.585820][T32549] netlink: 'syz.3.10197': attribute type 1 has an invalid length. [ 513.593674][T32549] netlink: 'syz.3.10197': attribute type 4 has an invalid length. [ 513.625237][T32549] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.10197'. [ 513.876528][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 514.031665][T32571] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10206'. [ 514.070854][T32571] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10206'. [ 514.264464][T32577] loop9: detected capacity change from 0 to 1024 [ 514.298021][T32577] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.914678][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 515.150466][T32609] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 515.176386][T32609] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 515.197883][T32609] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.311077][T32609] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 515.356742][T32609] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 515.377335][T32609] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.460389][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.472474][T32609] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 515.504571][T32609] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 515.533227][T32609] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.562449][T32630] loop9: detected capacity change from 0 to 512 [ 515.611463][T32609] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 515.628676][T32630] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 515.650785][T32609] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 515.666266][T32630] EXT4-fs error (device loop9): xattr_find_entry:337: inode #15: comm syz.9.10226: corrupted xattr entries [ 515.683739][T32609] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.695080][T32630] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 515.695282][T32630] EXT4-fs (loop9): 1 orphan inode deleted [ 515.710209][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 515.710230][ C1] EXT4-fs (loop9): initial error at time 1771103054: xattr_find_entry:337: inode 15 [ 515.710255][ C1] EXT4-fs (loop9): last error at time 1771103054: xattr_find_entry:337: inode 15 [ 515.736591][T32630] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.786765][T31205] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.810286][T31205] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 515.818841][T31205] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.830971][T31205] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.839952][T31205] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 515.848375][T31205] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.878692][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.889954][T32647] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 515.909758][ T4539] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.932777][ T4539] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 515.953309][ T4539] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.964602][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 516.006895][ T4539] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.022945][ T4539] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 516.032085][ T4539] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.151854][T32665] netlink: 2020 bytes leftover after parsing attributes in process `syz.2.10238'. [ 516.185608][T32665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10238'. [ 516.894310][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 516.894327][ T28] audit: type=1400 audit(1771103055.761:3338): avc: denied { cmd } for pid=32703 comm="syz.3.10254" path="socket:[124149]" dev="sockfs" ino=124149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 516.934098][T32701] loop6: detected capacity change from 0 to 8192 [ 516.958875][T32701] loop6: p1 p2 p4 [ 516.965268][T32701] loop6: p4 size 262912 extends beyond EOD, truncated [ 516.979725][T32710] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 516.994593][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 517.098975][ T28] audit: type=1400 audit(1771103055.971:3339): avc: denied { getopt } for pid=32719 comm="syz.2.10261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 517.274093][T32740] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10269'. [ 517.312907][T32740] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10269'. [ 517.388858][T32745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10270'. [ 517.576817][T32752] bond0: option lp_interval: invalid value (0) [ 517.583016][T32752] bond0: option lp_interval: allowed values 1 - 2147483647 [ 517.693469][T32766] sctp: [Deprecated]: syz.7.10279 (pid 32766) Use of int in max_burst socket option. [ 517.693469][T32766] Use struct sctp_assoc_value instead [ 517.842451][ T319] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10288'. [ 518.044571][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 518.624845][ T340] xt_hashlimit: size too large, truncated to 1048576 [ 518.732837][ T28] audit: type=1400 audit(1771103057.601:3340): avc: denied { write } for pid=356 comm="syz.3.10303" name="/" dev="configfs" ino=2062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 519.084619][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 519.510078][ T28] audit: type=1326 audit(1771103058.381:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=367 comm="syz.2.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6176d9bf79 code=0x7ffc0000 [ 519.558687][ T28] audit: type=1326 audit(1771103058.381:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=367 comm="syz.2.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f6176d9bf79 code=0x7ffc0000 [ 519.603331][ T28] audit: type=1326 audit(1771103058.381:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=367 comm="syz.2.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6176d9bf79 code=0x7ffc0000 [ 519.653774][ T28] audit: type=1326 audit(1771103058.381:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=367 comm="syz.2.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f6176d9bf79 code=0x7ffc0000 [ 519.734231][ T28] audit: type=1326 audit(1771103058.381:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=367 comm="syz.2.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6176d9bf79 code=0x7ffc0000 [ 519.805449][ T28] audit: type=1326 audit(1771103058.381:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=367 comm="syz.2.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6176d9bf79 code=0x7ffc0000 [ 519.866598][ T389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10315'. [ 520.101349][ T415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10326'. [ 520.128625][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 520.143400][ T417] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10327'. [ 520.152645][ T417] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10327'. [ 520.298986][ T426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10330'. [ 520.311361][ T426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10330'. [ 520.337123][ T428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10331'. [ 520.346501][ T426] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10330'. [ 520.887920][ T449] IPv6: sit4: Disabled Multicast RS [ 521.154595][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 521.297262][ T469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10345'. [ 521.631812][ T481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10349'. [ 521.638562][ T439] kexec: Could not allocate control_code_buffer [ 521.981808][ T511] loop6: detected capacity change from 0 to 4096 [ 522.027190][ T511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.204606][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 522.431118][ T4733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.234628][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 523.900774][ T590] loop9: detected capacity change from 0 to 128 [ 523.915288][ T590] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 523.935544][ T590] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 523.994079][ T590] ext2 filesystem being mounted at /551/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 524.109227][ T590] EXT4-fs error (device loop9): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.9.10388: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 524.180527][T24502] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 524.284606][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 524.506397][ T28] audit: type=1326 audit(1771103063.381:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=583 comm="syz.2.10387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6176d9bf79 code=0x7fc00000 [ 525.290292][ T651] loop9: detected capacity change from 0 to 512 [ 525.324588][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 525.325398][ T651] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 525.459593][ T651] loop9: detected capacity change from 0 to 8192 [ 525.487653][ T651] bio_check_eod: 85 callbacks suppressed [ 525.487668][ T651] syz.9.10411: attempt to access beyond end of device [ 525.487668][ T651] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 525.511490][ T651] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 525.525173][ T651] FAT-fs (loop9): Filesystem has been set read-only [ 525.534492][ T651] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 525.543016][ T651] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 525.551962][ T654] syz.9.10411: attempt to access beyond end of device [ 525.551962][ T654] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 525.613282][ T654] Buffer I/O error on dev loop9, logical block 57847, async page read [ 525.637725][ T654] syz.9.10411: attempt to access beyond end of device [ 525.637725][ T654] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 525.652710][ T654] Buffer I/O error on dev loop9, logical block 57847, async page read [ 525.689415][ T656] __nla_validate_parse: 3 callbacks suppressed [ 525.689433][ T656] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10413'. [ 525.707630][ T658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10412'. [ 525.917913][ T678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=678 comm=syz.2.10420 [ 526.354577][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 526.520622][ T28] audit: type=1400 audit(1771103065.391:3348): avc: denied { watch watch_reads } for pid=699 comm="syz.7.10429" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 527.120000][ T715] veth8: entered promiscuous mode [ 527.129470][ T715] veth8: entered allmulticast mode [ 527.227513][ T721] netlink: 'syz.2.10438': attribute type 27 has an invalid length. [ 527.394593][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 527.455761][ T721] geneve2: left promiscuous mode [ 527.477695][ T722] gretap0: left promiscuous mode [ 527.515076][ T722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.524243][ T722] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.550256][ T722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.583884][ T733] pimreg: entered allmulticast mode [ 527.589571][T31205] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.598872][T31205] netdevsim netdevsim2 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 527.608140][T31205] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.616845][T31205] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.650038][T31205] netdevsim netdevsim2 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 527.660021][T31205] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.722811][T31205] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.768891][T31205] netdevsim netdevsim2 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 527.777573][T31205] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.786583][T31205] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.810566][T31205] netdevsim netdevsim2 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 527.869281][T31205] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.897710][T31205] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 40677 - 0 [ 527.916974][T31205] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 40677 - 0 [ 527.939115][T31205] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 40677 - 0 [ 527.958593][T31205] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 40677 - 0 [ 527.989560][ T752] loop6: detected capacity change from 0 to 128 [ 527.998855][ T752] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54) [ 528.024569][ T752] FAT-fs (loop6): Filesystem has been set read-only [ 528.088319][ T754] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10449'. [ 528.097893][ T754] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10449'. [ 528.108698][ T752] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54) [ 528.339309][ T765] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10453'. [ 528.370989][ T761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.414222][ T761] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.434619][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 528.473739][ T776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10455'. [ 528.505233][ T761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.520258][ T776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10455'. [ 528.853574][ T802] xt_hashlimit: size too large, truncated to 1048576 [ 528.922119][ T805] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10464'. [ 528.933798][ T28] audit: type=1400 audit(1771103067.791:3349): avc: denied { read append } for pid=803 comm="syz.7.10465" name="file0" dev="tmpfs" ino=7275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 528.975758][ T805] bridge_slave_0 (unregistering): left allmulticast mode [ 528.985383][ T28] audit: type=1326 audit(1771103067.831:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=777 comm="syz.3.10456" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92d7f5bf79 code=0x0 [ 529.016659][ T805] bridge_slave_0 (unregistering): left promiscuous mode [ 529.036158][ T805] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.236020][ T28] audit: type=1400 audit(1771103068.111:3351): avc: denied { read } for pid=813 comm="syz.9.10467" path="socket:[128137]" dev="sockfs" ino=128137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 529.474581][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 529.645264][ T838] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 529.839202][ T849] loop9: detected capacity change from 0 to 1024 [ 529.862919][ T849] EXT4-fs: Ignoring removed oldalloc option [ 529.899037][ T849] EXT4-fs: Ignoring removed bh option [ 529.938343][ T849] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.514583][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 530.589936][ T853] ================================================================== [ 530.598074][ T853] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 530.606111][ T853] [ 530.608460][ T853] write to 0xffff8881135d612c of 4 bytes by task 849 on cpu 1: [ 530.616032][ T853] xas_set_mark+0x12b/0x140 [ 530.620582][ T853] __folio_start_writeback+0x17b/0x370 [ 530.626077][ T853] ext4_bio_write_folio+0x5ad/0x9f0 [ 530.631312][ T853] mpage_process_page_bufs+0x4a1/0x620 [ 530.636827][ T853] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 530.642671][ T853] ext4_do_writepages+0x70f/0x2840 [ 530.647904][ T853] ext4_writepages+0x18f/0x320 [ 530.652689][ T853] do_writepages+0x1c6/0x310 [ 530.657313][ T853] file_write_and_wait_range+0x178/0x2f0 [ 530.662988][ T853] generic_buffers_fsync_noflush+0x45/0x130 [ 530.668920][ T853] ext4_sync_file+0x1aa/0x6b0 [ 530.673650][ T853] vfs_fsync_range+0xc5/0xe0 [ 530.678260][ T853] ext4_buffered_write_iter+0x34f/0x3c0 [ 530.683842][ T853] ext4_file_write_iter+0x380/0xfa0 [ 530.689130][ T853] iter_file_splice_write+0x6bc/0xa80 [ 530.694539][ T853] direct_splice_actor+0x156/0x2a0 [ 530.699712][ T853] splice_direct_to_actor+0x311/0x670 [ 530.705130][ T853] do_splice_direct+0x119/0x1a0 [ 530.710024][ T853] do_sendfile+0x382/0x650 [ 530.714458][ T853] __x64_sys_sendfile64+0x105/0x150 [ 530.719709][ T853] x64_sys_call+0x2dc4/0x3020 [ 530.724416][ T853] do_syscall_64+0x12c/0x370 [ 530.729073][ T853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.734990][ T853] [ 530.737359][ T853] read to 0xffff8881135d612c of 4 bytes by task 853 on cpu 0: [ 530.744837][ T853] file_write_and_wait_range+0x130/0x2f0 [ 530.750520][ T853] generic_buffers_fsync_noflush+0x45/0x130 [ 530.756438][ T853] ext4_sync_file+0x1aa/0x6b0 [ 530.761165][ T853] vfs_fsync_range+0xc5/0xe0 [ 530.765789][ T853] ext4_buffered_write_iter+0x34f/0x3c0 [ 530.771373][ T853] ext4_file_write_iter+0x380/0xfa0 [ 530.776605][ T853] iter_file_splice_write+0x6bc/0xa80 [ 530.782036][ T853] direct_splice_actor+0x156/0x2a0 [ 530.787286][ T853] splice_direct_to_actor+0x311/0x670 [ 530.792709][ T853] do_splice_direct+0x119/0x1a0 [ 530.797611][ T853] do_sendfile+0x382/0x650 [ 530.802068][ T853] __x64_sys_sendfile64+0x105/0x150 [ 530.807304][ T853] x64_sys_call+0x2dc4/0x3020 [ 530.812027][ T853] do_syscall_64+0x12c/0x370 [ 530.816641][ T853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.822559][ T853] [ 530.824901][ T853] value changed: 0x0a000021 -> 0x04000021 [ 530.830636][ T853] [ 530.832975][ T853] Reported by Kernel Concurrency Sanitizer on: [ 530.839170][ T853] CPU: 0 UID: 0 PID: 853 Comm: syz.9.10480 Tainted: G W syzkaller #0 PREEMPT(full) [ 530.850050][ T853] Tainted: [W]=WARN [ 530.853879][ T853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 530.863964][ T853] ================================================================== [ 530.976232][T24502] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.564598][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 532.594593][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 533.634584][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 534.684590][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 535.714616][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 536.754749][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 537.794629][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 538.834598][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 539.875234][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available