last executing test programs: 1m23.577959673s ago: executing program 3 (id=152): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) 1m23.546034025s ago: executing program 3 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1m23.478126008s ago: executing program 3 (id=155): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1400) getpid() setns(0xffffffffffffffff, 0x24020000) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_open_pts(0xffffffffffffffff, 0x103100) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x12}, 0x68a5, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xe805, 0x0, 0x0, 0x0, 0x40000000000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) madvise(&(0x7f0000e22000/0x2000)=nil, 0x2000, 0x0) 1m23.330085246s ago: executing program 3 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) 1m23.25580123s ago: executing program 3 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1m21.926802614s ago: executing program 4 (id=187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="06e28092c5ec1d88d05e0a6f2ce709c63de1ab461557270000fc494605c77dc874d0734eed79ecd2e373cf63d3a4e9a461877edf08af5c6c56be907e383f7a1cce50acae1ed1944d1e00f576d2365e27c059eaceee4e56e1f161effd91efedde230512ce932b03ea7ccfb1442c3d8c8954f4b9cdc4bc9dc1f14af9e5b22f9ba40774572c6992ca3e89d70fc2ab813333d71fbea6b7a7b60004285435319ebbae2cc5f343756ed4c9eb88760294047270864a6921876a953daf8b1e8dfa14c0626ce6597cd21a38b8b115ea15c3d63f4119868d4b3948cfcda7f069a9ccb0bbaa4854f0dc1092e6f0b16873951b1e521e1ce63614fc34a7cc07f154261ec71cd457229a5897a9815f7641bdf50b05aa1d5d1a8449f02cfaaeab93fe13c3d9506d0b6601af66ef870fb98b97b7b9d1c3c2790c21dbf6f7ebd3b0a85faa3288257ab2ae248865498bf0b7f23e12cfa7a3137a9903f866eb874415cf20253e94ddfb1533827d155800411faf", 0x16a}, {&(0x7f0000001600)="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", 0x5da}], 0x2, 0x0, 0x0, 0x2c}, 0x40440c4) 1m21.787343312s ago: executing program 4 (id=191): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x23}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1m21.577420553s ago: executing program 4 (id=194): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@errors_continue}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r2, r2, 0x0, 0x800000009) 1m21.368662914s ago: executing program 4 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 1m21.181885625s ago: executing program 4 (id=202): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x4, 0x4, 0x3}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0xfd122f3cb48753c8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r0, &(0x7f0000000080), 0x20000000}, 0x20) 1m20.640757685s ago: executing program 4 (id=213): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[{0x18, 0x104, 0x8, "9aa76a8b0bf1"}], 0x18}}], 0x1, 0x80) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) 1m20.578903138s ago: executing program 32 (id=213): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[{0x18, 0x104, 0x8, "9aa76a8b0bf1"}], 0x18}}], 0x1, 0x80) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) 1m19.056055612s ago: executing program 3 (id=236): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000240)=""/58, 0x3a) getdents64(r2, &(0x7f0000002fc0)=""/4108, 0x100c) 1m19.055954332s ago: executing program 33 (id=236): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000240)=""/58, 0x3a) getdents64(r2, &(0x7f0000002fc0)=""/4108, 0x100c) 14.231048654s ago: executing program 6 (id=1268): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file1'}, 0xb) close(r2) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(r3, &(0x7f0000000000)='\t', 0x1) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 14.196289156s ago: executing program 6 (id=1271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) lseek(r1, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 13.847722046s ago: executing program 6 (id=1275): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 13.707624183s ago: executing program 6 (id=1280): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000980)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYBLOB="fd5a30494a98e2fd594c7f5575b44a6b9875a6deb8a9ed63e149fdc3a5e345922596d46c4a463978044b864f940e1137ce034002852c9ef5606de83cf95a02ef4bacef1195250b8a73609da88d66c4224c3ea46f117012f2aab4bca171e710172b4c22e4d51e27fc9eeb304bb3e260a261", @ANYRES32=0x0], 0x1, 0x1282, &(0x7f00000009c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0) syz_clone(0x808a000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) chroot(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 13.460456127s ago: executing program 6 (id=1283): socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) get_robust_list(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsu(&(0x7f00000002c0), 0x2, 0x12000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x6, &(0x7f0000000940)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x8, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 13.072016558s ago: executing program 6 (id=1289): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x2}, 0x8) 13.069764848s ago: executing program 34 (id=1289): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x2}, 0x8) 9.607902449s ago: executing program 1 (id=1326): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) fchdir(r1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000740)={'#! ', './file0'}, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x6000)=nil, 0x6000, 0x4, 0x88012, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x5}, 0x1, 0x265, 0xc28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 9.401812461s ago: executing program 1 (id=1327): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0xff, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x80, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000100)={0x84, @multicast2, 0x4e23, 0x3, 'sh\x00', 0x14, 0xc, 0x22}, 0x2c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r1, &(0x7f0000000540)="86271bba8dc420f5807fb84e60d09b01d7ced81b65", 0x15, 0x48800, &(0x7f0000000380)={0x11, 0xf5, r2, 0x1, 0x5, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xd}, {0x5, 0x8}, {0xb, 0x1}}}, 0x24}}, 0x20040000) 9.074748489s ago: executing program 1 (id=1332): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000180)=[0x2], 0x0, 0x2, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 8.968667535s ago: executing program 1 (id=1333): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000980)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYBLOB="fd5a30494a98e2fd594c7f5575b44a6b9875a6deb8a9ed63e149fdc3a5e345922596d46c4a463978044b864f940e1137ce034002852c9ef5606de83cf95a02ef4bacef1195250b8a73609da88d66c4224c3ea46f117012f2aab4bca171e710172b4c22e4d51e27fc9eeb304bb3e260a261", @ANYRES32=0x0], 0x1, 0x1282, &(0x7f00000009c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0) syz_clone(0x808a000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) chroot(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 8.638684793s ago: executing program 1 (id=1336): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x40000009, 0x4) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/134, 0xbd}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="9f", 0x1}], 0x1}}], 0x1, 0x24080001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.671547747s ago: executing program 1 (id=1345): socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x4, 0xc000, 0x2, 0x20002f7}) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.559475753s ago: executing program 35 (id=1345): socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x4, 0xc000, 0x2, 0x20002f7}) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.792113276s ago: executing program 0 (id=1409): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) getpid() syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x103440) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="250074c96e63", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.834698839s ago: executing program 5 (id=1416): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0x401, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.704077356s ago: executing program 2 (id=1418): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ptrace$poke(0x5, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r3, 0x3, 0x2) 1.591572822s ago: executing program 2 (id=1420): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4000000, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000040, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @empty, 0x627bcafb}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x4) 1.532726066s ago: executing program 0 (id=1422): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r2, 0xee01, r3) keyctl$setperm(0x5, r2, 0x172831) keyctl$KEYCTL_MOVE(0x3, r2, 0x0, 0x0, 0x0) 1.419640692s ago: executing program 0 (id=1423): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = eventfd(0x9) ppoll(&(0x7f0000000480)=[{r4, 0x40}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000100)='fd/3\x00') 1.242639042s ago: executing program 2 (id=1426): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 1.192304745s ago: executing program 2 (id=1428): connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f0000000000)=[{0x1, 0xbbdd, 0x1000}, {0x1, 0x8, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) capset(0x0, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) 1.055662572s ago: executing program 2 (id=1430): r0 = socket$kcm(0x2, 0x5, 0x84) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x10, 0x3}, {0x10000002, 0x4, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000480)="be", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x20000010) 945.512628ms ago: executing program 5 (id=1432): openat(0xffffffffffffffff, 0x0, 0x4100, 0x24) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f00000003c0)="caf98025f2ae2e72f9b3ab9c585ff3bb8094deaecd75898b858442c825382d707b681ae6e2b60147258f4c58db567e0b259e0f1ac910d0050f5f062a86eed29c57d19ec577c422d31c7da3476698e1512222138c03b48970d9dbb0f22a", 0x5d) write$char_usb(r0, &(0x7f0000002600)="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", 0xfa5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x1002, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 866.567952ms ago: executing program 5 (id=1436): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 798.765406ms ago: executing program 5 (id=1437): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x1000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = mq_open(&(0x7f00000000c0)='e_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 795.148437ms ago: executing program 8 (id=1438): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) flock(0xffffffffffffffff, 0x5) pread64(r0, &(0x7f0000000140)=""/92, 0x5c, 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x1000}], 0x1, 0x0, 0x0, 0x0) 768.432248ms ago: executing program 5 (id=1439): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x80, 0x3, 0x303}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x351b, 0xc2de, 0xa, 0x0, 0x0) 703.986462ms ago: executing program 5 (id=1440): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4}, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x1fd, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80000000}, @in={0x2, 0x4e24, @multicast1}], 0x2c) sendmmsg$inet6(r0, &(0x7f0000005640)=[{{&(0x7f0000000dc0)={0xa, 0x4e21, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000020c0)=[{&(0x7f0000000e00)="a63c", 0x2}], 0x1}}], 0x1, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) 703.520862ms ago: executing program 8 (id=1441): r0 = socket(0x2a, 0x2, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x27, 0x7, 0x2000}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x1ff}, {0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x68}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 690.448953ms ago: executing program 8 (id=1442): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) fcntl$setstatus(r0, 0x4, 0x42400) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) open$dir(&(0x7f0000000180)='./file0\x00', 0x237e, 0x8a) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 676.151833ms ago: executing program 7 (id=1443): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000240)={0x0, 0xffffff3a, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[], 0x588}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) recvfrom(r1, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) 657.127224ms ago: executing program 8 (id=1444): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 626.433126ms ago: executing program 7 (id=1445): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000940)=ANY=[], 0x361, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="fec0"], 0x50) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, 0x0, 0x0}, 0x20) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0) 529.812461ms ago: executing program 0 (id=1446): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x10000, 0x9, 0x6, 0x244, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd, 0x4}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 484.127544ms ago: executing program 7 (id=1447): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) dup3(r0, r4, 0x80000) 482.955164ms ago: executing program 8 (id=1448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 408.423578ms ago: executing program 8 (id=1449): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe16, 0x0, 0x0, 0x21e}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) io_uring_enter(r0, 0x47bc, 0xfffffffe, 0x0, 0x0, 0x0) 381.093869ms ago: executing program 7 (id=1450): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2}, 0x90) 343.691651ms ago: executing program 0 (id=1451): connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x80, 0x3, 0x303}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x351b, 0xc2de, 0xa, 0x0, 0x0) 343.200461ms ago: executing program 7 (id=1452): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)={{0x10b, 0x96, 0xb, 0x37f, 0x35a, 0x100, 0x367, 0xd}}, 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 319.694273ms ago: executing program 0 (id=1453): socket(0x2b, 0x80801, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 201.514039ms ago: executing program 2 (id=1454): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$eJzs3MFrE1sUx/HzmrRJU9rkweOBgnrQjW6GNv4BGqQFMaDUpqgLYWonGjImZSZEImKzEbf+HcWlO0H9B7oRN+7dFUFw04U40plMm8S0pm3SxPb7gTJ3eu+vc9qm5dxC78adV4+LedfImxUZiauMiNRlUyS1NWr4p3Ed8cdj0qwulya+fz5z++69G5lsdnZedS6zcDmtqlPn3j159vr8h8rE4puptzFZT93f+Jb+sv7/+qmNnwuPCq4WXC2VK2rqUrlcMZdsS5cLbtFQvWVbpmtpoeRaTst83i6vrNTULC1PJlYcy3XVLNW0aNW0UtaKU1PzoVkoqWEYOpmQky3axZrc2vy8mdl12ov0tCL0Xqz1drzTGsfJ1DtP5tb6VRcAABhee/f/Qa+/e/+fXQyuPe7/Rej/+6TecveH/h/HguNkzETj57cV/T8AAAAAAAAAAAAAAAAAAAAAAH+DTc9Lep6XDK/hW0xE4iIS3g+6TvTHAb//VwZULnqs6R/34iL2y2qumguuwXwmLwWxxZJpScoP//XgRf3XRTCeu56dnVbfaONDbuVXq7mIfzaBnw+lgkwgzJ/9dybIq7zfylUb+VFJND8/LUn5r1M+O5veyYfHIaxWc2Ny8UJT3pCkfHwgZbFlua3+5zOq125m254/7q8DAAAAAOA4MHRbqnX/G5z9aPgL4uJv71vmg3ynvw+078+nO+7vo3K6myMqAQAAAADAobm1p0XTti3nAIOYiBwiflwHERmKMtoGV0VkCMo4qkFcRIL36EHiX7fjXaW8LtZERWTgX5Z9DAb9mwkAAABAr+00/fsIfXrRx4oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh5uj0PLFz/21Q4sUe86XGRI/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCHyKwAA//9OCxaA") perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x40000004, 0xd2, 0x9, 0x9, 0x202, 0x1ff, 0x0, 0x0, 0x0, 0x400000000100007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x2, @perf_config_ext={0x4, 0x1ff}, 0x24a0, 0x0, 0x1, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 7 (id=1455): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r0 = syz_io_uring_setup(0x16b, &(0x7f0000000100)={0x0, 0x40, 0x10, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) kernel console output (not intermixed with test programs): ing state [ 57.817072][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.829703][ T4343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.843556][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.850746][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.023209][ T4365] grow_buffers: requested out-of-range block 18446744073709551615 for device loop1 [ 58.032788][ T4365] EXT4-fs warning (device loop1): ext4_resize_fs:2019: can't read last block, resize aborted [ 58.141733][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.463124][ T4165] veth0_vlan: entered promiscuous mode [ 58.470533][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.481346][ T4165] veth1_vlan: entered promiscuous mode [ 58.524271][ T4165] veth0_macvtap: entered promiscuous mode [ 58.556849][ T4165] veth1_macvtap: entered promiscuous mode [ 58.592976][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.622061][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.670635][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.699805][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.713847][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.742412][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.827622][ T4451] all: renamed from bridge_slave_0 (while UP) [ 59.521430][ T4519] geneve2: entered promiscuous mode [ 59.526825][ T4519] geneve2: entered allmulticast mode [ 60.144741][ T4554] loop5: detected capacity change from 0 to 512 [ 60.169116][ T4554] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 60.217446][ T4554] EXT4-fs (loop5): 1 truncate cleaned up [ 60.244558][ T4554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.267245][ T4554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.745974][ T4611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.306'. [ 60.754855][ T4611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.306'. [ 60.813360][ T4617] netlink: 12 bytes leftover after parsing attributes in process `syz.6.307'. [ 61.280988][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 61.281006][ T29] audit: type=1400 audit(1768903869.444:448): avc: denied { checkpoint_restore } for pid=4629 comm="syz.1.310" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.533776][ T29] audit: type=1400 audit(1768903869.694:449): avc: denied { lock } for pid=4644 comm="syz.2.315" path="socket:[9018]" dev="sockfs" ino=9018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.612388][ T29] audit: type=1400 audit(1768903869.774:450): avc: denied { getopt } for pid=4652 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.679304][ T29] audit: type=1400 audit(1768903869.844:451): avc: denied { read } for pid=4638 comm="syz.6.313" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.702619][ T29] audit: type=1400 audit(1768903869.844:452): avc: denied { open } for pid=4638 comm="syz.6.313" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.751434][ T29] audit: type=1400 audit(1768903869.914:453): avc: denied { ioctl } for pid=4638 comm="syz.6.313" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.073471][ T29] audit: type=1400 audit(1768903870.234:454): avc: denied { getopt } for pid=4675 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.113832][ T4678] loop0: detected capacity change from 0 to 128 [ 62.250963][ T4687] netlink: 24 bytes leftover after parsing attributes in process `syz.6.330'. [ 62.305221][ T4691] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.388839][ T4691] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.438932][ T4691] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.509863][ T4691] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.557536][ T4701] loop1: detected capacity change from 0 to 128 [ 62.578474][ T2411] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.601190][ T2411] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.623408][ T2411] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.690963][ T53] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.906744][ T29] audit: type=1400 audit(1768903871.054:455): avc: denied { read append } for pid=4703 comm="syz.6.338" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.976130][ T29] audit: type=1400 audit(1768903871.074:456): avc: denied { open } for pid=4703 comm="syz.6.338" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.040655][ T4725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 63.052879][ T4724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.344'. [ 63.065542][ T29] audit: type=1400 audit(1768903871.224:457): avc: denied { bind } for pid=4722 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.137459][ T4704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.162042][ T4704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.197636][ T4739] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 63.308232][ T4704] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.389794][ T4739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.403380][ T4744] bond1: (slave dummy0): making interface the new active one [ 63.418133][ T4744] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 63.427500][ T4747] bond1: entered promiscuous mode [ 63.438227][ T4747] dummy0: entered promiscuous mode [ 63.445238][ T4738] bond1: left promiscuous mode [ 63.450485][ T4738] dummy0: left promiscuous mode [ 63.545227][ T4704] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.606119][ T4757] bond1: (slave dummy0): Releasing active interface [ 63.618097][ T4757] batman_adv: batadv0: Adding interface: dummy0 [ 63.624454][ T4757] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.650577][ T4757] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 63.784713][ T4704] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.058018][ T4704] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.163255][ T4776] loop2: detected capacity change from 0 to 1024 [ 64.196090][ T4776] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.243639][ T4776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 64.277823][ T4779] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.366'. [ 64.294945][ T4776] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.306542][ T382] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.380516][ T4784] ref_ctr increment failed for inode: 0x1a0 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810439ca40 [ 64.392146][ T4783] uprobe: syz.1.367:4783 failed to unregister, leaking uprobe [ 64.472705][ T2411] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.557246][ T4794] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.368'. [ 64.566508][ T4794] netlink: 24 bytes leftover after parsing attributes in process `syz.5.368'. [ 64.605319][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 64.692816][ T52] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.781386][ T52] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.931388][ T4801] netlink: 'syz.0.371': attribute type 1 has an invalid length. [ 64.945735][ T4801] bond1: entered promiscuous mode [ 64.951041][ T4801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.972962][ T4801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.981601][ T4801] bond1: (slave bond2): making interface the new active one [ 64.989592][ T4801] bond2: entered promiscuous mode [ 64.995516][ T4801] bond1: (slave bond2): Enslaving as an active interface with an up link [ 65.342940][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.373'. [ 65.377171][ T4813] openvswitch: netlink: Missing key (keys=40, expected=100) [ 65.562672][ T4833] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 65.575219][ T4833] batman_adv: batadv0: Adding interface: gretap1 [ 65.581684][ T4833] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.625582][ T4833] batman_adv: batadv0: Interface activated: gretap1 [ 65.642979][ T4835] bond1: entered promiscuous mode [ 65.648952][ T4835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.659469][ T4835] team0: Port device bond1 added [ 65.752029][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 65.761007][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 66.358564][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 66.358581][ T29] audit: type=1400 audit(1768903874.524:1054): avc: denied { read } for pid=4904 comm="syz.5.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.446131][ T29] audit: type=1400 audit(1768903874.604:1055): avc: denied { associate } for pid=4917 comm="syz.5.410" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 66.496487][ T29] audit: type=1400 audit(1768903874.644:1056): avc: denied { mount } for pid=4913 comm="syz.5.410" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 66.838351][ T29] audit: type=1400 audit(1768903875.004:1057): avc: denied { allowed } for pid=4951 comm="syz.5.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.955484][ T4961] loop6: detected capacity change from 0 to 512 [ 66.971696][ T4961] EXT4-fs: Ignoring removed nobh option [ 67.016614][ T4961] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 67.045183][ T4961] EXT4-fs (loop6): orphan cleanup on readonly fs [ 67.062872][ T4961] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.416: corrupted inode contents [ 67.090730][ T4961] EXT4-fs (loop6): Remounting filesystem read-only [ 67.136610][ T4961] EXT4-fs (loop6): 1 truncate cleaned up [ 67.143356][ T37] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.154045][ T37] Quota error (device loop6): write_blk: dquota write failed [ 67.161514][ T37] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 67.172249][ T37] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.182859][ T37] Quota error (device loop6): write_blk: dquota write failed [ 67.190329][ T37] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 67.314445][ T29] audit: type=1400 audit(1768903875.474:1058): avc: denied { execute } for pid=4979 comm="syz.1.420" path="/84/file0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.379808][ T37] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 67.390641][ T37] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 67.402314][ T4961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.436513][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 67.494763][ T4986] loop1: detected capacity change from 0 to 128 [ 67.515009][ T4986] syz.1.423: attempt to access beyond end of device [ 67.515009][ T4986] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 67.565990][ T4986] syz.1.423: attempt to access beyond end of device [ 67.565990][ T4986] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 67.579719][ T4986] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 67.598971][ T4986] syz.1.423: attempt to access beyond end of device [ 67.598971][ T4986] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 67.612782][ T4986] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 67.667655][ T4986] syz.1.423: attempt to access beyond end of device [ 67.667655][ T4986] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 67.687403][ T4993] veth0_vlan: entered allmulticast mode [ 67.715912][ T4993] veth0_vlan: left promiscuous mode [ 67.726769][ T4993] veth0_vlan: entered promiscuous mode [ 67.794639][ T4986] syz.1.423: attempt to access beyond end of device [ 67.794639][ T4986] loop1: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 67.809083][ T4986] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 67.853999][ T4986] syz.1.423: attempt to access beyond end of device [ 67.853999][ T4986] loop1: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 67.867767][ T4986] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 67.914307][ T4986] syz.1.423: attempt to access beyond end of device [ 67.914307][ T4986] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 68.010015][ T4165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.060011][ T4986] syz.1.423: attempt to access beyond end of device [ 68.060011][ T4986] loop1: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 68.074483][ T4986] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 68.097420][ T4986] syz.1.423: attempt to access beyond end of device [ 68.097420][ T4986] loop1: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 68.111170][ T4986] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 68.142942][ T4986] syz.1.423: attempt to access beyond end of device [ 68.142942][ T4986] loop1: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 68.220425][ T4986] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 68.232653][ T4986] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 68.255038][ T4986] Buffer I/O error on dev loop1, logical block 111, lost async page write [ 68.264464][ T4986] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 68.319949][ T5016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.436'. [ 68.407165][ T5028] team0 (unregistering): Port device team_slave_0 removed [ 68.416635][ T5028] team0 (unregistering): Port device team_slave_1 removed [ 69.146125][ T5064] batman_adv: batadv0: Adding interface: dummy0 [ 69.153303][ T5064] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.198757][ T5064] batman_adv: batadv0: Interface activated: dummy0 [ 69.212620][ T5068] batadv0: mtu less than device minimum [ 69.218985][ T5068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.230137][ T5068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.241236][ T5068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.252447][ T5068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.263602][ T5068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.274651][ T5068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.285584][ T5068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.296652][ T5068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.872109][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.464'. [ 69.912663][ T5104] netlink: 16 bytes leftover after parsing attributes in process `syz.5.464'. [ 69.983822][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 69.992798][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 70.696135][ T5167] netlink: 'syz.0.474': attribute type 10 has an invalid length. [ 70.703984][ T5167] netlink: 40 bytes leftover after parsing attributes in process `syz.0.474'. [ 70.727656][ T5167] dummy0: entered promiscuous mode [ 70.732964][ T5167] dummy0: entered allmulticast mode [ 70.749366][ T5167] bridge0: port 3(dummy0) entered blocking state [ 70.756224][ T5167] bridge0: port 3(dummy0) entered disabled state [ 70.777432][ T5167] bridge0: port 3(dummy0) entered blocking state [ 70.783891][ T5167] bridge0: port 3(dummy0) entered forwarding state [ 71.135388][ T5184] netlink: 'syz.1.480': attribute type 4 has an invalid length. [ 71.473762][ T5199] loop2: detected capacity change from 0 to 512 [ 71.481385][ T5199] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.502153][ T5199] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.485: Allocating blocks 41-42 which overlap fs metadata [ 71.528164][ T5199] __quota_error: 44 callbacks suppressed [ 71.528183][ T5199] Quota error (device loop2): write_blk: dquota write failed [ 71.541364][ T5199] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 71.553053][ T5199] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 71.563875][ T5199] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.485: Failed to acquire dquot type 1 [ 71.576807][ T5199] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 71.592777][ T5199] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.485: corrupted inode contents [ 71.621614][ T5199] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.485: mark_inode_dirty error [ 71.645619][ T5199] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.485: corrupted inode contents [ 71.658551][ T5199] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.485: mark_inode_dirty error [ 71.670012][ T5199] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.485: corrupted inode contents [ 71.686659][ T5199] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 71.702052][ T5199] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.485: corrupted inode contents [ 71.739628][ T5199] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.485: mark_inode_dirty error [ 71.763077][ T5199] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 71.772979][ T5199] EXT4-fs (loop2): 1 truncate cleaned up [ 71.779745][ T5199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.802254][ T29] audit: type=1400 audit(1768903879.964:1102): avc: denied { create } for pid=5198 comm="syz.2.485" name="ext4" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.879186][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.889358][ T37] Quota error (device loop2): remove_tree: Cycle in quota tree detected: block 4 index 0 [ 71.899266][ T37] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 71.963283][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 72.008627][ T5208] netlink: 36 bytes leftover after parsing attributes in process `syz.2.487'. [ 72.039491][ T29] audit: type=1400 audit(1768903880.204:1103): avc: denied { write } for pid=5211 comm="syz.0.489" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.040733][ T5212] program syz.0.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.086637][ T29] audit: type=1400 audit(1768903880.204:1104): avc: denied { open } for pid=5211 comm="syz.0.489" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.209735][ T29] audit: type=1400 audit(1768903880.374:1105): avc: denied { mounton } for pid=5221 comm="syz.6.495" path="/file0" dev="ramfs" ino=12130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 72.287775][ T29] audit: type=1400 audit(1768903880.434:1106): avc: denied { read } for pid=5220 comm="syz.1.494" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.310524][ T29] audit: type=1400 audit(1768903880.434:1107): avc: denied { open } for pid=5220 comm="syz.1.494" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.357130][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 72.410556][ T5230] loop6: detected capacity change from 0 to 2048 [ 72.422522][ T5232] loop1: detected capacity change from 0 to 512 [ 72.448855][ T5230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.468329][ T5232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.501774][ T5232] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.550791][ T5232] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 72.558742][ T5232] EXT4-fs: Cannot change journaled quota options when quota turned on [ 72.578792][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.613189][ T4165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.721956][ T5252] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.770411][ T5252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5252 comm=syz.2.507 [ 72.846219][ T5264] loop2: detected capacity change from 0 to 512 [ 72.886207][ T5264] EXT4-fs (loop2): 1 orphan inode deleted [ 72.906545][ T382] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 72.921119][ T5264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.934969][ T5274] netlink: 28 bytes leftover after parsing attributes in process `syz.5.516'. [ 72.963831][ T5264] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.238642][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.478970][ T5305] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.533410][ T5305] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.568420][ T5305] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.633532][ T5305] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.686926][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.715185][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.744458][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.753986][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.911367][ T5336] ref_ctr_offset mismatch. inode: 0x140 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 73.924407][ T5335] netlink: 1343 bytes leftover after parsing attributes in process `syz.1.542'. [ 73.968271][ T5342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.545'. [ 74.229980][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 74.238894][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 74.255132][ T5358] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.265073][ T5358] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.319210][ T5358] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.329233][ T5358] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.380081][ T5358] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.390076][ T5358] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.448381][ T5358] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.458312][ T5358] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.552760][ T382] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.561120][ T382] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.585886][ T382] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.594309][ T382] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.616030][ T382] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.624354][ T382] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.647069][ T382] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.655365][ T382] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.854657][ T5385] loop0: detected capacity change from 0 to 512 [ 74.898974][ T5385] EXT4-fs: Ignoring removed nobh option [ 74.969539][ T5385] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.006008][ T5385] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.014158][ T5385] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.558: corrupted inode contents [ 75.046572][ T5385] EXT4-fs (loop0): Remounting filesystem read-only [ 75.054843][ T5385] EXT4-fs (loop0): 1 truncate cleaned up [ 75.062139][ T813] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 75.072790][ T813] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 75.148698][ T813] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 75.177282][ T5385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.276000][ T5398] loop2: detected capacity change from 0 to 512 [ 75.324880][ T5398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.349065][ T5398] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.400483][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.476871][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.516198][ T5411] netlink: 14 bytes leftover after parsing attributes in process `syz.2.570'. [ 76.115189][ T5426] netlink: 12 bytes leftover after parsing attributes in process `syz.6.574'. [ 76.204243][ T5419] net_ratelimit: 11 callbacks suppressed [ 76.204260][ T5419] Set syz1 is full, maxelem 65536 reached [ 76.390891][ T5429] bridge_slave_0: left allmulticast mode [ 76.396640][ T5429] bridge_slave_0: left promiscuous mode [ 76.402367][ T5429] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.425168][ T5429] bridge_slave_1: left allmulticast mode [ 76.430918][ T5429] bridge_slave_1: left promiscuous mode [ 76.436735][ T5429] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.449739][ T5429] bond0: (slave bond_slave_0): Releasing backup interface [ 76.460816][ T5429] bond0: (slave bond_slave_1): Releasing backup interface [ 76.493529][ T5429] team0: Port device team_slave_0 removed [ 76.520295][ T5429] team0: Port device team_slave_1 removed [ 76.541329][ T5429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.548807][ T5429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.568562][ T5429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.576164][ T5429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.587455][ T5429] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.608336][ T5432] team0: Mode changed to "loadbalance" [ 76.708265][ T5443] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.579'. [ 76.935223][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 76.935258][ T29] audit: type=1400 audit(1768903885.094:1147): avc: denied { map } for pid=5459 comm="syz.6.586" path="socket:[13228]" dev="sockfs" ino=13228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.966033][ T29] audit: type=1400 audit(1768903885.094:1148): avc: denied { read } for pid=5459 comm="syz.6.586" path="socket:[13228]" dev="sockfs" ino=13228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.685275][ T29] audit: type=1326 audit(1768903885.844:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.6.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afa44acb9 code=0x7ffc0000 [ 77.717256][ T29] audit: type=1326 audit(1768903885.844:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.6.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afa44acb9 code=0x7ffc0000 [ 77.740778][ T29] audit: type=1326 audit(1768903885.844:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.6.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afa44acb9 code=0x7ffc0000 [ 77.764216][ T29] audit: type=1326 audit(1768903885.844:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.6.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afa44acb9 code=0x7ffc0000 [ 77.787654][ T29] audit: type=1326 audit(1768903885.844:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.6.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5afa44acb9 code=0x7ffc0000 [ 77.811466][ T29] audit: type=1326 audit(1768903885.874:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.6.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afa44acb9 code=0x7ffc0000 [ 77.848772][ T29] audit: type=1326 audit(1768903885.974:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.6.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5afa40b58e code=0x7ffc0000 [ 77.872202][ T29] audit: type=1326 audit(1768903885.974:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.6.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5afa40b58e code=0x7ffc0000 [ 77.942148][ T5477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.590'. [ 77.996256][ T5475] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.027100][ T5478] loop1: detected capacity change from 0 to 512 [ 78.037349][ T5480] netlink: 'syz.0.591': attribute type 1 has an invalid length. [ 78.059214][ T5478] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 78.071944][ T5480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 78.078999][ T5478] System zones: 0-2, 18-18, 34-34 [ 78.087664][ T5475] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.115293][ T5478] EXT4-fs (loop1): too many log groups per flexible block group [ 78.132161][ T5478] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 78.150122][ T5480] bond3: (slave veth3): Enslaving as an active interface with a down link [ 78.161661][ T5478] EXT4-fs (loop1): mount failed [ 78.162787][ T5487] bridge0: port 3(dummy0) entered disabled state [ 78.174412][ T5487] dummy0: left allmulticast mode [ 78.180505][ T5487] dummy0: left promiscuous mode [ 78.185605][ T5487] bridge0: port 3(dummy0) entered disabled state [ 78.289436][ T5487] bond3: (slave dummy0): making interface the new active one [ 78.310750][ T5487] dummy0: entered promiscuous mode [ 78.326542][ T5487] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 78.360496][ T5490] loop6: detected capacity change from 0 to 1024 [ 78.373663][ T5480] bond3 (unregistering): (slave veth3): Releasing active interface [ 78.382454][ T5490] EXT4-fs: Ignoring removed nobh option [ 78.388112][ T5490] EXT4-fs: inline encryption not supported [ 78.404793][ T5480] bond3 (unregistering): (slave dummy0): Releasing active interface [ 78.415675][ T5480] bond3 (unregistering): Released all slaves [ 78.430005][ T5475] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.431260][ T5490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.498818][ T5475] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.536662][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.550519][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.563036][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.575278][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.645278][ T4165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.824756][ T5512] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.932142][ T5473] syz.1.599 (5473) used greatest stack depth: 6984 bytes left [ 79.101307][ T5542] netlink: 'syz.6.613': attribute type 27 has an invalid length. [ 79.424871][ T5548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.434855][ T5548] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.450854][ T5548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.466612][ T5555] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 79.496804][ T37] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.513093][ T37] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.536899][ T37] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.554551][ T37] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.568483][ T5570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.623'. [ 79.578501][ T5570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.623'. [ 79.630297][ T5572] loop6: detected capacity change from 0 to 512 [ 79.638999][ T5572] EXT4-fs: Ignoring removed i_version option [ 79.645088][ T5572] EXT4-fs: Ignoring removed nobh option [ 79.659509][ T5572] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 79.671766][ T5572] EXT4-fs (loop6): 1 truncate cleaned up [ 79.698320][ T5572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.798968][ T4165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.863524][ T5589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 81.379587][ T5634] netlink: 87 bytes leftover after parsing attributes in process `syz.0.645'. [ 81.443047][ T5636] loop2: detected capacity change from 0 to 7 [ 81.540439][ T5640] netlink: 'syz.6.648': attribute type 1 has an invalid length. [ 81.599213][ T5640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.646938][ T5643] bond1: (slave veth3): Enslaving as an active interface with a down link [ 81.720551][ T5640] bond1: (slave dummy0): making interface the new active one [ 81.787573][ T5640] dummy0: entered promiscuous mode [ 81.854387][ T5640] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 81.871120][ T5650] netlink: 32 bytes leftover after parsing attributes in process `syz.2.652'. [ 81.942280][ T5643] bond1 (unregistering): (slave veth3): Releasing active interface [ 82.001765][ T5643] bond1 (unregistering): (slave dummy0): Releasing active interface [ 82.068129][ T5643] bond1 (unregistering): Released all slaves [ 82.207164][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 82.207185][ T29] audit: type=1400 audit(1768903890.374:1198): avc: denied { listen } for pid=5657 comm="syz.6.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.397666][ T29] audit: type=1400 audit(1768903890.564:1199): avc: denied { ioctl } for pid=5668 comm="syz.0.658" path="socket:[14548]" dev="sockfs" ino=14548 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.515650][ T5665] loop6: detected capacity change from 0 to 512 [ 82.538798][ T5665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.581122][ T5665] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.609437][ T5678] loop0: detected capacity change from 0 to 512 [ 82.639654][ T29] audit: type=1400 audit(1768903890.804:1200): avc: denied { shutdown } for pid=5679 comm="syz.5.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.677205][ T5678] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.659: inode has both inline data and extents flags [ 82.697215][ T5678] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.659: couldn't read orphan inode 15 (err -117) [ 82.714692][ T5678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.815641][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.874027][ T4165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.888045][ T5687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.663'. [ 82.939641][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 83.008490][ T29] audit: type=1326 audit(1768903891.174:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86227dacb9 code=0x7ffc0000 [ 83.018652][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 83.043109][ T5699] loop6: detected capacity change from 0 to 128 [ 83.076322][ T29] audit: type=1326 audit(1768903891.194:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f86227dacb9 code=0x7ffc0000 [ 83.099890][ T29] audit: type=1326 audit(1768903891.214:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86227dacb9 code=0x7ffc0000 [ 83.123266][ T29] audit: type=1326 audit(1768903891.214:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86227dacb9 code=0x7ffc0000 [ 83.146673][ T29] audit: type=1326 audit(1768903891.214:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86227dacb9 code=0x7ffc0000 [ 83.170083][ T29] audit: type=1326 audit(1768903891.214:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86227dacb9 code=0x7ffc0000 [ 83.193507][ T29] audit: type=1326 audit(1768903891.224:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86227dacb9 code=0x7ffc0000 [ 83.317763][ T5680] cgroup: fork rejected by pids controller in /syz5 [ 83.342983][ T5737] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 83.372915][ T5737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.402060][ T5742] loop6: detected capacity change from 0 to 1024 [ 83.403561][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 83.417364][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 83.430370][ T5742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.443359][ T5737] macsec1: entered promiscuous mode [ 83.448825][ T5737] bond2: entered promiscuous mode [ 83.453977][ T5737] macsec1: entered allmulticast mode [ 83.459359][ T5737] bond2: entered allmulticast mode [ 83.532346][ T4165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.759722][ T5767] xt_connbytes: Forcing CT accounting to be enabled [ 84.078483][ T5790] loop6: detected capacity change from 0 to 512 [ 84.096232][ T5790] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.107879][ T5790] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 84.118043][ T5790] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.690: Corrupt directory, running e2fsck is recommended [ 84.132135][ T5790] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 84.141111][ T5790] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.690: corrupted in-inode xattr: e_name out of bounds [ 84.159163][ T5790] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.690: couldn't read orphan inode 15 (err -117) [ 84.171813][ T5790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.189212][ T5790] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.200800][ T5790] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 84.211199][ T5790] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.690: Corrupt directory, running e2fsck is recommended [ 84.224059][ T5790] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.690: path /87/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 84.245040][ T5790] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 8: comm syz.6.690: path /87/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 84.319554][ T4165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.548623][ T5810] IPv6: addrconf: prefix option has invalid lifetime [ 84.589274][ T5815] netlink: 176 bytes leftover after parsing attributes in process `syz.0.699'. [ 84.684148][ T5818] loop0: detected capacity change from 0 to 512 [ 84.791342][ T5818] EXT4-fs: inline encryption not supported [ 84.797478][ T5818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.819338][ T5823] loop6: detected capacity change from 0 to 512 [ 84.826173][ T5823] EXT4-fs: Ignoring removed oldalloc option [ 84.908127][ T5823] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.703: dx entry: limit 1024 != root limit 124 [ 84.920571][ T5823] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.703: Corrupt directory, running e2fsck is recommended [ 84.935137][ T5818] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.942715][ T5823] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 84.943800][ T5818] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.013900][ T5818] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.701: Failed to acquire dquot type 1 [ 85.026557][ T5823] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.703: corrupted in-inode xattr: invalid ea_ino [ 85.040245][ T5823] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.703: couldn't read orphan inode 15 (err -117) [ 85.052956][ T5823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.087330][ T5818] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 85.113524][ T5823] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.703: dx entry: limit 1024 != root limit 124 [ 85.126030][ T5823] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.703: Corrupt directory, running e2fsck is recommended [ 85.177338][ T5823] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.703: dx entry: limit 1024 != root limit 124 [ 85.189464][ T5823] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.703: Corrupt directory, running e2fsck is recommended [ 85.277573][ T5823] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.703: dx entry: limit 1024 != root limit 124 [ 85.289750][ T5823] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.703: Corrupt directory, running e2fsck is recommended [ 85.328378][ T5823] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.703: dx entry: limit 1024 != root limit 124 [ 85.340661][ T5823] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.703: Corrupt directory, running e2fsck is recommended [ 85.365926][ T5823] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.703: dx entry: limit 1024 != root limit 124 [ 85.378153][ T5823] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.703: Corrupt directory, running e2fsck is recommended [ 85.378406][ T5818] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.701: corrupted inode contents [ 85.448020][ T4165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.448451][ T5818] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.701: mark_inode_dirty error [ 85.475904][ T5818] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.701: corrupted inode contents [ 85.552169][ T5818] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.701: mark_inode_dirty error [ 85.636522][ T5818] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.701: corrupted inode contents [ 85.682590][ T5818] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 85.716697][ T5818] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.701: corrupted inode contents [ 85.777475][ T5818] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.701: mark_inode_dirty error [ 85.824192][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.829237][ T5818] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 85.831919][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.876634][ T5843] loop1: detected capacity change from 0 to 512 [ 85.893383][ T5818] EXT4-fs (loop0): 1 truncate cleaned up [ 85.919277][ T5843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.928796][ T5818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.973224][ T5843] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.146165][ T5881] loop6: detected capacity change from 0 to 8192 [ 86.295746][ T5881] bio_check_eod: 34 callbacks suppressed [ 86.295793][ T5881] syz.6.716: attempt to access beyond end of device [ 86.295793][ T5881] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 86.339005][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.407139][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.472162][ T4165] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 86.480087][ T4165] FAT-fs (loop6): Filesystem has been set read-only [ 87.125799][ T5978] loop0: detected capacity change from 0 to 512 [ 87.203496][ T5980] loop0: detected capacity change from 0 to 1024 [ 87.211108][ T5980] EXT4-fs: Ignoring removed bh option [ 87.220322][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 87.220374][ T29] audit: type=1326 audit(1768903895.384:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe133d44ad7 code=0x7ffc0000 [ 87.250183][ T29] audit: type=1326 audit(1768903895.384:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe133cec0d9 code=0x7ffc0000 [ 87.274039][ T29] audit: type=1326 audit(1768903895.384:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe133d4acb9 code=0x7ffc0000 [ 87.299469][ T29] audit: type=1326 audit(1768903895.414:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe133d44ad7 code=0x7ffc0000 [ 87.322905][ T29] audit: type=1326 audit(1768903895.414:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe133cec0d9 code=0x7ffc0000 [ 87.346420][ T29] audit: type=1326 audit(1768903895.414:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe133d4acb9 code=0x7ffc0000 [ 87.369864][ T29] audit: type=1326 audit(1768903895.424:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe133d44ad7 code=0x7ffc0000 [ 87.393186][ T29] audit: type=1326 audit(1768903895.424:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe133cec0d9 code=0x7ffc0000 [ 87.416573][ T29] audit: type=1326 audit(1768903895.424:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe133d4acb9 code=0x7ffc0000 [ 87.440228][ T29] audit: type=1326 audit(1768903895.434:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.5.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe133d44ad7 code=0x7ffc0000 [ 87.471319][ T5980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.498715][ T5980] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 87.515164][ T5980] EXT4-fs (loop0): Remounting filesystem read-only [ 87.522474][ T5980] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 87.869668][ T6002] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=6002 comm=syz.5.742 [ 87.883743][ T6002] netlink: 232 bytes leftover after parsing attributes in process `syz.5.742'. [ 87.949304][ T9] IPVS: starting estimator thread 0... [ 88.031418][ T6020] loop6: detected capacity change from 0 to 1024 [ 88.049375][ T6011] IPVS: using max 2160 ests per chain, 108000 per kthread [ 88.051203][ T6020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.079759][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.163179][ T4165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.203405][ T6034] ip6gre1: entered promiscuous mode [ 88.208936][ T6034] ip6gre1: entered allmulticast mode [ 88.228820][ T6036] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.279319][ T6041] veth1_to_bond: entered promiscuous mode [ 88.323384][ T6036] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.369124][ T6036] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.399067][ T6036] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.475319][ T6052] xt_connbytes: Forcing CT accounting to be enabled [ 88.488014][ T5917] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.527527][ T5603] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.546042][ T5603] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.574708][ T5603] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.600446][ T6035] veth1_to_bond: left promiscuous mode [ 88.766228][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.764'. [ 88.856318][ T6074] loop0: detected capacity change from 0 to 1024 [ 88.890603][ T6074] EXT4-fs: Ignoring removed bh option [ 88.908750][ T6074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.939087][ T6074] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.769: Allocating blocks 385-513 which overlap fs metadata [ 88.964960][ T6074] EXT4-fs (loop0): pa ffff88810769e150: logic 16, phys. 129, len 24 [ 88.973398][ T6074] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 89.051557][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.190362][ T6098] loop6: detected capacity change from 0 to 164 [ 89.610595][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.620240][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.633908][ T6108] loop6: detected capacity change from 0 to 1024 [ 89.646169][ T6108] EXT4-fs (loop6): filesystem is read-only [ 89.666557][ T6108] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 89.677565][ T6108] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 89.688730][ T6108] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 89.699550][ T6108] EXT4-fs error (device loop6): ext4_get_journal_inode:5849: comm syz.6.780: inode #1: comm syz.6.780: iget: illegal inode # [ 89.713046][ T6108] EXT4-fs (loop6): no journal found [ 89.718424][ T6108] EXT4-fs (loop6): can't get journal size [ 89.725858][ T6108] EXT4-fs error (device loop6): __ext4_fill_super:5553: inode #2: comm syz.6.780: iget: special inode unallocated [ 89.738479][ T6108] EXT4-fs (loop6): get root inode failed [ 89.744171][ T6108] EXT4-fs (loop6): mount failed [ 89.771656][ T6108] loop6: detected capacity change from 0 to 512 [ 89.783806][ T6108] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 89.798031][ T6108] EXT4-fs (loop6): orphan cleanup on readonly fs [ 89.804977][ T6108] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 89.820975][ T6108] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 89.828555][ T6108] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz.6.780: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 89.847670][ T6108] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.780: couldn't read orphan inode 13 (err -117) [ 89.862226][ T6108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.876016][ T6108] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 89.885731][ T6108] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 89.906868][ T6108] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 90.069696][ T6126] lo: entered allmulticast mode [ 90.075320][ T6125] lo: left allmulticast mode [ 90.282420][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.795'. [ 90.418174][ T6149] loop0: detected capacity change from 0 to 512 [ 90.453415][ T4165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.463890][ T6149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.524983][ T6149] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.587931][ T6149] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.796: corrupted inode contents [ 90.650464][ T6149] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.796: mark_inode_dirty error [ 90.685792][ T6149] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.796: corrupted inode contents [ 90.708198][ T6149] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.796: mark_inode_dirty error [ 90.837126][ T6175] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 90.892223][ T6175] SELinux: failed to load policy [ 91.334335][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.646807][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.688065][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.855962][ T6202] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.019854][ T6202] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.122031][ T6202] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.234264][ T6202] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.379476][ T5921] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.470666][ T5921] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.514658][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.829'. [ 92.849481][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 92.849500][ T29] audit: type=1400 audit(1768903901.014:1588): avc: denied { getopt } for pid=6251 comm="syz.6.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.017169][ T6258] loop0: detected capacity change from 0 to 1024 [ 93.059656][ T6258] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.107015][ T5603] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.126043][ T6258] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #3: block 1: comm syz.0.833: lblock 1 mapped to illegal pblock 1 (length 1) [ 93.155961][ T6258] Quota error (device loop0): write_blk: dquota write failed [ 93.163443][ T6258] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 93.173976][ T6258] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.833: Failed to acquire dquot type 0 [ 93.216784][ T6258] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.833: Freeing blocks not in datazone - block = 0, count = 4096 [ 93.230592][ T5603] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.255331][ T6258] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.833: Invalid inode bitmap blk 0 in block_group 0 [ 93.268546][ T887] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 93.296770][ T6258] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 93.306780][ T887] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 93.315255][ T887] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 93.326799][ T6258] EXT4-fs (loop0): 1 orphan inode deleted [ 93.333093][ T6258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.424853][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.567647][ T29] audit: type=1400 audit(1768903901.724:1589): avc: denied { ioctl } for pid=6276 comm="syz.5.839" path="socket:[22026]" dev="sockfs" ino=22026 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.672284][ T6281] loop0: detected capacity change from 0 to 1024 [ 93.687324][ T6281] EXT4-fs: Ignoring removed nobh option [ 93.692997][ T6281] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.700443][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 93.719514][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 93.778415][ T6281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.821079][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.922864][ T6297] loop1: detected capacity change from 0 to 512 [ 93.963290][ T6297] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.996112][ T6297] EXT4-fs (loop1): 1 orphan inode deleted [ 94.002155][ T6297] EXT4-fs (loop1): 1 truncate cleaned up [ 94.102219][ T6297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.116178][ T6297] EXT4-fs (loop1): shut down requested (2) [ 94.144424][ T6297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.155999][ T6308] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 94.166268][ T29] audit: type=1400 audit(1768903902.304:1590): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 94.188443][ T29] audit: type=1400 audit(1768903902.304:1591): avc: denied { search } for pid=2988 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.210171][ T29] audit: type=1400 audit(1768903902.304:1592): avc: denied { search } for pid=2988 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.231877][ T29] audit: type=1400 audit(1768903902.304:1593): avc: denied { add_name } for pid=2988 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.252803][ T29] audit: type=1400 audit(1768903902.304:1594): avc: denied { create } for pid=2988 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.467737][ T6330] netlink: 44 bytes leftover after parsing attributes in process `syz.2.858'. [ 94.680510][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 95.815302][ T6356] Set syz1 is full, maxelem 65536 reached [ 95.948585][ T6372] loop0: detected capacity change from 0 to 128 [ 96.017100][ T6375] syz.0.875: attempt to access beyond end of device [ 96.017100][ T6375] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 96.051654][ T6375] syz.0.875: attempt to access beyond end of device [ 96.051654][ T6375] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 96.101701][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 96.118162][ T6375] syz.0.875: attempt to access beyond end of device [ 96.118162][ T6375] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 96.201606][ T6375] syz.0.875: attempt to access beyond end of device [ 96.201606][ T6375] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 96.224405][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.880'. [ 96.248182][ T6389] netlink: 'syz.5.882': attribute type 32 has an invalid length. [ 96.261997][ T6388] loop6: detected capacity change from 0 to 2048 [ 96.270711][ T6375] syz.0.875: attempt to access beyond end of device [ 96.270711][ T6375] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 96.279194][ T6388] EXT4-fs: Ignoring removed bh option [ 96.359564][ T6388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.372778][ T6375] syz.0.875: attempt to access beyond end of device [ 96.372778][ T6375] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 96.389172][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.883'. [ 96.395344][ T6375] syz.0.875: attempt to access beyond end of device [ 96.395344][ T6375] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 96.418834][ T6375] syz.0.875: attempt to access beyond end of device [ 96.418834][ T6375] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 96.445311][ T6375] syz.0.875: attempt to access beyond end of device [ 96.445311][ T6375] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 96.460597][ T6375] syz.0.875: attempt to access beyond end of device [ 96.460597][ T6375] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 96.461459][ T6388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.506755][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.883'. [ 97.159096][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 97.168101][ T6445] bridge_slave_1: left allmulticast mode [ 97.173797][ T6445] bridge_slave_1: left promiscuous mode [ 97.179753][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.187968][ T6445] bridge_slave_0: left allmulticast mode [ 97.193746][ T6445] bridge_slave_0: left promiscuous mode [ 97.199684][ T6445] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.315349][ T6447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.901'. [ 97.478036][ T6453] loop1: detected capacity change from 0 to 8192 [ 97.487020][ T6462] netlink: 'syz.6.908': attribute type 1 has an invalid length. [ 97.634360][ T3322] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 97.642469][ T3322] FAT-fs (loop1): Filesystem has been set read-only [ 97.652497][ T6482] loop6: detected capacity change from 0 to 128 [ 97.724987][ T6482] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.787024][ T6482] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.813343][ T4165] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.156705][ T6527] loop0: detected capacity change from 0 to 512 [ 98.185871][ T6527] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 98.197962][ T6527] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 98.208827][ T6527] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.927: Corrupt directory, running e2fsck is recommended [ 98.222890][ T6527] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 98.231421][ T6527] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.927: corrupted in-inode xattr: e_name out of bounds [ 98.247102][ T6527] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.927: couldn't read orphan inode 15 (err -117) [ 98.260334][ T6527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.278080][ T6513] team_slave_0: entered promiscuous mode [ 98.284885][ T6513] team_slave_1: entered promiscuous mode [ 98.334973][ T6513] macvtap1: entered promiscuous mode [ 98.343010][ T6513] team0: entered promiscuous mode [ 98.381312][ T6513] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 98.504180][ T6513] team0: Device macvtap1 is already an upper device of the team interface [ 98.524361][ T6513] team0: left promiscuous mode [ 98.554423][ T6513] team_slave_0: left promiscuous mode [ 98.560670][ T6513] team_slave_1: left promiscuous mode [ 98.591901][ T6527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.850924][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 98.850958][ T29] audit: type=1400 audit(1768903907.014:1605): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 98.990944][ T29] audit: type=1400 audit(1768903907.074:1606): avc: denied { watch } for pid=6546 comm="syz.0.936" path="/205/file0" dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 99.014224][ T29] audit: type=1400 audit(1768903907.074:1607): avc: denied { execute_no_trans } for pid=6546 comm="syz.0.936" path="/205/file1" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.037790][ T29] audit: type=1400 audit(1768903907.084:1608): avc: denied { unmount } for pid=6543 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 99.071668][ T6559] loop6: detected capacity change from 0 to 2048 [ 99.085063][ T6559] EXT4-fs: Ignoring removed bh option [ 99.138014][ T6559] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.150744][ T6559] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.178638][ T29] audit: type=1400 audit(1768903907.344:1609): avc: denied { read write } for pid=6558 comm="syz.6.940" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.201364][ T29] audit: type=1400 audit(1768903907.344:1610): avc: denied { open } for pid=6558 comm="syz.6.940" path="/141/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.251279][ T6559] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.940: bg 0: block 345: padding at end of block bitmap is not set [ 99.273878][ T6559] EXT4-fs (loop6): Remounting filesystem read-only [ 99.388031][ T4165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.456916][ T6570] tmpfs: Unsupported parameter 'huge' [ 99.790605][ T29] audit: type=1326 audit(1768903907.914:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe133d4acb9 code=0x7ffc0000 [ 99.813500][ T6578] netlink: 'syz.5.946': attribute type 4 has an invalid length. [ 99.815855][ T29] audit: type=1326 audit(1768903907.914:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe133d4acb9 code=0x7ffc0000 [ 99.845756][ T29] audit: type=1326 audit(1768903907.914:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe133d4acb9 code=0x7ffc0000 [ 99.869817][ T29] audit: type=1326 audit(1768903907.924:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe133d4acb9 code=0x7ffc0000 [ 99.872162][ T6579] netlink: 'syz.5.946': attribute type 4 has an invalid length. [ 100.269560][ T6602] netlink: 24 bytes leftover after parsing attributes in process `syz.2.955'. [ 100.412336][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.419656][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.740275][ T6602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.750953][ T6602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.836272][ T5912] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.844863][ T5912] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.922907][ T6621] loop0: detected capacity change from 0 to 1024 [ 100.930627][ T5912] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.939257][ T5912] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.948042][ T5912] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.956535][ T5912] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.965584][ T5912] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.974231][ T5912] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.984530][ T6621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.017677][ T6621] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.469024][ T6640] netlink: 84 bytes leftover after parsing attributes in process `syz.5.968'. [ 101.478026][ T6640] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 102.290546][ T6662] loop6: detected capacity change from 0 to 512 [ 102.301377][ T6662] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 102.313107][ T6662] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 102.323440][ T6662] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.974: Corrupt directory, running e2fsck is recommended [ 102.348431][ T6662] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 102.358460][ T6662] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.974: corrupted in-inode xattr: e_name out of bounds [ 102.377787][ T6662] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.974: couldn't read orphan inode 15 (err -117) [ 102.391741][ T6662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.415642][ T6662] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 102.427943][ T6662] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 102.438171][ T6662] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.974: Corrupt directory, running e2fsck is recommended [ 102.451280][ T6662] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.974: path /149/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 102.474920][ T6662] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 8: comm syz.6.974: path /149/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 102.519401][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.978'. [ 102.529467][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.978'. [ 102.560836][ T4165] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.561800][ T6672] vlan1: entered promiscuous mode [ 102.575033][ T6672] bridge2: entered promiscuous mode [ 102.580486][ T6672] vlan1: entered allmulticast mode [ 102.585709][ T6672] bridge2: entered allmulticast mode [ 102.666520][ T6688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.983'. [ 102.675972][ T6688] netlink: 'syz.2.983': attribute type 10 has an invalid length. [ 102.686760][ T6688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.696336][ T6688] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 102.726341][ T6690] loop1: detected capacity change from 0 to 512 [ 102.735193][ T6690] EXT4-fs: Ignoring removed i_version option [ 102.742029][ T6690] EXT4-fs: Ignoring removed nobh option [ 102.748436][ T6690] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.772115][ T6690] EXT4-fs (loop1): 1 truncate cleaned up [ 102.784705][ T6690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.817688][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.989'. [ 102.824201][ T6704] netlink: 64 bytes leftover after parsing attributes in process `syz.2.990'. [ 102.831169][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.989'. [ 102.845321][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.989'. [ 102.943370][ T6711] netlink: 'syz.2.993': attribute type 1 has an invalid length. [ 102.971659][ T6711] bond2: (slave veth5): Enslaving as an active interface with a down link [ 102.987070][ T6711] bond2: entered promiscuous mode [ 102.992189][ T6711] bond2: entered allmulticast mode [ 102.998200][ T6711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.144942][ T6724] tipc: Enabling of bearer rejected, failed to enable media [ 103.536035][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.580241][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 103.591368][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1005'. [ 103.687589][ T6487] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 103.757542][ T6754] loop6: detected capacity change from 0 to 128 [ 103.769803][ T6754] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 103.788104][ T6754] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.835747][ T4165] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.876534][ T6763] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 103.882975][ T6763] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 103.889730][ T6763] hsr_slave_0: left promiscuous mode [ 103.896032][ T6763] hsr_slave_1: left promiscuous mode [ 103.947783][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.985305][ T6771] loop0: detected capacity change from 0 to 2048 [ 104.016634][ T3312] loop0: p1 p3 p4 [ 104.024299][ T3312] loop0: p4 size 589824 extends beyond EOD, truncated [ 104.046093][ T6771] loop0: p1 p3 p4 [ 104.055949][ T6771] loop0: p4 size 589824 extends beyond EOD, truncated [ 104.082968][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 104.082983][ T29] audit: type=1400 audit(1768903912.244:1637): avc: denied { read write } for pid=6770 comm="syz.0.1019" name="loop0p4" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.113573][ T29] audit: type=1400 audit(1768903912.244:1638): avc: denied { open } for pid=6770 comm="syz.0.1019" path="/dev/loop0p4" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.287943][ T6789] loop0: detected capacity change from 0 to 512 [ 104.296783][ T6789] EXT4-fs warning (device loop0): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 104.380246][ T29] audit: type=1400 audit(1768903912.544:1639): avc: denied { ioctl } for pid=6793 comm="syz.0.1028" path="socket:[23749]" dev="sockfs" ino=23749 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.425790][ T29] audit: type=1400 audit(1768903912.544:1640): avc: denied { setattr } for pid=6793 comm="syz.0.1028" path="/dev/bus/usb/001/001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 104.527638][ T29] audit: type=1400 audit(1768903912.694:1641): avc: denied { read } for pid=6801 comm="syz.6.1032" lport=55308 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 104.633814][ T29] audit: type=1400 audit(1768903912.794:1642): avc: denied { watch watch_reads } for pid=6804 comm="syz.1.1033" path="/191/file0" dev="tmpfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.769133][ T6813] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.819038][ T6813] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.847926][ T29] audit: type=1326 audit(1768903913.014:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93be70acb9 code=0x7ffc0000 [ 104.875431][ T6813] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.890291][ T29] audit: type=1326 audit(1768903913.034:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93be70acb9 code=0x7ffc0000 [ 104.914587][ T29] audit: type=1326 audit(1768903913.044:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f93be70acb9 code=0x7ffc0000 [ 104.938731][ T29] audit: type=1326 audit(1768903913.054:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93be70acb9 code=0x7ffc0000 [ 104.979724][ T6813] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.066489][ T5912] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.075079][ T5912] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.083757][ T5912] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.103714][ T5912] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.267717][ T6841] tipc: Failed to remove unknown binding: 66,1,1/0:4024425265/4024425267 [ 105.298245][ T6841] tipc: Failed to remove unknown binding: 66,1,1/0:4024425265/4024425267 [ 105.306815][ T6841] tipc: Failed to remove unknown binding: 66,1,1/0:4024425265/4024425267 [ 105.684616][ T6863] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.748830][ T6863] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.821020][ T6863] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.888726][ T6863] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.949417][ T887] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.966689][ T887] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.014478][ T887] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.050863][ T887] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.288197][ T6935] sctp: [Deprecated]: syz.5.1075 (pid 6935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.288197][ T6935] Use struct sctp_sack_info instead [ 106.394992][ T6950] netlink: zone id is out of range [ 106.400275][ T6950] netlink: zone id is out of range [ 106.417272][ T6950] netlink: zone id is out of range [ 106.438093][ T6950] netlink: set zone limit has 8 unknown bytes [ 106.440082][ T6955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.452648][ T6955] batadv0: mtu less than device minimum [ 106.458964][ T6955] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.469983][ T6955] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.486561][ T6955] net_ratelimit: 8 callbacks suppressed [ 106.486576][ T6955] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.503229][ T6955] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.514759][ T6955] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.525832][ T6955] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.537024][ T6955] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.548297][ T6955] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.559589][ T6955] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.570804][ T6955] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.581928][ T6955] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.593121][ T6955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.601934][ T6955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.609531][ T6955] batadv0: mtu less than device minimum [ 106.626321][ T6955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.634779][ T6955] batman_adv: batadv0: Interface deactivated: dummy0 [ 106.642005][ T6955] batman_adv: batadv0: Removing interface: dummy0 [ 106.850585][ T7005] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 106.969648][ T7016] __nla_validate_parse: 11 callbacks suppressed [ 106.969693][ T7016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1089'. [ 107.045441][ T7026] netlink: 'syz.2.1093': attribute type 10 has an invalid length. [ 107.066937][ T7026] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.090040][ T7026] bond0: (slave team0): Enslaving as an active interface with an up link [ 107.140505][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1095'. [ 107.154684][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1095'. [ 107.228780][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'. [ 108.145048][ T7060] netlink: 'syz.0.1104': attribute type 10 has an invalid length. [ 108.153550][ T7060] netlink: 'syz.0.1104': attribute type 10 has an invalid length. [ 108.163608][ T7060] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 108.218826][ T6627] IPVS: starting estimator thread 0... [ 108.289470][ T7069] syzkaller1: entered allmulticast mode [ 108.307150][ T7067] IPVS: using max 2016 ests per chain, 100800 per kthread [ 108.412025][ T7082] loop0: detected capacity change from 0 to 4096 [ 108.425426][ T7082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.472032][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.500787][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1115'. [ 108.781916][ T7109] netlink: 'syz.6.1124': attribute type 4 has an invalid length. [ 108.791423][ T7109] netlink: 'syz.6.1124': attribute type 4 has an invalid length. [ 108.891299][ T7107] loop0: detected capacity change from 0 to 32768 [ 109.345037][ T7115] loop1: detected capacity change from 0 to 512 [ 109.352314][ T7115] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.362913][ T7115] EXT4-fs (loop1): orphan cleanup on readonly fs [ 109.370257][ T7115] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 109.384943][ T7115] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 109.391598][ T7115] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1126: bad orphan inode 768 [ 109.403162][ T7115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.424986][ T7115] EXT4-fs: Ignoring removed orlov option [ 109.431564][ T7115] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 109.441099][ T7115] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.449725][ T7115] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 109.487164][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.743667][ T7126] netlink: 'syz.0.1131': attribute type 10 has an invalid length. [ 109.778287][ T7126] bond0: (slave dummy0): Releasing backup interface [ 109.909252][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1133'. [ 110.075886][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 110.075905][ T29] audit: type=1326 audit(1768903918.234:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.1.1138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93be70acb9 code=0x0 [ 110.145257][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1139'. [ 110.220927][ T7146] macvlan2: entered promiscuous mode [ 110.226377][ T7146] macvlan2: entered allmulticast mode [ 110.232800][ T7146] bond1: (slave macvlan2): Opening slave failed [ 110.339043][ T7157] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1140'. [ 110.349246][ T7156] veth0_vlan: left promiscuous mode [ 111.204897][ T7186] netlink: 'syz.0.1154': attribute type 13 has an invalid length. [ 112.232597][ T29] audit: type=1400 audit(1768903920.394:1705): avc: denied { read } for pid=7202 comm="syz.1.1161" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 112.257013][ T29] audit: type=1400 audit(1768903920.394:1706): avc: denied { ioctl } for pid=7202 comm="syz.1.1161" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 112.326665][ T29] audit: type=1400 audit(1768903920.414:1707): avc: denied { write } for pid=7204 comm="syz.0.1162" path="socket:[24868]" dev="sockfs" ino=24868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.383321][ T7189] net_ratelimit: 38 callbacks suppressed [ 112.383339][ T7189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.397366][ T7189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.441478][ T7208] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 112.449332][ T7208] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1163'. [ 112.519753][ T7216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1166'. [ 112.561512][ T7215] syzkaller0: entered promiscuous mode [ 112.567676][ T7215] syzkaller0: entered allmulticast mode [ 112.666065][ T7225] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1171'. [ 112.675786][ T7225] tipc: Started in network mode [ 112.680761][ T7225] tipc: Node identity ac141442, cluster identity 4711 [ 112.688170][ T7225] tipc: New replicast peer: 172.20.20.170 [ 112.694101][ T7225] tipc: Enabled bearer , priority 10 [ 112.712431][ T29] audit: type=1400 audit(1768903920.874:1708): avc: denied { name_bind 0x1000000 } for pid=7227 comm="syz.1.1172" path="socket:[24550]" dev="sockfs" ino=24550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 112.988260][ T7251] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1182'. [ 113.022941][ T7251] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.030242][ T7251] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.106191][ T5928] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.125201][ T5928] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.135085][ T5928] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.144017][ T5928] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.457693][ T7263] netlink: 444 bytes leftover after parsing attributes in process `syz.6.1186'. [ 113.467210][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1186'. [ 113.515601][ T29] audit: type=1326 audit(1768903921.674:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.1.1187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f93be704ad7 code=0x0 [ 113.609703][ T7272] loop0: detected capacity change from 0 to 512 [ 113.641175][ T7272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.659840][ T7272] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.686157][ T29] audit: type=1400 audit(1768903921.844:1710): avc: denied { mounton } for pid=7271 comm="syz.0.1191" path="/245/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.827158][ T3426] tipc: Node number set to 2886997058 [ 113.962247][ T7290] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1195'. [ 114.075760][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1198'. [ 114.677579][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.703619][ T7312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1204'. [ 114.825447][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1204'. [ 115.101772][ T7325] netlink: 'syz.6.1209': attribute type 1 has an invalid length. [ 115.159908][ T7325] bond1: entered promiscuous mode [ 115.165058][ T7325] bond1: entered allmulticast mode [ 115.209955][ T7325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.248894][ T29] audit: type=1400 audit(1768903923.394:1711): avc: denied { unlink } for pid=3322 comm="syz-executor" name="file3" dev="tmpfs" ino=1232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.339778][ T7325] veth5: entered promiscuous mode [ 115.344951][ T7325] veth5: entered allmulticast mode [ 115.365455][ T7325] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 115.614531][ T7339] batman_adv: batadv0: Removing interface: dummy0 [ 115.643839][ T7339] bond0: (slave bond_slave_0): Releasing backup interface [ 115.653977][ T7339] bond0: (slave bond_slave_1): Releasing backup interface [ 115.679175][ T7339] team0: Port device team_slave_0 removed [ 115.688212][ T7339] team0: Port device team_slave_1 removed [ 115.703994][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.711491][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.728313][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.735788][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.764184][ T7339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.888996][ T29] audit: type=1400 audit(1768903925.044:1712): avc: denied { write } for pid=7410 comm="syz.1.1241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 117.904224][ T7436] __nla_validate_parse: 2 callbacks suppressed [ 117.904243][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1250'. [ 117.930664][ T7438] loop1: detected capacity change from 0 to 256 [ 118.132684][ T29] audit: type=1400 audit(1768903926.294:1713): avc: denied { read write } for pid=7452 comm="syz.6.1256" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 118.157836][ T29] audit: type=1400 audit(1768903926.294:1714): avc: denied { open } for pid=7452 comm="syz.6.1256" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 118.279294][ T7463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.288279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.368984][ T29] audit: type=1400 audit(1768903926.534:1715): avc: denied { open } for pid=7464 comm="syz.0.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.389220][ T29] audit: type=1400 audit(1768903926.534:1716): avc: denied { kernel } for pid=7464 comm="syz.0.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.441062][ T7467] netlink: 'syz.1.1260': attribute type 13 has an invalid length. [ 118.442980][ T7469] SET target dimension over the limit! [ 118.617254][ T29] audit: type=1400 audit(1768903926.764:1717): avc: denied { tracepoint } for pid=7473 comm="syz.5.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.659126][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.667496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.768965][ T29] audit: type=1400 audit(1768903926.934:1718): avc: denied { mount } for pid=7480 comm="syz.5.1264" name="/" dev="hugetlbfs" ino=25361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 119.014749][ T7498] loop6: detected capacity change from 0 to 512 [ 119.024744][ T7498] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 119.036337][ T7498] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 119.047356][ T7498] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1271: Corrupt directory, running e2fsck is recommended [ 119.061294][ T7498] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 119.070466][ T7498] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.1271: corrupted in-inode xattr: e_name out of bounds [ 119.086264][ T7498] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1271: couldn't read orphan inode 15 (err -117) [ 119.099695][ T7498] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.179137][ T7498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.427910][ T7516] loop6: detected capacity change from 0 to 8192 [ 119.575631][ T7529] loop1: detected capacity change from 0 to 128 [ 119.593626][ T7527] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 119.601316][ T7527] FAT-fs (loop6): Filesystem has been set read-only [ 119.632191][ T4165] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 119.641055][ T4165] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 119.781539][ T7531] batman_adv: batadv0: Interface deactivated: gretap1 [ 119.794877][ T7535] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 119.804517][ T7531] bond2: left allmulticast mode [ 119.809511][ T7531] bond2: left promiscuous mode [ 119.819757][ T886] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.847856][ T886] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.883553][ T7535] bond3: (slave veth5): Enslaving as an active interface with a down link [ 119.892357][ T886] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.915382][ T886] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.936304][ T7543] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 119.960621][ T7535] bond3: entered promiscuous mode [ 119.965791][ T7535] bond3: entered allmulticast mode [ 119.973324][ T7535] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.983867][ T7543] bond3: entered promiscuous mode [ 119.989655][ T7543] bond3: entered allmulticast mode [ 120.010255][ T7543] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.023208][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'. [ 120.068327][ T7547] veth9: entered promiscuous mode [ 120.073676][ T7547] veth9: entered allmulticast mode [ 120.087012][ T7547] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 120.231271][ T7561] loop1: detected capacity change from 0 to 512 [ 120.268049][ T7564] tipc: Failed to remove unknown binding: 66,0,0/2886997058:1797695258/1797695259 [ 120.278591][ T7561] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 120.290205][ T7561] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 120.300518][ T7561] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1294: Corrupt directory, running e2fsck is recommended [ 120.319978][ T7564] tipc: Failed to remove unknown binding: 66,0,0/2886997058:1797695258/1797695259 [ 120.334314][ T7554] macvtap1: entered promiscuous mode [ 120.341270][ T7554] team0: entered promiscuous mode [ 120.358933][ T7554] team_slave_0: entered promiscuous mode [ 120.366422][ T7554] team_slave_1: entered promiscuous mode [ 120.379911][ T7554] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 120.391213][ T7561] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 120.391271][ T7561] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.1294: corrupted in-inode xattr: e_name out of bounds [ 120.392542][ T7561] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1294: couldn't read orphan inode 15 (err -117) [ 120.395450][ T7561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.399384][ T7561] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 120.399417][ T7561] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 120.399518][ T7561] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1294: Corrupt directory, running e2fsck is recommended [ 120.399583][ T7561] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1294: path /251/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 120.401861][ T7561] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 8: comm syz.1.1294: path /251/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 120.619295][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.629906][ T7554] team0: Device macvtap1 is already an upper device of the team interface [ 120.753049][ T7554] team0: left promiscuous mode [ 120.759215][ T7554] team_slave_0: left promiscuous mode [ 120.767391][ T7554] team_slave_1: left promiscuous mode [ 121.266037][ T7586] netlink: 'syz.5.1301': attribute type 3 has an invalid length. [ 121.273995][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1301'. [ 121.532121][ T7555] chnl_net:caif_netlink_parms(): no params data found [ 121.833508][ T7613] IPVS: set_ctl: invalid protocol: 45813 10.1.1.2:20004 [ 122.459685][ T7613] loop0: detected capacity change from 0 to 128 [ 122.482254][ T29] audit: type=1400 audit(1768903930.644:1719): avc: denied { setattr } for pid=7612 comm="syz.0.1309" path="pipe:[1752]" dev="pipefs" ino=1752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 122.572102][ T7555] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.579446][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.586854][ T7555] bridge_slave_0: entered allmulticast mode [ 122.593601][ T7555] bridge_slave_0: entered promiscuous mode [ 122.601582][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.608812][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.616182][ T7555] bridge_slave_1: entered allmulticast mode [ 122.623011][ T7555] bridge_slave_1: entered promiscuous mode [ 122.653584][ T7555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.675567][ T7555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.702841][ T7555] team0: Port device team_slave_0 added [ 122.711959][ T7555] team0: Port device team_slave_1 added [ 122.757472][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.764487][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.791687][ T7555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.840650][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.848397][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.875137][ T7555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.078012][ T7555] hsr_slave_0: entered promiscuous mode [ 123.084535][ T7555] hsr_slave_1: entered promiscuous mode [ 123.109436][ T7624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1312'. [ 123.125029][ T7555] debugfs: 'hsr0' already exists in 'hsr' [ 123.130937][ T7555] Cannot create hsr debugfs directory [ 123.152991][ T29] audit: type=1400 audit(1768903931.314:1720): avc: denied { setattr } for pid=7642 comm="syz.1.1328" name="RDS" dev="sockfs" ino=26390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.341364][ T7555] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 123.361591][ T7555] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 123.373715][ T7555] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 123.395718][ T7555] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 123.427063][ T7660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1324'. [ 123.477956][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.485102][ T7555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.492524][ T7555] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.499713][ T7555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.638944][ T29] audit: type=1400 audit(1768903931.674:1721): avc: denied { cpu } for pid=7665 comm="syz.1.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 123.699521][ T7673] loop1: detected capacity change from 0 to 512 [ 123.701018][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 123.718052][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.733118][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.742299][ T7673] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1327: bg 0: block 393: padding at end of block bitmap is not set [ 123.770665][ T7555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.791526][ T7673] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 123.799909][ T7555] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.810181][ T2411] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.817490][ T2411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.843089][ T7673] EXT4-fs (loop1): 2 truncates cleaned up [ 123.863632][ T7673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.887347][ T2411] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.894629][ T2411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.918301][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'. [ 123.931517][ T7673] hsr_slave_0: left promiscuous mode [ 123.937829][ T7673] hsr_slave_1: left promiscuous mode [ 124.018096][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.091463][ T7555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.138293][ T29] audit: type=1400 audit(1768903932.304:1722): avc: denied { write } for pid=7692 comm="syz.0.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 124.205768][ T7696] loop1: detected capacity change from 0 to 8192 [ 124.337106][ T7696] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 124.344822][ T7696] FAT-fs (loop1): Filesystem has been set read-only [ 124.355796][ T7555] veth0_vlan: entered promiscuous mode [ 124.364154][ T7555] veth1_vlan: entered promiscuous mode [ 124.381801][ T7703] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 124.395305][ T7555] veth0_macvtap: entered promiscuous mode [ 124.405979][ T7703] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 124.425161][ T3322] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 124.442012][ T3322] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 124.494877][ T7555] veth1_macvtap: entered promiscuous mode [ 124.526344][ T7555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.565423][ T7555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.975730][ T5603] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.012157][ T5603] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.017569][ T29] audit: type=1400 audit(1768903933.174:1723): avc: denied { mounton } for pid=7555 comm="syz-executor" path="/root/syzkaller.8OdcE5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 125.046848][ T5603] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.096950][ T5603] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.131201][ T29] audit: type=1400 audit(1768903933.224:1724): avc: denied { mount } for pid=7555 comm="syz-executor" name="/" dev="gadgetfs" ino=4475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 125.158362][ T7725] loop7: detected capacity change from 0 to 128 [ 125.470510][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.517041][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.108587][ T7744] chnl_net:caif_netlink_parms(): no params data found [ 126.152885][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.160679][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.168269][ T7744] bridge_slave_0: entered allmulticast mode [ 126.175563][ T7744] bridge_slave_0: entered promiscuous mode [ 126.182942][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.190916][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.198464][ T7744] bridge_slave_1: entered allmulticast mode [ 126.205168][ T7744] bridge_slave_1: entered promiscuous mode [ 126.229077][ T7744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.240435][ T7744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.269182][ T7770] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.302257][ T7744] team0: Port device team_slave_0 added [ 126.344476][ T7744] team0: Port device team_slave_1 added [ 126.366018][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.373820][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.401297][ T7744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.413055][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.420099][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.446936][ T7744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.472556][ T7775] ref_ctr increment failed for inode: 0x4a6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810439f2c0 [ 126.523709][ T7744] hsr_slave_0: entered promiscuous mode [ 126.530726][ T7744] hsr_slave_1: entered promiscuous mode [ 126.536742][ T7744] debugfs: 'hsr0' already exists in 'hsr' [ 126.542618][ T7744] Cannot create hsr debugfs directory [ 126.561141][ T29] audit: type=1326 audit(1768903934.724:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86227dacb9 code=0x7ffc0000 [ 126.584752][ T29] audit: type=1326 audit(1768903934.724:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86227dacb9 code=0x7ffc0000 [ 126.612051][ T7785] netlink: 'syz.0.1359': attribute type 10 has an invalid length. [ 126.628669][ T29] audit: type=1326 audit(1768903934.774:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86227dacb9 code=0x7ffc0000 [ 126.652185][ T29] audit: type=1326 audit(1768903934.774:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86227dacb9 code=0x7ffc0000 [ 126.776510][ T7744] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 126.790768][ T7744] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 126.807246][ T7744] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 126.817225][ T7744] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 126.894601][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.925038][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.943008][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.950234][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.982209][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.989424][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.034849][ T7744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.212169][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.460496][ T7770] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.740753][ T7770] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.818892][ T7770] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.924686][ T37] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.953836][ T37] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.987989][ T37] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.034319][ T37] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.331572][ T7744] veth0_vlan: entered promiscuous mode [ 128.360825][ T7744] veth1_vlan: entered promiscuous mode [ 128.398302][ T7744] veth0_macvtap: entered promiscuous mode [ 128.418876][ T7744] veth1_macvtap: entered promiscuous mode [ 128.451228][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.472838][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.491039][ T2411] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.545496][ T2411] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.573570][ T2411] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.595937][ T2411] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.606480][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 128.606512][ T29] audit: type=1400 audit(1768903936.764:1748): avc: denied { getopt } for pid=7875 comm="syz.8.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.703543][ T29] audit: type=1400 audit(1768903936.854:1749): avc: denied { write } for pid=7878 comm="syz.8.1391" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.727075][ T29] audit: type=1400 audit(1768903936.854:1750): avc: denied { ioctl } for pid=7878 comm="syz.8.1391" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.849867][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.895528][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.705238][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1401'. [ 129.719593][ T7883] Set syz1 is full, maxelem 65536 reached [ 129.737009][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1401'. [ 130.170544][ T7922] netlink: 'syz.5.1407': attribute type 10 has an invalid length. [ 130.181903][ T7922] team0: Failed to send options change via netlink (err -105) [ 130.189526][ T7922] team0: Port device dummy0 added [ 130.665696][ T7934] loop7: detected capacity change from 0 to 164 [ 130.887972][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.925837][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.990650][ T7938] netlink: 'syz.7.1414': attribute type 13 has an invalid length. [ 131.339425][ T7938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.393654][ T29] audit: type=1400 audit(1768903939.554:1751): avc: denied { mount } for pid=7944 comm="syz.2.1418" name="/" dev="configfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 131.426353][ T29] audit: type=1400 audit(1768903939.584:1752): avc: denied { search } for pid=7944 comm="syz.2.1418" name="/" dev="configfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.448778][ T29] audit: type=1400 audit(1768903939.584:1753): avc: denied { search } for pid=7944 comm="syz.2.1418" name="/" dev="configfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.471155][ T29] audit: type=1400 audit(1768903939.584:1754): avc: denied { read open } for pid=7944 comm="syz.2.1418" path="/" dev="configfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.509262][ T29] audit: type=1326 audit(1768903939.674:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.8.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06198aacb9 code=0x7ffc0000 [ 131.578256][ T29] audit: type=1326 audit(1768903939.704:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.8.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f06198aacb9 code=0x7ffc0000 [ 131.602038][ T29] audit: type=1326 audit(1768903939.704:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.8.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f06198aaa22 code=0x7ffc0000 [ 131.634860][ T7948] loop8: detected capacity change from 0 to 8192 [ 131.919951][ T7973] batadv_slave_0: entered promiscuous mode [ 131.926641][ T7973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.940552][ T7973] batadv_slave_0 (unregistering): left promiscuous mode [ 131.947893][ T7973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.232121][ T7990] loop8: detected capacity change from 0 to 512 [ 132.240893][ T7990] EXT4-fs: inline encryption not supported [ 132.249427][ T7990] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 132.255042][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1436'. [ 132.267989][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1436'. [ 132.450994][ T8011] netlink: 'syz.8.1444': attribute type 1 has an invalid length. [ 132.465179][ T8011] veth1_to_bridge: entered promiscuous mode [ 132.471340][ T8011] veth1_to_bridge: entered allmulticast mode [ 132.492383][ T8013] loop7: detected capacity change from 0 to 1024 [ 132.519561][ T8013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.542686][ T8013] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: comm syz.7.1445: inode #3237228: comm syz.7.1445: iget: illegal inode # [ 132.565549][ T8013] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1445: error while reading EA inode 3237228 err=-117 [ 132.606969][ T7555] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.631015][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1448'. [ 132.640403][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1448'. [ 133.091600][ T8039] ================================================================== [ 133.099778][ T8039] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 133.108882][ T8039] [ 133.111252][ T8039] write to 0xffff8881392289a8 of 8 bytes by task 8038 on cpu 1: [ 133.118917][ T8039] shmem_file_splice_read+0x470/0x600 [ 133.124330][ T8039] splice_direct_to_actor+0x26e/0x670 [ 133.129746][ T8039] do_splice_direct+0x119/0x1a0 [ 133.134624][ T8039] do_sendfile+0x380/0x650 [ 133.139084][ T8039] __x64_sys_sendfile64+0x105/0x150 [ 133.144332][ T8039] x64_sys_call+0x2db1/0x3000 [ 133.149067][ T8039] do_syscall_64+0xc0/0x2a0 [ 133.153629][ T8039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.159654][ T8039] [ 133.162021][ T8039] write to 0xffff8881392289a8 of 8 bytes by task 8039 on cpu 0: [ 133.169869][ T8039] shmem_file_splice_read+0x470/0x600 [ 133.175293][ T8039] splice_direct_to_actor+0x26e/0x670 [ 133.180712][ T8039] do_splice_direct+0x119/0x1a0 [ 133.185610][ T8039] do_sendfile+0x380/0x650 [ 133.190165][ T8039] __x64_sys_sendfile64+0x105/0x150 [ 133.195418][ T8039] x64_sys_call+0x2db1/0x3000 [ 133.200149][ T8039] do_syscall_64+0xc0/0x2a0 [ 133.204701][ T8039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.210645][ T8039] [ 133.212996][ T8039] value changed: 0x000000000000072e -> 0x0000000000000730 [ 133.220136][ T8039] [ 133.222516][ T8039] Reported by Kernel Concurrency Sanitizer on: [ 133.228809][ T8039] CPU: 0 UID: 0 PID: 8039 Comm: syz.2.1454 Not tainted syzkaller #0 PREEMPT(voluntary) [ 133.238575][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.248675][ T8039] ==================================================================