last executing test programs: 2m30.616714303s ago: executing program 32 (id=253): syz_clone(0x8001080, &(0x7f0000000800), 0x0, &(0x7f0000000900), &(0x7f0000000940), 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = open(0x0, 0x60842, 0x0) pwritev2(r0, 0x0, 0x0, 0x29b0cfbd, 0x41001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x3, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2m2.751481806s ago: executing program 2 (id=822): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) write(r2, &(0x7f0000000740)='foo', 0x3) 2m2.611666064s ago: executing program 2 (id=825): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/3, 0x3, 0x3, 0x3, 0x0, 0x0, 0xc04}}, 0x11c) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) readv(r0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 2m2.464414633s ago: executing program 2 (id=829): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4ea3, 0x8002, @empty, 0xf64}, 0x1c) listen(r1, 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r2, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 2m2.450610614s ago: executing program 2 (id=831): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 2m2.362610836s ago: executing program 2 (id=834): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2m1.776651761s ago: executing program 2 (id=842): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/pm_trace', 0x1a1081, 0x148) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m1.776344131s ago: executing program 33 (id=842): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/pm_trace', 0x1a1081, 0x148) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m56.589609284s ago: executing program 4 (id=921): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 1m56.482727788s ago: executing program 4 (id=924): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20006, 0x8, 0xfffffffc, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x30, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 1m55.964778974s ago: executing program 4 (id=931): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x40000009, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3186dd69000000001406fffc0000000000000000000000000000aa4e244e"], 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m55.923929089s ago: executing program 4 (id=932): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000001c0)=0x304214, 0x4) 1m55.825103672s ago: executing program 4 (id=934): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m55.663605962s ago: executing program 4 (id=938): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x7) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = io_uring_setup(0x2236, &(0x7f0000000880)={0x0, 0xf81a, 0x8, 0x2, 0xa6}) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/129, 0x81, 0x40000002, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m40.651201642s ago: executing program 34 (id=938): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x7) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = io_uring_setup(0x2236, &(0x7f0000000880)={0x0, 0xf81a, 0x8, 0x2, 0xa6}) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/129, 0x81, 0x40000002, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m36.265768333s ago: executing program 3 (id=1161): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffc) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x80002021}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 1m36.155749727s ago: executing program 3 (id=1162): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) unshare(0x22020400) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 1m35.955666402s ago: executing program 3 (id=1166): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m35.764988847s ago: executing program 3 (id=1170): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) 1m35.652983681s ago: executing program 3 (id=1175): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mlockall(0x7) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x6a0a4000) 1m35.606131467s ago: executing program 3 (id=1177): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1m35.541292145s ago: executing program 35 (id=1177): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe0002476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea097a75dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f01001bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bc0004c3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b4150900000000000000f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d18716975c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f9836faa292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee63ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c11465fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff300"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff803500004000638477fbac14142ce934a0a662079f4b4d2f87e56dca6aab055013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 1m1.32894173s ago: executing program 6 (id=1842): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1) 1m1.278737906s ago: executing program 6 (id=1845): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x12) 1m1.224698672s ago: executing program 6 (id=1847): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1m1.149320033s ago: executing program 6 (id=1851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380102000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000050}, 0x40) 1m1.020948378s ago: executing program 6 (id=1853): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m0.959457467s ago: executing program 6 (id=1854): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r2, 0xfffffffffffffffe, 0x1) 50.309603408s ago: executing program 1 (id=1990): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x26f, 0xd, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 45.609250799s ago: executing program 36 (id=1854): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r2, 0xfffffffffffffffe, 0x1) 45.60357416s ago: executing program 1 (id=1984): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x100514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 44.633614114s ago: executing program 1 (id=1993): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 44.42669688s ago: executing program 1 (id=2006): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 44.232179875s ago: executing program 1 (id=1999): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}}}]}]}]}}]}, 0x50}}, 0x0) 42.853227292s ago: executing program 1 (id=2008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, 0x0) 42.796763949s ago: executing program 37 (id=2008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, 0x0) 1.926969844s ago: executing program 9 (id=2570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)='./file2\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) 1.573375389s ago: executing program 7 (id=2575): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) close(0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) close(0x3) 1.558626681s ago: executing program 5 (id=2576): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r1, 0x0) 1.522694456s ago: executing program 7 (id=2577): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000002c"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.507198548s ago: executing program 5 (id=2578): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.456693314s ago: executing program 9 (id=2579): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) 1.439131197s ago: executing program 5 (id=2580): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x1}) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.438586597s ago: executing program 8 (id=2581): syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x84d8, 0x3}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r0 = syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.312806293s ago: executing program 8 (id=2582): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x31) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.25511377s ago: executing program 5 (id=2583): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) 1.218888525s ago: executing program 8 (id=2584): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}], 0x28}}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.115269088s ago: executing program 9 (id=2585): r0 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0xc26, 0x0) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x2881435, 0x0) 1.114503558s ago: executing program 0 (id=2586): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@filename='./file2\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x209010, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 1.025762739s ago: executing program 8 (id=2587): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x85a, 0x40000006}, 0x3c) 957.110878ms ago: executing program 9 (id=2588): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) 911.617284ms ago: executing program 5 (id=2589): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418482, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x1, 0x1000f4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) pwritev2(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x1200, 0x41001, 0x3) 722.602718ms ago: executing program 8 (id=2590): socket(0x18, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0xa4, 0x0, 0x0) 721.629018ms ago: executing program 0 (id=2591): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) 694.237122ms ago: executing program 9 (id=2592): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(0x0, 0x64842, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000018}, 0x20040800) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffc) 612.717382ms ago: executing program 5 (id=2593): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x100, 0x0, 0x80000003}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 519.438034ms ago: executing program 8 (id=2594): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/22, 0x16, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 435.218785ms ago: executing program 7 (id=2595): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) close_range(r0, r2, 0x0) 372.031453ms ago: executing program 9 (id=2596): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x20000050) accept4(r0, 0x0, 0x0, 0x800) 280.817325ms ago: executing program 7 (id=2597): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000034c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010826bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) 280.550775ms ago: executing program 0 (id=2598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 254.402238ms ago: executing program 7 (id=2599): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0xf2ff, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x7, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 251.503938ms ago: executing program 0 (id=2600): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$sock_int(r1, 0x28, 0x2b, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010043, 0x0) 183.615267ms ago: executing program 7 (id=2601): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321", 0x12) r2 = dup2(0xffffffffffffffff, r0) linkat(r2, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 62.851933ms ago: executing program 0 (id=2602): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x8ac76eceb7a58023}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2603): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79a7, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) kernel console output (not intermixed with test programs): 09] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1245'. [ 114.541042][ T7209] geneve0: entered promiscuous mode [ 114.546393][ T7209] geneve0: entered allmulticast mode [ 114.714048][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1254'. [ 114.723146][ T7239] netlink: 'syz.6.1254': attribute type 12 has an invalid length. [ 114.749386][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1254'. [ 114.758614][ T7239] netlink: 'syz.6.1254': attribute type 12 has an invalid length. [ 114.769922][ T6052] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.784530][ T6052] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.807827][ T6052] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.822359][ T6052] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.010225][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1269'. [ 115.020711][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1269'. [ 115.063511][ T7274] netlink: 'syz.7.1270': attribute type 1 has an invalid length. [ 115.707292][ T7295] loop1: detected capacity change from 0 to 128 [ 115.751933][ T7308] loop8: detected capacity change from 0 to 512 [ 115.788177][ T7308] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.811649][ T7308] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.089047][ T6994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.340894][ T7320] hsr1: left promiscuous mode [ 116.463259][ T6030] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.471900][ T6030] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.503556][ T7330] loop8: detected capacity change from 0 to 512 [ 116.534985][ T6030] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.543572][ T6030] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.552096][ T7330] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 116.585411][ T7330] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.603657][ T35] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.612280][ T35] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.671223][ T35] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.679842][ T35] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.809992][ T7339] loop1: detected capacity change from 0 to 764 [ 116.820247][ T7342] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 116.856058][ T7339] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 116.958820][ T7337] FAT-fs (loop8): FAT read failed (blocknr 128) [ 116.976526][ T7347] program syz.1.1295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.660193][ T7379] netlink: 'syz.7.1311': attribute type 29 has an invalid length. [ 117.696424][ T7379] netlink: 'syz.7.1311': attribute type 29 has an invalid length. [ 118.194630][ T7407] pimreg: entered allmulticast mode [ 118.202123][ T7407] pimreg: left allmulticast mode [ 118.342120][ T7418] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 118.348707][ T7418] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.356214][ T7418] vhci_hcd vhci_hcd.0: Device attached [ 118.376463][ T7418] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 118.383088][ T7418] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.390733][ T7418] vhci_hcd vhci_hcd.0: Device attached [ 118.423487][ T7418] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 118.430091][ T7418] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 118.437793][ T7418] vhci_hcd vhci_hcd.0: Device attached [ 118.476951][ T7418] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(9) [ 118.484198][ T7418] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.492244][ T7418] vhci_hcd vhci_hcd.0: Device attached [ 118.534393][ T7418] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(11) [ 118.541140][ T7418] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.548748][ T6156] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 118.555205][ T7418] vhci_hcd vhci_hcd.0: Device attached [ 118.582526][ T7418] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 118.603157][ T7443] loop6: detected capacity change from 0 to 512 [ 118.610317][ T7418] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 118.628893][ T7443] EXT4-fs: Ignoring removed i_version option [ 118.635077][ T7443] EXT4-fs: Ignoring removed nobh option [ 118.635465][ T6156] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 118.640868][ T7418] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(17) [ 118.654752][ T7418] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.662468][ T7418] vhci_hcd vhci_hcd.0: Device attached [ 118.671459][ T7443] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 118.671469][ T7444] vhci_hcd: connection closed [ 118.677825][ T7436] vhci_hcd: connection closed [ 118.681711][ T7440] vhci_hcd: connection closed [ 118.692346][ T6045] vhci_hcd vhci_hcd.7: stop threads [ 118.692649][ T7428] vhci_hcd: connection closed [ 118.697310][ T6045] vhci_hcd vhci_hcd.7: release socket [ 118.702660][ T7422] vhci_hcd: connection closed [ 118.707230][ T6045] vhci_hcd vhci_hcd.7: disconnect device [ 118.723468][ T7419] vhci_hcd: connection closed [ 118.729929][ T7420] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 118.741185][ T7443] EXT4-fs (loop6): 1 truncate cleaned up [ 118.747819][ T7443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.775483][ T6045] vhci_hcd vhci_hcd.7: stop threads [ 118.780819][ T6045] vhci_hcd vhci_hcd.7: release socket [ 118.786294][ T6045] vhci_hcd vhci_hcd.7: disconnect device [ 118.799170][ T6045] vhci_hcd vhci_hcd.7: stop threads [ 118.804544][ T6045] vhci_hcd vhci_hcd.7: release socket [ 118.810038][ T6045] vhci_hcd vhci_hcd.7: disconnect device [ 118.836697][ T6045] vhci_hcd vhci_hcd.7: stop threads [ 118.841992][ T6045] vhci_hcd vhci_hcd.7: release socket [ 118.847567][ T6045] vhci_hcd vhci_hcd.7: disconnect device [ 118.856187][ T6045] vhci_hcd vhci_hcd.7: stop threads [ 118.861462][ T6045] vhci_hcd vhci_hcd.7: release socket [ 118.866951][ T6045] vhci_hcd vhci_hcd.7: disconnect device [ 118.875873][ T6045] vhci_hcd vhci_hcd.7: stop threads [ 118.881188][ T6045] vhci_hcd vhci_hcd.7: release socket [ 118.886744][ T6045] vhci_hcd vhci_hcd.7: disconnect device [ 118.906687][ T5822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.143535][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 119.143565][ T29] audit: type=1326 audit(1768860449.907:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 119.179730][ T29] audit: type=1326 audit(1768860449.947:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 119.203428][ T29] audit: type=1326 audit(1768860449.947:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 119.227100][ T29] audit: type=1326 audit(1768860449.947:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 119.251796][ T29] audit: type=1326 audit(1768860449.947:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 119.275214][ T29] audit: type=1326 audit(1768860449.947:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 119.298950][ T29] audit: type=1326 audit(1768860449.947:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 119.322739][ T29] audit: type=1326 audit(1768860449.947:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 119.346744][ T29] audit: type=1326 audit(1768860449.947:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 119.370405][ T29] audit: type=1326 audit(1768860449.947:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7457 comm="syz.6.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 119.835798][ T7510] netlink: 'syz.5.1361': attribute type 1 has an invalid length. [ 119.843643][ T7510] netlink: 'syz.5.1361': attribute type 4 has an invalid length. [ 119.851538][ T7510] __nla_validate_parse: 4 callbacks suppressed [ 119.851555][ T7510] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1361'. [ 119.869935][ T7510] netlink: 'syz.5.1361': attribute type 1 has an invalid length. [ 119.877823][ T7510] netlink: 'syz.5.1361': attribute type 4 has an invalid length. [ 119.885765][ T7510] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1361'. [ 119.936309][ T7517] loop8: detected capacity change from 0 to 1024 [ 119.987641][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1355'. [ 120.002184][ T7517] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1352: bad orphan inode 134217728 [ 120.013904][ T7517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.014794][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1355'. [ 120.370979][ T7573] netlink: 'syz.5.1366': attribute type 10 has an invalid length. [ 120.466174][ T7582] netlink: 'syz.6.1367': attribute type 29 has an invalid length. [ 120.475939][ T7582] netlink: 'syz.6.1367': attribute type 29 has an invalid length. [ 120.484618][ T7582] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1367'. [ 120.671171][ T6994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.682036][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1387'. [ 120.692475][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1387'. [ 120.719889][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1378'. [ 120.733954][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1378'. [ 120.791066][ T7609] loop7: detected capacity change from 0 to 512 [ 120.797835][ T7609] EXT4-fs: Ignoring removed oldalloc option [ 120.816352][ T7609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.835424][ T7609] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.854317][ T7609] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1380: bg 0: block 217: padding at end of block bitmap is not set [ 120.869517][ T7609] EXT4-fs (loop7): Remounting filesystem read-only [ 120.890456][ T6682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.964471][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1386'. [ 121.303322][ T7656] loop8: detected capacity change from 0 to 1024 [ 121.352875][ T7656] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 121.411717][ T7656] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.496792][ T7668] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.1400: Freeing blocks not in datazone - block = 0, count = 16 [ 121.526512][ T7672] veth10: entered promiscuous mode [ 121.531885][ T7672] veth10: entered allmulticast mode [ 121.586038][ T7678] loop1: detected capacity change from 0 to 1024 [ 121.616689][ T7678] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1409: bad orphan inode 134217728 [ 121.628244][ T7678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.671683][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.694362][ T6030] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 112: padding at end of block bitmap is not set [ 121.714697][ T6030] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 121.727122][ T6030] EXT4-fs (loop8): This should not happen!! Data will be lost [ 121.727122][ T6030] [ 121.736829][ T6030] EXT4-fs (loop8): Total free blocks count 0 [ 121.742905][ T6030] EXT4-fs (loop8): Free/Dirty block details [ 121.749048][ T6030] EXT4-fs (loop8): free_blocks=16 [ 121.754123][ T6030] EXT4-fs (loop8): dirty_blocks=16 [ 121.759483][ T6030] EXT4-fs (loop8): Block reservation details [ 121.765611][ T6030] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 121.838328][ T6994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 122.165025][ T7707] loop8: detected capacity change from 0 to 512 [ 122.178535][ T7707] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.191538][ T7707] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.224162][ T6994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.245940][ T7711] loop8: detected capacity change from 0 to 128 [ 122.310722][ T7715] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 122.325786][ T7715] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.724134][ T7745] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.738934][ T7745] loop5: detected capacity change from 0 to 512 [ 122.748959][ T7745] EXT4-fs (loop5): 1 orphan inode deleted [ 122.774698][ T7745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.832666][ T4162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.096855][ T7772] netlink: 'syz.6.1447': attribute type 1 has an invalid length. [ 123.501780][ T7800] tipc: Started in network mode [ 123.506922][ T7800] tipc: Node identity ac14140f, cluster identity 4711 [ 123.525157][ T7800] tipc: New replicast peer: 255.255.255.255 [ 123.531562][ T7800] tipc: Enabled bearer , priority 10 [ 123.775719][ T6156] usb 15-1: enqueue for inactive port 0 [ 123.781417][ T6156] usb 15-1: enqueue for inactive port 0 [ 123.862124][ T6156] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 124.046527][ T7825] netlink: 'syz.6.1469': attribute type 1 has an invalid length. [ 124.061279][ T7825] bond2: entered promiscuous mode [ 124.066754][ T7825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.087633][ T7825] bond2: (slave bridge5): making interface the new active one [ 124.095498][ T7825] bridge5: entered promiscuous mode [ 124.103421][ T7825] bridge5: left promiscuous mode [ 124.481402][ T7851] syzkaller0: entered allmulticast mode [ 124.487453][ T7851] syzkaller0: entered promiscuous mode [ 124.495407][ T7851] syzkaller0 (unregistering): left promiscuous mode [ 124.502100][ T7851] syzkaller0 (unregistering): left allmulticast mode [ 124.630796][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 124.630819][ T29] audit: type=1326 audit(1768860455.397:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.8.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 124.670615][ T10] tipc: Node number set to 2886997007 [ 124.674265][ T29] audit: type=1326 audit(1768860455.397:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.8.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 124.699603][ T29] audit: type=1326 audit(1768860455.397:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.8.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 124.723047][ T29] audit: type=1326 audit(1768860455.397:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.8.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 124.746660][ T29] audit: type=1326 audit(1768860455.397:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.8.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 124.770190][ T29] audit: type=1326 audit(1768860455.397:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.8.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 124.810026][ T29] audit: type=1326 audit(1768860455.467:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.8.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 124.833518][ T29] audit: type=1326 audit(1768860455.467:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.8.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 124.856917][ T29] audit: type=1326 audit(1768860455.517:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.8.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 124.880275][ T29] audit: type=1326 audit(1768860455.567:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.8.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 125.242717][ T7885] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 126.009141][ T7913] __nla_validate_parse: 6 callbacks suppressed [ 126.009164][ T7913] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1503'. [ 126.047191][ T7913] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1503'. [ 126.274894][ T7926] netlink: 'syz.7.1507': attribute type 1 has an invalid length. [ 126.330108][ T7926] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 126.340611][ T7926] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 126.519665][ T7926] bond1: (slave ip6gre1): making interface the new active one [ 126.528118][ T7926] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 126.546515][ T7931] bond1: option fail_over_mac: unable to set because the bond device has slaves [ 126.729463][ T7941] rdma_op ffff88811a7bbd80 conn xmit_rdma 0000000000000000 [ 126.743991][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1513'. [ 126.754272][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1513'. [ 126.867152][ T7953] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1516' sets config #1 [ 126.885017][ T7948] loop5: detected capacity change from 0 to 8192 [ 127.046204][ T7967] geneve2: entered promiscuous mode [ 127.051492][ T7967] geneve2: entered allmulticast mode [ 127.359264][ T7995] loop1: detected capacity change from 0 to 128 [ 127.374133][ T7995] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.396670][ T7995] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.457985][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.497188][ T3539] kernel write not supported for file [eventfd] (pid: 3539 comm: kworker/1:6) [ 127.688510][ T8007] loop5: detected capacity change from 0 to 128 [ 127.697509][ T8007] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 127.716076][ T8007] bio_check_eod: 39 callbacks suppressed [ 127.716095][ T8007] syz.5.1545: attempt to access beyond end of device [ 127.716095][ T8007] loop5: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 127.736042][ T8007] syz.5.1545: attempt to access beyond end of device [ 127.736042][ T8007] loop5: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 127.754807][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1536'. [ 127.866629][ T8022] l2tp_ppp: sess 2/0: no socket in recv [ 127.914652][ T8026] netlink: 'syz.8.1542': attribute type 29 has an invalid length. [ 127.927375][ T8026] netlink: 'syz.8.1542': attribute type 29 has an invalid length. [ 127.936070][ T8026] netlink: 500 bytes leftover after parsing attributes in process `syz.8.1542'. [ 127.954053][ T8030] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 127.975205][ T8030] vhci_hcd vhci_hcd.2: invalid port number 96 [ 127.981456][ T8030] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 128.047965][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1548'. [ 128.097654][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1551'. [ 128.109746][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1551'. [ 128.251887][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1556'. [ 128.316835][ T8057] sctp: [Deprecated]: syz.5.1558 (pid 8057) Use of int in max_burst socket option. [ 128.316835][ T8057] Use struct sctp_assoc_value instead [ 128.674292][ T8085] lo: entered allmulticast mode [ 128.782422][ T8093] loop7: detected capacity change from 0 to 512 [ 128.810916][ T8093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.824165][ T8093] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.867464][ T6682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.052590][ T8108] loop7: detected capacity change from 0 to 512 [ 129.059657][ T8108] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 129.071888][ T8108] EXT4-fs (loop7): 1 truncate cleaned up [ 129.082586][ T8108] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.101196][ T8108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.286762][ T8125] loop6: detected capacity change from 0 to 512 [ 129.296088][ T8125] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.343564][ T8127] loop8: detected capacity change from 0 to 128 [ 129.441330][ T8131] loop6: detected capacity change from 0 to 1024 [ 129.453040][ T8131] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1590: bad orphan inode 134217728 [ 129.466646][ T8131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.825266][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 129.825286][ T29] audit: type=1326 audit(1768860460.577:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.7.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd090eaacb9 code=0x7ffc0000 [ 129.854907][ T29] audit: type=1326 audit(1768860460.577:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.7.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd090eaacb9 code=0x7ffc0000 [ 129.878780][ T29] audit: type=1326 audit(1768860460.577:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.7.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd090eaacb9 code=0x7ffc0000 [ 129.902313][ T29] audit: type=1326 audit(1768860460.577:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.7.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd090eaacb9 code=0x7ffc0000 [ 129.925747][ T29] audit: type=1326 audit(1768860460.577:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.7.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd090eaacb9 code=0x7ffc0000 [ 129.949240][ T29] audit: type=1326 audit(1768860460.577:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.7.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd090eaacb9 code=0x7ffc0000 [ 129.972493][ T29] audit: type=1326 audit(1768860460.577:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.7.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd090eaacb9 code=0x7ffc0000 [ 129.996059][ T29] audit: type=1326 audit(1768860460.577:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.7.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd090eaacb9 code=0x7ffc0000 [ 130.019439][ T29] audit: type=1326 audit(1768860460.577:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.7.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd090eaacb9 code=0x7ffc0000 [ 130.042885][ T29] audit: type=1326 audit(1768860460.577:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.7.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd090eaacb9 code=0x7ffc0000 [ 130.163525][ T5822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.552406][ T8176] syz_tun: entered allmulticast mode [ 130.558518][ T8174] syz_tun: left allmulticast mode [ 130.996663][ T8225] bond3: left promiscuous mode [ 131.049541][ T8226] loop6: detected capacity change from 0 to 8192 [ 131.244126][ T8251] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 131.251835][ T8251] FAT-fs (loop6): Filesystem has been set read-only [ 131.363662][ T8253] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 131.369487][ T8226] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 131.400514][ T8226] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 131.432436][ T8226] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 131.601906][ T5822] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 131.750617][ T8297] __nla_validate_parse: 5 callbacks suppressed [ 131.750632][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1631'. [ 131.771462][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 131.804397][ T8300] loop1: detected capacity change from 0 to 512 [ 131.811838][ T8300] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.827636][ T8300] EXT4-fs (loop1): 1 truncate cleaned up [ 131.842818][ T8300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.882672][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.038846][ T8331] loop1: detected capacity change from 0 to 8192 [ 133.201351][ T8338] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 133.209142][ T8338] FAT-fs (loop1): Filesystem has been set read-only [ 133.237131][ T8340] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 133.246323][ T8331] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 133.262283][ T8331] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 133.271465][ T8331] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 133.632658][ T8357] loop8: detected capacity change from 0 to 8192 [ 134.649626][ T8407] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1663'. [ 134.987295][ T8430] xt_hashlimit: max too large, truncated to 1048576 [ 135.631419][ T10] IPVS: starting estimator thread 0... [ 135.735185][ T8494] IPVS: using max 2208 ests per chain, 110400 per kthread [ 136.486221][ T8571] tipc: Started in network mode [ 136.491486][ T8571] tipc: Node identity ac14140f, cluster identity 4711 [ 136.498945][ T8571] tipc: New replicast peer: 255.255.255.255 [ 136.505236][ T8571] tipc: Enabled bearer , priority 10 [ 137.143856][ T8582] netlink: 'syz.1.1730': attribute type 8 has an invalid length. [ 137.151858][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1730'. [ 137.164652][ T8582] bond0: entered promiscuous mode [ 137.169808][ T8582] bond_slave_0: entered promiscuous mode [ 137.175698][ T8582] bond_slave_1: entered promiscuous mode [ 137.183528][ T8582] gretap0: entered promiscuous mode [ 137.189511][ T8582] ip6gretap0: entered promiscuous mode [ 137.196834][ T8582] debugfs: 'hsr1' already exists in 'hsr' [ 137.202624][ T8582] Cannot create hsr debugfs directory [ 137.208213][ T8582] hsr1: entered promiscuous mode [ 137.262285][ T8586] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1731'. [ 137.437899][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 137.437917][ T29] audit: type=1400 audit(1768860468.207:987): avc: denied { associate } for pid=8598 comm="syz.7.1736" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 137.615775][ T1039] tipc: Node number set to 2886997007 [ 137.962963][ T8647] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.052686][ T8647] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.183498][ T8647] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.312873][ T8647] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.426030][ T6045] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.446787][ T6045] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.466445][ T6045] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.488958][ T6045] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.090431][ T8687] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.192090][ T8687] team0: No ports can be present during mode change [ 139.234010][ T8695] netlink: 'syz.8.1774': attribute type 1 has an invalid length. [ 139.289532][ T8695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.313911][ T8699] loop1: detected capacity change from 0 to 512 [ 139.346377][ T8699] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.370834][ T8700] bond1: (slave ip6gretap1): making interface the new active one [ 139.397839][ T8699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.421747][ T8700] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 139.426124][ T8699] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.505309][ T8706] -1: renamed from syzkaller0 [ 139.583126][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1777'. [ 139.600426][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.628182][ T8710] SET target dimension over the limit! [ 139.812020][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1782'. [ 139.890557][ T8731] loop1: detected capacity change from 0 to 512 [ 139.908801][ T8719] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 139.931743][ T8731] EXT4-fs (loop1): 1 orphan inode deleted [ 139.941534][ T8731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.151087][ T8745] netlink: 'syz.7.1790': attribute type 1 has an invalid length. [ 140.174452][ T8745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.286374][ T8749] loop5: detected capacity change from 0 to 512 [ 140.348688][ T8749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.371041][ T8749] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.383715][ T8743] bridge_slave_0: left allmulticast mode [ 140.389710][ T8743] bridge_slave_0: left promiscuous mode [ 140.395497][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.439374][ T8743] bridge_slave_1: left allmulticast mode [ 140.445276][ T8743] bridge_slave_1: left promiscuous mode [ 140.451058][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.462835][ T8743] bond0: (slave bond_slave_0): Releasing backup interface [ 140.486584][ T8743] bond0: (slave bond_slave_1): Releasing backup interface [ 140.536343][ T8743] team0: Port device team_slave_0 removed [ 140.564227][ T8743] team0: Port device team_slave_1 removed [ 140.571758][ T8743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.579206][ T8743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.638769][ T8743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.646329][ T8743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.659686][ T8743] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.691015][ T8750] bond2: (slave ip6gretap1): making interface the new active one [ 140.702365][ T8750] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 140.713198][ T8757] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 140.722115][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.736471][ T8751] team0: Mode changed to "loadbalance" [ 140.887377][ T4162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.951470][ T8762] loop5: detected capacity change from 0 to 1024 [ 140.989476][ T8762] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1796: bad orphan inode 134217728 [ 141.034699][ T29] audit: type=1326 audit(1768860471.787:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59438dacb9 code=0x7ffc0000 [ 141.058426][ T29] audit: type=1326 audit(1768860471.787:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59438dacb9 code=0x7ffc0000 [ 141.081966][ T29] audit: type=1326 audit(1768860471.787:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f59438dacb9 code=0x7ffc0000 [ 141.105561][ T29] audit: type=1326 audit(1768860471.797:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59438dacb9 code=0x7ffc0000 [ 141.129180][ T29] audit: type=1326 audit(1768860471.797:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59438dacb9 code=0x7ffc0000 [ 141.152715][ T29] audit: type=1326 audit(1768860471.797:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59438dacb9 code=0x7ffc0000 [ 141.176376][ T29] audit: type=1326 audit(1768860471.797:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59438dacb9 code=0x7ffc0000 [ 141.199762][ T29] audit: type=1326 audit(1768860471.797:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59438dacb9 code=0x7ffc0000 [ 141.223343][ T29] audit: type=1326 audit(1768860471.797:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.1.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59438dacb9 code=0x7ffc0000 [ 141.228964][ T8762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.471255][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1800'. [ 141.538487][ T35] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 141.677090][ T8790] xt_connbytes: Forcing CT accounting to be enabled [ 141.862764][ T4162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.961656][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1807'. [ 141.973064][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1807'. [ 142.003973][ T8793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.027277][ T8793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.151306][ T8793] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.323209][ T8793] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.379064][ T8815] syzkaller1: entered promiscuous mode [ 142.384702][ T8815] syzkaller1: entered allmulticast mode [ 142.447480][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 142.447495][ T29] audit: type=1326 audit(1768860473.217:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.6.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 142.497008][ T29] audit: type=1326 audit(1768860473.247:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.6.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 142.520575][ T29] audit: type=1326 audit(1768860473.247:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.6.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 142.544107][ T29] audit: type=1326 audit(1768860473.247:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8786 comm="syz.6.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b156aacb9 code=0x7ffc0000 [ 142.599165][ T8793] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.622352][ T29] audit: type=1400 audit(1768860473.387:1281): avc: denied { bind } for pid=8821 comm="syz.6.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.803116][ T8793] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.861370][ T8832] loop6: detected capacity change from 0 to 2048 [ 142.872988][ T8834] rdma_op ffff88811d294580 conn xmit_rdma 0000000000000000 [ 142.897008][ T8832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.915446][ T8836] loop1: detected capacity change from 0 to 512 [ 142.947683][ T8842] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1824'. [ 142.953036][ T8836] EXT4-fs: Ignoring removed bh option [ 143.001304][ T8836] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 143.038220][ T8836] EXT4-fs (loop1): 1 truncate cleaned up [ 143.057044][ T8836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.135168][ T8836] Invalid logical block size (10) [ 143.158640][ T6038] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.161921][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.237516][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1829'. [ 143.246537][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1829'. [ 143.345689][ T55] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.375785][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.572528][ T29] audit: type=1400 audit(1768860474.337:1282): avc: denied { getopt } for pid=8871 comm="syz.1.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.642832][ T6046] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.661628][ T6046] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.840911][ T5822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.869304][ T8877] netlink: 'syz.1.1839': attribute type 32 has an invalid length. [ 144.095346][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.208205][ T8900] openvswitch: netlink: Missing key (keys=40, expected=100) [ 144.444382][ T4335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.215274][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.465431][ T3777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.440836][ T29] audit: type=1326 audit(1768860477.207:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.5.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 146.495452][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.504036][ T29] audit: type=1326 audit(1768860477.207:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.5.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 146.527637][ T29] audit: type=1326 audit(1768860477.207:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.5.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 146.551238][ T29] audit: type=1326 audit(1768860477.227:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.5.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 146.622277][ T8958] loop5: detected capacity change from 0 to 128 [ 147.332431][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.339741][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.470829][ T8981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.499056][ T8981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.575595][ T6042] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.594276][ T6042] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.611122][ T6042] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.630061][ T6042] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.527694][ T9009] loop5: detected capacity change from 0 to 128 [ 148.534705][ T9009] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.636086][ T9009] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.166573][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 149.166594][ T29] audit: type=1326 audit(1768860479.937:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 149.227028][ T9031] loop1: detected capacity change from 0 to 512 [ 149.246640][ T9031] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 149.273942][ T9031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102] [ 149.289677][ T29] audit: type=1326 audit(1768860479.937:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 149.313194][ T29] audit: type=1326 audit(1768860479.967:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 149.336751][ T29] audit: type=1326 audit(1768860479.967:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 149.346868][ T9031] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.1895: corrupted in-inode xattr: e_value size too large [ 149.360241][ T29] audit: type=1326 audit(1768860479.967:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 149.398052][ T29] audit: type=1326 audit(1768860479.967:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 149.421705][ T29] audit: type=1326 audit(1768860479.967:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 149.445426][ T29] audit: type=1326 audit(1768860479.967:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 149.469053][ T29] audit: type=1326 audit(1768860479.967:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 149.492443][ T29] audit: type=1326 audit(1768860479.967:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfb9acb9 code=0x7ffc0000 [ 149.517401][ T9031] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1895: couldn't read orphan inode 15 (err -117) [ 149.552634][ T9031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.647424][ T9031] EXT4-fs error (device loop1): ext4_check_dx_root:2201: inode #2: comm syz.1.1895: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 149.725708][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.752365][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1901'. [ 149.782099][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1901'. [ 149.821778][ T9054] bond1: Removing last ns target with arp_interval on [ 150.032960][ T9063] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.097875][ T9063] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.157741][ T9063] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.288926][ T9063] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.364546][ T6038] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.405199][ T6038] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.425695][ T6038] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.444311][ T6038] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.839306][ T9079] VFS: Mount too revealing [ 150.946580][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1916'. [ 150.955747][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1916'. [ 151.068862][ T9087] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1917'. [ 153.001742][ T1039] IPVS: starting estimator thread 0... [ 153.095268][ T9143] IPVS: using max 2208 ests per chain, 110400 per kthread [ 153.181361][ T9153] netlink: 'syz.7.1945': attribute type 6 has an invalid length. [ 153.197335][ T9149] loop5: detected capacity change from 0 to 2048 [ 153.219678][ T9149] EXT4-fs: Ignoring removed bh option [ 153.250133][ T9149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.445829][ T9149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.623110][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1957'. [ 154.438777][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 154.438797][ T29] audit: type=1400 audit(1768860485.207:1357): avc: denied { firmware_load } for pid=9215 comm="syz.1.1970" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 154.522585][ T29] audit: type=1326 audit(1768860485.267:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 154.546669][ T29] audit: type=1326 audit(1768860485.267:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 154.570202][ T29] audit: type=1326 audit(1768860485.267:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 154.593984][ T29] audit: type=1326 audit(1768860485.267:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 154.617794][ T29] audit: type=1326 audit(1768860485.267:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 154.641789][ T29] audit: type=1326 audit(1768860485.267:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 154.665509][ T29] audit: type=1326 audit(1768860485.267:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 154.689235][ T29] audit: type=1326 audit(1768860485.267:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 154.712921][ T29] audit: type=1326 audit(1768860485.267:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9219 comm="syz.8.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 154.795229][ T9230] loop1: detected capacity change from 0 to 128 [ 154.955506][ T9230] syz.1.1976: attempt to access beyond end of device [ 154.955506][ T9230] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 155.011644][ T9230] syz.1.1976: attempt to access beyond end of device [ 155.011644][ T9230] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 155.065389][ T9230] syz.1.1976: attempt to access beyond end of device [ 155.065389][ T9230] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 155.121473][ T9230] syz.1.1976: attempt to access beyond end of device [ 155.121473][ T9230] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 159.932909][ T9254] ip6gre2: entered promiscuous mode [ 159.938299][ T9254] ip6gre2: entered allmulticast mode [ 160.025670][ T9266] netlink: 'syz.7.1986': attribute type 1 has an invalid length. [ 160.129981][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.137534][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.266168][ T9271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.291434][ T9271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.434080][ T9266] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.526040][ T9273] bond3: (slave veth9): Enslaving as an active interface with a down link [ 160.549947][ T9274] bond3: (slave dummy0): making interface the new active one [ 160.559103][ T9274] dummy0: entered promiscuous mode [ 160.564476][ T9274] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 160.608012][ T9275] bond3 (unregistering): (slave veth9): Releasing active interface [ 160.619282][ T9275] bond3 (unregistering): (slave dummy0): Releasing active interface [ 160.629383][ T9275] bond3 (unregistering): Released all slaves [ 160.640361][ T6042] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.676449][ T6042] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.698441][ T6042] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.729418][ T6042] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.831880][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.842301][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.870043][ T9261] chnl_net:caif_netlink_parms(): no params data found [ 160.961021][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.971412][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.014870][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 161.014892][ T29] audit: type=1326 audit(1768860491.767:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.8.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 161.046177][ T29] audit: type=1326 audit(1768860491.767:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.8.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 161.070460][ T29] audit: type=1326 audit(1768860491.767:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.8.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 161.094281][ T29] audit: type=1326 audit(1768860491.767:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.8.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 161.137062][ T9261] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.144345][ T9261] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.152629][ T9261] bridge_slave_0: entered allmulticast mode [ 161.159584][ T9261] bridge_slave_0: entered promiscuous mode [ 161.167231][ T29] audit: type=1326 audit(1768860491.857:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.8.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f772ee2b58e code=0x7ffc0000 [ 161.192507][ T29] audit: type=1326 audit(1768860491.867:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.8.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f772ee2b58e code=0x7ffc0000 [ 161.216942][ T29] audit: type=1326 audit(1768860491.867:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.8.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f772ee2b58e code=0x7ffc0000 [ 161.240533][ T29] audit: type=1326 audit(1768860491.867:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.8.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f772ee2b58e code=0x7ffc0000 [ 161.265153][ T29] audit: type=1326 audit(1768860491.867:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.8.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f772ee2b58e code=0x7ffc0000 [ 161.289803][ T29] audit: type=1326 audit(1768860491.867:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.8.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f772ee2b58e code=0x7ffc0000 [ 161.317093][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.327620][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.349718][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.356877][ T9261] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.365012][ T9261] bridge_slave_1: entered allmulticast mode [ 161.372518][ T9261] bridge_slave_1: entered promiscuous mode [ 161.393529][ T9261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.404463][ T9261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.418439][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.429059][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.458968][ T9261] team0: Port device team_slave_0 added [ 161.466098][ T9261] team0: Port device team_slave_1 added [ 161.573924][ T9261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.581082][ T9261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.607803][ T9261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.625231][ T9261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.632352][ T9261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.662801][ T9261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.067372][ T35] bond0 (unregistering): Released all slaves [ 162.076437][ T35] bond1 (unregistering): Released all slaves [ 162.086078][ T35] bond2 (unregistering): Released all slaves [ 162.110451][ T9261] hsr_slave_0: entered promiscuous mode [ 162.118112][ T9261] hsr_slave_1: entered promiscuous mode [ 162.124699][ T9261] debugfs: 'hsr0' already exists in 'hsr' [ 162.130720][ T9261] Cannot create hsr debugfs directory [ 162.146117][ T35] tipc: Disabling bearer [ 162.151479][ T35] tipc: Left network mode [ 162.176006][ T35] hsr_slave_0: left promiscuous mode [ 162.185659][ T35] hsr_slave_1: left promiscuous mode [ 162.200461][ T35] veth1_macvtap: left promiscuous mode [ 162.215218][ T35] veth0_macvtap: left promiscuous mode [ 162.222418][ T35] veth1_vlan: left promiscuous mode [ 162.239214][ T35] veth0_vlan: left promiscuous mode [ 162.462933][ T9261] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 162.478814][ T9261] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 162.498219][ T9261] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 162.517672][ T9261] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 162.600383][ T9261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.619496][ T9261] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.649696][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.656914][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.677254][ T9371] loop8: detected capacity change from 0 to 512 [ 162.698495][ T9371] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.722056][ T35] IPVS: stop unused estimator thread 0... [ 162.743464][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.750725][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.764264][ T9371] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.881485][ T9387] syzkaller0: entered allmulticast mode [ 162.900606][ T9394] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 162.903483][ T9387] syzkaller0: entered promiscuous mode [ 162.938681][ T9387] syzkaller0 (unregistering): left allmulticast mode [ 162.945578][ T9387] syzkaller0 (unregistering): left promiscuous mode [ 162.995191][ T9261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.036631][ T6994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.388100][ T9261] veth0_vlan: entered promiscuous mode [ 163.432158][ T9261] veth1_vlan: entered promiscuous mode [ 163.493296][ T9391] chnl_net:caif_netlink_parms(): no params data found [ 163.656741][ T9261] veth0_macvtap: entered promiscuous mode [ 163.708076][ T9261] veth1_macvtap: entered promiscuous mode [ 163.767815][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.788692][ T9391] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.796986][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.810578][ T9391] bridge_slave_0: entered allmulticast mode [ 163.868797][ T9391] bridge_slave_0: entered promiscuous mode [ 163.884190][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.894169][ T9391] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.902184][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.910563][ T9391] bridge_slave_1: entered allmulticast mode [ 163.920158][ T9391] bridge_slave_1: entered promiscuous mode [ 163.940731][ T35] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.962061][ T35] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.986784][ T35] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.008574][ T9391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.019673][ T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.137006][ T9391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.240518][ T9391] team0: Port device team_slave_0 added [ 164.262363][ T9391] team0: Port device team_slave_1 added [ 164.366648][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.373666][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.400710][ T9391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.460543][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.467859][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.494618][ T9391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.552312][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2023'. [ 164.589839][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2023'. [ 164.674790][ T9391] hsr_slave_0: entered promiscuous mode [ 164.690553][ T9391] hsr_slave_1: entered promiscuous mode [ 165.441785][ T9391] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.481852][ T9391] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.507683][ T9391] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.524762][ T9391] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.607873][ T9391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.649237][ T9391] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.769028][ T2361] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.776197][ T2361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.823684][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.831003][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.873051][ T9650] loop9: detected capacity change from 0 to 128 [ 166.104905][ T9650] syz.9.2031: attempt to access beyond end of device [ 166.104905][ T9650] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 166.165382][ T9650] syz.9.2031: attempt to access beyond end of device [ 166.165382][ T9650] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 166.208842][ T9391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.225575][ T9650] syz.9.2031: attempt to access beyond end of device [ 166.225575][ T9650] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 166.245226][ T9650] syz.9.2031: attempt to access beyond end of device [ 166.245226][ T9650] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 166.274822][ T9650] syz.9.2031: attempt to access beyond end of device [ 166.274822][ T9650] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 166.298756][ T9650] syz.9.2031: attempt to access beyond end of device [ 166.298756][ T9650] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 166.367245][ T9650] syz.9.2031: attempt to access beyond end of device [ 166.367245][ T9650] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 166.389010][ T9650] syz.9.2031: attempt to access beyond end of device [ 166.389010][ T9650] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 166.402899][ T9650] syz.9.2031: attempt to access beyond end of device [ 166.402899][ T9650] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 166.432682][ T9650] syz.9.2031: attempt to access beyond end of device [ 166.432682][ T9650] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 166.466425][ T9391] veth0_vlan: entered promiscuous mode [ 166.496255][ T9391] veth1_vlan: entered promiscuous mode [ 166.542638][ T9391] veth0_macvtap: entered promiscuous mode [ 166.560006][ T9391] veth1_macvtap: entered promiscuous mode [ 166.587562][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.601090][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 166.601121][ T29] audit: type=1326 audit(1768860497.367:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.9.2034" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b5acb9 code=0x0 [ 166.647793][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.668250][ T2361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.699581][ T2361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.729319][ T2361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.754267][ T2361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.788906][ T9703] syzkaller0: entered allmulticast mode [ 166.802511][ T9703] syzkaller0: entered promiscuous mode [ 166.821487][ T9703] syzkaller0 (unregistering): left promiscuous mode [ 166.828240][ T9703] syzkaller0 (unregistering): left allmulticast mode [ 167.018188][ T29] audit: type=1326 audit(1768860497.787:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 167.045384][ T29] audit: type=1326 audit(1768860497.807:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 167.069967][ T29] audit: type=1326 audit(1768860497.807:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 167.093667][ T29] audit: type=1326 audit(1768860497.807:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 167.117990][ T29] audit: type=1326 audit(1768860497.807:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 167.141657][ T29] audit: type=1326 audit(1768860497.807:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 167.165797][ T29] audit: type=1326 audit(1768860497.807:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 167.193631][ T29] audit: type=1326 audit(1768860497.837:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 167.218044][ T29] audit: type=1326 audit(1768860497.837:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 167.317210][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2043'. [ 167.403053][ T9751] loop0: detected capacity change from 0 to 1024 [ 167.418436][ T9751] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2044: bad orphan inode 134217728 [ 167.475905][ T9751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.996673][ T9805] loop8: detected capacity change from 0 to 128 [ 168.074199][ T9805] Buffer I/O error on dev loop8, logical block 70, lost async page write [ 168.111205][ T9805] Buffer I/O error on dev loop8, logical block 71, lost async page write [ 168.126802][ T9805] Buffer I/O error on dev loop8, logical block 72, lost async page write [ 168.135515][ T9804] Buffer I/O error on dev loop8, logical block 69, async page read [ 168.143661][ T9804] Buffer I/O error on dev loop8, logical block 70, async page read [ 168.171491][ T9804] Buffer I/O error on dev loop8, logical block 71, async page read [ 168.192452][ T9804] Buffer I/O error on dev loop8, logical block 72, async page read [ 168.211569][ T9804] Buffer I/O error on dev loop8, logical block 69, async page read [ 168.230326][ T9804] Buffer I/O error on dev loop8, logical block 70, async page read [ 168.365223][ T9804] Buffer I/O error on dev loop8, logical block 71, async page read [ 168.408371][ T9862] program syz.9.2051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.640431][ T9391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.227532][ T9940] loop5: detected capacity change from 0 to 512 [ 169.237057][ T9940] EXT4-fs: Ignoring removed oldalloc option [ 169.271779][ T9940] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2064: dx entry: limit 1024 != root limit 124 [ 169.284101][ T9940] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2064: Corrupt directory, running e2fsck is recommended [ 169.299327][ T9940] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 169.307876][ T9940] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.2064: corrupted in-inode xattr: invalid ea_ino [ 169.325311][ T9940] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2064: couldn't read orphan inode 15 (err -117) [ 169.440129][ T9940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.519212][ T9940] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2064: dx entry: limit 1024 != root limit 124 [ 169.532185][ T9940] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2064: Corrupt directory, running e2fsck is recommended [ 169.620283][ T9940] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2064: dx entry: limit 1024 != root limit 124 [ 169.633260][ T9940] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2064: Corrupt directory, running e2fsck is recommended [ 169.671905][ T9940] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2064: dx entry: limit 1024 != root limit 124 [ 169.685592][ T9940] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2064: Corrupt directory, running e2fsck is recommended [ 169.702127][ T9940] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2064: dx entry: limit 1024 != root limit 124 [ 169.716524][ T9940] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2064: Corrupt directory, running e2fsck is recommended [ 169.736705][ T9956] loop9: detected capacity change from 0 to 1024 [ 169.752964][ T9956] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2068: bad orphan inode 134217728 [ 169.778296][ T9940] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2064: dx entry: limit 1024 != root limit 124 [ 169.791465][ T9940] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2064: Corrupt directory, running e2fsck is recommended [ 169.808688][ T9956] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.909480][ T4162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.981087][ T9975] loop0: detected capacity change from 0 to 512 [ 170.033838][ T9975] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2072: inode has both inline data and extents flags [ 170.050458][ T9975] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2072: couldn't read orphan inode 15 (err -117) [ 170.065073][ T9975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.183361][ T9391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.456780][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2076'. [ 170.619250][ T9261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.981879][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2089'. [ 171.013153][T10043] xt_connbytes: Forcing CT accounting to be enabled [ 171.234037][T10050] loop5: detected capacity change from 0 to 1024 [ 171.286911][T10050] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2092: bad orphan inode 134217728 [ 171.321869][T10050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.903918][ T4162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.001288][T10078] loop5: detected capacity change from 0 to 2048 [ 172.086719][T10078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 172.178324][T10090] loop0: detected capacity change from 0 to 8192 [ 172.195870][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 172.195888][ T29] audit: type=1400 audit(1768860502.967:1474): avc: denied { mounton } for pid=10089 comm="syz.0.2109" path="/19/file2/bus" dev="loop0" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 172.466426][ T6040] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 172.508285][ T9391] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 172.517179][ T9391] FAT-fs (loop0): Filesystem has been set read-only [ 172.524481][ T6040] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 594 with error 28 [ 172.539605][ T6040] EXT4-fs (loop5): This should not happen!! Data will be lost [ 172.539605][ T6040] [ 172.547189][ T29] audit: type=1400 audit(1768860503.317:1475): avc: denied { unmount } for pid=9391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 172.551977][ T6040] EXT4-fs (loop5): Total free blocks count 0 [ 172.581649][ T6040] EXT4-fs (loop5): Free/Dirty block details [ 172.587731][ T6040] EXT4-fs (loop5): free_blocks=2415919104 [ 172.594068][ T6040] EXT4-fs (loop5): dirty_blocks=608 [ 172.600519][ T6040] EXT4-fs (loop5): Block reservation details [ 172.606860][ T6040] EXT4-fs (loop5): i_reserved_data_blocks=38 [ 173.003478][T10121] loop0: detected capacity change from 0 to 512 [ 173.039485][T10121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.106443][T10121] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.489729][T10078] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 594 with max blocks 50 with error 28 [ 173.518837][ T29] audit: type=1400 audit(1768860504.287:1476): avc: denied { write } for pid=10134 comm="syz.7.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 173.607459][ T29] audit: type=1400 audit(1768860504.377:1477): avc: denied { cpu } for pid=10138 comm="syz.8.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 173.637552][T10139] loop8: detected capacity change from 0 to 128 [ 173.650858][ T29] audit: type=1400 audit(1768860504.417:1478): avc: denied { read } for pid=10138 comm="syz.8.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 173.891335][ T29] audit: type=1400 audit(1768860504.657:1479): avc: denied { execute } for pid=10140 comm="syz.8.2124" path="/proc/404/task/405/net/vlan/vlan1" dev="proc" ino=4026533832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 173.950907][ T9391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.979142][T10143] loop9: detected capacity change from 0 to 2048 [ 174.057950][T10143] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.083023][T10157] netlink: 'syz.8.2129': attribute type 1 has an invalid length. [ 174.174416][T10157] bond2: entered promiscuous mode [ 174.182818][T10163] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 174.235305][T10157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.262743][T10163] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 286 with error 28 [ 174.276388][T10163] EXT4-fs (loop9): This should not happen!! Data will be lost [ 174.276388][T10163] [ 174.286198][T10163] EXT4-fs (loop9): Total free blocks count 0 [ 174.293545][T10163] EXT4-fs (loop9): Free/Dirty block details [ 174.301340][T10163] EXT4-fs (loop9): free_blocks=2415919504 [ 174.307461][T10163] EXT4-fs (loop9): dirty_blocks=368 [ 174.313499][T10163] EXT4-fs (loop9): Block reservation details [ 174.320121][T10163] EXT4-fs (loop9): i_reserved_data_blocks=25 [ 174.343915][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2132'. [ 174.373887][T10164] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.407882][T10164] bond2: (slave bond3): making interface the new active one [ 174.415774][T10164] bond3: entered promiscuous mode [ 174.422863][T10164] bond2: (slave bond3): Enslaving as an active interface with an up link [ 174.695490][T10206] loop5: detected capacity change from 0 to 2048 [ 174.727770][T10206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 174.763497][T10206] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 174.781272][T10206] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 174.794220][T10206] EXT4-fs (loop5): This should not happen!! Data will be lost [ 174.794220][T10206] [ 174.804289][T10206] EXT4-fs (loop5): Total free blocks count 0 [ 174.811699][T10206] EXT4-fs (loop5): Free/Dirty block details [ 174.818020][T10206] EXT4-fs (loop5): free_blocks=2415919104 [ 174.823931][T10206] EXT4-fs (loop5): dirty_blocks=16 [ 174.829152][T10206] EXT4-fs (loop5): Block reservation details [ 174.835186][T10206] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 174.907506][ T4162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 174.957151][T10221] loop0: detected capacity change from 0 to 1024 [ 174.970232][T10221] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2146: bad orphan inode 134217728 [ 174.991221][T10221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.023919][ T6045] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 286 with max blocks 2048 with error 28 [ 175.357167][T10228] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2148'. [ 175.396176][ T9391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.508008][ T29] audit: type=1400 audit(1768860506.277:1480): avc: denied { read } for pid=10233 comm="syz.5.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.790424][T10257] loop9: detected capacity change from 0 to 512 [ 175.841111][T10257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.886253][T10257] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.948862][T10257] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.271038][ T29] audit: type=1400 audit(1768860507.017:1481): avc: denied { append } for pid=10229 comm="syz.9.2147" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.360557][T10271] loop0: detected capacity change from 0 to 512 [ 176.464873][T10273] loop5: detected capacity change from 0 to 2048 [ 176.509046][T10271] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 176.539814][T10277] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2160'. [ 176.541261][ T9261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.574539][T10273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 176.595360][T10271] System zones: 0-2, 18-18, 34-34 [ 176.635648][T10271] EXT4-fs (loop0): too many log groups per flexible block group [ 176.644075][T10271] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 176.699690][T10273] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 176.769943][T10273] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 176.774952][T10271] EXT4-fs (loop0): mount failed [ 176.783165][T10273] EXT4-fs (loop5): This should not happen!! Data will be lost [ 176.783165][T10273] [ 176.798033][T10273] EXT4-fs (loop5): Total free blocks count 0 [ 176.804130][T10273] EXT4-fs (loop5): Free/Dirty block details [ 176.810447][T10273] EXT4-fs (loop5): free_blocks=2415919104 [ 176.816338][T10273] EXT4-fs (loop5): dirty_blocks=16 [ 176.821567][T10273] EXT4-fs (loop5): Block reservation details [ 176.827804][T10273] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 176.859336][T10293] Bluetooth: hci0: Frame reassembly failed (-90) [ 176.866849][ T44] Bluetooth: hci0: sending frame failed (-49) [ 176.873245][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 177.485502][ T4162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 178.782792][ T29] audit: type=1326 audit(1768860509.547:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 178.837509][ T29] audit: type=1326 audit(1768860509.547:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 178.861387][ T29] audit: type=1326 audit(1768860509.547:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 178.886193][ T29] audit: type=1326 audit(1768860509.547:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 178.910867][ T29] audit: type=1326 audit(1768860509.547:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 178.935317][ T29] audit: type=1326 audit(1768860509.547:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 178.959636][ T29] audit: type=1326 audit(1768860509.547:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 178.986177][ T29] audit: type=1326 audit(1768860509.547:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 179.010191][ T29] audit: type=1326 audit(1768860509.547:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 179.034223][ T29] audit: type=1326 audit(1768860509.547:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 179.137837][T10364] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2182'. [ 179.264600][T10371] loop9: detected capacity change from 0 to 512 [ 179.307888][T10371] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.358087][T10371] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.401867][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2186'. [ 179.465974][T10380] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2186'. [ 179.664228][T10393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.972522][T10393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.069411][T10393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.130635][T10393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.196545][ T1888] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.211592][ T1888] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.229933][ T1888] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.276533][ T1888] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.499467][T10365] Set syz1 is full, maxelem 65536 reached [ 180.519816][ T9261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.673837][T10425] loop8: detected capacity change from 0 to 1024 [ 180.693174][T10425] EXT4-fs: Ignoring removed nobh option [ 180.699039][T10425] EXT4-fs: inline encryption not supported [ 180.717137][T10425] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.739900][T10425] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.2203: Allocating blocks 385-513 which overlap fs metadata [ 180.756377][T10425] EXT4-fs (loop8): pa ffff8881078e7460: logic 16, phys. 129, len 24 [ 180.764684][T10425] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 180.785623][T10436] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 180.829194][ T6994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.906210][T10446] bond4: entered allmulticast mode [ 180.921421][T10446] ip6gretap2: entered allmulticast mode [ 180.927509][T10446] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 182.230744][T10521] loop9: detected capacity change from 0 to 512 [ 182.245765][T10521] EXT4-fs: Ignoring removed bh option [ 182.258805][T10521] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 182.325157][T10521] EXT4-fs (loop9): 1 truncate cleaned up [ 182.341813][T10525] loop0: detected capacity change from 0 to 1024 [ 182.515681][T10525] EXT4-fs: Ignoring removed nobh option [ 182.521507][T10525] EXT4-fs: inline encryption not supported [ 182.537743][T10521] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.542045][T10525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.618191][T10525] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2242: Allocating blocks 385-513 which overlap fs metadata [ 182.654008][T10525] EXT4-fs (loop0): pa ffff8881078e74d0: logic 16, phys. 129, len 24 [ 182.662505][T10525] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 182.743940][ T9261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.772180][ T9391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.909925][T10536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.933990][T10536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.946693][T10551] loop0: detected capacity change from 0 to 1024 [ 182.991543][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2252'. [ 183.035357][T10551] EXT4-fs: Ignoring removed nobh option [ 183.041040][T10551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.123103][T10553] syz_tun: entered promiscuous mode [ 183.142434][T10553] syz_tun: left promiscuous mode [ 183.162553][T10551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.361445][ T9391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.447912][T10563] tipc: Started in network mode [ 183.453231][T10563] tipc: Node identity a64c634b6f2e, cluster identity 4711 [ 183.460538][T10563] tipc: Enabled bearer , priority 0 [ 183.543896][T10565] loop0: detected capacity change from 0 to 8192 [ 183.596432][T10559] syzkaller0: entered promiscuous mode [ 183.602052][T10559] syzkaller0: entered allmulticast mode [ 183.609064][T10559] tipc: Resetting bearer [ 183.672253][T10565] FAT-fs (loop0): error, clusters badly computed (4 != 1) [ 183.680321][T10565] FAT-fs (loop0): Filesystem has been set read-only [ 183.715157][T10565] FAT-fs (loop0): error, clusters badly computed (5 != 2) [ 183.722725][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2257'. [ 183.732256][T10565] FAT-fs (loop0): error, clusters badly computed (6 != 3) [ 183.744996][ T344] tipc: Resetting bearer [ 183.757488][T10565] FAT-fs (loop0): error, clusters badly computed (7 != 4) [ 183.769628][T10565] FAT-fs (loop0): error, clusters badly computed (8 != 5) [ 183.778260][T10558] tipc: Resetting bearer [ 183.785932][T10565] FAT-fs (loop0): error, clusters badly computed (9 != 6) [ 183.816616][T10565] FAT-fs (loop0): error, clusters badly computed (10 != 7) [ 183.833554][T10558] tipc: Disabling bearer [ 183.839745][T10565] FAT-fs (loop0): error, clusters badly computed (11 != 8) [ 184.000121][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 184.000137][ T29] audit: type=1400 audit(1768860515.766:1789): avc: denied { shutdown } for pid=10576 comm="syz.9.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.133520][T10580] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2261'. [ 184.785474][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2277'. [ 185.028456][T10647] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2281'. [ 185.190621][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 185.199611][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 185.242093][T10662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2287'. [ 185.272824][ T29] audit: type=1326 audit(1768860517.036:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.9.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b5acb9 code=0x7ffc0000 [ 185.297480][ T29] audit: type=1326 audit(1768860517.036:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.9.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9a0b5acb9 code=0x7ffc0000 [ 185.321300][ T29] audit: type=1326 audit(1768860517.036:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.9.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b5acb9 code=0x7ffc0000 [ 185.345183][ T29] audit: type=1326 audit(1768860517.036:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.9.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b5acb9 code=0x7ffc0000 [ 185.369557][ T29] audit: type=1326 audit(1768860517.036:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.9.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb9a0b5acb9 code=0x7ffc0000 [ 185.393310][ T29] audit: type=1326 audit(1768860517.036:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.9.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b5acb9 code=0x7ffc0000 [ 185.393340][ T29] audit: type=1326 audit(1768860517.066:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.9.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b5acb9 code=0x7ffc0000 [ 185.393445][ T29] audit: type=1326 audit(1768860517.066:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.9.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb9a0b5acb9 code=0x7ffc0000 [ 185.393479][ T29] audit: type=1326 audit(1768860517.066:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10663 comm="syz.9.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b5acb9 code=0x7ffc0000 [ 185.402939][T10662] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.495613][T10662] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.552034][T10673] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=10673 comm=syz.5.2292 [ 185.571819][T10673] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2292'. [ 185.617913][T10662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.637948][T10662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.683787][T10674] syzkaller1: entered promiscuous mode [ 185.689367][T10674] syzkaller1: entered allmulticast mode [ 185.700309][ T6046] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.733023][ T6046] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.762472][ T6046] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.794853][ T6046] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.060048][T10704] loop0: detected capacity change from 0 to 512 [ 186.078949][T10704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.105182][T10704] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.139584][T10704] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 186.147710][T10704] EXT4-fs: Cannot change journaled quota options when quota turned on [ 186.181278][ T9391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.385185][T10715] batman_adv: batadv0: Adding interface: dummy0 [ 186.391547][T10715] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.417866][T10715] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 186.672737][T10733] loop9: detected capacity change from 0 to 256 [ 186.720811][T10735] loop0: detected capacity change from 0 to 2048 [ 186.748869][T10735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.801908][ T9391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.952120][T10758] loop9: detected capacity change from 0 to 512 [ 186.981454][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2323'. [ 186.991957][T10758] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.013369][T10758] EXT4-fs (loop9): mount failed [ 188.053629][T10816] __nla_validate_parse: 2 callbacks suppressed [ 188.053651][T10816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2343'. [ 188.081245][T10816] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2343'. [ 188.196486][T10825] loop8: detected capacity change from 0 to 128 [ 188.218110][T10825] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.231940][T10825] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.270541][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.277890][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.308061][ T6994] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.317842][T10820] loop9: detected capacity change from 0 to 512 [ 188.340388][T10820] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.374691][T10820] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.498551][ T9261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.528940][T10848] batman_adv: batadv0: Adding interface: dummy0 [ 188.535406][T10848] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.564810][T10848] batman_adv: batadv0: Interface activated: dummy0 [ 188.577145][T10848] batadv0: mtu less than device minimum [ 188.583399][T10848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 188.594624][T10848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 188.605820][T10848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 188.616891][T10848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 188.628144][T10848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 188.639376][T10848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 188.650302][T10848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 188.661606][T10848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 188.672559][T10848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.268281][T10867] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2365'. [ 189.346333][T10876] loop0: detected capacity change from 0 to 128 [ 189.348149][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 189.348207][ T29] audit: type=1400 audit(1768860521.116:1843): avc: denied { setopt } for pid=10871 comm="syz.8.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 189.393580][T10876] bio_check_eod: 111 callbacks suppressed [ 189.393602][T10876] syz.0.2367: attempt to access beyond end of device [ 189.393602][T10876] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 189.414436][ T29] audit: type=1400 audit(1768860521.176:1844): avc: denied { watch watch_reads } for pid=10877 comm="syz.7.2370" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 189.416827][T10876] syz.0.2367: attempt to access beyond end of device [ 189.416827][T10876] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 189.450826][T10876] buffer_io_error: 45 callbacks suppressed [ 189.450848][T10876] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 189.466731][T10876] syz.0.2367: attempt to access beyond end of device [ 189.466731][T10876] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 189.480575][T10876] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 189.490045][T10876] syz.0.2367: attempt to access beyond end of device [ 189.490045][T10876] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 189.511875][T10876] syz.0.2367: attempt to access beyond end of device [ 189.511875][T10876] loop0: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 189.526657][T10876] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 189.534376][T10870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.538561][T10876] syz.0.2367: attempt to access beyond end of device [ 189.538561][T10876] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 189.560708][T10876] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 189.574551][T10870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.604084][T10876] syz.0.2367: attempt to access beyond end of device [ 189.604084][T10876] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 189.638053][T10876] syz.0.2367: attempt to access beyond end of device [ 189.638053][T10876] loop0: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 189.651828][T10876] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 189.674496][T10876] syz.0.2367: attempt to access beyond end of device [ 189.674496][T10876] loop0: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 189.688400][T10876] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 189.710451][T10876] syz.0.2367: attempt to access beyond end of device [ 189.710451][T10876] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 189.725024][T10876] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 189.734352][T10876] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 189.744050][T10876] Buffer I/O error on dev loop0, logical block 111, lost async page write [ 189.752859][T10876] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 190.073651][T10899] netlink: 'syz.7.2379': attribute type 1 has an invalid length. [ 190.091142][T10899] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.139766][T10899] bond3: (slave dummy0): making interface the new active one [ 190.150092][T10899] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 190.207978][T10891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.249920][T10891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.260831][T10899] bond3: entered promiscuous mode [ 190.269449][T10898] bond3: left promiscuous mode [ 190.307936][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2383'. [ 190.375764][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2385'. [ 190.596357][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2385'. [ 191.124878][ T29] audit: type=1400 audit(1768860522.866:1845): avc: denied { mounton } for pid=10935 comm="syz.7.2392" path="/file0" dev="ramfs" ino=40388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 191.517636][T10959] gtp0: entered promiscuous mode [ 191.676399][T10973] tmpfs: Unsupported parameter 'huge' [ 192.172187][T10987] loop5: detected capacity change from 0 to 2048 [ 192.181076][T10987] EXT4-fs: Ignoring removed bh option [ 192.197534][T10987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.209798][T10987] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.227355][T10987] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2409: bg 0: block 345: padding at end of block bitmap is not set [ 192.242538][T10987] EXT4-fs (loop5): Remounting filesystem read-only [ 192.263000][ T4162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.325270][T10984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.356432][T10984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.532648][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2413'. [ 192.594004][T10984] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.796448][T10984] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.048380][ T29] audit: type=1400 audit(1768860524.816:1846): avc: denied { read } for pid=11028 comm="syz.8.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 193.117678][T11032] netlink: 'syz.5.2424': attribute type 10 has an invalid length. [ 193.125817][T11032] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2424'. [ 193.255411][T10984] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.272728][ T29] audit: type=1400 audit(1768860525.036:1847): avc: denied { getopt } for pid=11041 comm="syz.8.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.411953][T11032] dummy0: entered promiscuous mode [ 193.417248][T11032] dummy0: entered allmulticast mode [ 193.436744][T11032] bridge0: port 1(dummy0) entered blocking state [ 193.446149][T11032] bridge0: port 1(dummy0) entered disabled state [ 193.774267][T10984] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.557143][ T29] audit: type=1400 audit(1768860526.326:1848): avc: denied { create } for pid=11069 comm="syz.0.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 194.595155][ T29] audit: type=1400 audit(1768860526.346:1849): avc: denied { ioctl } for pid=11069 comm="syz.0.2440" path="socket:[40993]" dev="sockfs" ino=40993 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 194.620314][ T29] audit: type=1400 audit(1768860526.346:1850): avc: denied { write } for pid=11069 comm="syz.0.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 194.625544][ T6045] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.860853][T11079] loop0: detected capacity change from 0 to 1024 [ 194.917887][T11079] EXT4-fs: Ignoring removed bh option [ 195.100936][ T6031] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.205672][T11079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.315118][T11089] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2446'. [ 195.391743][T11092] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2447'. [ 195.527353][ T9391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.782545][T11092] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.788495][T11101] loop0: detected capacity change from 0 to 1024 [ 195.818462][T11101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.833145][T11093] macvlan2: entered promiscuous mode [ 195.838559][T11093] macvlan2: entered allmulticast mode [ 195.844408][ T289] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.923271][ T29] audit: type=1400 audit(1768860527.676:1851): avc: denied { watch watch_reads } for pid=11100 comm="syz.0.2450" path="/91/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.947412][ T29] audit: type=1400 audit(1768860527.676:1852): avc: denied { watch } for pid=11100 comm="syz.0.2450" path="/91/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.971170][ T29] audit: type=1400 audit(1768860527.676:1853): avc: denied { remove_name } for pid=11100 comm="syz.0.2450" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.994142][ T350] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.002894][ T29] audit: type=1400 audit(1768860527.676:1854): avc: denied { unlink } for pid=11100 comm="syz.0.2450" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 196.100719][T11106] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 196.116399][ T9391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.165178][ T29] audit: type=1326 audit(1768860527.806:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.8.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 196.190448][ T29] audit: type=1326 audit(1768860527.806:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.8.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 196.215250][ T29] audit: type=1326 audit(1768860527.806:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.8.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f772ee6acb9 code=0x7ffc0000 [ 196.409485][T11121] loop8: detected capacity change from 0 to 512 [ 196.509458][T11121] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.548309][T11121] EXT4-fs (loop8): 1 truncate cleaned up [ 196.564659][T11121] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.062887][ T6994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.180464][T11157] loop8: detected capacity change from 0 to 1024 [ 197.188675][T11157] EXT4-fs: Ignoring removed oldalloc option [ 197.207723][T11157] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 197.339494][T11167] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2476'. [ 197.350775][T11157] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.389338][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'. [ 197.398624][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'. [ 197.494891][ T6994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.980595][T11189] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.2485'. [ 197.993975][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2485'. [ 198.367935][T11195] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 198.783030][T11221] loop0: detected capacity change from 0 to 128 [ 198.819275][T11227] loop8: detected capacity change from 0 to 128 [ 198.842486][T11227] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.865313][T11221] bio_check_eod: 33 callbacks suppressed [ 198.865331][T11221] syz.0.2498: attempt to access beyond end of device [ 198.865331][T11221] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 198.887170][T11227] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.910686][ T6045] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.979105][T11221] syz.0.2498: attempt to access beyond end of device [ 198.979105][T11221] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 199.010206][T11221] syz.0.2498: attempt to access beyond end of device [ 199.010206][T11221] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 199.040648][T11221] syz.0.2498: attempt to access beyond end of device [ 199.040648][T11221] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 199.080613][T11243] loop5: detected capacity change from 0 to 1024 [ 199.105246][T11221] syz.0.2498: attempt to access beyond end of device [ 199.105246][T11221] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 199.122503][T11243] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 199.144372][T11221] syz.0.2498: attempt to access beyond end of device [ 199.144372][T11221] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 199.166356][T11243] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 199.178003][T11221] syz.0.2498: attempt to access beyond end of device [ 199.178003][T11221] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 199.193637][T11221] syz.0.2498: attempt to access beyond end of device [ 199.193637][T11221] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 199.220707][T11243] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: inode #32: comm syz.5.2503: iget: special inode unallocated [ 199.238655][T11221] syz.0.2498: attempt to access beyond end of device [ 199.238655][T11221] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 199.290302][T11243] EXT4-fs (loop5): Remounting filesystem read-only [ 199.311519][T11243] EXT4-fs (loop5): no journal found [ 199.317052][T11243] EXT4-fs (loop5): can't get journal size [ 199.323577][T11221] syz.0.2498: attempt to access beyond end of device [ 199.323577][T11221] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 199.340092][T11243] EXT4-fs (loop5): filesystem is read-only [ 199.346769][T11243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 199.428428][ T4162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.554651][T11263] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2507'. [ 199.570206][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 199.570221][ T29] audit: type=1400 audit(1768860531.336:1876): avc: denied { name_bind } for pid=11260 comm="syz.9.2506" src=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 199.579909][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2508'. [ 199.654624][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2509'. [ 199.678603][ T29] audit: type=1400 audit(1768860531.446:1877): avc: denied { create } for pid=11272 comm="syz.5.2510" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 199.771456][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2512'. [ 199.780662][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2512'. [ 199.844382][ T29] audit: type=1326 audit(1768860531.606:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11280 comm="syz.9.2513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0b5acb9 code=0x0 [ 199.875975][ T29] audit: type=1400 audit(1768860531.636:1879): avc: denied { write } for pid=11290 comm="syz.5.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 199.898082][ T29] audit: type=1400 audit(1768860531.666:1880): avc: denied { listen } for pid=11290 comm="syz.5.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 199.918688][ T29] audit: type=1400 audit(1768860531.666:1881): avc: denied { accept } for pid=11290 comm="syz.5.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 200.078197][ T29] audit: type=1400 audit(1768860531.846:1882): avc: denied { setopt } for pid=11320 comm="syz.7.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.690322][ T29] audit: type=1326 audit(1768860532.456:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11392 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 200.714756][ T29] audit: type=1326 audit(1768860532.456:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11392 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 200.739265][ T29] audit: type=1326 audit(1768860532.456:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11392 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3deb86acb9 code=0x7ffc0000 [ 201.142955][T11436] loop0: detected capacity change from 0 to 1024 [ 201.150796][T11436] EXT4-fs: Ignoring removed nobh option [ 201.157022][T11436] EXT4-fs: inline encryption not supported [ 201.190292][T11436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.208470][T11443] loop5: detected capacity change from 0 to 1024 [ 201.225694][T11443] EXT4-fs: Ignoring removed bh option [ 201.239378][T11443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.281967][T11443] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 201.306709][T11443] EXT4-fs (loop5): Remounting filesystem read-only [ 201.323478][T11443] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 201.341125][ T3481] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 201.361805][ T3481] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 201.379863][T11454] loop9: detected capacity change from 0 to 2048 [ 201.418792][T11454] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.594106][ T9391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.065812][ T4162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.197135][ T9261] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.240708][T11576] loop5: detected capacity change from 0 to 512 [ 202.283035][T11576] msdos: Unknown parameter 'errors&remount-ro' [ 202.294115][T11579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2541'. [ 202.360492][T11579] macvlan2: entered promiscuous mode [ 202.366059][T11579] macvlan2: entered allmulticast mode [ 202.420270][T11579] bond1: (slave macvlan2): Opening slave failed [ 202.456926][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2542'. [ 202.835631][T11606] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2553'. [ 203.668467][T11662] loop5: detected capacity change from 0 to 164 [ 203.707080][T11662] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 203.763182][T11662] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2571'. [ 204.584032][T11702] loop0: detected capacity change from 0 to 8192 [ 204.600658][T11709] lo: entered allmulticast mode [ 204.631479][T11702] bio_check_eod: 2405 callbacks suppressed [ 204.631509][T11702] syz.0.2586: attempt to access beyond end of device [ 204.631509][T11702] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 204.636925][T11705] lo: left allmulticast mode [ 204.686715][T11712] loop5: detected capacity change from 0 to 2048 [ 204.741927][T11712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.772646][ T9391] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 204.780583][ T9391] FAT-fs (loop0): Filesystem has been set read-only [ 204.843289][ T4162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.953383][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'. [ 205.090920][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 205.090941][ T29] audit: type=1400 audit(1768860536.856:1902): avc: denied { sys_module } for pid=11731 comm="syz.7.2595" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 205.193454][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2597'. [ 205.248792][T11744] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2599'. [ 205.516257][T11754] ================================================================== [ 205.524633][T11754] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 205.533529][T11754] [ 205.535894][T11754] write to 0xffff88810f51dbe8 of 8 bytes by task 11751 on cpu 1: [ 205.543790][T11754] shmem_file_splice_read+0x470/0x600 [ 205.549589][T11754] splice_direct_to_actor+0x26e/0x670 [ 205.555117][T11754] do_splice_direct+0x119/0x1a0 [ 205.560265][T11754] do_sendfile+0x380/0x650 [ 205.564940][T11754] __x64_sys_sendfile64+0x105/0x150 [ 205.570405][T11754] x64_sys_call+0x2db1/0x3000 [ 205.575280][T11754] do_syscall_64+0xc0/0x2a0 [ 205.580106][T11754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.586423][T11754] [ 205.588854][T11754] write to 0xffff88810f51dbe8 of 8 bytes by task 11754 on cpu 0: [ 205.596793][T11754] shmem_file_splice_read+0x470/0x600 [ 205.602250][T11754] splice_direct_to_actor+0x26e/0x670 [ 205.608216][T11754] do_splice_direct+0x119/0x1a0 [ 205.613580][T11754] do_sendfile+0x380/0x650 [ 205.618055][T11754] __x64_sys_sendfile64+0x105/0x150 [ 205.623498][T11754] x64_sys_call+0x2db1/0x3000 [ 205.628323][T11754] do_syscall_64+0xc0/0x2a0 [ 205.632898][T11754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.639138][T11754] [ 205.641513][T11754] value changed: 0x00000000000072e4 -> 0x00000000000072f6 [ 205.648646][T11754] [ 205.651087][T11754] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 205.657578][T11754] CPU: 0 UID: 0 PID: 11754 Comm: syz.7.2601 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 205.673787][T11754] Tainted: [W]=WARN [ 205.678242][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.688547][T11754] ==================================================================