last executing test programs: 1m54.581976652s ago: executing program 4 (id=479): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 1m54.526976195s ago: executing program 4 (id=480): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x0, 0x0, 0x20, 0xff, 0x0, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4840}, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1m54.43814311s ago: executing program 4 (id=482): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) 1m54.306795328s ago: executing program 4 (id=485): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 1m54.306470758s ago: executing program 4 (id=486): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES8], 0x1, 0x801, &(0x7f0000001540)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) utimes(&(0x7f0000000000)='./file1\x00', 0x0) 1m54.143794438s ago: executing program 4 (id=489): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 1m54.1081914s ago: executing program 32 (id=489): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 3.150221296s ago: executing program 2 (id=2592): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 3.051394281s ago: executing program 2 (id=2597): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x48050) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x14, r1, 0x10, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.725212431s ago: executing program 2 (id=2601): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x108000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x13008, 0x0, 0x800101, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 1.731008109s ago: executing program 2 (id=2612): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_wait(r3, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 1.467244464s ago: executing program 5 (id=2619): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x1000}], 0x1, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.456661745s ago: executing program 3 (id=2621): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) close(0x3) 1.443447115s ago: executing program 0 (id=2622): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000180)=ANY=[@ANYBLOB="6d61703d6f66662c756e686964652c756e686964652c006681207940a74a19f936c78897e38de0e4ac6906621733a3a509a55ad8f10c1d5c7258066d56fcf6f54938229f0a0d75e3be0ba62327f9d457df86b74f6607dc0d1c775457f363b79a477aa411d0398e8b8316dffdcfb9ecef9aafb32b1cfb21e4b8890df91b8ad9e033dfbd2cb6367d52f9877cac24fefd622302"], 0x1, 0x566, &(0x7f0000000540)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd74, 0x7, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xffe0, 0x1}, {0xffff, 0xffff}}, [@TCA_RATE={0x0, 0x5, {0x40, 0xfa}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x20040084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) gettid() 1.350436461s ago: executing program 5 (id=2624): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/738], &(0x7f0000000140)='GPL\x00'}, 0x94) unshare(0x6c000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) close(r0) 1.304827324s ago: executing program 0 (id=2625): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) epoll_create1(0x0) r0 = inotify_init1(0x80800) dup(r0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) 1.252396487s ago: executing program 0 (id=2626): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}], 0x28, 0x40010100, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) listen(0xffffffffffffffff, 0xfff) 1.217379739s ago: executing program 0 (id=2628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) fsmount(0xffffffffffffffff, 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 1.150217273s ago: executing program 3 (id=2629): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x85f8], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 1.096593186s ago: executing program 3 (id=2631): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x3405f8c17b4743e3, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0xc000000) 1.047009469s ago: executing program 0 (id=2632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x521, 0x0, 0x20000, 0x0, 0x8000000000}, 0x0, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) 879.996828ms ago: executing program 3 (id=2633): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 817.336442ms ago: executing program 1 (id=2634): lsetxattr$security_capability(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write(r0, &(0x7f0000000240)='T', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x65) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix:De', 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000200)={[{@debug}, {@nodiscard}, {@nolazytime}, {@norecovery}]}, 0x2, 0x5bf, &(0x7f0000001480)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 577.049286ms ago: executing program 1 (id=2635): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) close(0x4) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 506.01572ms ago: executing program 1 (id=2636): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4040) 486.198692ms ago: executing program 3 (id=2637): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x57, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xe}, {0x9, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(0x3) 376.333788ms ago: executing program 3 (id=2638): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = syz_io_uring_setup(0x79ba, &(0x7f0000000540)={0x0, 0x3bd1, 0x10100, 0x0, 0x313}, 0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r4, 0x0) r5 = getpid() process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) 375.291268ms ago: executing program 5 (id=2639): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x1, 0x0, &(0x7f0000000380)="e4", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], &(0x7f0000000380), 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x11, r0, 0x80000000) 335.222331ms ago: executing program 2 (id=2640): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r0}, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) connect$packet(r1, &(0x7f00000001c0)={0x11, 0x16, 0x0, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') 300.508662ms ago: executing program 5 (id=2641): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 254.113135ms ago: executing program 5 (id=2642): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffefe, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 175.96397ms ago: executing program 2 (id=2643): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x2, 0x206, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x2, @perf_config_ext={0x400, 0x100000001}, 0x419, 0x40000004, 0x0, 0x4, 0x103fe, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000002c0)=0xf, 0x4) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 152.907361ms ago: executing program 0 (id=2644): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[], 0xffdd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03"], 0x7c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x2000000) 90.915315ms ago: executing program 1 (id=2645): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000070000000800000022"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000080), &(0x7f0000000840)=r2}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 89.391925ms ago: executing program 1 (id=2655): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x30) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x411, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x8e9e, 0x7, 0x1f94) getpgid(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1.67865ms ago: executing program 5 (id=2646): getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 1 (id=2657): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=@delchain={0x40, 0x2c, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x6, 0x1, {0x0, 0xfff3}}]}}]}, 0x40}}, 0x4010) kernel console output (not intermixed with test programs): leaned up [ 82.491476][ T6976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.522772][ T6976] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 82.530751][ T6976] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 82.892399][ T6986] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 82.904582][ T6986] batman_adv: batadv0: Adding interface: gretap1 [ 82.910974][ T6986] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.952305][ T6986] batman_adv: batadv0: Interface activated: gretap1 [ 83.078144][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 83.199779][ T4955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.838973][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'. [ 83.861452][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1123'. [ 84.429562][ T7050] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 84.676402][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 84.685466][ T7061] bridge_slave_1: left allmulticast mode [ 84.691121][ T7061] bridge_slave_1: left promiscuous mode [ 84.696863][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.705536][ T7061] bridge_slave_0: left allmulticast mode [ 84.711204][ T7061] bridge_slave_0: left promiscuous mode [ 84.716925][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.022389][ T7054] cgroup: fork rejected by pids controller in /syz0 [ 85.312874][ T7122] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1148'. [ 85.370160][ T9] Process accounting resumed [ 85.486512][ T7128] loop2: detected capacity change from 0 to 1024 [ 85.568202][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1151'. [ 85.577957][ T7128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.708746][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.845373][ T7147] loop2: detected capacity change from 0 to 8192 [ 85.865649][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 85.947161][ T7156] loop2: detected capacity change from 0 to 128 [ 85.967514][ T7156] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.006763][ T7156] ext4 filesystem being mounted at /228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.180573][ T3324] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.380460][ T7172] bond2: entered allmulticast mode [ 86.399636][ T7172] ip6gretap1: entered allmulticast mode [ 86.405604][ T7172] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 86.641787][ T7190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1173'. [ 86.973516][ T7204] loop0: detected capacity change from 0 to 512 [ 86.982610][ T7204] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.012986][ T7204] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 87.020988][ T7204] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 87.036760][ T7206] loop5: detected capacity change from 0 to 8192 [ 87.057819][ T7204] System zones: 0-1, 15-15, 18-18, 34-34 [ 87.074675][ T7204] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.094165][ T7204] __quota_error: 452 callbacks suppressed [ 87.094221][ T7204] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 87.112715][ T1052] Process accounting resumed [ 87.120636][ T7204] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 87.135198][ T7204] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 87.142412][ T7204] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1179: bg 0: block 40: padding at end of block bitmap is not set [ 87.165247][ T7204] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 87.174294][ T7204] EXT4-fs (loop0): 1 truncate cleaned up [ 87.180537][ T7204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.197065][ T7204] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 87.205054][ T7204] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 87.217945][ T29] audit: type=1400 audit(1769025791.415:1238): avc: denied { remount } for pid=7205 comm="syz.5.1180" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 87.276675][ T29] audit: type=1326 audit(1769025791.475:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 87.300128][ T29] audit: type=1326 audit(1769025791.475:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 87.327165][ T29] audit: type=1326 audit(1769025791.485:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 87.350622][ T29] audit: type=1326 audit(1769025791.515:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 87.374116][ T29] audit: type=1326 audit(1769025791.515:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 87.397657][ T29] audit: type=1326 audit(1769025791.515:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 87.421101][ T29] audit: type=1326 audit(1769025791.515:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 87.444530][ T29] audit: type=1326 audit(1769025791.525:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 87.755443][ T7222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1185'. [ 87.765214][ T4092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.799066][ T7226] loop3: detected capacity change from 0 to 128 [ 87.835305][ T7226] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.855288][ T7226] ext4 filesystem being mounted at /239/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.067239][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.151078][ T7236] loop3: detected capacity change from 0 to 256 [ 88.225311][ T1052] kernel write not supported for file bpf-prog (pid: 1052 comm: kworker/0:2) [ 88.538263][ T7271] loop2: detected capacity change from 0 to 512 [ 88.564803][ T7271] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1207: bad orphan inode 15 [ 88.578941][ T7271] ext4_test_bit(bit=14, block=5) = 0 [ 88.645880][ T7271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.684222][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.736722][ T7279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1210'. [ 89.706118][ T7335] loop2: detected capacity change from 0 to 128 [ 89.718413][ T7335] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.730974][ T7335] ext4 filesystem being mounted at /247/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.756223][ T3324] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.036027][ T7352] openvswitch: netlink: Missing key (keys=40, expected=100) [ 90.618167][ T7402] lo: Caught tx_queue_len zero misconfig [ 90.623873][ T7402] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 90.649020][ T7405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1262'. [ 90.674049][ T7405] vlan0: entered promiscuous mode [ 90.766949][ T7411] loop5: detected capacity change from 0 to 512 [ 90.779814][ T7411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.924624][ T7411] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.855536][ T7429] loop2: detected capacity change from 0 to 256 [ 91.889907][ T4955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.019149][ T7436] loop5: detected capacity change from 0 to 512 [ 92.047972][ T7436] EXT4-fs: inline encryption not supported [ 92.053889][ T7436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.077409][ T7436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.085903][ T7436] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.096754][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 92.105683][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 92.226256][ T7436] __quota_error: 531 callbacks suppressed [ 92.226275][ T7436] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 1 [ 92.285107][ T7436] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 92.296927][ T7436] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1273: Failed to acquire dquot type 1 [ 92.311564][ T7436] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 92.332333][ T7436] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1273: corrupted inode contents [ 92.345006][ T7436] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.1273: mark_inode_dirty error [ 92.358199][ T7436] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1273: corrupted inode contents [ 92.391904][ T7436] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.1273: mark_inode_dirty error [ 92.403649][ T7436] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1273: corrupted inode contents [ 92.415747][ T7436] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 92.424389][ T7436] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1273: corrupted inode contents [ 92.436495][ T7436] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.1273: mark_inode_dirty error [ 92.487552][ T7436] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 92.505583][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 92.515106][ T7436] EXT4-fs (loop5): 1 truncate cleaned up [ 92.521156][ T7436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.583148][ T4955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.688403][ T7479] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 92.689409][ T7483] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 92.698988][ T7479] SELinux: failed to load policy [ 92.707468][ T7483] ref_ctr increment failed for inode: 0x553 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88812bdc8d80 [ 92.761867][ T7487] netlink: 'syz.1.1294': attribute type 1 has an invalid length. [ 92.798545][ T29] audit: type=1400 audit(1769025796.995:1778): avc: denied { getopt } for pid=7486 comm="syz.1.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.872960][ T29] audit: type=1326 audit(1769025797.065:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.0.1296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x0 [ 93.845079][ T29] audit: type=1326 audit(1769025798.045:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 93.873524][ T7529] loop0: detected capacity change from 0 to 1024 [ 93.882523][ T29] audit: type=1326 audit(1769025798.075:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 93.905989][ T29] audit: type=1326 audit(1769025798.075:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 93.929539][ T29] audit: type=1326 audit(1769025798.075:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 93.952989][ T29] audit: type=1326 audit(1769025798.075:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 93.976595][ T29] audit: type=1326 audit(1769025798.075:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0016f5aa22 code=0x7ffc0000 [ 94.000261][ T7529] EXT4-fs: Ignoring removed nobh option [ 94.005918][ T7529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.024530][ T7537] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1315'. [ 94.099981][ T7529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.136170][ T7545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1316'. [ 94.153193][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 94.179358][ T7551] team1: entered promiscuous mode [ 94.184494][ T7551] team1: entered allmulticast mode [ 94.192884][ T4092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.270032][ T7557] macvlan2: entered promiscuous mode [ 94.278879][ T7557] batman_adv: batadv0: Adding interface: macvlan2 [ 94.285398][ T7557] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.310820][ T7557] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 94.521828][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1341'. [ 94.622424][ T7585] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1335'. [ 94.775951][ T7595] .1!€ÿ: renamed from bond_slave_0 (while UP) [ 94.827583][ T7596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.867605][ T7596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.613071][ T7612] loop5: detected capacity change from 0 to 1024 [ 95.645314][ T7612] EXT4-fs: Ignoring removed nobh option [ 95.650940][ T7612] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.781352][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 95.790477][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 95.829933][ T7612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.859954][ T4955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.235955][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 96.248550][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 96.375022][ T7649] ip6gre1: entered promiscuous mode [ 96.380296][ T7649] ip6gre1: entered allmulticast mode [ 96.543589][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 96.808206][ T7677] bond3: entered promiscuous mode [ 97.240340][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 97.240355][ T29] audit: type=1400 audit(1769025801.435:1972): avc: denied { setopt } for pid=7722 comm="syz.5.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.275886][ T29] audit: type=1400 audit(1769025801.445:1973): avc: denied { read } for pid=7726 comm="syz.2.1391" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.299147][ T29] audit: type=1400 audit(1769025801.445:1974): avc: denied { open } for pid=7726 comm="syz.2.1391" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.322691][ T29] audit: type=1326 audit(1769025801.455:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.2.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 97.346112][ T29] audit: type=1326 audit(1769025801.455:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.2.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 97.369548][ T29] audit: type=1326 audit(1769025801.455:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.2.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 97.392970][ T29] audit: type=1326 audit(1769025801.455:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.2.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 97.416328][ T29] audit: type=1400 audit(1769025801.455:1979): avc: denied { ioctl } for pid=7726 comm="syz.2.1391" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.441234][ T29] audit: type=1326 audit(1769025801.455:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.2.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 97.464631][ T29] audit: type=1326 audit(1769025801.455:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.2.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 97.598153][ T7742] netlink: 'syz.1.1399': attribute type 32 has an invalid length. [ 97.619044][ T7740] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.645828][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.656081][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 97.737712][ T7740] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.787560][ T7740] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.837269][ T7740] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.883995][ T3887] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.900200][ T3887] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.908572][ T3887] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.921083][ T5178] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.057870][ T7778] gtp0: entered promiscuous mode [ 99.394143][ T7837] loop3: detected capacity change from 0 to 32768 [ 99.678784][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 99.685184][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.691337][ T3506] Bluetooth: hci1: command 0x1003 tx timeout [ 99.822065][ T7852] __nla_validate_parse: 7 callbacks suppressed [ 99.822082][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1441'. [ 99.875797][ T7852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.918554][ T7854] macvlan2: entered promiscuous mode [ 99.923894][ T7854] macvlan2: entered allmulticast mode [ 99.940739][ T7847] Set syz1 is full, maxelem 65536 reached [ 100.191990][ T7864] team_slave_0: entered promiscuous mode [ 100.198523][ T7864] team_slave_1: entered promiscuous mode [ 100.199196][ T7868] loop3: detected capacity change from 0 to 512 [ 100.227921][ T3887] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.235354][ T7873] Bluetooth: hci0: Frame reassembly failed (-90) [ 100.242822][ T7864] macvtap1: entered promiscuous mode [ 100.248703][ T7864] team0: entered promiscuous mode [ 100.264788][ T7868] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1444: invalid indirect mapped block 32768 (level 0) [ 100.287857][ T7864] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 100.291146][ T7868] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1444: attempt to clear invalid blocks 1024 len 1 [ 100.299992][ T7864] team0: Device macvtap1 is already an upper device of the team interface [ 100.325247][ T7864] team0: left promiscuous mode [ 100.332289][ T7868] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 100.333424][ T7864] team_slave_0: left promiscuous mode [ 100.347024][ T7868] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1444: invalid indirect mapped block 1819213824 (level 0) [ 100.352749][ T7864] team_slave_1: left promiscuous mode [ 100.367078][ T7868] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1444: invalid indirect mapped block 33554432 (level 2) [ 100.386285][ T7868] EXT4-fs (loop3): 1 truncate cleaned up [ 100.392264][ T7868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.427350][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.859249][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1463'. [ 100.868275][ T7905] netlink: 'syz.3.1463': attribute type 12 has an invalid length. [ 100.898239][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1463'. [ 100.898245][ T3873] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.907330][ T7905] netlink: 'syz.3.1463': attribute type 12 has an invalid length. [ 100.938566][ T3873] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.964793][ T3873] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.973329][ T3873] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.167829][ T7913] loop3: detected capacity change from 0 to 512 [ 101.175362][ T7913] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.217023][ T7913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.257413][ T7913] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.1466: lblock 23 mapped to illegal pblock 18 (length 1) [ 101.285200][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.460239][ T7921] team_slave_0: entered promiscuous mode [ 101.466249][ T7921] team_slave_1: entered promiscuous mode [ 101.472901][ T7921] macvtap1: entered promiscuous mode [ 101.478631][ T7921] team0: entered promiscuous mode [ 101.497976][ T7921] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 101.508695][ T7921] team0: Device macvtap1 is already an upper device of the team interface [ 101.521859][ T7921] team0: left promiscuous mode [ 101.528659][ T7921] team_slave_0: left promiscuous mode [ 101.534489][ T7921] team_slave_1: left promiscuous mode [ 101.680445][ T7928] loop2: detected capacity change from 0 to 512 [ 101.711519][ T7928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.734519][ T7928] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.746275][ T3502] kernel write not supported for file [eventfd] (pid: 3502 comm: kworker/1:6) [ 101.910042][ T7942] loop0: detected capacity change from 0 to 512 [ 101.975313][ T7942] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.095588][ T7942] EXT4-fs (loop0): 1 orphan inode deleted [ 102.101375][ T7942] EXT4-fs (loop0): 1 truncate cleaned up [ 102.126670][ T7942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.209983][ T7947] netlink: 'syz.1.1476': attribute type 4 has an invalid length. [ 102.228174][ T7947] netlink: 'syz.1.1476': attribute type 4 has an invalid length. [ 102.241745][ T7942] EXT4-fs (loop0): shut down requested (2) [ 102.247589][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 102.247613][ T5554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.340606][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 102.340646][ T29] audit: type=1400 audit(1769025806.525:2086): avc: denied { create } for pid=7950 comm="syz.1.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.366294][ T29] audit: type=1400 audit(1769025806.535:2087): avc: denied { bind } for pid=7950 comm="syz.1.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.389156][ T7942] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.530905][ T7968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1494'. [ 102.560906][ T7968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1494'. [ 102.603293][ T7967] macvtap1: entered promiscuous mode [ 102.609021][ T7967] team0: entered promiscuous mode [ 102.615166][ T7967] team_slave_0: entered promiscuous mode [ 102.621903][ T7967] team_slave_1: entered promiscuous mode [ 102.665851][ T7967] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 102.717889][ T7967] team0: Device macvtap1 is already an upper device of the team interface [ 102.740079][ T29] audit: type=1400 audit(1769025806.935:2088): avc: denied { checkpoint_restore } for pid=7957 comm="syz.3.1480" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.766163][ T7967] team0: left promiscuous mode [ 102.771156][ T7967] team_slave_0: left promiscuous mode [ 102.777818][ T7967] team_slave_1: left promiscuous mode [ 103.304420][ T7928] syz.2.1471 (7928) used greatest stack depth: 5896 bytes left [ 103.344986][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.774383][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1507'. [ 103.910300][ T8025] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.917516][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.027366][ T8025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.049234][ T8025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.148169][ T5178] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.177187][ T5178] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.190813][ T8049] netlink: 'syz.5.1513': attribute type 1 has an invalid length. [ 104.206735][ T5178] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.221407][ T8049] bond2: entered promiscuous mode [ 104.226856][ T8049] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.234811][ T5178] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.254645][ T8049] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.263284][ T8049] bond2: (slave bond3): making interface the new active one [ 104.270646][ T8049] bond3: entered promiscuous mode [ 104.276635][ T8049] bond2: (slave bond3): Enslaving as an active interface with an up link [ 104.461177][ T8059] macvtap1: entered promiscuous mode [ 104.468479][ T8059] team0: entered promiscuous mode [ 104.473799][ T8059] team_slave_0: entered promiscuous mode [ 104.480849][ T8059] team_slave_1: entered promiscuous mode [ 104.489990][ T8059] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 104.502101][ T8059] team0: Device macvtap1 is already an upper device of the team interface [ 104.516885][ T8059] team0: left promiscuous mode [ 104.522313][ T8059] team_slave_0: left promiscuous mode [ 104.530042][ T8059] team_slave_1: left promiscuous mode [ 104.567861][ T29] audit: type=1400 audit(1769025808.765:2089): avc: denied { bind } for pid=8065 comm="syz.0.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.688734][ T8070] loop0: detected capacity change from 0 to 2048 [ 104.710958][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 104.719938][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 104.739473][ T8070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.838908][ T8070] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1521: bg 0: block 234: padding at end of block bitmap is not set [ 104.853832][ T8070] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1896 with error 28 [ 104.866410][ T8070] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.866410][ T8070] [ 104.876098][ T8070] EXT4-fs (loop0): Total free blocks count 0 [ 104.882086][ T8070] EXT4-fs (loop0): Free/Dirty block details [ 104.888045][ T8070] EXT4-fs (loop0): free_blocks=0 [ 104.893037][ T8070] EXT4-fs (loop0): dirty_blocks=1904 [ 104.898420][ T8070] EXT4-fs (loop0): Block reservation details [ 104.904419][ T8070] EXT4-fs (loop0): i_reserved_data_blocks=119 [ 105.065911][ T4092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.108262][ T8090] loop5: detected capacity change from 0 to 512 [ 105.152095][ T8090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.202243][ T8099] loop0: detected capacity change from 0 to 128 [ 105.223560][ T29] audit: type=1400 audit(1769025809.415:2090): avc: denied { getopt } for pid=8100 comm="syz.3.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.243309][ T8090] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.304118][ T4955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.316092][ T29] audit: type=1326 audit(1769025809.515:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8885acb9 code=0x7ffc0000 [ 105.388423][ T29] audit: type=1326 audit(1769025809.515:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8885acb9 code=0x7ffc0000 [ 105.412005][ T29] audit: type=1326 audit(1769025809.515:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e8885acb9 code=0x7ffc0000 [ 105.433482][ T8107] netlink: 143700 bytes leftover after parsing attributes in process `syz.5.1534'. [ 105.435587][ T29] audit: type=1326 audit(1769025809.515:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8885acb9 code=0x7ffc0000 [ 105.468277][ T29] audit: type=1326 audit(1769025809.515:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.3.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2e8885acb9 code=0x7ffc0000 [ 105.516197][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.525471][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.536981][ T8113] ref_ctr_offset mismatch. inode: 0x63a offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 105.678814][ T8034] IPVS: starting estimator thread 0... [ 105.767265][ T8123] IPVS: using max 2688 ests per chain, 134400 per kthread [ 105.808074][ T8137] bond4: entered promiscuous mode [ 105.825101][ T8137] ip6gre3: entered promiscuous mode [ 105.830335][ T8137] ip6gre3: entered allmulticast mode [ 105.837435][ T8137] bond4: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 105.848460][ T8137] bond4: (slave ip6gre3): Error -95 calling set_mac_address [ 106.005531][ T8150] tipc: Started in network mode [ 106.010461][ T8150] tipc: Node identity ee453367c7c2, cluster identity 4711 [ 106.017771][ T8150] tipc: Enabled bearer , priority 0 [ 106.042765][ T8150] syzkaller0: entered promiscuous mode [ 106.048339][ T8150] syzkaller0: entered allmulticast mode [ 106.054183][ T8150] tipc: Resetting bearer [ 106.061447][ T8149] tipc: Resetting bearer [ 106.076829][ T8149] tipc: Disabling bearer [ 106.181291][ T8159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1556'. [ 106.202990][ T8161] loop5: detected capacity change from 0 to 512 [ 106.209793][ T8161] EXT4-fs: Ignoring removed i_version option [ 106.215896][ T8161] EXT4-fs: Ignoring removed nobh option [ 106.222461][ T8161] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 106.233741][ T8161] EXT4-fs (loop5): 1 truncate cleaned up [ 106.241165][ T8161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.270448][ T4955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.870175][ T8187] netlink: 'syz.1.1567': attribute type 27 has an invalid length. [ 106.880597][ T8187] veth0_vlan: left allmulticast mode [ 106.892571][ T8187] macvlan2: left promiscuous mode [ 106.898104][ T8187] ip6gre1: left promiscuous mode [ 106.903084][ T8187] ip6gre1: left allmulticast mode [ 106.909801][ T8187] bond3: left promiscuous mode [ 106.941569][ T8187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.952851][ T8187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.373439][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 107.373455][ T29] audit: type=1400 audit(1769025811.565:2107): avc: denied { append } for pid=8205 comm="syz.2.1575" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 107.405752][ T29] audit: type=1326 audit(1769025811.605:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8205 comm="syz.2.1575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x0 [ 108.133056][ T29] audit: type=1326 audit(1769025812.325:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8885acb9 code=0x7ffc0000 [ 108.162886][ T29] audit: type=1326 audit(1769025812.325:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8885acb9 code=0x7ffc0000 [ 108.186390][ T29] audit: type=1326 audit(1769025812.325:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e8885acb9 code=0x7ffc0000 [ 108.194421][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'. [ 108.209894][ T29] audit: type=1326 audit(1769025812.335:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8885acb9 code=0x7ffc0000 [ 108.218614][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'. [ 108.241971][ T29] audit: type=1326 audit(1769025812.335:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8885acb9 code=0x7ffc0000 [ 108.242002][ T29] audit: type=1326 audit(1769025812.335:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2e8885acb9 code=0x7ffc0000 [ 108.242099][ T29] audit: type=1326 audit(1769025812.335:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8885acb9 code=0x7ffc0000 [ 108.242129][ T29] audit: type=1326 audit(1769025812.335:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8885acb9 code=0x7ffc0000 [ 108.558923][ T8302] delete_channel: no stack [ 108.689139][ T8334] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.698973][ T8334] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.740789][ T8337] veth1_to_bond: entered promiscuous mode [ 108.748359][ T8334] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.758176][ T8334] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.759423][ T8339] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1591'. [ 108.855290][ T8334] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.865237][ T8334] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.926688][ T8334] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.936513][ T8334] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.997767][ T874] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.006160][ T874] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.025955][ T874] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.034429][ T874] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.043751][ T874] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.052148][ T874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.060561][ T874] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.068843][ T874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.125096][ T8333] veth1_to_bond: left promiscuous mode [ 109.187586][ T8356] loop0: detected capacity change from 0 to 164 [ 109.215090][ T8356] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 109.224414][ T8362] netlink: 'syz.2.1600': attribute type 10 has an invalid length. [ 109.232404][ T8362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1600'. [ 109.249617][ T8356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1599'. [ 109.275705][ T8362] dummy0: entered promiscuous mode [ 109.281010][ T8362] dummy0: entered allmulticast mode [ 109.311052][ T8362] bridge0: port 3(dummy0) entered blocking state [ 109.317562][ T8362] bridge0: port 3(dummy0) entered disabled state [ 109.374571][ T8034] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.383562][ T8034] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.416810][ T8371] loop2: detected capacity change from 0 to 2048 [ 109.468313][ T8371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.588503][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.745036][ T8386] loop2: detected capacity change from 0 to 1024 [ 109.799370][ T8386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.833520][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.267765][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1619'. [ 111.375102][ T8493] loop5: detected capacity change from 0 to 128 [ 111.402170][ T8493] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.425638][ T8493] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.497642][ T4955] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.522966][ T8507] loop3: detected capacity change from 0 to 512 [ 111.583495][ T8507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.602313][ T8519] netlink: 'syz.1.1657': attribute type 10 has an invalid length. [ 111.610260][ T8519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1657'. [ 111.620237][ T8519] dummy0: entered allmulticast mode [ 111.625772][ T8519] bridge0: port 1(dummy0) entered blocking state [ 111.632203][ T8519] bridge0: port 1(dummy0) entered disabled state [ 111.639120][ T8507] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.650447][ T8519] bridge0: port 1(dummy0) entered blocking state [ 111.656857][ T8519] bridge0: port 1(dummy0) entered listening state [ 111.698414][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1659'. [ 111.745628][ T8531] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1660'. [ 111.761800][ T8527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 111.782447][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.802329][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'. [ 111.811333][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1659'. [ 111.887072][ T8538] macsec1: entered promiscuous mode [ 111.892342][ T8538] bond5: entered promiscuous mode [ 111.897606][ T8538] macsec1: entered allmulticast mode [ 111.902903][ T8538] bond5: entered allmulticast mode [ 112.320511][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.351097][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.389124][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 112.389140][ T29] audit: type=1326 audit(1769025816.585:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 112.422013][ T8610] netlink: 'syz.3.1670': attribute type 10 has an invalid length. [ 112.430010][ T8610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1670'. [ 112.513317][ T8573] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.524026][ T8573] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.552379][ T29] audit: type=1326 audit(1769025816.585:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 112.576016][ T29] audit: type=1326 audit(1769025816.685:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 112.599435][ T29] audit: type=1326 audit(1769025816.685:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 112.641988][ T29] audit: type=1326 audit(1769025816.805:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 112.665419][ T29] audit: type=1326 audit(1769025816.805:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 112.675195][ T8610] dummy0: entered promiscuous mode [ 112.688833][ T29] audit: type=1326 audit(1769025816.805:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 112.688866][ T29] audit: type=1326 audit(1769025816.805:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 112.694000][ T8610] dummy0: entered allmulticast mode [ 112.740253][ T8610] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 112.740897][ T29] audit: type=1326 audit(1769025816.805:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 112.784783][ T29] audit: type=1326 audit(1769025816.805:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 112.888822][ T8573] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.899734][ T8573] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.036690][ T8655] loop5: detected capacity change from 0 to 512 [ 113.077759][ T8655] EXT4-fs (loop5): 1 orphan inode deleted [ 113.087556][ T8655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.103575][ T37] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 113.138301][ T8573] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.154358][ T8573] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.211933][ T8655] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.269935][ T8573] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.280383][ T8573] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.556503][ T4955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.604574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.733593][ T37] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.741896][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.767907][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 113.849880][ T3873] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.858183][ T3873] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.891725][ T3873] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.900031][ T3873] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.909898][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'. [ 113.987192][ T3873] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.995534][ T3873] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.033749][ T8679] loop2: detected capacity change from 0 to 512 [ 114.044706][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'. [ 114.116429][ T8679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.385216][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 114.396416][ T8706] selinux_netlink_send: 48 callbacks suppressed [ 114.396431][ T8706] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=8706 comm=syz.1.1698 [ 114.599186][ T8717] netlink: 'syz.1.1703': attribute type 4 has an invalid length. [ 114.602012][ T8679] Set syz1 is full, maxelem 65536 reached [ 114.631027][ T8719] loop3: detected capacity change from 0 to 1024 [ 114.649628][ T8719] EXT4-fs: inline encryption not supported [ 114.656340][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.669187][ T8717] netlink: 'syz.1.1703': attribute type 4 has an invalid length. [ 114.682573][ T8719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.734575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.775044][ T8729] loop2: detected capacity change from 0 to 512 [ 114.821209][ T8729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.845137][ T8729] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.858158][ T8719] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 114.892828][ T8719] EXT4-fs (loop3): Remounting filesystem read-only [ 114.914725][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.976837][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.028744][ T8741] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 115.061422][ T8748] netlink: 'syz.3.1713': attribute type 27 has an invalid length. [ 115.077924][ T8748] dummy0: left promiscuous mode [ 115.082805][ T8748] dummy0: left allmulticast mode [ 115.095358][ T8748] veth0_vlan: left allmulticast mode [ 115.116495][ T8756] io-wq is not configured for unbound workers [ 115.144562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.200034][ T8754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.208611][ T8754] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.220184][ T8754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.235782][ T37] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.246707][ T37] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.255254][ T37] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.263916][ T37] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.784846][ T8777] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 116.131941][ T8804] loop3: detected capacity change from 0 to 2048 [ 116.146216][ T8804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.214921][ T8804] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1735: bg 0: block 234: padding at end of block bitmap is not set [ 116.245553][ T8804] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1602 with error 28 [ 116.258152][ T8804] EXT4-fs (loop3): This should not happen!! Data will be lost [ 116.258152][ T8804] [ 116.267824][ T8804] EXT4-fs (loop3): Total free blocks count 0 [ 116.273848][ T8804] EXT4-fs (loop3): Free/Dirty block details [ 116.279786][ T8804] EXT4-fs (loop3): free_blocks=0 [ 116.284765][ T8804] EXT4-fs (loop3): dirty_blocks=1616 [ 116.290137][ T8804] EXT4-fs (loop3): Block reservation details [ 116.296246][ T8804] EXT4-fs (loop3): i_reserved_data_blocks=101 [ 116.418038][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.817083][ T8851] loop2: detected capacity change from 0 to 512 [ 116.840489][ T8851] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1751: couldn't read orphan inode 26 (err -116) [ 116.877895][ T8851] EXT4-fs (loop2): Remounting filesystem read-only [ 116.893761][ T8851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.909165][ T8851] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.934035][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.007168][ T8864] loop5: detected capacity change from 0 to 1024 [ 117.015223][ T8864] EXT4-fs: inline encryption not supported [ 117.036971][ T8864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.241647][ T8864] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 117.260129][ T8870] batadv_slave_0: entered promiscuous mode [ 117.260641][ T8864] EXT4-fs (loop5): Remounting filesystem read-only [ 117.275367][ T8870] batadv_slave_0 (unregistering): left promiscuous mode [ 117.282554][ T8870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.335895][ T8874] SET target dimension over the limit! [ 117.346161][ T4955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.625209][ T8890] loop3: detected capacity change from 0 to 256 [ 117.646357][ T8890] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.707401][ T8895] loop5: detected capacity change from 0 to 512 [ 117.714719][ T8890] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.736893][ T8895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.774781][ T8895] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.817546][ T4955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.118083][ T8921] __nla_validate_parse: 7 callbacks suppressed [ 118.118108][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1778'. [ 118.448621][ T8941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1782'. [ 118.629287][ T8959] loop2: detected capacity change from 0 to 512 [ 118.675127][ T8959] EXT4-fs: Ignoring removed bh option [ 118.689021][ T8959] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 119.013317][ T8973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1791'. [ 119.022636][ T8959] EXT4-fs (loop2): 1 truncate cleaned up [ 119.047899][ T8959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.061456][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1791'. [ 119.245633][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.284405][ T8981] pimreg: entered allmulticast mode [ 119.291616][ T8981] pimreg: left allmulticast mode [ 119.348804][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1794'. [ 119.391719][ T8984] loop2: detected capacity change from 0 to 8192 [ 119.674269][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 119.674288][ T29] audit: type=1400 audit(1769025823.865:2260): avc: denied { listen } for pid=8994 comm="syz.5.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.700152][ T29] audit: type=1400 audit(1769025823.865:2261): avc: denied { accept } for pid=8994 comm="syz.5.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.784115][ T9000] loop3: detected capacity change from 0 to 256 [ 119.810806][ T9000] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.006165][ T29] audit: type=1326 audit(1769025824.205:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9011 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 120.043914][ T29] audit: type=1326 audit(1769025824.225:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9011 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 120.067366][ T29] audit: type=1326 audit(1769025824.225:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9011 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 120.090790][ T29] audit: type=1326 audit(1769025824.225:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9011 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 120.114043][ T29] audit: type=1326 audit(1769025824.225:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9011 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 120.137476][ T29] audit: type=1326 audit(1769025824.225:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9011 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 120.160963][ T29] audit: type=1326 audit(1769025824.225:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9011 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 120.184702][ T29] audit: type=1326 audit(1769025824.225:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9011 comm="syz.2.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 120.195393][ T9018] loop0: detected capacity change from 0 to 128 [ 121.050379][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1821'. [ 121.074991][ T9056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.093158][ T9060] netlink: 'syz.0.1823': attribute type 83 has an invalid length. [ 121.117537][ T9056] bond4: (slave ip6tnl1): refused to change device type [ 121.240152][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 121.545416][ T9085] ip6gre1: entered promiscuous mode [ 121.550706][ T9085] ip6gre1: entered allmulticast mode [ 121.557782][ T1007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.565535][ T1007] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.584612][ T6556] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.605436][ T9085] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.040336][ T9104] loop3: detected capacity change from 0 to 2048 [ 122.057018][ T9104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.073334][ T9104] netlink: 'syz.3.1843': attribute type 2 has an invalid length. [ 122.081134][ T9104] netlink: 199792 bytes leftover after parsing attributes in process `syz.3.1843'. [ 122.165622][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.402385][ T6556] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.410318][ T6556] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.449168][ T9123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.457594][ T9123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.465907][ T9123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.663298][ T9122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.671654][ T9122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.409473][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'. [ 123.927290][ T9195] tipc: Failed to remove unknown binding: 66,0,0/0:2687464502/2687464503 [ 123.936209][ T9195] tipc: Failed to remove unknown binding: 66,0,0/0:2687464502/2687464503 [ 124.043160][ T9203] VFS: Mount too revealing [ 124.375311][ T9218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1882'. [ 124.405433][ T9218] netlink: 'syz.2.1882': attribute type 10 has an invalid length. [ 124.413759][ T9218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.422583][ T9218] batadv_slave_0: entered promiscuous mode [ 124.428955][ T9218] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 124.467504][ T1007] tipc: Subscription rejected, illegal request [ 124.830756][ T9255] loop2: detected capacity change from 0 to 2048 [ 124.858126][ T9260] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 124.891839][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1899'. [ 125.034534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.042786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.150016][ T9255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.331029][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.354492][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.345237][ T9286] netlink: 'syz.1.1908': attribute type 1 has an invalid length. [ 126.363199][ T9286] bond6: entered promiscuous mode [ 126.368310][ T9286] bond6: entered allmulticast mode [ 126.373710][ T9286] 8021q: adding VLAN 0 to HW filter on device bond6 [ 126.388758][ T9286] bridge6: entered promiscuous mode [ 126.394190][ T9286] bridge6: entered allmulticast mode [ 126.400345][ T9286] bond6: (slave bridge6): Enslaving as a backup interface with an up link [ 126.464519][ T362] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 126.593521][ T362] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 126.717981][ T9289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.797331][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1911'. [ 126.915664][ T9297] loop3: detected capacity change from 0 to 8192 [ 126.935143][ T9306] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1916'. [ 127.168424][ T9312] ref_ctr_offset mismatch. inode: 0x52e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1f00000000 [ 127.258841][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 127.258858][ T29] audit: type=1326 audit(1769025831.455:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 127.327548][ T29] audit: type=1326 audit(1769025831.485:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 127.351589][ T29] audit: type=1326 audit(1769025831.485:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 127.375615][ T29] audit: type=1326 audit(1769025831.485:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 127.399025][ T29] audit: type=1326 audit(1769025831.485:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 127.422928][ T29] audit: type=1326 audit(1769025831.485:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 127.447031][ T29] audit: type=1326 audit(1769025831.485:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 127.470486][ T29] audit: type=1326 audit(1769025831.485:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 127.494726][ T29] audit: type=1326 audit(1769025831.485:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 127.518173][ T29] audit: type=1326 audit(1769025831.485:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 127.653111][ T3857] tipc: Subscription rejected, illegal request [ 127.855627][ T9338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.912696][ T9334] loop3: detected capacity change from 0 to 8192 [ 127.961819][ T9334] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1927'. [ 127.972969][ T9338] loop2: detected capacity change from 0 to 512 [ 128.010752][ T9338] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.043431][ T9338] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (19288!=33349) [ 128.053144][ T9338] EXT4-fs (loop2): group descriptors corrupted! [ 128.070079][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1933'. [ 128.100686][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1934'. [ 128.703082][ T9388] netlink: 'syz.5.1947': attribute type 1 has an invalid length. [ 128.811935][ T9388] bond5: (slave veth5): Enslaving as an active interface with a down link [ 128.921754][ T9388] bond5: entered promiscuous mode [ 128.926920][ T9388] bond5: entered allmulticast mode [ 128.955395][ T9388] 8021q: adding VLAN 0 to HW filter on device bond5 [ 129.204308][ T9416] netlink: 'syz.3.1954': attribute type 10 has an invalid length. [ 129.274085][ T9415] bridge0: port 1(dummy0) entered disabled state [ 129.380828][ T9415] bond5: left allmulticast mode [ 129.385789][ T9415] bond5: left promiscuous mode [ 129.449534][ T9416] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.460625][ T9416] bond0: (slave team0): Enslaving as an active interface with an up link [ 129.624380][ T9426] SELinux: failed to load policy [ 129.880415][ T9460] loop3: detected capacity change from 0 to 128 [ 129.972648][ T971] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.990008][ T971] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.998640][ T971] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.007082][ T971] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.381620][ T9486] kernel profiling enabled (shift: 63) [ 130.387260][ T9486] profiling shift: 63 too large [ 131.075201][ T9513] net_ratelimit: 1 callbacks suppressed [ 131.075216][ T9513] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 131.155984][ T9513] team0: No ports can be present during mode change [ 131.505749][ T9533] netlink: 'syz.3.2002': attribute type 1 has an invalid length. [ 131.584927][ T9537] bond1: entered promiscuous mode [ 131.590023][ T9537] bond1: entered allmulticast mode [ 131.600079][ T9537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.676191][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2002'. [ 131.723650][ T9533] veth13: entered promiscuous mode [ 131.729003][ T9533] veth13: entered allmulticast mode [ 131.735087][ T9533] bond1: (slave veth13): Enslaving as a backup interface with a down link [ 131.738455][ T9550] loop0: detected capacity change from 0 to 512 [ 131.782122][ T9550] EXT4-fs: Ignoring removed bh option [ 131.823663][ T9560] ip6gre2: entered promiscuous mode [ 131.829738][ T9560] ip6gre2: entered allmulticast mode [ 131.936325][ T9561] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 132.005253][ T9550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.021252][ T971] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 132.028834][ T971] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 132.184822][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 132.186611][ T9550] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.243141][ T9567] netlink: 'syz.2.2014': attribute type 1 has an invalid length. [ 132.257432][ T9567] bond3: entered promiscuous mode [ 132.262591][ T9567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.265025][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 132.283330][ T9567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.290524][ T9567] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 132.301665][ T9567] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 132.313359][ T9567] bond3: (slave wireguard0): making interface the new active one [ 132.321114][ T9567] wireguard0: entered promiscuous mode [ 132.328884][ T9567] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 132.349240][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 132.349326][ T29] audit: type=1326 audit(1769025836.545:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0266a7c0d9 code=0x7fc00000 [ 132.433034][ T29] audit: type=1400 audit(1769025836.625:2386): avc: denied { accept } for pid=9574 comm="syz.5.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.496742][ T4092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.556559][ T29] audit: type=1326 audit(1769025836.755:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 132.619721][ T29] audit: type=1326 audit(1769025836.785:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 132.643855][ T29] audit: type=1326 audit(1769025836.785:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 132.667287][ T29] audit: type=1326 audit(1769025836.785:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f99649eaa22 code=0x7ffc0000 [ 132.691141][ T29] audit: type=1400 audit(1769025836.785:2391): avc: denied { unlink } for pid=4092 comm="syz-executor" name="file3" dev="tmpfs" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 132.707950][ T9591] loop2: detected capacity change from 0 to 8192 [ 132.714042][ T29] audit: type=1326 audit(1769025836.805:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f99649ab58e code=0x7ffc0000 [ 132.752073][ T29] audit: type=1326 audit(1769025836.905:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f99649eaae7 code=0x7ffc0000 [ 132.775458][ T29] audit: type=1326 audit(1769025836.905:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99649ab58e code=0x7ffc0000 [ 132.948647][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2032'. [ 132.957847][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 133.236503][ T9631] loop2: detected capacity change from 0 to 512 [ 133.253043][ T9631] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.274027][ T9631] EXT4-fs (loop2): orphan cleanup on readonly fs [ 133.286427][ T9631] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2043: Allocating blocks 41-42 which overlap fs metadata [ 133.306403][ T9631] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2043: Allocating blocks 41-42 which overlap fs metadata [ 133.321574][ T9631] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2043: Failed to acquire dquot type 1 [ 133.346395][ T9631] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 133.365270][ T9631] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2043: corrupted inode contents [ 133.377856][ T9631] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.2043: mark_inode_dirty error [ 133.391274][ T9631] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2043: corrupted inode contents [ 133.404264][ T9631] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2043: mark_inode_dirty error [ 133.418082][ T9631] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2043: corrupted inode contents [ 133.433219][ T9631] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 133.443929][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.454172][ T9631] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2043: corrupted inode contents [ 133.466735][ T9631] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.2043: mark_inode_dirty error [ 133.479281][ T9631] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 133.556150][ T9641] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.566677][ T9641] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.577516][ T9631] EXT4-fs (loop2): 1 truncate cleaned up [ 133.585431][ T9631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.719813][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.730176][ T9641] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.740070][ T9641] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.970464][ T9651] bridge0: port 1(dummy0) entered disabled state [ 133.988493][ T9651] bridge_slave_1: left allmulticast mode [ 133.994171][ T9651] bridge_slave_1: left promiscuous mode [ 133.999960][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.021798][ T9651] bond0: (slave bond_slave_0): Releasing backup interface [ 134.030477][ T9651] bond0: (slave bond_slave_1): Releasing backup interface [ 134.039746][ T9651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.056422][ T9651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.077324][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2053'. [ 134.090000][ T9641] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.099876][ T9641] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.166644][ T9641] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.176451][ T9641] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.246063][ T971] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.254320][ T971] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.272696][ T9673] ref_ctr increment failed for inode: 0x5ed offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88812bdce540 [ 134.299252][ T971] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.307484][ T971] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.319942][ T971] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.328818][ T971] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.338507][ T971] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.346794][ T971] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.426057][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2062'. [ 134.493042][ T9687] loop3: detected capacity change from 0 to 512 [ 134.501012][ T9687] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 134.513260][ T9687] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 134.523418][ T9687] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2064: Corrupt directory, running e2fsck is recommended [ 134.546811][ T9687] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 134.555559][ T9687] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.2064: corrupted in-inode xattr: e_name out of bounds [ 134.570057][ T9687] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2064: couldn't read orphan inode 15 (err -117) [ 134.582997][ T9687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.602880][ T9695] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2063'. [ 134.629310][ T9687] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 134.641433][ T9687] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 134.651567][ T9687] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2064: Corrupt directory, running e2fsck is recommended [ 134.683080][ T9687] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.2064: path /413/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 134.712989][ T9687] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 8: comm syz.3.2064: path /413/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 134.766076][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.869778][ T6556] IPVS: starting estimator thread 0... [ 134.902474][ T9716] netlink: 'syz.1.2073': attribute type 4 has an invalid length. [ 134.975394][ T9714] IPVS: using max 2256 ests per chain, 112800 per kthread [ 135.036885][ T362] IPVS: stop unused estimator thread 0... [ 135.067287][ T9723] bond0: (slave bond_slave_0): Releasing backup interface [ 135.099769][ T9723] bond0: (slave bond_slave_1): Releasing backup interface [ 135.114887][ T9725] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2077'. [ 135.126309][ T9723] team0: Port device team_slave_0 removed [ 135.144828][ T9723] team0: Port device team_slave_1 removed [ 135.150838][ T9723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.170999][ T9723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.226322][ T9723] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.246516][ T9726] team0: Mode changed to "loadbalance" [ 135.347456][ T9732] tipc: Failed to remove unknown binding: 66,0,0/0:902271127/902271128 [ 135.385077][ T9732] tipc: Failed to remove unknown binding: 66,0,0/0:902271127/902271128 [ 135.528242][ T9758] smc: net device bond0 applied user defined pnetid SYZ0 [ 135.543713][ T9738] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2083'. [ 135.552771][ T9738] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.588247][ T9760] bond2: (slave dummy0): Releasing active interface [ 135.604374][ T9760] bridge_slave_0: left allmulticast mode [ 135.610104][ T9760] bridge_slave_0: left promiscuous mode [ 135.616383][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.627172][ T9760] bridge_slave_1: left allmulticast mode [ 135.632836][ T9760] bridge_slave_1: left promiscuous mode [ 135.638500][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.648678][ T9760] bond0: (slave .1!€ÿ): Releasing backup interface [ 135.659277][ T9760] bond0: (slave bond_slave_1): Releasing backup interface [ 135.673178][ T9760] team0: Port device team_slave_0 removed [ 135.683734][ T9760] team0: Port device team_slave_1 removed [ 135.690975][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.698489][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.708785][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.711160][ T9768] netlink: 'syz.1.2094': attribute type 10 has an invalid length. [ 135.716198][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.734535][ T9760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.761133][ T9763] team0: Mode changed to "loadbalance" [ 135.771190][ T9768] dummy0: left allmulticast mode [ 136.157050][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2104'. [ 136.234500][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 136.744987][ T9811] bond0: (slave team0): Releasing backup interface [ 136.760761][ T9811] bond0: (slave bond_slave_0): Releasing backup interface [ 136.779525][ T9811] bond0: (slave bond_slave_1): Releasing backup interface [ 136.796544][ T9811] team0: Port device team_slave_0 removed [ 136.814731][ T9822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=9822 comm=syz.2.2111 [ 136.830149][ T9811] team0: Port device team_slave_1 removed [ 136.839043][ T9811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.847589][ T9811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.881037][ T9811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.907499][ T9823] team0: Mode changed to "loadbalance" [ 137.000459][ T9837] tipc: Failed to remove unknown binding: 66,0,0/0:1397694683/1397694684 [ 137.022676][ T9837] tipc: Failed to remove unknown binding: 66,0,0/0:1397694683/1397694684 [ 137.221737][ T9846] loop3: detected capacity change from 0 to 128 [ 137.275768][ T9846] bio_check_eod: 9785 callbacks suppressed [ 137.275811][ T9846] syz.3.2123: attempt to access beyond end of device [ 137.275811][ T9846] loop3: rw=2049, sector=153, nr_sectors = 16 limit=128 [ 137.296010][ T9846] syz.3.2123: attempt to access beyond end of device [ 137.296010][ T9846] loop3: rw=2049, sector=177, nr_sectors = 16 limit=128 [ 137.309678][ T9846] syz.3.2123: attempt to access beyond end of device [ 137.309678][ T9846] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 137.323346][ T9846] syz.3.2123: attempt to access beyond end of device [ 137.323346][ T9846] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 137.337568][ T9846] syz.3.2123: attempt to access beyond end of device [ 137.337568][ T9846] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 137.352094][ T9846] syz.3.2123: attempt to access beyond end of device [ 137.352094][ T9846] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 137.366045][ T9846] syz.3.2123: attempt to access beyond end of device [ 137.366045][ T9846] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 137.379557][ T9846] syz.3.2123: attempt to access beyond end of device [ 137.379557][ T9846] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 137.393234][ T9846] syz.3.2123: attempt to access beyond end of device [ 137.393234][ T9846] loop3: rw=2049, sector=297, nr_sectors = 16 limit=128 [ 137.407194][ T9846] syz.3.2123: attempt to access beyond end of device [ 137.407194][ T9846] loop3: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 137.703080][ T9867] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.798677][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2133'. [ 138.047042][ T9892] ref_ctr increment failed for inode: 0x63a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88812bdc9b00 [ 138.213857][ T9896] SELinux: failed to load policy [ 138.722984][ T8040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 138.751541][ T8040] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.209756][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2162'. [ 140.198436][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2181'. [ 140.548666][T10006] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2183'. [ 140.696041][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2186'. [ 140.726112][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2187'. [ 140.790497][T10022] loop0: detected capacity change from 0 to 512 [ 140.801814][T10022] EXT4-fs: inline encryption not supported [ 140.827855][T10022] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 140.858179][T10024] team0: Port device gtp0 added [ 140.867334][T10026] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2192'. [ 140.926963][T10032] loop2: detected capacity change from 0 to 512 [ 140.959362][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2197'. [ 140.989145][T10032] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2196: bg 0: block 393: padding at end of block bitmap is not set [ 141.004912][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2199'. [ 141.020281][T10032] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 141.035543][T10032] EXT4-fs (loop2): 2 truncates cleaned up [ 141.041982][T10032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.115258][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2196'. [ 141.124384][T10032] hsr_slave_0: left promiscuous mode [ 141.142503][T10032] hsr_slave_1: left promiscuous mode [ 141.152277][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 141.152287][ T29] audit: type=1326 audit(1769025845.345:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10062 comm="syz.5.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 141.183027][ T29] audit: type=1326 audit(1769025845.385:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10062 comm="syz.5.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 141.207236][ T29] audit: type=1326 audit(1769025845.385:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10062 comm="syz.5.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 141.244246][ T29] audit: type=1326 audit(1769025845.435:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10062 comm="syz.5.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 141.268450][ T29] audit: type=1326 audit(1769025845.435:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10062 comm="syz.5.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 141.291873][ T29] audit: type=1326 audit(1769025845.435:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10062 comm="syz.5.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 141.316065][ T29] audit: type=1326 audit(1769025845.435:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10062 comm="syz.5.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 141.339599][ T29] audit: type=1326 audit(1769025845.435:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10062 comm="syz.5.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 141.363069][ T29] audit: type=1326 audit(1769025845.435:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10062 comm="syz.5.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 141.387252][ T29] audit: type=1326 audit(1769025845.435:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10062 comm="syz.5.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 141.491176][T10064] team0: Port device gtp0 added [ 141.581126][T10084] netlink: 'syz.0.2217': attribute type 6 has an invalid length. [ 141.666973][T10089] tipc: Failed to remove unknown binding: 66,1,1/0:1363558452/1363558454 [ 141.676116][T10089] tipc: Failed to remove unknown binding: 66,1,1/0:1363558452/1363558454 [ 141.685284][T10089] tipc: Failed to remove unknown binding: 66,1,1/0:1363558452/1363558454 [ 141.703852][T10092] bridge0: entered allmulticast mode [ 142.020072][T10117] netlink: 'syz.3.2230': attribute type 2 has an invalid length. [ 142.025302][T10119] netlink: 'syz.0.2231': attribute type 7 has an invalid length. [ 142.129630][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.340542][T10149] IPVS: set_ctl: invalid protocol: 45813 10.1.1.2:20004 [ 142.453882][T10158] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.463421][T10158] ip6tnl0: Caught tx_queue_len zero misconfig [ 142.609720][T10149] Set syz1 is full, maxelem 65536 reached [ 142.812294][T10164] __nla_validate_parse: 2 callbacks suppressed [ 142.812308][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 142.828108][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 142.893291][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2252'. [ 143.157779][T10182] netlink: 'syz.0.2256': attribute type 1 has an invalid length. [ 143.204201][T10182] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 143.215296][T10182] bond3: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 143.226482][T10182] bond3: (slave vxcan1): making interface the new active one [ 143.234383][T10182] bond3: (slave vxcan1): Enslaving as an active interface with an up link [ 143.245852][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2256'. [ 143.267729][T10182] bond3 (unregistering): (slave vxcan1): Releasing backup interface [ 143.288529][T10182] bond3 (unregistering): Released all slaves [ 143.755806][T10209] unsupported nlmsg_type 40 [ 144.032354][T10228] netlink: 'syz.5.2274': attribute type 1 has an invalid length. [ 144.056597][T10228] 8021q: adding VLAN 0 to HW filter on device bond6 [ 144.069178][T10228] bond6: entered allmulticast mode [ 144.083780][T10228] bond6: (slave ip6gretap1): making interface the new active one [ 144.092085][T10228] ip6gretap1: entered allmulticast mode [ 144.116023][T10228] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 144.272402][T10242] syzkaller0: entered promiscuous mode [ 144.277981][T10242] syzkaller0: entered allmulticast mode [ 144.314493][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 144.471282][T10254] netlink: 'syz.0.2293': attribute type 1 has an invalid length. [ 144.495910][T10254] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.528982][T10254] veth7: entered promiscuous mode [ 144.542347][T10254] bond3: (slave veth7): Enslaving as an active interface with a down link [ 144.557489][T10254] bond3: entered allmulticast mode [ 144.560638][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2287'. [ 144.605881][T10262] netlink: 'syz.1.2287': attribute type 5 has an invalid length. [ 144.613691][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2287'. [ 144.711499][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2299'. [ 145.153598][T10302] netlink: 764 bytes leftover after parsing attributes in process `syz.2.2304'. [ 145.213792][T10305] netlink: 'syz.2.2305': attribute type 1 has an invalid length. [ 145.227703][T10305] bond4: entered promiscuous mode [ 145.233008][T10305] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.254769][T10305] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.262032][T10305] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 145.272664][T10305] bond4: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 145.284903][T10305] bond4: (slave wireguard1): making interface the new active one [ 145.292796][T10305] wireguard1: entered promiscuous mode [ 145.300932][T10305] bond4: (slave wireguard1): Enslaving as an active interface with an up link [ 145.313365][T10308] bond4: (slave wireguard2): The slave device specified does not support setting the MAC address [ 145.325556][T10308] bond4: (slave wireguard2): Enslaving as a backup interface with an up link [ 145.615931][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2314'. [ 145.649018][T10329] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10329 comm=syz.1.2314 [ 145.808203][T10343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2321'. [ 145.957362][T10355] lo speed is unknown, defaulting to 1000 [ 145.973504][T10355] lo speed is unknown, defaulting to 1000 [ 145.980201][T10355] lo speed is unknown, defaulting to 1000 [ 145.988666][T10355] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.996497][T10355] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 146.020903][T10355] lo speed is unknown, defaulting to 1000 [ 146.031104][T10355] lo speed is unknown, defaulting to 1000 [ 146.038314][T10355] lo speed is unknown, defaulting to 1000 [ 146.044654][T10355] lo speed is unknown, defaulting to 1000 [ 146.074894][T10355] lo speed is unknown, defaulting to 1000 [ 146.099645][T10359] ªªªªªª: renamed from vlan0 [ 146.222110][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 146.222128][ T29] audit: type=1400 audit(1769026106.414:2556): avc: denied { read } for pid=10362 comm="syz.2.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.261882][T10363] bridge_slave_0: left allmulticast mode [ 146.267573][T10363] bridge_slave_0: left promiscuous mode [ 146.273411][T10363] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.380479][T10371] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10371 comm=syz.5.2332 [ 146.469151][ T29] audit: type=1326 audit(1769026106.664:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.2.2335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x0 [ 146.633637][ T29] audit: type=1326 audit(1769026106.824:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 146.668519][T10380] syz_tun: entered allmulticast mode [ 146.698926][ T29] audit: type=1326 audit(1769026106.854:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 146.722475][ T29] audit: type=1326 audit(1769026106.854:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 146.746029][ T29] audit: type=1326 audit(1769026106.864:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 146.769585][ T29] audit: type=1326 audit(1769026106.864:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 146.793235][ T29] audit: type=1326 audit(1769026106.864:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 146.816811][ T29] audit: type=1326 audit(1769026106.874:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196283acb9 code=0x7ffc0000 [ 146.840373][ T29] audit: type=1326 audit(1769026106.874:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f19627fb58e code=0x7ffc0000 [ 148.794510][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.934347][T10439] lo: entered allmulticast mode [ 148.957066][T10439] lo: left allmulticast mode [ 149.045391][T10446] loop0: detected capacity change from 0 to 512 [ 149.070287][T10446] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 149.087932][T10453] __nla_validate_parse: 5 callbacks suppressed [ 149.087950][T10453] netlink: 444 bytes leftover after parsing attributes in process `syz.3.2361'. [ 149.103249][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2361'. [ 149.182914][T10446] EXT4-fs (loop0): mount failed [ 149.291613][T10455] loop2: detected capacity change from 0 to 256 [ 149.448704][T10461] netlink: 'syz.1.2368': attribute type 4 has an invalid length. [ 149.466795][T10461] netlink: 'syz.1.2368': attribute type 4 has an invalid length. [ 149.804359][T10469] netlink: 'syz.2.2370': attribute type 83 has an invalid length. [ 149.847997][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2372'. [ 149.873273][T10473] program syz.0.2371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.906920][T10472] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10472 comm=syz.2.2372 [ 150.058426][T10487] loop2: detected capacity change from 0 to 256 [ 150.088724][T10487] FAT-fs (loop2): Directory bread(block 64) failed [ 150.103185][T10487] FAT-fs (loop2): Directory bread(block 65) failed [ 150.110221][T10487] FAT-fs (loop2): Directory bread(block 66) failed [ 150.117122][T10487] FAT-fs (loop2): Directory bread(block 67) failed [ 150.123894][T10487] FAT-fs (loop2): Directory bread(block 68) failed [ 150.130971][T10487] FAT-fs (loop2): Directory bread(block 69) failed [ 150.138066][T10487] FAT-fs (loop2): Directory bread(block 70) failed [ 150.144835][T10487] FAT-fs (loop2): Directory bread(block 71) failed [ 150.151618][T10487] FAT-fs (loop2): Directory bread(block 72) failed [ 150.158560][T10487] FAT-fs (loop2): Directory bread(block 73) failed [ 150.217219][T10494] netlink: 'syz.2.2381': attribute type 12 has an invalid length. [ 150.227752][T10493] loop0: detected capacity change from 0 to 1024 [ 150.257789][T10493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.324603][ T4092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.334817][T10500] lo speed is unknown, defaulting to 1000 [ 150.358544][T10503] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2384'. [ 150.438229][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 150.454736][T10508] ip6t_rpfilter: unknown options [ 150.559189][T10517] SELinux: failed to load policy [ 150.648411][T10527] netlink: 'syz.3.2392': attribute type 4 has an invalid length. [ 150.649346][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2391'. [ 150.674124][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2391'. [ 150.856315][T10536] netlink: 'syz.3.2395': attribute type 30 has an invalid length. [ 151.607034][T10585] lo speed is unknown, defaulting to 1000 [ 151.823615][T10604] batadv_slave_0: entered promiscuous mode [ 152.480188][T10635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2426'. [ 152.499101][T10635] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10635 comm=syz.2.2426 [ 152.620356][T10643] syz_tun: entered allmulticast mode [ 152.795852][T10652] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2436'. [ 152.835243][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2430'. [ 152.897254][T10656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10656 comm=syz.5.2436 [ 152.914948][T10654] veth11: entered promiscuous mode [ 152.920129][T10654] veth11: entered allmulticast mode [ 153.054978][T10662] netlink: 'syz.0.2439': attribute type 12 has an invalid length. [ 153.055253][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 153.055287][ T29] audit: type=1326 audit(1769026113.254:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 153.103271][ T29] audit: type=1326 audit(1769026113.284:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 153.126881][ T29] audit: type=1326 audit(1769026113.284:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 153.150627][ T29] audit: type=1326 audit(1769026113.284:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 153.174181][ T29] audit: type=1326 audit(1769026113.284:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 153.197776][ T29] audit: type=1326 audit(1769026113.284:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 153.221316][ T29] audit: type=1326 audit(1769026113.284:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 153.244883][ T29] audit: type=1326 audit(1769026113.294:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 153.268501][ T29] audit: type=1326 audit(1769026113.294:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 153.292159][ T29] audit: type=1326 audit(1769026113.294:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.2.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f99649eacb9 code=0x7ffc0000 [ 153.569377][ T330] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.589977][ T330] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.609146][ T330] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.617687][ T330] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.633427][T10711] netlink: 'syz.0.2458': attribute type 13 has an invalid length. [ 154.745235][T10711] batman_adv: batadv0: Interface deactivated: gretap1 [ 154.764697][T10612] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.773144][T10612] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.782231][T10612] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.791223][T10612] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.800018][T10612] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.808448][T10612] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.832524][T10612] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.840975][T10612] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.908637][T10717] tipc: Failed to remove unknown binding: 66,0,0/0:2773816884/2773816885 [ 154.917846][T10717] tipc: Failed to remove unknown binding: 66,0,0/0:2773816884/2773816885 [ 154.995590][T10724] loop2: detected capacity change from 0 to 256 [ 155.005650][T10724] vfat: Unknown parameter 'shortna]e' [ 155.865057][T10746] __nla_validate_parse: 1 callbacks suppressed [ 155.865080][T10746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2472'. [ 155.976970][T10752] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 156.140687][T10773] netlink: 'syz.2.2483': attribute type 1 has an invalid length. [ 156.155168][T10773] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.168507][T10773] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 156.178461][T10773] bond5: entered allmulticast mode [ 156.196588][T10775] netlink: 444 bytes leftover after parsing attributes in process `syz.0.2480'. [ 156.205880][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2480'. [ 156.420084][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2487'. [ 156.521586][T10789] ip6t_rpfilter: unknown options [ 156.657854][T10791] tipc: Started in network mode [ 156.662801][T10791] tipc: Node identity ac14140f, cluster identity 4711 [ 156.690724][T10791] tipc: New replicast peer: 255.255.255.255 [ 156.697089][T10791] tipc: Enabled bearer , priority 10 [ 157.254764][T10801] delete_channel: no stack [ 157.326638][T10821] loop0: detected capacity change from 0 to 256 [ 157.975194][ T10] tipc: Node number set to 2886997007 [ 157.997238][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2510'. [ 158.228913][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2516'. [ 158.299733][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2516'. [ 158.316120][T10857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2517'. [ 158.383119][T10857] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10857 comm=syz.0.2517 [ 158.485716][T10866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2521'. [ 158.500757][T10862] lo speed is unknown, defaulting to 1000 [ 158.540796][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2521'. [ 158.562083][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 158.562097][ T29] audit: type=1326 audit(1769026118.754:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 158.592385][ T29] audit: type=1326 audit(1769026118.754:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 158.664436][ T29] audit: type=1326 audit(1769026118.754:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 158.688094][ T29] audit: type=1326 audit(1769026118.754:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 158.711601][ T29] audit: type=1326 audit(1769026118.754:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 158.735026][ T29] audit: type=1326 audit(1769026118.754:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 158.758581][ T29] audit: type=1326 audit(1769026118.794:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 158.782143][ T29] audit: type=1326 audit(1769026118.814:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 158.805746][ T29] audit: type=1326 audit(1769026118.814:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0016f5aa22 code=0x7ffc0000 [ 158.945220][ T29] audit: type=1326 audit(1769026119.134:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 159.011185][T10889] lo speed is unknown, defaulting to 1000 [ 159.113399][T10871] hsr_slave_1 (unregistering): left promiscuous mode [ 159.131002][T10889] RDS: rds_bind could not find a transport for ::ffff:172.20.20.23, load rds_tcp or rds_rdma? [ 159.702428][T10919] bond7: entered promiscuous mode [ 159.708006][T10919] 8021q: adding VLAN 0 to HW filter on device bond7 [ 159.749325][T10919] 8021q: adding VLAN 0 to HW filter on device bond7 [ 159.782431][T10919] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 159.816117][T10926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.823355][T10926] IPv6: NLM_F_CREATE should be set when creating new route [ 159.830574][T10926] IPv6: NLM_F_CREATE should be set when creating new route [ 159.886166][T10919] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 159.894222][T10926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.938876][T10926] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 159.955006][T10926] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 160.090448][ T10] kernel read not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 160.182326][T10937] IPVS: Error connecting to the multicast addr [ 160.228613][T10940] team0 (unregistering): Port device gtp0 removed [ 160.250926][T10944] loop0: detected capacity change from 0 to 1024 [ 160.314571][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 160.866034][T10944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.026147][T10957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 161.075467][T10959] pim6reg9: entered allmulticast mode [ 161.175441][T10964] __nla_validate_parse: 6 callbacks suppressed [ 161.175459][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2555'. [ 161.247218][T10964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.268855][ T4092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.377509][T10977] loop0: detected capacity change from 0 to 1024 [ 161.440824][T10977] EXT4-fs: Ignoring removed orlov option [ 161.486822][T10977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.521402][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2567'. [ 161.665167][ T4092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.753321][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2570'. [ 161.878677][T11017] syzkaller0: entered promiscuous mode [ 161.884209][T11017] syzkaller0: entered allmulticast mode [ 161.895597][T11015] netlink: 'syz.5.2575': attribute type 1 has an invalid length. [ 161.903422][T11015] netlink: 668 bytes leftover after parsing attributes in process `syz.5.2575'. [ 162.057008][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2578'. [ 162.075065][T11023] batman_adv: batadv0: Removing interface: gretap1 [ 162.093254][T11025] netlink: 'syz.5.2579': attribute type 13 has an invalid length. [ 162.427181][T11031] loop0: detected capacity change from 0 to 1024 [ 162.446459][T11031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.454255][T11031] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.777496][T11031] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 162.854617][T11031] System zones: 0-1, 3-36 [ 162.871695][T11031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.909004][ T3405] kernel read not supported for file bpf-prog (pid: 3405 comm: kworker/1:3) [ 162.931018][ T4092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.997635][T11058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.014220][T11058] vlan3: entered allmulticast mode [ 163.019474][T11058] bond2: entered allmulticast mode [ 163.192062][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2592'. [ 163.222568][T11069] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11069 comm=syz.2.2592 [ 163.343847][T11082] netlink: 'syz.5.2598': attribute type 13 has an invalid length. [ 163.378745][T11085] netlink: 1304 bytes leftover after parsing attributes in process `syz.3.2595'. [ 163.552102][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2600'. [ 163.651693][T11093] 8021q: adding VLAN 0 to HW filter on device bond8 [ 163.688147][T11093] vlan3: entered allmulticast mode [ 163.693337][T11093] bond8: entered allmulticast mode [ 163.779077][T11103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2605'. [ 163.807596][T11103] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11103 comm=syz.1.2605 [ 163.829166][T11101] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 164.017116][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 164.017146][ T29] audit: type=1326 audit(1769026124.214:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 164.047457][ T29] audit: type=1326 audit(1769026124.214:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 164.071007][ T29] audit: type=1326 audit(1769026124.244:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 164.094620][ T29] audit: type=1326 audit(1769026124.244:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 164.131534][ T29] audit: type=1326 audit(1769026124.244:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 164.154987][ T29] audit: type=1326 audit(1769026124.324:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0266adacb9 code=0x7ffc0000 [ 164.178809][ T29] audit: type=1326 audit(1769026124.324:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0266adaa22 code=0x7ffc0000 [ 164.210041][T11114] loop0: detected capacity change from 0 to 512 [ 164.216674][ T29] audit: type=1326 audit(1769026124.394:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.0.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 164.240873][ T29] audit: type=1326 audit(1769026124.404:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.0.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 164.264363][ T29] audit: type=1326 audit(1769026124.404:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.0.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0016f5acb9 code=0x7ffc0000 [ 164.300678][T11114] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.352949][T11114] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2609: Allocating blocks 41-42 which overlap fs metadata [ 164.377965][T11114] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2609: Failed to acquire dquot type 1 [ 164.395855][T11114] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 164.412836][T11114] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2609: corrupted inode contents [ 164.483188][T11114] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2609: mark_inode_dirty error [ 164.527441][T11114] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2609: corrupted inode contents [ 164.542758][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'. [ 164.555745][T11112] hsr_slave_1 (unregistering): left promiscuous mode [ 164.562941][T11114] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2609: mark_inode_dirty error [ 164.575948][T11114] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2609: corrupted inode contents [ 164.614127][T11114] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 164.627413][T11114] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2609: corrupted inode contents [ 164.642363][T11114] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2609: mark_inode_dirty error [ 164.653935][T11114] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 164.684773][T11114] EXT4-fs (loop0): 1 truncate cleaned up [ 164.690857][T11114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.735105][ T4092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.933441][T11156] loop0: detected capacity change from 0 to 736 [ 165.018312][T11159] lo speed is unknown, defaulting to 1000 [ 165.189549][T11181] netlink: 'syz.1.2630': attribute type 1 has an invalid length. [ 165.253570][T11181] 8021q: adding VLAN 0 to HW filter on device bond9 [ 165.443526][T11183] bond9: (slave geneve2): making interface the new active one [ 165.455407][T11183] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 165.464172][ T3880] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.472435][ T3880] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.482150][ T3880] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.628254][ T3880] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.646093][T11190] uprobe: syz.1.2634:11190 failed to unregister, leaking uprobe [ 166.028201][T11211] lo: Caught tx_queue_len zero misconfig [ 166.047319][T11209] loop2: detected capacity change from 0 to 8192 [ 166.224330][T11221] loop0: detected capacity change from 0 to 2048 [ 166.264283][T11221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.335701][T11230] __nla_validate_parse: 5 callbacks suppressed [ 166.335717][T11230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2657'. [ 166.377963][T11221] ================================================================== [ 166.386080][T11221] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 166.393497][T11221] [ 166.395839][T11221] read-write to 0xffff88811aedefe0 of 8 bytes by task 37 on cpu 1: [ 166.403757][T11221] __xa_clear_mark+0xf5/0x1e0 [ 166.408479][T11221] __folio_end_writeback+0xf4/0x360 [ 166.413728][T11221] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 166.420006][T11221] folio_end_writeback+0x1c/0x70 [ 166.425049][T11221] ext4_finish_bio+0x459/0x8b0 [ 166.429857][T11221] ext4_release_io_end+0x9f/0x1f0 [ 166.434916][T11221] ext4_end_io_end+0x18d/0x240 [ 166.439721][T11221] ext4_end_io_rsv_work+0x15b/0x1f0 [ 166.444963][T11221] process_scheduled_works+0x4cd/0x9d0 [ 166.450444][T11221] worker_thread+0x581/0x770 [ 166.455067][T11221] kthread+0x488/0x510 [ 166.459173][T11221] ret_from_fork+0x148/0x280 [ 166.463785][T11221] ret_from_fork_asm+0x1a/0x30 [ 166.468590][T11221] [ 166.470923][T11221] read to 0xffff88811aedefe0 of 8 bytes by task 11221 on cpu 0: [ 166.478568][T11221] xas_find_marked+0x213/0x620 [ 166.483363][T11221] find_get_entry+0x5d/0x380 [ 166.487986][T11221] filemap_get_folios_tag+0x15f/0x230 [ 166.493386][T11221] file_write_and_wait_range+0x20c/0x2f0 [ 166.499054][T11221] generic_buffers_fsync_noflush+0x45/0x130 [ 166.504980][T11221] ext4_sync_file+0x1aa/0x680 [ 166.509695][T11221] vfs_fsync_range+0x10d/0x130 [ 166.511939][T11235] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11235 comm=syz.1.2657 [ 166.514489][T11221] ext4_buffered_write_iter+0x34f/0x3c0 [ 166.514537][T11221] ext4_file_write_iter+0xe1c/0xf70 [ 166.514570][T11221] do_iter_readv_writev+0x4fd/0x5a0 [ 166.514590][T11221] vfs_writev+0x2e1/0x900 [ 166.547635][T11221] __se_sys_pwritev2+0xfc/0x1c0 [ 166.552502][T11221] __x64_sys_pwritev2+0x67/0x80 [ 166.557373][T11221] x64_sys_call+0x2c9e/0x3000 [ 166.562067][T11221] do_syscall_64+0xc0/0x2a0 [ 166.566604][T11221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.572523][T11221] [ 166.574860][T11221] value changed: 0xfffffe0000000000 -> 0xe000000000000000 [ 166.581996][T11221] [ 166.584332][T11221] Reported by Kernel Concurrency Sanitizer on: [ 166.590512][T11221] CPU: 0 UID: 0 PID: 11221 Comm: syz.0.2644 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.600332][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.610404][T11221] ================================================================== [ 167.041285][ T4092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.