last executing test programs: 3m31.988966198s ago: executing program 32 (id=530): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x400, 0x10001, 0xda, 0x9, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd97(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="7f454c464a030103ff07004e000000000200030054090220f70ca8b7e3040000003e0300006c000000d6000200b5000000fe03200001fe058c093ff44ab9252a73158893eeab328e6d4622168e286aadc0a2e88e00a733d7ec92a121ad3a4f1976e19d4a7523a23afdb208b0067ab1b7e31df36dcc000000"], 0x79) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m24.861677762s ago: executing program 5 (id=730): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) 3m24.479136142s ago: executing program 5 (id=734): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 3m24.363541348s ago: executing program 5 (id=739): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m24.31820681s ago: executing program 5 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x1) 3m24.236823915s ago: executing program 5 (id=744): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m24.072552994s ago: executing program 5 (id=747): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x10001, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) 3m24.030549806s ago: executing program 33 (id=747): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x10001, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) 3m15.443946177s ago: executing program 6 (id=981): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000535000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m15.242037568s ago: executing program 6 (id=985): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 3m15.167025401s ago: executing program 6 (id=987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) 3m15.148813022s ago: executing program 6 (id=992): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x158) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 3m15.00519484s ago: executing program 6 (id=997): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m14.800314551s ago: executing program 6 (id=1006): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x8, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m14.800030931s ago: executing program 34 (id=1006): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x8, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m1.314390858s ago: executing program 4 (id=1284): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x4, 0xa970, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1022, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x8000, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) 3m0.750316768s ago: executing program 4 (id=1289): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x18) r1 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x4f) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x4f) 3m0.649012724s ago: executing program 4 (id=1290): r0 = epoll_create1(0x80000) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x90, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) 3m0.5421627s ago: executing program 4 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000b80)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 3m0.483276832s ago: executing program 4 (id=1294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a3100000000080002400000000304000600140000001100", @ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a010100"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4c}}, 0x4) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 3m0.267551644s ago: executing program 4 (id=1299): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r1, 0xc) 3m0.240728765s ago: executing program 35 (id=1299): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r1, 0xc) 2m7.295602485s ago: executing program 7 (id=2480): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x491, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 2m6.859909058s ago: executing program 7 (id=2492): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x2, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(r0, 0x1) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 2m6.645069369s ago: executing program 7 (id=2512): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000280)={r1, 0x1, r2, 0x3, 0x80000}) 2m5.819322743s ago: executing program 7 (id=2526): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu1Mv2jnEu7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe11qknbrx/oeDn0289d03/ySj3/82kcSJeCV74fLz2C5DMVT/P0lWZw2Mb3dhBenK/k5qtVotT0u6i60TG5f//noi4skYjK548MsbjE9fLbRywI6qJY33bqCMEvEPJZX3A/Jr+5XXwZVCeiVAJ9w72RgAWB3/3Y2xweirjw3svp/E8mGdJCK2NjLXbE9E3Lk9cePs7YkbsUPjcEBri9cj4qlW8Z/U478afVGtx3+lKf7TfsHp7DlNf22L5a8cKhb/0DmN+O9bM/6jTfy/kz5fa8Twu1ssv/pg873+pvjv3+opAQAAAAAAQGndOhkRL7T6/L+yNP8nWsz/GYiIE9tQ/tCK/dWf/1fubkMxQAv3Tka83HL+byWf/VvtWraEtRo9ydnzM9NHIuJ/EXEoenal+6NrlHH4831ft8sbyub/5Y+0/DvZXMCsHne7dzUfMzU5P/kQpwxk7l2PeLrl/N9kqf1PWrT/6TvD7AbL2PfczdPt8taPf2Cn1L6NONiy/X9w14pk7ftzjNT7AyN5r2C1Zz7+4od25W81/t1iAh5e2v7vXjv+q8ny+/XMbb6MowvdtXZ5W+3/9yZv1O8q1JulfTQ5P39lNKI3OdWVpjalj22+zvA4yuMhj5c0/g89u/b4X6v+f39ELK742clfzWuKc0/8O/B7u/ro/0Nx0vif2lT7v/mNsZvVH9uVv7H2/1i9rT+UpRj/g4av8jDtbU5vEY7drbI6XV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBxUImJPJJXhpe1KZXg4YiAi/h+7KzOX5+afP3v5g0tTaV79+/8r+Tf9Djb2k/z7/6vL9sdW7B+NiL0R8WVXf31/+MzlmamiTx4AAAAAAAAAAAAAAAAAAAAeEQNt1v+n/ugqunbAjusuugJAYVrE/y9F1APoPO0/lJf4h/IS/1Be4h/KS/xDea0d/2+Pd6wiQMdp/6G8xD8AAAAAADxW9h649WsSEYsv9dcfqd4sr6fQmgE7rVJ0BYDCuMUPlJepP1BervGBZJ38vrYHrXfkWmbPPMTBAAAAAAAAAAAAAFA6B/db/w9lZf0/lJf1/1Be+fr/AwXXA+g81/hArLOSv+X6/3WPAgAAAAAAAAAAAAC209zC1QuTMzPTV2y8+WhUo5MbtVrtWvpX8KjUZ/s3kmyGekcKzafCd/5Mezdygvlav4395OLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BQAA//8wviV5") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 2m5.707839059s ago: executing program 7 (id=2527): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="0000000000000000610000ed000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 2m5.363655047s ago: executing program 7 (id=2536): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x4f}, 0x28) 2m5.363411497s ago: executing program 36 (id=2536): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x4f}, 0x28) 10.86074156s ago: executing program 3 (id=4719): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='9', 0x1}], 0x1) 10.812519862s ago: executing program 3 (id=4720): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000011"], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000580)=[{0x0, 0x0, 0x6, 0x6fc}], 0x0) 10.722820087s ago: executing program 3 (id=4723): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 9.804058435s ago: executing program 3 (id=4738): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) 9.788250706s ago: executing program 3 (id=4740): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x128c0, 0x0, 0x6, 0x0, 0x0}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000038000900000000000021000004000000040000800c0003"], 0x24}}, 0x0) 8.727603682s ago: executing program 3 (id=4744): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.715927143s ago: executing program 37 (id=4744): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.787664756s ago: executing program 0 (id=4883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 1.679224622s ago: executing program 0 (id=4886): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x53f, &(0x7f00000005c0)="$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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) 1.650211923s ago: executing program 2 (id=4887): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x451, &(0x7f0000000340)="$eJzs3MtvG8UfAPDvrp3219cvoSqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrClqEyhFVQuKIOCLxF3CCCwJOSFzhjipVqJcWTkZr7zaOayex48QN/nykdWd2x5r5dnecmR2vAxhYo9lLErEzIn6PiOF6dmmB0fo/t29emv775qXpJKrVt/5KauVu3bw0XRQt3rejyJQj0k+T2N+i3vkLF89MVSqz5/P8+MLZ98fnL1x87vTZqVOzp2bPTR4/fvTIxAvHJp/vSZxZXLf2fTR3YO9r71x7Y/rEtXd//jYp4m+KY2Vf7l5FodHlDj5Zra6+uk1gV0M6KfexIXSkVO+mMVTr/8NRisWTNxyvftLXxgHrqlqtVh9of/hyFfgPS6LfLQD6o/hDn81/61tpg0Ye94YbL9UnQFnst/OtfqQcaV5mqGl+20ujEXHi8j9fZVt0fB8CAKBz32fjn2cbx3/F+CONxvtC/8/XUEYi4r6I2B0RxyJiT0TcH1Er+2BEPNRh/c2LJHePf9LrXQW2Stn478V8bWvp+K8Y/cVIKc/tqsU/lJw8XZk9nP+fHIqhrVl+Ypk6fnjlt8/bHWsc/2VbVn8xFszbcb28del7ZqYWptYSc6MbVyL2lVvFn9xZCUgiYm9E7OuyjtNPf3Og3bGV419GD9aZql9HPFU//5ejKf5Csvz65Pj/ojJ7eLy4Ku72y69X32xX/5ri74EbVyLdXlz/Ea3iH0ka12vnO6/j6h+ftZ3TdHv9b0neXrLvw6mFhfMTEVuS1+uNXtxfOj/ZVG5ysXx2/R862Lr/F4u8Wfz7IyK7iB+OiEci4tG87Y9FGo9HxMFl4v/p5Sfe6z7+9ZXFP9Py86/d+V9MbInmPa0TpTM/frek0pFO4s/O/9Fa6lC+ZzWff6tpV3dXMwAAAGw+aUTsjCQdu5NO07Gx+nf498T2tDI3v/DMybkPzs3UnxEYiaG0uNM13HA/dCKf1hf5yab8kfy+8RelbbX82PRcZabfwcOA29Gm/2f+HKyvAsFg6m4dLe15O4CN53lNGFz6Pwwu/R8GV4v+v60f7QA2WNJ698cb3Q6gL8oNr/lvggEDwvwfBpf+D4NL/4eBNL8tVn5IXmJNiYttfj9hcycivSeaIbFOiX5/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTGvwEAAP//XI/jlg==") syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0xfffffffffffffffe, 0x3, 0x1, 0x0, 0x0, 0x2) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 1.511402041s ago: executing program 1 (id=4889): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') 1.423637905s ago: executing program 0 (id=4890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.423376005s ago: executing program 1 (id=4891): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x10000a0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYRES8, @ANYRES32, @ANYRESDEC=0x0, @ANYRES8], 0xdf, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40880, 0x20) getdents(r1, &(0x7f0000000000)=""/45, 0x2d) 1.248460314s ago: executing program 0 (id=4893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc080) r1 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r1, 0x1d, &(0x7f0000000000)={0x1e, 0x0, 0x160eaeaa}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x1a0, 0x1a0, 0x0, 0xd0, 0x340, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x4e}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [0x0, 0x0, 0xffffff00], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x5e, 0x3, 0x2, 0xff, 0x9, 0x2050, 0x404}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) ioctl$FS_IOC_GETVERSION(r1, 0xff04, 0x0) 1.137610051s ago: executing program 1 (id=4896): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x20041, 0x0, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18, 0x4, 0x106}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) 1.129109011s ago: executing program 0 (id=4897): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendmmsg$sock(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b82cadc11f65", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="0256", 0x2}], 0x1}}], 0x2, 0x4000080) 1.070880884s ago: executing program 1 (id=4898): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x62020600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000002000010026bd7000fbdbdf2502101000090000060600010008000200ac14142a05001500040008000500160089000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) 1.070657674s ago: executing program 9 (id=4899): unshare(0x2040400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000ec000000000a0000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) 975.666108ms ago: executing program 9 (id=4900): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6, 0x7}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0xffff}}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 958.73596ms ago: executing program 9 (id=4901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "8aee8aad3300", "000000dfffffff00", '\x00\t\x00', "2300ff0400"}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) 771.975499ms ago: executing program 2 (id=4903): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = gettid() tkill(r1, 0x7) 771.41348ms ago: executing program 9 (id=4904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 682.873934ms ago: executing program 9 (id=4905): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000000000), 0x1, 0x53b, &(0x7f0000000780)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 607.680118ms ago: executing program 2 (id=4906): unshare(0x2040400) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001140)={r2, 0xfffffffffffffdbe, &(0x7f0000001180)}, 0x10) 557.315741ms ago: executing program 2 (id=4907): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 433.221217ms ago: executing program 8 (id=4908): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x92) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 417.215208ms ago: executing program 8 (id=4909): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f00000000c0)}, 0x20008024) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x20, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x2, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x2c, 0x0, 0x1, 0x4}]}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x1, 0x2, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}]}}}}}, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) socket$nl_route(0x10, 0x3, 0x0) 343.661542ms ago: executing program 8 (id=4910): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x840, 0x0, 0x1, 0x1}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x4, 0x2b46, 0x53, 0x1, 0x2, 0x9, 0x9}, &(0x7f0000000280)=0x9c) 340.409022ms ago: executing program 8 (id=4911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101881, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56549, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR=';']}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0x40, 0x2}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 314.029813ms ago: executing program 1 (id=4912): r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x10001, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x2, 0x3, 0x6, 0xf7, 0x0, 0x377, 0x138, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3, 0xe1d}, 0x0, 0x8001, 0x800, 0x7, 0x1, 0x0, 0x6, 0x0, 0x7ff, 0x0, 0x8}) r1 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x83, &(0x7f0000000000)=r2, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 275.995765ms ago: executing program 2 (id=4913): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 263.466956ms ago: executing program 8 (id=4914): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000200), 0x34}}], 0x1, 0x24008054) 258.594006ms ago: executing program 9 (id=4915): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x804) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) 231.834338ms ago: executing program 0 (id=4916): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r2, &(0x7f00000001c0)=""/178, 0xb2) 208.420139ms ago: executing program 2 (id=4917): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/5, 0x5}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f00000006c0)=""/246, 0x2f}], 0x3}, 0x9}, {{&(0x7f0000000840)=@generic, 0x80, &(0x7f0000000b80)=[{&(0x7f00000008c0)=""/166, 0xa6}, {&(0x7f0000000980)=""/16, 0x10}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000ac0)=""/165, 0xa5}], 0x4, &(0x7f0000000bc0)=""/35, 0x23}, 0x5}, {{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/98, 0x62}], 0x1, &(0x7f0000000d40)=""/5, 0x5}, 0x2e90}, {{&(0x7f0000000d80)=@hci, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e00)=""/45, 0x2d}, {&(0x7f0000000e40)=""/52, 0x34}], 0x2, &(0x7f0000000ec0)=""/55, 0x37}, 0xfffffffe}, {{&(0x7f0000000f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f80)=""/144, 0x90}, {0x0}, {&(0x7f00000010c0)=""/217, 0xd9}], 0x3, &(0x7f0000001200)=""/230, 0xe6}}], 0x5, 0x40000021, 0x0) 135.031673ms ago: executing program 8 (id=4918): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000880)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x200400d1) 0s ago: executing program 1 (id=4919): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): olated_file:0 [ 139.664599][T10790] unevictable:0 dirty:308 writeback:0 [ 139.664599][T10790] slab_reclaimable:3751 slab_unreclaimable:23840 [ 139.664599][T10790] mapped:29342 shmem:70137 pagetables:4036 [ 139.664599][T10790] sec_pagetables:0 bounce:0 [ 139.664599][T10790] kernel_misc_reclaimable:0 [ 139.664599][T10790] free:1732708 free_pcp:10908 free_cma:0 [ 139.710293][T10791] batadv_slave_1: left promiscuous mode [ 139.712512][T10790] Node 0 active_anon:324844kB inactive_anon:360kB active_file:106788kB inactive_file:10256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117368kB dirty:1232kB writeback:0kB shmem:280548kB kernel_stack:5568kB pagetables:16144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 139.846802][T10790] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 139.877686][T10790] lowmem_reserve[]: 0 2878 7856 7856 [ 139.883039][T10790] Node 0 DMA32 free:2946976kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947328kB mlocked:0kB bounce:0kB free_pcp:352kB local_pcp:0kB free_cma:0kB [ 139.919999][T10790] lowmem_reserve[]: 0 0 4978 4978 [ 139.925235][T10790] Node 0 Normal free:3966756kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:326236kB inactive_anon:360kB active_file:106788kB inactive_file:10256kB unevictable:0kB writepending:1232kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:43220kB local_pcp:21544kB free_cma:0kB [ 139.973650][ T7672] Process accounting resumed [ 139.989809][T10790] lowmem_reserve[]: 0 0 0 0 [ 139.998929][T10790] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.033077][T10790] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 5*16kB (M) 3*32kB (M) 5*64kB (M) 5*128kB (M) 3*256kB (M) 4*512kB (M) 4*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2946976kB [ 140.071820][T10790] Node 0 Normal: 1773*4kB (UM) 527*8kB (UM) 399*16kB (U) 205*32kB (U) 153*64kB (U) 126*128kB (UE) 132*256kB (U) 107*512kB (UME) 79*1024kB (U) 47*2048kB (UM) 890*4096kB (UM) = 3961340kB [ 140.107715][T10790] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 140.128348][T10790] 101323 total pagecache pages [ 140.136102][T10790] 104 pages in swap cache [ 140.140797][T10790] Free swap = 123812kB [ 140.149147][T10790] Total swap = 124996kB [ 140.159617][T10790] 2097051 pages RAM [ 140.176314][T10790] 0 pages HighMem/MovableOnly [ 140.194838][T10790] 81820 pages reserved [ 140.242709][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'. [ 140.401988][ T28] audit: type=1400 audit(1777037547.657:1779): avc: denied { setattr } for pid=10809 comm="syz.8.2622" name="/" dev="configfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.770519][ T28] audit: type=1400 audit(1777037548.037:1780): avc: denied { getopt } for pid=10835 comm="syz.3.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.819807][T10840] loop3: detected capacity change from 0 to 256 [ 140.900375][ T3641] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 140.913353][ T3641] FAT-fs (loop3): Filesystem has been set read-only [ 140.921072][ T3641] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 140.935413][ T3641] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 140.944157][ T3641] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 141.812557][T10905] loop3: detected capacity change from 0 to 128 [ 141.833075][T10905] syz.3.2664: attempt to access beyond end of device [ 141.833075][T10905] loop3: rw=0, sector=121, nr_sectors = 9 limit=128 [ 141.925794][ T3641] kworker/u8:20: attempt to access beyond end of device [ 141.925794][ T3641] loop3: rw=1, sector=137, nr_sectors = 904 limit=128 [ 142.453014][T10938] netlink: 'syz.9.2679': attribute type 4 has an invalid length. [ 142.489804][T10938] netlink: 'syz.9.2679': attribute type 4 has an invalid length. [ 142.502160][T10944] Invalid argument reading file caps for ./file0 [ 142.590241][T10954] netlink: 'syz.3.2687': attribute type 8 has an invalid length. [ 142.591872][ T28] audit: type=1400 audit(1777037549.857:1781): avc: denied { write } for pid=10951 comm="syz.0.2686" path="socket:[31866]" dev="sockfs" ino=31866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.604530][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2687'. [ 142.654816][T10954] erspan0: entered promiscuous mode [ 142.661049][T10954] gretap0: entered promiscuous mode [ 142.760037][T10954] erspan0: left promiscuous mode [ 142.771242][T10954] gretap0: left promiscuous mode [ 142.813382][T10959] netlink: 'syz.0.2689': attribute type 4 has an invalid length. [ 143.219344][T10950] Set syz1 is full, maxelem 65536 reached [ 143.482362][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2712'. [ 143.506036][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2712'. [ 144.271346][ T28] audit: type=1400 audit(1777037551.537:1782): avc: denied { bind } for pid=11067 comm="syz.3.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.611243][T11081] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2742'. [ 144.657447][ T28] audit: type=1400 audit(1777037551.917:1783): avc: denied { read } for pid=11087 comm="syz.9.2745" path="socket:[31549]" dev="sockfs" ino=31549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.877874][T11109] loop8: detected capacity change from 0 to 512 [ 144.914604][T11109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.938877][T11109] ext4 filesystem being mounted at /307/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.982248][T11109] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 3: comm syz.8.2755: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 145.002988][T11109] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 12: comm syz.8.2755: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 145.024043][T11109] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 13: comm syz.8.2755: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 145.045206][T11109] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 16: comm syz.8.2755: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 145.067203][T11109] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #2: block 18: comm syz.8.2755: lblock 23 mapped to illegal pblock 18 (length 1) [ 145.084342][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2758'. [ 145.762620][ T7160] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.923406][T11150] Set syz1 is full, maxelem 65536 reached [ 147.349829][T11202] loop0: detected capacity change from 0 to 2048 [ 147.392954][T11202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.447906][ T7535] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.582352][ T3641] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.607503][ T3641] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.756676][ T3641] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.773275][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.785327][ T3641] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.803902][ T3641] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.814667][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.831079][ T3641] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.852597][ T40] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.868834][ T40] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.060495][T11242] loop9: detected capacity change from 0 to 512 [ 148.090377][T11242] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.126819][T11242] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 148.145652][T11242] Quota error (device loop9): write_blk: dquota write failed [ 148.153432][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 148.153662][ C1] EXT4-fs (loop9): initial error at time 1777037555: ext4_mb_generate_buddy:1317 [ 148.153878][ C1] EXT4-fs (loop9): last error at time 1777037555: ext4_mb_generate_buddy:1317 [ 148.184207][T11242] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 148.195042][T11242] Quota error (device loop9): write_blk: dquota write failed [ 148.203313][T11242] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 148.249829][T11242] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.2806: Failed to acquire dquot type 1 [ 148.283688][T11242] loop9: lost filesystem error report for type 5 error -28 [ 148.285744][T11242] EXT4-fs (loop9): 1 truncate cleaned up [ 148.319123][T11242] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.441188][T11242] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 148.473261][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.591317][T11260] loop8: detected capacity change from 0 to 512 [ 148.629127][T11260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.740961][T11260] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.773280][T11260] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.922075][ T7160] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.994525][ T28] audit: type=1326 audit(1777037556.257:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.8.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2924b4cdd9 code=0x7ffc0000 [ 149.039837][T11275] loop9: detected capacity change from 0 to 128 [ 149.041138][ T28] audit: type=1326 audit(1777037556.257:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.8.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2924b4cdd9 code=0x7ffc0000 [ 149.070802][T11275] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.090900][ T28] audit: type=1326 audit(1777037556.257:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.8.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2924b4cdd9 code=0x7ffc0000 [ 149.116837][T11275] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.158272][ T28] audit: type=1326 audit(1777037556.257:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.8.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2924b4cdd9 code=0x7ffc0000 [ 149.184570][ T6735] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.244507][ T28] audit: type=1326 audit(1777037556.287:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.8.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f2924b4cdd9 code=0x7ffc0000 [ 149.319578][ T28] audit: type=1326 audit(1777037556.287:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.8.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2924b4cdd9 code=0x7ffc0000 [ 149.854485][T11325] netlink: 'syz.8.2839': attribute type 3 has an invalid length. [ 149.981659][T11337] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2842'. [ 150.071843][T11342] tls_set_device_offload: netdev not found [ 150.960709][T11362] loop8: detected capacity change from 0 to 128 [ 150.969091][T11362] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.988351][T11362] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.034558][ T6752] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.450229][T11416] sit1: entered allmulticast mode [ 152.480492][T11306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.613163][T11441] batadv_slave_0: entered promiscuous mode [ 152.620363][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2889'. [ 152.643087][T11441] batadv_slave_0 (unregistering): left promiscuous mode [ 152.911002][T11454] loop9: detected capacity change from 0 to 512 [ 152.954745][T11454] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.976987][T11454] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.076690][T11454] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #18: comm syz.9.2894: corrupted inode contents [ 153.096246][T11454] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 153.096642][T11454] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #18: comm syz.9.2894: mark_inode_dirty error [ 153.121004][T11454] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 153.122475][T11454] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #18: comm syz.9.2894: corrupted inode contents [ 153.148559][T11454] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 153.149065][T11454] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3001: inode #18: comm syz.9.2894: mark_inode_dirty error [ 153.172689][T11454] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 153.172882][T11454] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3004: inode #18: comm syz.9.2894: mark inode dirty (error -117) [ 153.195414][T11454] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 153.195651][T11454] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -117) [ 153.469937][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.588625][T11471] loop8: detected capacity change from 0 to 512 [ 153.620811][T11471] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.640017][T11471] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.660114][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 153.660126][ T28] audit: type=1400 audit(1777037560.927:1801): avc: denied { rename } for pid=11470 comm="syz.8.2900" name="bus" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 153.728297][ T28] audit: type=1400 audit(1777037560.927:1802): avc: denied { unlink } for pid=11470 comm="syz.8.2900" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.792054][ T7160] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.917439][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2911'. [ 153.984106][T11508] loop8: detected capacity change from 0 to 512 [ 154.002749][T11508] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.028636][T11508] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.088051][T11508] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #18: comm syz.8.2916: corrupted inode contents [ 154.101019][T11508] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 154.101181][T11508] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #18: comm syz.8.2916: mark_inode_dirty error [ 154.127879][T11508] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 154.128132][T11508] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #18: comm syz.8.2916: corrupted inode contents [ 154.160502][T11508] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 154.160822][T11508] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #18: comm syz.8.2916: mark_inode_dirty error [ 154.170323][T11514] loop9: detected capacity change from 0 to 4096 [ 154.182272][T11508] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 154.191441][T11508] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #18: comm syz.8.2916: mark inode dirty (error -117) [ 154.200844][T11514] EXT4-fs: Ignoring removed bh option [ 154.221866][T11514] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.240963][T11508] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 154.241134][T11508] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 154.262256][ T28] audit: type=1400 audit(1777037561.527:1803): avc: denied { rename } for pid=11513 comm="syz.9.2917" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 154.296909][T11514] EXT4-fs error (device loop9): ext4_empty_dir:3101: inode #12: block 80: comm syz.9.2917: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 154.317317][ T28] audit: type=1400 audit(1777037561.527:1804): avc: denied { rmdir } for pid=11513 comm="syz.9.2917" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.317365][T11514] EXT4-fs (loop9): Remounting filesystem read-only [ 154.339794][T11514] EXT4-fs warning (device loop9): ext4_empty_dir:3104: inode #12: comm syz.9.2917: directory missing '..' [ 154.363536][ T7160] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.378991][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.416215][T11519] loop8: detected capacity change from 0 to 512 [ 154.418787][T11520] netlink: 'syz.9.2919': attribute type 4 has an invalid length. [ 154.426377][T11519] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 154.442361][T11520] netlink: 'syz.9.2919': attribute type 4 has an invalid length. [ 154.455782][T11519] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.2918: corrupted in-inode xattr: e_value out of bounds [ 154.471880][T11519] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2918: couldn't read orphan inode 15 (err -117) [ 154.483743][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 154.483761][ C0] EXT4-fs (loop8): initial error at time 1777037561: ext4_iget_extra_inode:5128: inode 15 [ 154.483778][ C0] EXT4-fs (loop8): last error at time 1777037561: ext4_iget_extra_inode:5128: inode 15 [ 154.513969][T11519] loop8: lost filesystem error report for type 5 error -117 [ 154.521380][T11519] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.554304][T11519] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 154.586715][ T7160] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.803208][ T28] audit: type=1400 audit(1777037562.067:1805): avc: denied { read } for pid=11539 comm="syz.8.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 155.571968][T11430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.725078][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2941'. [ 155.738406][T11567] netlink: 'syz.3.2941': attribute type 22 has an invalid length. [ 155.757917][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2941'. [ 155.761263][T11569] xt_hashlimit: size too large, truncated to 1048576 [ 155.780491][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2941'. [ 155.780479][ T3641] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.780531][T11567] netlink: 'syz.3.2941': attribute type 22 has an invalid length. [ 155.797688][ T3641] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.806437][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2941'. [ 155.835799][ T3641] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.854146][ T3641] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.391787][T11624] xt_hashlimit: size too large, truncated to 1048576 [ 156.443451][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2965'. [ 156.514603][T11630] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 156.547465][T11629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2966'. [ 156.691842][ T28] audit: type=1400 audit(1777037563.957:1806): avc: denied { setattr } for pid=11642 comm="syz.9.2972" name="SCTPv6" dev="sockfs" ino=33467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.026600][T11660] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 157.104391][T11669] sit0: entered promiscuous mode [ 157.116890][T11673] loop0: detected capacity change from 0 to 512 [ 157.142054][T11669] netlink: 'syz.9.2983': attribute type 1 has an invalid length. [ 157.155921][T11673] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.171660][T11669] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2983'. [ 157.230831][T11673] EXT4-fs (loop0): 1 truncate cleaned up [ 157.283500][T11673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.403270][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2995'. [ 157.525367][ T7535] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.598795][T11705] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 157.863696][T11720] loop8: detected capacity change from 0 to 512 [ 157.883090][ T28] audit: type=1400 audit(1777037565.147:1807): avc: denied { listen } for pid=11725 comm="syz.9.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 157.913732][T11720] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.950159][T11720] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 157.968439][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 157.974879][ C0] EXT4-fs (loop8): initial error at time 1777037565: ext4_mb_generate_buddy:1317 [ 157.984023][ C0] EXT4-fs (loop8): last error at time 1777037565: ext4_mb_generate_buddy:1317 [ 158.018013][T11720] Quota error (device loop8): write_blk: dquota write failed [ 158.058742][T11720] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 158.073197][T11720] Quota error (device loop8): write_blk: dquota write failed [ 158.082219][T11720] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.3006: Failed to acquire dquot type 1 [ 158.094661][T11720] loop8: lost filesystem error report for type 5 error -28 [ 158.095949][T11720] EXT4-fs (loop8): 1 truncate cleaned up [ 158.112320][T11720] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.125551][T11735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11735 comm=syz.9.3012 [ 158.138479][T11735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11735 comm=syz.9.3012 [ 158.152332][T11735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=11735 comm=syz.9.3012 [ 158.165369][T11720] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 158.211992][ T7160] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.348484][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.432441][T11767] netlink: 35 bytes leftover after parsing attributes in process `syz.8.3027'. [ 158.441846][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3027'. [ 158.727518][T11798] netlink: 'syz.8.3042': attribute type 21 has an invalid length. [ 158.735602][T11798] netlink: 'syz.8.3042': attribute type 5 has an invalid length. [ 158.743607][T11798] netlink: 'syz.8.3042': attribute type 6 has an invalid length. [ 159.547753][T11826] pim6reg1: entered promiscuous mode [ 159.562614][T11826] pim6reg1: entered allmulticast mode [ 159.589301][T11831] loop9: detected capacity change from 0 to 512 [ 159.602032][T11831] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #17: comm syz.9.3056: iget: bogus i_mode (0) [ 159.613828][T11831] fserror_report: 1 callbacks suppressed [ 159.613912][T11831] loop9: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 159.620055][T11831] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3056: couldn't read orphan inode 17 (err -117) [ 159.629224][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 159.629239][ C1] EXT4-fs (loop9): initial error at time 1777037566: ext4_orphan_get:1397: inode 17 [ 159.629264][ C1] EXT4-fs (loop9): last error at time 1777037566: ext4_orphan_get:1397: inode 17 [ 159.666739][T11831] loop9: lost filesystem error report for type 5 error -117 [ 159.677585][T11831] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.720183][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 159.720199][ T28] audit: type=1326 audit(1777037566.987:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 159.750379][ T28] audit: type=1326 audit(1777037566.987:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 159.797790][ T28] audit: type=1326 audit(1777037566.987:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 159.848061][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.863350][ T28] audit: type=1326 audit(1777037566.997:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 159.913632][ T28] audit: type=1326 audit(1777037566.997:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 159.982681][ T28] audit: type=1326 audit(1777037567.057:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 159.983056][T11850] loop0: detected capacity change from 0 to 1024 [ 160.044226][T11850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.076348][ T28] audit: type=1326 audit(1777037567.057:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3965fccb42 code=0x7ffc0000 [ 160.170004][ T7535] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.201506][ T28] audit: type=1326 audit(1777037567.287:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 160.248624][ T28] audit: type=1326 audit(1777037567.287:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 160.275180][ T28] audit: type=1326 audit(1777037567.287:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.3.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3965fccbd7 code=0x7ffc0000 [ 160.407894][T11880] loop9: detected capacity change from 0 to 512 [ 160.457422][T11880] EXT4-fs: Ignoring removed i_version option [ 160.489739][T11880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.500785][T11880] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.521295][T11880] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.3076: bad orphan inode 1 [ 160.548521][T11880] loop9: lost filesystem error report for type 5 error -117 [ 160.550306][T11880] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.868560][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.892797][T11917] loop9: detected capacity change from 0 to 512 [ 160.903360][T11917] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.919465][T11917] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.940842][T11917] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.954119][T11917] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.029334][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.050001][T11924] loop9: detected capacity change from 0 to 164 [ 162.140643][T12078] netlink: 'syz.1.3112': attribute type 29 has an invalid length. [ 162.169344][T12078] netlink: 'syz.1.3112': attribute type 29 has an invalid length. [ 162.178053][T12078] netlink: 'syz.1.3112': attribute type 32 has an invalid length. [ 162.186580][T12078] __nla_validate_parse: 4 callbacks suppressed [ 162.186595][T12078] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3112'. [ 163.259359][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 163.507696][T12130] loop0: detected capacity change from 0 to 512 [ 163.546463][T12130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.601493][T12130] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.743157][T12143] loop9: detected capacity change from 0 to 512 [ 163.760420][T12143] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 163.785137][T12143] EXT4-fs (loop9): 1 truncate cleaned up [ 163.791594][T12143] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.950238][ T7535] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.951105][T12157] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3144'. [ 163.993873][T12157] hsr_slave_0: left promiscuous mode [ 164.006922][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.031808][T12157] hsr_slave_1: left promiscuous mode [ 164.107344][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3147'. [ 164.205569][ T6752] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.232128][T12176] loop0: detected capacity change from 0 to 128 [ 164.268893][T12176] syz.0.3161: attempt to access beyond end of device [ 164.268893][T12176] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 164.491253][T12186] netlink: 'syz.8.3155': attribute type 1 has an invalid length. [ 164.515179][T12186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.541813][T12186] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 164.551889][T12186] bond3: (slave batadv1): making interface the new active one [ 164.564037][T12186] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 164.732267][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 164.732354][ T28] audit: type=1326 audit(1777037571.997:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 164.764462][ T28] audit: type=1326 audit(1777037572.027:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb8e50d60e code=0x7ffc0000 [ 164.810332][ T28] audit: type=1326 audit(1777037572.037:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12194 comm="syz.0.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 164.834261][ T28] audit: type=1326 audit(1777037572.057:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb8e50d60e code=0x7ffc0000 [ 164.886514][ T28] audit: type=1326 audit(1777037572.057:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb8e50d60e code=0x7ffc0000 [ 164.911770][ T28] audit: type=1326 audit(1777037572.057:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb8e50d60e code=0x7ffc0000 [ 164.937676][ T28] audit: type=1326 audit(1777037572.057:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb8e50d60e code=0x7ffc0000 [ 164.967929][ T28] audit: type=1326 audit(1777037572.057:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb8e50d60e code=0x7ffc0000 [ 164.986324][T12207] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3162'. [ 164.992871][ T28] audit: type=1326 audit(1777037572.057:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb8e50d60e code=0x7ffc0000 [ 165.026679][ T28] audit: type=1326 audit(1777037572.067:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.0.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb8e50d60e code=0x7ffc0000 [ 165.062299][T12207] hsr_slave_0: left promiscuous mode [ 165.100685][T12207] hsr_slave_1: left promiscuous mode [ 165.847099][T12258] 9p: Bad value for 'trans' [ 166.271595][ T3922] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 166.515858][T12323] netlink: 'syz.8.3213': attribute type 18 has an invalid length. [ 166.527191][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3213'. [ 166.573535][T12323] netlink: 'syz.8.3213': attribute type 18 has an invalid length. [ 166.587527][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3213'. [ 167.546640][T12353] loop3: detected capacity change from 0 to 512 [ 167.595163][T12353] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 167.631674][T12353] EXT4-fs (loop3): 1 truncate cleaned up [ 167.642046][T12353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.659615][T12355] syzkaller0: entered promiscuous mode [ 167.670694][T12355] syzkaller0: entered allmulticast mode [ 167.695311][T12364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.735241][T12364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.791130][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.826052][ T40] Bluetooth: hci0: Frame reassembly failed (-84) [ 168.408066][T12405] netlink: 'syz.1.3247': attribute type 1 has an invalid length. [ 168.431664][T12405] netlink: 'syz.1.3247': attribute type 22 has an invalid length. [ 168.557758][T12415] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3251'. [ 168.700567][T12424] netlink: 'syz.3.3255': attribute type 12 has an invalid length. [ 168.709069][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'. [ 168.719171][T12424] netlink: 'syz.3.3255': attribute type 12 has an invalid length. [ 168.727107][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'. [ 168.844697][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3260'. [ 168.855446][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3260'. [ 168.867627][T12435] netlink: 'syz.1.3260': attribute type 7 has an invalid length. [ 168.876067][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3260'. [ 168.885166][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3260'. [ 168.894292][T12435] netlink: 'syz.1.3260': attribute type 7 has an invalid length. [ 169.026127][T12445] loop9: detected capacity change from 0 to 128 [ 169.066386][T12445] syz.9.3263: attempt to access beyond end of device [ 169.066386][T12445] loop9: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 169.170743][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3268'. [ 169.390625][T12474] loop9: detected capacity change from 0 to 512 [ 169.423571][T12474] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.464779][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.550563][T12485] loop9: detected capacity change from 0 to 512 [ 169.574225][T12485] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.587018][T12485] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.611503][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.868783][ T6267] Bluetooth: hci0: command 0x1003 tx timeout [ 169.875209][ T3922] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.969839][T12497] loop9: detected capacity change from 0 to 32768 [ 170.016088][ T28] kauditd_printk_skb: 392 callbacks suppressed [ 170.016102][ T28] audit: type=1400 audit(1777037577.277:2352): avc: denied { create } for pid=12512 comm="syz.0.3291" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 170.517906][T12536] loop0: detected capacity change from 0 to 512 [ 170.589703][T12536] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.3299: inode has both inline data and extents flags [ 170.645240][T12548] netlink: 'syz.9.3304': attribute type 1 has an invalid length. [ 170.668521][T12536] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 170.670062][T12536] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3299: couldn't read orphan inode 15 (err -117) [ 170.679248][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 170.679269][ C1] EXT4-fs (loop0): initial error at time 1777037577: ext4_orphan_get:1397: inode 15 [ 170.679302][ C1] EXT4-fs (loop0): last error at time 1777037577: ext4_orphan_get:1397: inode 15 [ 170.722448][T12536] loop0: lost filesystem error report for type 5 error -117 [ 170.722971][T12536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.747488][ T28] audit: type=1400 audit(1777037578.007:2353): avc: denied { write } for pid=12533 comm="syz.0.3299" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 170.762522][T12548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.810282][T12554] bond1: (slave geneve2): making interface the new active one [ 170.898293][T12554] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 171.058189][T12565] loop3: detected capacity change from 0 to 512 [ 171.104706][T12565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.136814][T12565] ext4 filesystem being mounted at /618/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.628059][ T7535] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.819023][T12591] loop0: detected capacity change from 0 to 512 [ 171.839804][T12591] EXT4-fs: inline encryption not supported [ 171.871498][T12591] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.896372][T12591] EXT4-fs (loop0): 1 truncate cleaned up [ 171.909904][T12591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.242452][T12594] tipc: Started in network mode [ 172.247533][T12594] tipc: Node identity ac14140f, cluster identity 4711 [ 172.254641][T12594] tipc: Enabled bearer , priority 10 [ 172.272525][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.282841][ T7535] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.321968][T12596] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3321'. [ 172.375042][T12596] hsr_slave_0: left promiscuous mode [ 172.395544][T12596] hsr_slave_1: left promiscuous mode [ 172.452405][T12608] loop0: detected capacity change from 0 to 128 [ 172.618947][ T6735] kworker/u8:36: attempt to access beyond end of device [ 172.618947][ T6735] loop0: rw=1, sector=129, nr_sectors = 912 limit=128 [ 172.854407][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3336'. [ 172.929796][ T28] audit: type=1400 audit(1777037580.187:2354): avc: denied { bind } for pid=12641 comm="syz.8.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 173.235041][T12672] loop9: detected capacity change from 0 to 128 [ 173.248453][ T35] tipc: Node number set to 2886997007 [ 173.286064][T12672] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.344138][T12672] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.375161][T10469] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.619953][T12692] __nla_validate_parse: 1 callbacks suppressed [ 173.620066][T12692] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3360'. [ 173.673887][T12692] hsr_slave_0: left promiscuous mode [ 173.680332][T12692] hsr_slave_1: left promiscuous mode [ 173.753521][T12702] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12702 comm=syz.9.3366 [ 173.766643][ T28] audit: type=1400 audit(1777037581.027:2355): avc: denied { audit_write } for pid=12701 comm="syz.9.3366" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 173.790354][ T28] audit: type=1107 audit(1777037581.027:2356): pid=12701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 173.798623][T12702] sctp: [Deprecated]: syz.9.3366 (pid 12702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.798623][T12702] Use struct sctp_sack_info instead [ 173.918303][T12712] xt_hashlimit: size too large, truncated to 1048576 [ 174.256557][ T28] audit: type=1400 audit(1777037581.517:2357): avc: denied { read } for pid=12742 comm="syz.0.3384" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 174.307924][ T28] audit: type=1400 audit(1777037581.517:2358): avc: denied { open } for pid=12742 comm="syz.0.3384" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 174.392411][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3386'. [ 174.574488][ T28] audit: type=1400 audit(1777037581.837:2359): avc: denied { create } for pid=12758 comm="syz.8.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.596092][ T28] audit: type=1400 audit(1777037581.857:2360): avc: denied { connect } for pid=12758 comm="syz.8.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.616751][ T28] audit: type=1400 audit(1777037581.857:2361): avc: denied { write } for pid=12758 comm="syz.8.3389" path="socket:[36521]" dev="sockfs" ino=36521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 175.208610][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 175.231038][ T3394] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.251254][ T28] audit: type=1400 audit(1777037583.507:2362): avc: denied { write } for pid=12847 comm="syz.9.3427" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 176.281007][T12848] random: crng reseeded on system resumption [ 176.313564][ T28] audit: type=1400 audit(1777037583.547:2363): avc: denied { open } for pid=12847 comm="syz.9.3427" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 176.449698][T12860] netlink: 'syz.8.3433': attribute type 15 has an invalid length. [ 176.464377][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3433'. [ 176.479965][ T6744] netdevsim netdevsim8 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 176.488864][T12860] netlink: 'syz.8.3433': attribute type 15 has an invalid length. [ 176.498062][ T6744] netdevsim netdevsim8 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 176.506921][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3433'. [ 176.516393][ T6744] netdevsim netdevsim8 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 176.528348][ T6752] netdevsim netdevsim8 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 177.361350][T12890] loop9: detected capacity change from 0 to 164 [ 177.381286][T12890] rock: directory entry would overflow storage [ 177.398754][T12890] rock: sig=0x5252, size=5, remaining=3 [ 177.846227][T12911] Process accounting resumed [ 177.879595][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3456'. [ 178.098221][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3461'. [ 178.374088][T12954] IPv6: sit2: Disabled Multicast RS [ 178.644682][ T28] audit: type=1400 audit(1777037585.907:2364): avc: denied { read } for pid=12983 comm="syz.0.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 178.688588][ T28] audit: type=1400 audit(1777037585.937:2365): avc: denied { map } for pid=12985 comm="syz.3.3487" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.713364][ T28] audit: type=1400 audit(1777037585.937:2366): avc: denied { read write } for pid=12985 comm="syz.3.3487" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.739399][ T28] audit: type=1400 audit(1777037585.977:2367): avc: denied { ioctl } for pid=12983 comm="syz.0.3488" path="socket:[36781]" dev="sockfs" ino=36781 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 178.793824][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3489'. [ 179.520018][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3501'. [ 179.541866][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3502'. [ 179.611226][T13030] dummy0: entered allmulticast mode [ 179.629724][T13030] dummy0: left allmulticast mode [ 179.831561][T13048] netlink: 'syz.9.3513': attribute type 298 has an invalid length. [ 179.877149][ T9] IPVS: starting estimator thread 0... [ 179.988593][T13055] IPVS: using max 2400 ests per chain, 120000 per kthread [ 179.996368][T13061] xt_hashlimit: size too large, truncated to 1048576 [ 180.006423][ T28] audit: type=1400 audit(1777037587.267:2368): avc: denied { relabelfrom } for pid=13062 comm="syz.9.3519" name="NETLINK" dev="sockfs" ino=37930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.048752][ T28] audit: type=1400 audit(1777037587.267:2369): avc: denied { relabelto } for pid=13062 comm="syz.9.3519" name="NETLINK" dev="sockfs" ino=37930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 180.546633][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3527'. [ 180.682226][T13094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3530'. [ 180.699073][ T28] audit: type=1400 audit(1777037587.967:2370): avc: denied { read } for pid=13093 comm="syz.1.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.935102][ T6726] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.962038][T13109] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3536'. [ 181.525620][T13123] loop9: detected capacity change from 0 to 256 [ 181.573352][T13123] FAT-fs (loop9): Directory bread(block 64) failed [ 181.590118][T13123] FAT-fs (loop9): Directory bread(block 65) failed [ 181.606320][T13123] FAT-fs (loop9): Directory bread(block 66) failed [ 181.620596][T13123] FAT-fs (loop9): Directory bread(block 67) failed [ 181.622174][T13125] loop0: detected capacity change from 0 to 512 [ 181.636078][T13123] FAT-fs (loop9): Directory bread(block 68) failed [ 181.651422][T13125] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.654640][T13123] FAT-fs (loop9): Directory bread(block 69) failed [ 181.676730][T13123] FAT-fs (loop9): Directory bread(block 70) failed [ 181.690912][T13123] FAT-fs (loop9): Directory bread(block 71) failed [ 181.706742][T13125] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 181.723314][T13123] FAT-fs (loop9): Directory bread(block 72) failed [ 181.738498][T13123] FAT-fs (loop9): Directory bread(block 73) failed [ 181.902350][T13139] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.909867][T13139] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.970405][T13139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.982359][T13139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.036685][ T6744] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.060504][ T6744] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.076732][ T6744] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.086048][ T6744] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.207229][T13154] random: crng reseeded on system resumption [ 182.529830][T13196] veth1_to_bridge: entered allmulticast mode [ 182.536400][T13196] veth1_to_bridge: left allmulticast mode [ 182.988452][ T3922] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.988517][ T6267] Bluetooth: hci0: command 0x1003 tx timeout [ 183.256533][ T28] audit: type=1400 audit(1777037590.517:2371): avc: denied { listen } for pid=13247 comm="syz.9.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 183.304523][ T28] audit: type=1400 audit(1777037590.537:2372): avc: denied { getopt } for pid=13247 comm="syz.9.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.563445][T13271] netlink: 'syz.9.3604': attribute type 25 has an invalid length. [ 183.572975][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3604'. [ 183.585285][ T6735] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.594412][ T6735] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.603296][T13271] netlink: 'syz.9.3604': attribute type 25 has an invalid length. [ 183.615541][ T6735] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.626171][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3604'. [ 183.635413][ T6735] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.732469][T13278] loop0: detected capacity change from 0 to 8192 [ 183.948283][T13298] loop0: detected capacity change from 0 to 1024 [ 183.970843][T13298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.172642][T13307] netlink: 'syz.3.3616': attribute type 1 has an invalid length. [ 184.173368][ T7535] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.181116][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3616'. [ 185.973073][T13394] loop9: detected capacity change from 0 to 764 [ 186.016477][T13394] rock: directory entry would overflow storage [ 186.041199][T13394] rock: sig=0x4654, size=5, remaining=4 [ 186.740121][T13423] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 186.785772][ T6726] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.823679][ T6726] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.860511][ T6726] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.879157][ T6726] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.904164][T13428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3665'. [ 186.919300][T13428] bridge: RTM_NEWNEIGH with invalid ether address [ 186.932796][T13431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3665'. [ 186.956637][T13431] bridge: RTM_NEWNEIGH with invalid ether address [ 186.975380][ T6726] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.009299][ T6726] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.021597][T13435] loop0: detected capacity change from 0 to 1024 [ 187.030409][ T6726] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.039247][ T6726] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.066209][T13435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.171767][ T7535] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.324041][T13511] netlink: 'syz.3.3698': attribute type 1 has an invalid length. [ 188.357521][T13511] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.423995][T13511] bond4: (slave geneve3): making interface the new active one [ 188.457159][T13511] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 188.503186][ T6726] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.539177][ T6726] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.568791][ T6726] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.590859][ T6726] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.655716][T13532] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3707'. [ 189.649470][T13572] loop9: detected capacity change from 0 to 128 [ 189.803646][T13571] syz.9.3722: attempt to access beyond end of device [ 189.803646][T13571] loop9: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 190.077185][ T28] audit: type=1326 audit(1777037597.337:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.1.3732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe58b8fcdd9 code=0x0 [ 191.005717][T13626] netlink: 'syz.9.3743': attribute type 1 has an invalid length. [ 191.082125][T13626] gretap2: entered allmulticast mode [ 191.110884][T13626] bond2: (slave gretap2): making interface the new active one [ 191.135554][T13626] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 191.155611][T13641] pimreg: entered allmulticast mode [ 191.164132][T13641] pimreg: left allmulticast mode [ 191.487008][T13663] loop9: detected capacity change from 0 to 1024 [ 191.500216][T13663] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 191.972932][T13683] xt_hashlimit: size too large, truncated to 1048576 [ 192.798935][ T28] audit: type=1400 audit(1777037600.067:2374): avc: denied { connect } for pid=13733 comm="syz.1.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.903432][ T28] audit: type=1400 audit(1777037600.167:2375): avc: denied { create } for pid=13735 comm="syz.0.3786" name=01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 193.069208][T13755] loop9: detected capacity change from 0 to 2048 [ 193.099265][T13755] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.176512][T13764] netlink: 'syz.1.3795': attribute type 1 has an invalid length. [ 193.251171][T13764] bond6: entered promiscuous mode [ 193.269352][T13764] bond6: entered allmulticast mode [ 193.290300][T13764] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.360659][T13771] erspan1: entered allmulticast mode [ 193.378552][T13771] bond6: (slave erspan1): making interface the new active one [ 193.398505][T13771] erspan1: entered promiscuous mode [ 193.407709][T13771] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 193.579580][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.714123][ T28] audit: type=1400 audit(1777037600.977:2376): avc: denied { unlink } for pid=7535 comm="syz-executor" name=01 dev="tmpfs" ino=2272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 193.867066][T13805] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 194.489857][T13811] lo: entered allmulticast mode [ 194.505216][T13811] tunl0: entered allmulticast mode [ 194.530738][T13811] gre0: entered allmulticast mode [ 194.669261][T13811] gretap0: entered allmulticast mode [ 194.717929][T13811] erspan0: entered allmulticast mode [ 194.738861][T13811] ip_vti0: entered allmulticast mode [ 194.762880][T13811] ip6_vti0: entered allmulticast mode [ 194.784161][T13811] sit0: entered allmulticast mode [ 194.807450][T13811] ip6tnl0: entered allmulticast mode [ 194.826168][T13811] ip6gre0: entered allmulticast mode [ 194.853969][T13811] syz_tun: entered allmulticast mode [ 194.872963][T13811] ip6gretap0: entered allmulticast mode [ 194.896820][T13811] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.904000][T13811] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.932287][T13811] bridge0: entered allmulticast mode [ 194.958685][T13811] bond0: entered allmulticast mode [ 194.965490][ T28] audit: type=1400 audit(1777037602.227:2377): avc: denied { unmount } for pid=3325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 194.988007][T13811] bond_slave_0: entered allmulticast mode [ 194.999841][T13811] bond_slave_1: entered allmulticast mode [ 195.016729][T13811] team0: entered allmulticast mode [ 195.027261][T13811] team_slave_0: entered allmulticast mode [ 195.040168][T13811] team_slave_1: entered allmulticast mode [ 195.057472][T13811] dummy0: entered allmulticast mode [ 195.071453][T13811] nlmon0: entered allmulticast mode [ 195.081351][T13811] caif0: entered allmulticast mode [ 195.093065][T13811] vxcan0: entered allmulticast mode [ 195.105498][T13811] vxcan1: entered allmulticast mode [ 195.119975][T13811] veth0: entered allmulticast mode [ 195.134513][T13811] veth1: entered allmulticast mode [ 195.166251][T13811] wg0: entered allmulticast mode [ 195.176303][T13811] wg1: entered allmulticast mode [ 195.191825][T13811] wg2: entered allmulticast mode [ 195.206259][T13811] veth0_to_bridge: entered allmulticast mode [ 195.227661][T13811] veth1_to_bridge: entered allmulticast mode [ 195.247022][T13811] veth0_to_bond: entered allmulticast mode [ 195.263749][T13811] veth1_to_bond: entered allmulticast mode [ 195.281492][T13811] veth0_to_team: entered allmulticast mode [ 195.299811][T13811] veth1_to_team: entered allmulticast mode [ 195.317357][T13811] veth1_to_batadv: entered allmulticast mode [ 195.332226][T13811] batadv_slave_1: entered allmulticast mode [ 195.346747][T13811] xfrm0: entered allmulticast mode [ 195.370012][T13811] veth0_to_hsr: entered allmulticast mode [ 195.393364][T13811] hsr_slave_0: entered allmulticast mode [ 195.410880][T13811] veth1_to_hsr: entered allmulticast mode [ 195.447032][T13811] hsr_slave_1: entered allmulticast mode [ 195.476671][T13811] veth1_virt_wifi: entered allmulticast mode [ 195.502356][T13811] veth0_virt_wifi: entered allmulticast mode [ 195.524784][T13811] veth1_vlan: entered allmulticast mode [ 195.548210][T13811] vlan0: entered allmulticast mode [ 195.569191][T13811] vlan1: entered allmulticast mode [ 195.592751][T13811] macvlan0: entered allmulticast mode [ 195.616208][T13811] macvlan1: entered allmulticast mode [ 195.629735][T13811] ipvlan0: entered allmulticast mode [ 195.637919][T13811] ipvlan1: entered allmulticast mode [ 195.648219][T13811] veth1_macvtap: entered allmulticast mode [ 195.664371][T13811] veth0_macvtap: entered allmulticast mode [ 195.690912][T13811] macvtap0: entered allmulticast mode [ 195.719843][T13811] macsec0: entered allmulticast mode [ 195.741600][T13811] geneve0: entered allmulticast mode [ 195.756209][T13811] geneve1: entered allmulticast mode [ 195.773913][T13811] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 195.800082][T13811] netdevsim netdevsim8 netdevsim1: entered allmulticast mode [ 195.831912][T13811] netdevsim netdevsim8 netdevsim2: entered allmulticast mode [ 195.860169][T13811] netdevsim netdevsim8 netdevsim3: entered allmulticast mode [ 195.881174][T13811] bond1: entered allmulticast mode [ 195.885790][ T7130] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 195.899154][T13811] gretap1: entered allmulticast mode [ 195.908073][T13811] ip6tnl1: entered allmulticast mode [ 195.918844][ T7130] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.924710][T13811] vti60: entered allmulticast mode [ 195.973118][T13811] ip6tnl2: left promiscuous mode [ 195.973424][T13848] loop3: detected capacity change from 0 to 512 [ 195.996984][T13811] ip6tnl2: entered allmulticast mode [ 196.015292][T13811] ip6erspan0: entered allmulticast mode [ 196.026004][T13848] EXT4-fs: Ignoring removed orlov option [ 196.036261][T13811] bond2: entered allmulticast mode [ 196.057179][T13811] geneve2: entered allmulticast mode [ 196.080590][T13848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.105490][T13811] gtp0: entered allmulticast mode [ 196.123985][T13811] vxlan0: entered allmulticast mode [ 196.126211][T13848] ext4 filesystem being mounted at /693/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.165143][T13811] bridge1: entered allmulticast mode [ 196.183424][T13811] ipip0: entered allmulticast mode [ 196.192736][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.203553][T13811] ip6tnl3: entered allmulticast mode [ 196.228146][T13811] bond3: entered allmulticast mode [ 196.243535][T13811] batadv1: entered allmulticast mode [ 196.261908][T13811] gre1: entered allmulticast mode [ 196.274940][T13811] xfrm1: entered allmulticast mode [ 196.282648][T13811] @: entered allmulticast mode [ 196.289513][T13811] sit2: entered allmulticast mode [ 196.351926][ T6740] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.383607][ T6740] netdevsim netdevsim8 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 196.396163][T13857] can: request_module (can-proto-0) failed. [ 196.410316][T13860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13860 comm=syz.0.3829 [ 196.418116][ T6740] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.470224][T13862] xt_hashlimit: size too large, truncated to 1048576 [ 196.479087][ T6740] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.530923][ T6740] netdevsim netdevsim8 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 196.545659][ T6740] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.568342][ T6740] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.579019][ T6740] netdevsim netdevsim8 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 196.589530][ T6740] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.608762][ T6740] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.627824][ T6740] netdevsim netdevsim8 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 196.637700][ T6740] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.410720][T13902] gre1: entered promiscuous mode [ 197.553449][ T28] audit: type=1326 audit(1777037604.817:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13907 comm="syz.1.3848" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe58b8fcdd9 code=0x0 [ 197.663626][ T28] audit: type=1400 audit(1777037604.927:2379): avc: denied { listen } for pid=13917 comm="syz.8.3851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 198.468194][ T28] audit: type=1400 audit(1777037605.727:2380): avc: denied { accept } for pid=13954 comm="syz.1.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.537454][T13957] syzkaller0: entered promiscuous mode [ 198.560308][T13957] syzkaller0: entered allmulticast mode [ 198.569229][T13963] gre5: entered promiscuous mode [ 199.355205][ T28] audit: type=1400 audit(1777037606.617:2381): avc: denied { getopt } for pid=13973 comm="syz.8.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.686901][T14032] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3896'. [ 201.050216][T14040] wg1: entered allmulticast mode [ 201.288166][T14057] netlink: 'syz.8.3908': attribute type 6 has an invalid length. [ 201.603649][T14074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.625889][T14074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.292830][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3928'. [ 202.428493][T14112] macvtap0: entered promiscuous mode [ 202.434599][T14112] team0: entered promiscuous mode [ 202.441384][T14112] team_slave_0: entered promiscuous mode [ 202.485671][T14112] team_slave_1: entered promiscuous mode [ 202.505452][T14112] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 203.739019][T14131] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 204.278167][ T28] audit: type=1400 audit(1777037611.537:2382): avc: denied { write } for pid=14147 comm="syz.9.3942" lport=57355 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 204.351604][ T28] audit: type=1400 audit(1777037611.567:2383): avc: denied { create } for pid=14149 comm="syz.0.3943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 204.777143][T14184] loop3: detected capacity change from 0 to 512 [ 204.793935][T14184] EXT4-fs (loop3): 1 truncate cleaned up [ 204.808996][T14184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.823851][ T28] audit: type=1400 audit(1777037612.087:2384): avc: denied { rename } for pid=14183 comm="syz.3.3962" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 204.843031][T14184] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3962: invalid indirect mapped block 4294901760 (level 0) [ 204.882012][T14184] EXT4-fs (loop3): Remounting filesystem read-only [ 204.936193][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.098318][ T28] audit: type=1326 audit(1777037612.357:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff7ebcdd9 code=0x7ffc0000 [ 205.157069][ T28] audit: type=1326 audit(1777037612.357:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff7ebcdd9 code=0x7ffc0000 [ 205.180865][ T28] audit: type=1326 audit(1777037612.387:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff7ebcdd9 code=0x7ffc0000 [ 205.205034][ T28] audit: type=1326 audit(1777037612.387:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff7ebcdd9 code=0x7ffc0000 [ 205.229858][ T28] audit: type=1326 audit(1777037612.387:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2ff7ebcdd9 code=0x7ffc0000 [ 205.254499][ T28] audit: type=1326 audit(1777037612.387:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff7ebcdd9 code=0x7ffc0000 [ 205.278291][ T28] audit: type=1326 audit(1777037612.387:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff7ebcdd9 code=0x7ffc0000 [ 205.659049][T14228] tipc: Enabling of bearer rejected, already enabled [ 205.833916][T14230] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.883155][T14230] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.945373][T14230] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.104522][T14242] geneve4: entered promiscuous mode [ 206.124005][T14242] geneve4: entered allmulticast mode [ 206.145910][ T6726] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 206.168817][ T6726] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 206.198037][T14230] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.212187][T14246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.229297][ T6726] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 206.230142][T14246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.254112][ T6726] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 206.289690][ T6726] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.313537][ T6726] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.342410][ T6726] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.376885][ T6726] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.947263][T14304] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4010'. [ 208.070698][T14312] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 209.017734][T14346] loop3: detected capacity change from 0 to 256 [ 209.035027][T14344] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 209.183960][T14357] dvmrp0: left allmulticast mode [ 209.300288][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 209.300382][ T28] audit: type=1326 audit(1777037616.567:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14363 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 209.334450][ T28] audit: type=1326 audit(1777037616.597:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14363 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 209.358847][ T28] audit: type=1326 audit(1777037616.597:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14363 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 209.411177][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4040'. [ 209.689184][T14378] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 209.716545][ T28] audit: type=1326 audit(1777037616.977:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14363 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 209.855764][ T28] audit: type=1400 audit(1777037617.117:2432): avc: denied { ioctl } for pid=14393 comm="syz.1.4050" path="socket:[41876]" dev="sockfs" ino=41876 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 209.949845][T14400] loop3: detected capacity change from 0 to 128 [ 212.974146][ T28] audit: type=1326 audit(1777037620.237:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 213.029500][ T28] audit: type=1326 audit(1777037620.237:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 213.058004][ T28] audit: type=1326 audit(1777037620.237:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 213.085792][ T28] audit: type=1326 audit(1777037620.237:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 213.111236][ T28] audit: type=1326 audit(1777037620.237:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 213.877237][ T7672] Process accounting resumed [ 215.922677][ T7672] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 215.946984][ T7672] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 216.591284][T14619] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.4140'. [ 217.366728][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 217.370066][ T28] audit: type=1400 audit(1777037624.627:2449): avc: denied { cmd } for pid=14653 comm="syz.3.4155" path="socket:[43277]" dev="sockfs" ino=43277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 217.452203][T14657] bridge_slave_0 (unregistering): left allmulticast mode [ 217.467265][T14657] bridge_slave_0 (unregistering): left promiscuous mode [ 217.485046][T14657] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.724169][T14674] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4162'. [ 217.802273][ T28] audit: type=1400 audit(1777037625.067:2450): avc: denied { setopt } for pid=14676 comm="syz.9.4164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.451945][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4167'. [ 218.810168][T14687] xt_hashlimit: size too large, truncated to 1048576 [ 219.164911][T14704] loop3: detected capacity change from 0 to 4096 [ 219.196893][T14704] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 219.237498][T14704] System zones: 0-5 [ 219.249375][T14704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.373052][ T28] audit: type=1400 audit(1777037626.637:2451): avc: denied { mount } for pid=14712 comm="syz.0.4177" name="/" dev="autofs" ino=43372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 219.420733][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.468015][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4180'. [ 219.518269][T14722] netlink: 'syz.0.4180': attribute type 30 has an invalid length. [ 219.539393][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4180'. [ 219.539494][ T28] audit: type=1400 audit(1777037626.797:2452): avc: denied { write } for pid=14727 comm="syz.3.4183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 219.575157][T14729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4182'. [ 219.591749][T14731] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4184'. [ 219.868440][ T6267] Bluetooth: hci0: command 0x1003 tx timeout [ 219.868526][ T3922] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 219.954963][T14745] random: crng reseeded on system resumption [ 219.991528][ T28] audit: type=1400 audit(1777037627.257:2453): avc: denied { ioctl } for pid=14744 comm="syz.1.4189" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 219.996441][T14745] Restarting kernel threads ... [ 220.049032][T14745] Done restarting kernel threads. [ 220.448053][T14775] loop3: detected capacity change from 0 to 4096 [ 220.474112][T14775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.621516][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.725553][T14779] loop3: detected capacity change from 0 to 8192 [ 220.740656][T14779] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.770617][T14779] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 220.797529][T14779] FAT-fs (loop3): Filesystem has been set read-only [ 220.807202][T14779] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 220.816530][T14779] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 220.825959][T14779] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 220.835070][T14779] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 220.844174][T14779] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 220.853293][T14779] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 220.869811][T14779] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 220.891600][T14779] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 220.909322][ T28] audit: type=1400 audit(1777037884.169:2454): avc: denied { ioctl } for pid=14795 comm="syz.0.4210" path="socket:[43494]" dev="sockfs" ino=43494 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 220.913579][T14779] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 221.067552][T14807] xfrm0 speed is unknown, defaulting to 1000 [ 221.086362][T14807] xfrm0 speed is unknown, defaulting to 1000 [ 221.110015][T14807] xfrm0 speed is unknown, defaulting to 1000 [ 221.275790][ T7673] xfrm0 speed is unknown, defaulting to 1000 [ 221.284281][T14807] infiniband syz0: set down [ 221.293684][T14807] infiniband syz0: added xfrm0 [ 221.304979][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4220'. [ 221.333989][T14807] RDS/IB: syz0: added [ 221.345181][T14807] smc: adding ib device syz0 with port count 1 [ 221.364628][T14807] smc: ib device syz0 port 1 has no pnetid [ 221.393356][ T7672] xfrm0 speed is unknown, defaulting to 1000 [ 221.399948][T14807] xfrm0 speed is unknown, defaulting to 1000 [ 221.655958][T14807] xfrm0 speed is unknown, defaulting to 1000 [ 221.773596][T14834] netlink: 'syz.3.4225': attribute type 10 has an invalid length. [ 221.792242][T14834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4225'. [ 221.827209][T14834] batman_adv: batadv0: Adding interface: macvlan0 [ 221.848086][T14834] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 221.874740][T14834] batman_adv: batadv0: Interface activated: macvlan0 [ 221.889693][T14807] xfrm0 speed is unknown, defaulting to 1000 [ 222.021869][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4235'. [ 222.036092][T14807] xfrm0 speed is unknown, defaulting to 1000 [ 222.084083][T14856] xt_hashlimit: size too large, truncated to 1048576 [ 222.128619][T14807] xfrm0 speed is unknown, defaulting to 1000 [ 222.217731][T14807] xfrm0 speed is unknown, defaulting to 1000 [ 222.486524][T14869] loop9: detected capacity change from 0 to 128 [ 222.599113][T14878] lo: entered allmulticast mode [ 222.613508][T14878] lo: left allmulticast mode [ 223.555145][T14911] xfrm0 speed is unknown, defaulting to 1000 [ 224.017454][T14911] lo: entered allmulticast mode [ 224.025075][T14911] lo: left allmulticast mode [ 224.232569][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4266'. [ 224.422900][T14958] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4280'. [ 224.554220][ T28] audit: type=1326 audit(1777037887.819:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.1.4287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe58b8fcdd9 code=0x0 [ 225.240101][ T28] audit: type=1326 audit(1777037888.509:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 225.294989][ T28] audit: type=1326 audit(1777037888.509:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 225.325749][ T28] audit: type=1326 audit(1777037888.509:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 225.379843][ T28] audit: type=1326 audit(1777037888.509:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 225.440719][T15012] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4303'. [ 225.453160][ T28] audit: type=1326 audit(1777037888.509:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 225.480108][T15012] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4303'. [ 225.509899][ T28] audit: type=1326 audit(1777037888.529:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 225.579943][ T28] audit: type=1326 audit(1777037888.529:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 225.638440][ T28] audit: type=1326 audit(1777037888.529:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 225.662838][T15022] 9p: Bad value for 'rfdno' [ 225.701023][ T28] audit: type=1326 audit(1777037888.529:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3965fccdd9 code=0x7ffc0000 [ 225.706667][T15032] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4312'. [ 227.200388][T15070] veth0: entered promiscuous mode [ 227.219810][T15070] bond0: entered promiscuous mode [ 227.234998][T15070] bond_slave_0: entered promiscuous mode [ 227.248695][T15070] bond_slave_1: entered promiscuous mode [ 227.266329][T15069] bond0: left promiscuous mode [ 227.277195][T15069] bond_slave_0: left promiscuous mode [ 227.289339][T15069] bond_slave_1: left promiscuous mode [ 227.298657][T15069] veth0: left promiscuous mode [ 227.437029][T15081] syz_tun: entered allmulticast mode [ 227.454429][T15081] syz_tun: left allmulticast mode [ 227.525941][T15089] loop3: detected capacity change from 0 to 4096 [ 227.567659][T15089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.589359][T15094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4336'. [ 227.599342][T15094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4336'. [ 227.715369][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.750383][T15110] netlink: 'syz.8.4343': attribute type 10 has an invalid length. [ 227.766784][T15110] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4343'. [ 227.798560][T15110] macvlan0: left allmulticast mode [ 227.842683][T15110] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 227.976631][T15122] xfrm0 speed is unknown, defaulting to 1000 [ 227.984673][ T6726] Bluetooth: hci0: Frame reassembly failed (-84) [ 228.442493][T15148] xfrm0 speed is unknown, defaulting to 1000 [ 228.548861][T15155] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4359'. [ 228.615966][T15157] netlink: 'syz.1.4360': attribute type 10 has an invalid length. [ 228.626275][T15157] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4360'. [ 228.656624][T15157] batman_adv: batadv0: Adding interface: macvlan0 [ 228.664630][T15157] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.698639][T15157] batman_adv: batadv0: Interface activated: macvlan0 [ 228.734150][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4362'. [ 228.753523][T15161] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.777145][T15161] bond5: option ad_select: unable to set because the bond device is up [ 228.815546][T15169] bridge0: left allmulticast mode [ 228.823121][T15167] SELinux: failed to load policy [ 228.826768][T15169] bridge0: port 4(vlan2) entered blocking state [ 228.836461][T15169] bridge0: port 4(vlan2) entered disabled state [ 228.843691][T15169] vlan2: entered allmulticast mode [ 228.851151][T15169] vlan2: entered promiscuous mode [ 228.856343][T15169] geneve0: entered promiscuous mode [ 229.643125][T15214] loop3: detected capacity change from 0 to 512 [ 229.651012][T15214] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 229.663488][T15216] netlink: 192 bytes leftover after parsing attributes in process `syz.8.4385'. [ 229.672906][T15216] netlink: 192 bytes leftover after parsing attributes in process `syz.8.4385'. [ 229.679506][T15214] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4384: bg 0: block 104: invalid block bitmap [ 229.699090][T15214] loop3: lost filesystem error report for type 5 error -117 [ 229.699208][T15214] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 229.715369][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 229.715386][ C1] EXT4-fs (loop3): initial error at time 1777037892: ext4_validate_block_bitmap:432 [ 229.715411][ C1] EXT4-fs (loop3): last error at time 1777037892: ext4_validate_block_bitmap:432 [ 229.743994][T15214] loop3: lost filesystem error report for type 5 error -117 [ 229.756309][T15214] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4384: invalid indirect mapped block 1 (level 1) [ 229.777078][T15214] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 229.793131][T15214] EXT4-fs (loop3): 1 truncate cleaned up [ 229.826560][T15214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.029769][ T3922] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 230.163569][T15238] xfrm0 speed is unknown, defaulting to 1000 [ 230.998474][ T7132] page_pool_release_retry() stalled pool shutdown: id 146, 1 inflight 60 sec [ 231.041975][T15240] syz.0.4395 (15240) used greatest stack depth: 6904 bytes left [ 231.098359][T15267] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4406'. [ 231.412534][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.579155][T15282] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 231.739473][T15298] all: renamed from bridge_slave_1 (while UP) [ 231.904509][T15317] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 232.012018][T15327] program syz.9.4431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.063032][T15330] program syz.9.4431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.914048][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 232.914061][ T28] audit: type=1400 audit(1777037896.179:2508): avc: denied { read } for pid=15347 comm="syz.3.4438" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 232.943709][T15348] SELinux: ebitmap start bit (812676208) is not a multiple of the map unit size (64) [ 232.965696][T15348] SELinux: failed to load policy [ 232.992971][ T28] audit: type=1400 audit(1777037896.179:2509): avc: denied { open } for pid=15347 comm="syz.3.4438" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 233.057324][ T28] audit: type=1400 audit(1777037896.319:2510): avc: denied { connect } for pid=15349 comm="syz.3.4439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 233.116022][ T28] audit: type=1400 audit(1777037896.379:2511): avc: denied { write } for pid=15352 comm="syz.3.4440" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 233.293002][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4444'. [ 233.336776][T15359] team0: entered promiscuous mode [ 233.344924][T15359] team0: entered allmulticast mode [ 233.353562][T15359] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.399808][T15370] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4447'. [ 233.656083][T15395] ipip1: entered promiscuous mode [ 233.675787][T15397] team0 (unregistering): Port device team_slave_0 removed [ 233.699047][T15397] team0 (unregistering): Port device team_slave_1 removed [ 233.751109][T15407] sctp: [Deprecated]: syz.0.4463 (pid 15407) Use of int in maxseg socket option. [ 233.751109][T15407] Use struct sctp_assoc_value instead [ 233.769062][T15405] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 233.980589][T15425] netlink: 'syz.8.4472': attribute type 1 has an invalid length. [ 234.040757][T15425] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.051883][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4473'. [ 234.082643][T15427] bond6: entered promiscuous mode [ 234.107702][T15427] bond6: entered allmulticast mode [ 234.244685][T15435] xfrm0 speed is unknown, defaulting to 1000 [ 234.591471][ T28] audit: type=1400 audit(1777037897.859:2512): avc: denied { read } for pid=15442 comm="syz.8.4480" path="socket:[44947]" dev="sockfs" ino=44947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 234.675176][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4484'. [ 234.700765][T15452] netlink: 'syz.0.4484': attribute type 25 has an invalid length. [ 234.720615][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4484'. [ 235.517910][T15487] loop3: detected capacity change from 0 to 512 [ 235.532478][T15487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.569263][T15487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.587469][T15487] ext4 filesystem being mounted at /823/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.705660][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.076467][T15523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.086679][T15523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.243256][T15525] xfrm0 speed is unknown, defaulting to 1000 [ 236.516098][T15534] loop9: detected capacity change from 0 to 1024 [ 236.545560][T15534] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.589124][T15538] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 236.602234][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.674875][T15548] SELinux: policydb version -710018320 does not match my version range 15-35 [ 236.684253][T15548] SELinux: failed to load policy [ 236.997542][ T28] audit: type=1400 audit(1777037900.259:2513): avc: denied { read } for pid=15575 comm="syz.1.4533" lport=49628 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 237.927239][T15598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4549'. [ 239.164670][T15662] xfrm0 speed is unknown, defaulting to 1000 [ 239.461957][T15673] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4570'. [ 239.786401][T15685] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 239.808897][T15685] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 239.825032][T15685] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 240.231153][T15705] io-wq is not configured for unbound workers [ 240.353661][T15703] xfrm0 speed is unknown, defaulting to 1000 [ 240.620047][T15720] netlink: 'syz.0.4597': attribute type 1 has an invalid length. [ 240.910154][T15725] bond4: (slave geneve3): making interface the new active one [ 240.923857][T15725] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 240.933524][ T6733] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 240.954805][ T6740] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 240.982972][ T6740] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 241.005497][ T6740] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 241.193887][T15739] loop9: detected capacity change from 0 to 512 [ 241.496973][T15754] loop3: detected capacity change from 0 to 1024 [ 241.553051][T15754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.796224][ T28] audit: type=1400 audit(1777037905.059:2514): avc: denied { append } for pid=15765 comm="syz.9.4606" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.992033][T15779] xfrm0 speed is unknown, defaulting to 1000 [ 242.072125][T15782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4610'. [ 242.081650][T15782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4610'. [ 242.092355][T15782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4610'. [ 242.102236][T15782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4610'. [ 242.122563][T15782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4610'. [ 242.175858][T15782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4610'. [ 242.204123][T15782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4610'. [ 242.238334][T15782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4610'. [ 242.281815][T15782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4610'. [ 242.459074][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.555765][T15782] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.563250][T15782] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.992943][T15782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.016354][T15782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.218828][ T6740] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.236340][ T6740] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 243.249532][ T28] audit: type=1400 audit(1777037906.519:2515): avc: denied { watch watch_reads } for pid=15801 comm="syz.1.4618" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 243.277794][ T6740] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.294427][ T6740] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 243.321379][T15802] xfrm0 speed is unknown, defaulting to 1000 [ 243.336766][ T6740] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.345776][ T6740] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 243.359111][ T6740] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.368740][ T6740] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 243.504731][T15820] xfrm0 speed is unknown, defaulting to 1000 [ 243.611384][ T28] audit: type=1400 audit(1777037906.879:2516): avc: denied { connect } for pid=15826 comm="syz.9.4627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 243.635855][T15823] xfrm0 speed is unknown, defaulting to 1000 [ 243.757223][T15835] loop9: detected capacity change from 0 to 2048 [ 243.801813][T15835] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.861867][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.012887][T15847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=15847 comm=syz.9.4635 [ 244.099899][T15851] netlink: 'syz.0.4637': attribute type 1 has an invalid length. [ 244.121347][T15851] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.136370][T15851] bond5: (slave ip6erspan0): making interface the new active one [ 244.145988][T15851] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 244.405303][T15871] xfrm0 speed is unknown, defaulting to 1000 [ 244.522426][T15885] xfrm0 speed is unknown, defaulting to 1000 [ 245.289517][ T28] audit: type=1400 audit(1777037908.549:2517): avc: denied { read } for pid=15907 comm="syz.0.4659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 245.383264][ T28] audit: type=1326 audit(1777037908.649:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.9.4661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f2ff7eb6b57 code=0x0 [ 248.167194][T15975] syz.9.4685 (15975) used greatest stack depth: 5928 bytes left [ 248.266504][ T28] audit: type=1400 audit(1777037911.529:2519): avc: denied { ioctl } for pid=15986 comm="syz.9.4690" path="socket:[47836]" dev="sockfs" ino=47836 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 249.110361][T15937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.152108][T16000] gretap3: entered promiscuous mode [ 249.159350][ T28] audit: type=1400 audit(1777037912.429:2520): avc: denied { getopt } for pid=16002 comm="syz.1.4696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 249.231094][T16011] loop9: detected capacity change from 0 to 1024 [ 249.245608][ T28] audit: type=1400 audit(1777037912.509:2521): avc: denied { getopt } for pid=16012 comm="syz.1.4700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 249.281305][T16011] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.392903][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.407495][ T6733] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.447136][ T6733] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.471530][T16015] __nla_validate_parse: 166 callbacks suppressed [ 249.471565][T16015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4701'. [ 249.489715][T16026] netlink: 'syz.9.4702': attribute type 1 has an invalid length. [ 249.511006][T16015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4701'. [ 249.539775][T16015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4701'. [ 249.552084][T16015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4701'. [ 249.561327][T16015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4701'. [ 249.570679][T16015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4701'. [ 249.579929][T16015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4701'. [ 249.589187][T16015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4701'. [ 249.598375][T16015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4701'. [ 249.607945][T16015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4701'. [ 249.619119][T16015] batman_adv: batadv0: Interface deactivated: macvlan0 [ 249.701958][ T6733] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.726233][ T6733] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.764179][ T28] audit: type=1400 audit(1777037913.029:2522): avc: denied { create } for pid=16040 comm="syz.1.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 249.771028][T16034] xfrm0 speed is unknown, defaulting to 1000 [ 249.797347][T16040] delete_channel: no stack [ 249.809218][ T28] audit: type=1400 audit(1777037913.059:2523): avc: denied { accept } for pid=16040 comm="syz.1.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 249.832969][ T6733] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.845661][ T28] audit: type=1400 audit(1777037913.059:2524): avc: denied { bind } for pid=16035 comm="syz.0.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 249.871054][ T6733] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.936445][ T6733] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.949750][ T6733] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.050070][ T28] audit: type=1400 audit(1777037913.309:2525): avc: denied { kexec_image_load } for pid=16060 comm="syz.3.4720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 250.126258][ T6733] bridge_slave_1: left allmulticast mode [ 250.135127][ T6733] bridge_slave_1: left promiscuous mode [ 250.152381][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.173929][ T6733] bridge_slave_0: left allmulticast mode [ 250.183070][ T6733] bridge_slave_0: left promiscuous mode [ 250.196002][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.232013][ T6733] dvmrp0: left allmulticast mode [ 250.266152][T16077] loop9: detected capacity change from 0 to 128 [ 250.272948][T16077] EXT4-fs: Ignoring removed orlov option [ 250.284551][T16077] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 250.297929][ T3310] udevd[3310]: incorrect ext4 checksum on /dev/loop9 [ 250.421687][ T6733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.432653][ T6733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.442402][ T6733] bond0 (unregistering): Released all slaves [ 250.450683][ T6733] bond1 (unregistering): (slave lo): Releasing backup interface [ 250.459008][ T6733] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 250.470380][ T6733] bond1 (unregistering): Released all slaves [ 250.539331][ T28] audit: type=1400 audit(1777037913.799:2526): avc: denied { mounton } for pid=16083 comm="syz.8.4728" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.595561][T16090] xfrm0 speed is unknown, defaulting to 1000 [ 250.648283][ T6733] hsr_slave_0: left promiscuous mode [ 250.665230][ T6733] hsr_slave_1: left promiscuous mode [ 250.684311][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.708358][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.733705][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.744286][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.755293][ T6733] veth1_macvtap: left promiscuous mode [ 250.761512][ T6733] veth0_macvtap: left promiscuous mode [ 250.771698][ T6733] veth1_vlan: left promiscuous mode [ 250.876983][ T6733] team0 (unregistering): Port device team_slave_1 removed [ 250.891738][ T6733] team0 (unregistering): Port device team_slave_0 removed [ 250.943751][ T3047] 8021q: adding VLAN 0 to HW filter on device eth17 [ 250.987279][T16122] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 251.032912][ T28] audit: type=1400 audit(1777037914.299:2527): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 251.226569][T16152] loop9: detected capacity change from 0 to 512 [ 251.293694][ T3047] 8021q: adding VLAN 0 to HW filter on device eth18 [ 251.547975][T16159] syz.9.4741: attempt to access beyond end of device [ 251.547975][T16159] loop9: rw=0, sector=432, nr_sectors = 128 limit=512 [ 252.033397][ T3047] 8021q: adding VLAN 0 to HW filter on device eth19 [ 252.109671][ T3452] kworker/u8:8: attempt to access beyond end of device [ 252.109671][ T3452] loop9: rw=1, sector=560, nr_sectors = 2904 limit=512 [ 252.158337][ T3452] kworker/u8:8: attempt to access beyond end of device [ 252.158337][ T3452] loop9: rw=1, sector=3464, nr_sectors = 5400 limit=512 [ 252.193328][ T28] audit: type=1400 audit(1777037915.459:2528): avc: denied { name_bind } for pid=16253 comm="syz.1.4749" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 252.230225][ T3452] kworker/u8:8: attempt to access beyond end of device [ 252.230225][ T3452] loop9: rw=1, sector=8864, nr_sectors = 3512 limit=512 [ 252.280310][ T3452] kworker/u8:8: attempt to access beyond end of device [ 252.280310][ T3452] loop9: rw=1, sector=12376, nr_sectors = 2280 limit=512 [ 252.327053][ T3452] kworker/u8:8: attempt to access beyond end of device [ 252.327053][ T3452] loop9: rw=1, sector=14656, nr_sectors = 1808 limit=512 [ 252.331698][T16252] xfrm0 speed is unknown, defaulting to 1000 [ 252.421852][ T3047] 8021q: adding VLAN 0 to HW filter on device eth20 [ 252.504603][T16291] xfrm0 speed is unknown, defaulting to 1000 [ 252.666284][T16252] chnl_net:caif_netlink_parms(): no params data found [ 252.866267][T16252] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.891937][T16252] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.929500][T16252] bridge_slave_0: entered allmulticast mode [ 252.957752][T16252] bridge_slave_0: entered promiscuous mode [ 253.023047][T16252] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.045245][T16252] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.052604][T16252] bridge_slave_1: entered allmulticast mode [ 253.059825][T16252] bridge_slave_1: entered promiscuous mode [ 253.097828][T16252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.130722][T16252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.171579][T16252] team0: Port device team_slave_0 added [ 253.195778][T16252] team0: Port device team_slave_1 added [ 253.245812][T16252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.259756][T16252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.304908][T16252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.335354][T16252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.355991][T16252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.394018][T16252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.459662][T16252] hsr_slave_0: entered promiscuous mode [ 253.487293][T16252] hsr_slave_1: entered promiscuous mode [ 253.564278][T16358] xfrm0 speed is unknown, defaulting to 1000 [ 253.710568][T16361] xfrm0 speed is unknown, defaulting to 1000 [ 253.777586][T16388] loop9: detected capacity change from 0 to 512 [ 253.826059][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 253.826075][ T28] audit: type=1326 audit(1777037917.089:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 253.910452][ T28] audit: type=1326 audit(1777037917.089:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 253.957422][ T28] audit: type=1326 audit(1777037917.089:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 254.002052][ T28] audit: type=1326 audit(1777037917.089:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 254.045239][ T28] audit: type=1326 audit(1777037917.129:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 254.077115][T16252] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 254.095448][T16252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.107937][T16252] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 254.116090][ T28] audit: type=1326 audit(1777037917.129:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 254.146069][T16252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.150329][T16414] netlink: 'syz.1.4787': attribute type 3 has an invalid length. [ 254.156619][T16252] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 254.175877][ T28] audit: type=1326 audit(1777037917.129:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 254.195553][T16414] netlink: 'syz.1.4787': attribute type 1 has an invalid length. [ 254.201082][T16252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.232519][T16252] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 254.250048][ T28] audit: type=1326 audit(1777037917.129:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 254.277263][T16252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.309727][ T28] audit: type=1326 audit(1777037917.129:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 254.364554][ T28] audit: type=1326 audit(1777037917.129:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e54cdd9 code=0x7ffc0000 [ 254.461650][T16252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.499911][T16252] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.532884][T16295] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.540037][T16295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.571938][T16252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.609792][T16252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.626271][T16295] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.633345][T16295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.757900][T16252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.932949][T16252] veth0_vlan: entered promiscuous mode [ 254.954547][T16252] veth1_vlan: entered promiscuous mode [ 255.002363][T16252] veth0_macvtap: entered promiscuous mode [ 255.021054][T16252] veth1_macvtap: entered promiscuous mode [ 255.048314][T16252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.074318][T16252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.093226][T16307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.105912][T16307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.123705][T16307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.143028][T16307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.292609][T16530] xfrm0 speed is unknown, defaulting to 1000 [ 255.404277][T16546] xfrm0 speed is unknown, defaulting to 1000 [ 255.411781][T16558] __nla_validate_parse: 192 callbacks suppressed [ 255.411803][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4806'. [ 255.448951][T16555] 9pnet: p9_errstr2errno: server reported unknown error 0000000 [ 255.463799][T16560] netlink: 'syz.9.4809': attribute type 39 has an invalid length. [ 255.583246][T16543] xfrm0 speed is unknown, defaulting to 1000 [ 255.872625][T16622] xfrm0 speed is unknown, defaulting to 1000 [ 255.985128][T16622] netlink: 'syz.9.4824': attribute type 5 has an invalid length. [ 255.992914][T16622] netlink: 45 bytes leftover after parsing attributes in process `syz.9.4824'. [ 256.047712][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4827'. [ 256.083568][T16636] macvtap1: entered promiscuous mode [ 256.094330][T16636] erspan0: entered promiscuous mode [ 256.100622][T16636] macvtap1: entered allmulticast mode [ 256.106398][T16636] erspan0: entered allmulticast mode [ 256.126771][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4827'. [ 256.144518][T16643] erspan0: left allmulticast mode [ 256.149929][T16645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4829'. [ 256.159748][T16643] erspan0: left promiscuous mode [ 256.803084][T16701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.353362][T16746] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4855'. [ 257.470492][ T10] IPVS: starting estimator thread 0... [ 257.541312][T16759] loop9: detected capacity change from 0 to 2048 [ 257.568751][T16755] IPVS: using max 2256 ests per chain, 112800 per kthread [ 257.577470][T16759] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.690699][T16759] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4860: bg 0: block 234: padding at end of block bitmap is not set [ 257.757535][T16759] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 394 with error 28 [ 257.778996][T16759] EXT4-fs (loop9): This should not happen!! Data will be lost [ 257.778996][T16759] [ 257.842848][T16759] EXT4-fs (loop9): Total free blocks count 0 [ 257.873710][T16759] EXT4-fs (loop9): Free/Dirty block details [ 257.899124][T16759] EXT4-fs (loop9): free_blocks=0 [ 257.921110][T16759] EXT4-fs (loop9): dirty_blocks=400 [ 257.942941][T16759] EXT4-fs (loop9): Block reservation details [ 257.965211][T16759] EXT4-fs (loop9): i_reserved_data_blocks=25 [ 258.093491][T10469] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 258.153097][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.325606][T16782] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4868'. [ 258.336479][T16780] xfrm0 speed is unknown, defaulting to 1000 [ 258.774527][T16800] VFS: Mount too revealing [ 258.789432][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4877'. [ 258.974379][T16816] xfrm0 speed is unknown, defaulting to 1000 [ 259.187916][T16833] loop2: detected capacity change from 0 to 512 [ 259.205856][T16833] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 259.247091][T16833] EXT4-fs (loop2): 1 truncate cleaned up [ 259.261376][T16833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.606402][T16854] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 259.831292][T16864] xfrm0 speed is unknown, defaulting to 1000 [ 259.959254][T16872] netlink: 'syz.8.4902': attribute type 1 has an invalid length. [ 260.009785][T16872] bond7: entered promiscuous mode [ 260.029908][T16872] 8021q: adding VLAN 0 to HW filter on device bond7 [ 260.051534][T16252] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.112503][T16875] 8021q: adding VLAN 0 to HW filter on device bond7 [ 260.143270][T16875] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 260.187641][T16881] loop9: detected capacity change from 0 to 512 [ 260.196482][T16875] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 260.223981][T16875] bond7: (slave ip6gre2): making interface the new active one [ 260.230480][T16881] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4905: bg 0: block 473: padding at end of block bitmap is not set [ 260.240165][T16875] ip6gre2: entered promiscuous mode [ 260.253319][T16875] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 260.304514][T16881] loop9: lost filesystem error report for type 5 error -117 [ 260.306052][T16881] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 260.313467][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 260.313499][ C0] EXT4-fs (loop9): initial error at time 1777037923: ext4_validate_block_bitmap:441 [ 260.313520][ C0] EXT4-fs (loop9): last error at time 1777037923: ext4_validate_block_bitmap:441 [ 260.408486][T16881] loop9: lost filesystem error report for type 5 error -117 [ 260.408720][T16881] EXT4-fs (loop9): 1 orphan inode deleted [ 260.445341][T16881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.457988][T16295] __quota_error: 23 callbacks suppressed [ 260.458064][T16295] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 260.479002][T16881] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.485390][T16295] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:52: Failed to release dquot type 1 [ 260.567902][T10469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.697358][T16911] loop9: detected capacity change from 0 to 8192 [ 260.825028][T16916] ================================================================== [ 260.833140][T16916] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 260.840267][T16916] [ 260.842593][T16916] write to 0xffff88812525335e of 2 bytes by task 16911 on cpu 0: [ 260.850297][T16916] fat16_ent_put+0x28/0x60 [ 260.854708][T16916] fat_alloc_clusters+0x57b/0xc50 [ 260.859720][T16916] fat_get_block+0x25e/0x5f0 [ 260.864309][T16916] __block_write_begin_int+0x400/0xf90 [ 260.869766][T16916] cont_write_begin+0x5fe/0x970 [ 260.874612][T16916] fat_write_begin+0x52/0xe0 [ 260.879196][T16916] generic_perform_write+0x183/0x490 [ 260.884473][T16916] __generic_file_write_iter+0x9e/0x120 [ 260.890012][T16916] generic_file_write_iter+0x8d/0x310 [ 260.895375][T16916] vfs_write+0x5a6/0x9f0 [ 260.899614][T16916] ksys_write+0xdc/0x1a0 [ 260.903854][T16916] __x64_sys_write+0x40/0x50 [ 260.908444][T16916] x64_sys_call+0x27e1/0x3020 [ 260.913118][T16916] do_syscall_64+0x12c/0x3b0 [ 260.917698][T16916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.923581][T16916] [ 260.925890][T16916] read to 0xffff888125253200 of 512 bytes by task 16916 on cpu 1: [ 260.933675][T16916] fat_mirror_bhs+0x1df/0x330 [ 260.938342][T16916] fat_alloc_clusters+0xb48/0xc50 [ 260.943359][T16916] fat_get_block+0x25e/0x5f0 [ 260.947945][T16916] __block_write_begin_int+0x400/0xf90 [ 260.953397][T16916] cont_write_begin+0x5fe/0x970 [ 260.958242][T16916] fat_write_begin+0x52/0xe0 [ 260.962827][T16916] generic_perform_write+0x183/0x490 [ 260.968104][T16916] __generic_file_write_iter+0x9e/0x120 [ 260.973714][T16916] generic_file_write_iter+0x8d/0x310 [ 260.979079][T16916] aio_write+0x2fe/0x430 [ 260.983319][T16916] io_submit_one+0xbc1/0x1350 [ 260.987991][T16916] __se_sys_io_submit+0xfb/0x280 [ 260.992921][T16916] __x64_sys_io_submit+0x43/0x50 [ 260.997849][T16916] x64_sys_call+0x19d5/0x3020 [ 261.002519][T16916] do_syscall_64+0x12c/0x3b0 [ 261.007109][T16916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.012988][T16916] [ 261.015294][T16916] Reported by Kernel Concurrency Sanitizer on: [ 261.021438][T16916] CPU: 1 UID: 0 PID: 16916 Comm: syz.9.4915 Tainted: G W syzkaller #0 PREEMPT(full) [ 261.032362][T16916] Tainted: [W]=WARN [ 261.036147][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.046187][T16916] ==================================================================