last executing test programs: 2m6.869744493s ago: executing program 0 (id=63): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000001740)={@desc={0x1, 0x0, @desc2}}) 2m6.75374943s ago: executing program 0 (id=65): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x80004, 0x0, 0xffffffff}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffe, @empty}, 0x2}}, 0x2e) 2m6.688997054s ago: executing program 0 (id=68): ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m6.493510096s ago: executing program 0 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 2m5.961672847s ago: executing program 0 (id=86): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 2m5.648532327s ago: executing program 0 (id=96): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x80, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2m5.603934139s ago: executing program 32 (id=96): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x80, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2m2.471860846s ago: executing program 4 (id=150): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x50, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x3a, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 2m1.645702396s ago: executing program 4 (id=158): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@abort}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x46942, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x751b, &(0x7f0000000400)={0x0, 0x7ee9, 0x1, 0x13, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m1.168671114s ago: executing program 4 (id=166): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 2m0.649537475s ago: executing program 4 (id=175): set_mempolicy(0x4005, 0x0, 0x9) io_setup(0x10000, &(0x7f00000014c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2m0.595095939s ago: executing program 33 (id=175): set_mempolicy(0x4005, 0x0, 0x9) io_setup(0x10000, &(0x7f00000014c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1m57.571329739s ago: executing program 3 (id=221): setfsgid(0xee00) r0 = syz_clone(0x0, 0x0, 0x36, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7, @local, 0x7}]}, &(0x7f0000000080)=0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/uts\x00') 1m56.681513732s ago: executing program 3 (id=243): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 1m56.653007724s ago: executing program 3 (id=244): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 1m56.55330237s ago: executing program 3 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x40020480) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 1m56.354965852s ago: executing program 3 (id=251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x50) dup(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000a00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x44}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xfc, 0x4, 0xfffffffd}}}}}}, 0x0) 1m55.569246809s ago: executing program 3 (id=261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="4137a2", 0x3}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) 1m55.452379316s ago: executing program 34 (id=261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="4137a2", 0x3}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) 1m51.827513863s ago: executing program 1 (id=299): socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/anycast6\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x11) close(0x3) 1m51.549702529s ago: executing program 1 (id=300): r0 = epoll_create1(0x0) r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$eJzs3M1vFOUfAPDvzLaFH2/tD/EFRG1CDI0vLS2oHLxoNPGA0UQPeKzbQggLNbQmQohUY/BiYoh6Nh5N/Ce8GPVk4lXvhoQoF9BTzczOwHbZLSxddiv7+SQDz7PzdJ/n22eemWfm2W0AA2s8+yeJ2BYRv0XEaD27usB4/b/rV89X/756vprEyspbfyZ5uWtXz1fLouXPbS0yE2lE+klSVLLa4tlzJ2drtfkzRX5q6dR7U4tnzz174tTs8fnj86dnDh8+dHD6hednnutKnFlc1/Z8uLB392vvXHq9evTSuz99l7V3W7G/MY5uGc8C/2sl17zvyW5X1mfbG9LJUB8bQkcqEZF113A+/kejEjc7bzRe/bivjQPuqezatKn97uUV4D6WRL9bAPRHeaHP7n/LrUdTjw3hykv1G6As7uvFVt8zFGlRZrjp/rabxiPi6PI/X2db3KPnEAAAjT6rfnUknmk1/0vjoYZyO4o1lLGI+H9E7IyIByJiV0Q8GJGXfTgiHumw/ualoVvnP+nluwrsDmXzvxeLta3V879y9hdjlSK3PY9/ODl2ojZ/oPidTMTwpiw/vUYd37/y6+ft9jXO/7Itq7+cCxbtuDzU9IBubnZpNp+UdsGVjyL2DLWKP7mxEpBExO6I2NPZW+8oEyee+nZvu0K3j38NXVhnWvkmYn+9/5ejKf5Ssvb65NTmqM0fmCqPilv9/MvFN9vVv674uyDr/y2rj//mImNJ43rtYud1XPz907b3NHd7/I8kb+fno7KjPphdWjozHTGSHMlfHCnK5q/P3PzZMl+Wz+Kf2Nd6/O+MmxU8GhHZQfxYRDweEU8UbS+Pkn1rxP/jy+33bYT+n2t5/rtx/Df1f+eJyskfYnOb+u+s/w/lqYnilfz8dxt32sB1/fIAAADgPyLNPwOfpJM30mk6OVn/DP+u2JLWFhaXnj628P7pufpn5cdiOC2fdI02PA+dTpaLd6znZ4pnxeX+g8Vz4y8r/8vzk9WF2lyfY4dBt7XN+M/8Uel364B7rtU62sxIHxoC9Fzz+E9XZy+80cvGAD3l+9owuG4z/tNetQPoPdd/GFytxv+Fpry1ALg/uf7D4DL+YXAZ/zC4jH8YSOv5Xv8gJco/krpR2tP/RKQbohmdJcor3UZpT/cT+7+oR7juN+znWQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB7/g0AAP//0TLrKA==") r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000100)='pagemap\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1m50.841769992s ago: executing program 1 (id=306): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000300)=0x4, 0x4) recvmmsg$unix(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) 1m49.965970854s ago: executing program 1 (id=313): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 1m49.86857483s ago: executing program 1 (id=316): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000) syz_open_dev$loop(0x0, 0x2, 0x2001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) 1m49.605773246s ago: executing program 1 (id=324): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x274) 1m49.605613316s ago: executing program 35 (id=324): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x274) 2.291430683s ago: executing program 7 (id=2277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x10003, 0x3, 0x1, 0x8, 0x20005, 0xb900, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2.058818627s ago: executing program 7 (id=2281): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000040000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.038088168s ago: executing program 8 (id=2282): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x488, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r4, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x458, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8, 0x27, 0x40, 0x4, 0x8, 0x4, 0x8, 0x8, 0x101, 0x2, 0x63ba, 0x5, 0x101, 0xe4b, 0x0, 0x8, 0x62, 0x9, 0x46c, 0xffffffff, 0x7fffffff, 0x10, 0x92, 0x3ff, 0x493, 0xff, 0x5, 0x3, 0x8, 0x9, 0x7fff, 0x7, 0x800, 0x0, 0x8, 0x7fff, 0x7, 0xfffffffe, 0x9b93, 0x6, 0x8000, 0x0, 0x80000000, 0x6, 0xdd09, 0x3, 0x1, 0x3, 0x1, 0x8, 0x2, 0x0, 0xff, 0x6, 0xffffffff, 0xffff, 0x4, 0x4, 0x1, 0x7, 0x1, 0x6462, 0x6, 0x0, 0x7, 0xb7, 0x8, 0x8000, 0x101, 0x2, 0x800, 0x8, 0x8, 0x8001, 0x0, 0x3, 0x3, 0x1, 0xffffffff, 0x115620ef, 0x2, 0x1, 0x7, 0x4, 0x0, 0x400, 0xd4, 0x1, 0x1f81, 0x8, 0x3, 0x0, 0x100, 0x7, 0x8000, 0x7, 0x4d, 0x6b1e, 0x2, 0x3f7, 0x6, 0x7, 0x2, 0x200, 0x9, 0x4, 0xd1eb, 0xff, 0xf6d8, 0xc22, 0x100, 0x69de, 0xfffffc00, 0x5, 0x9, 0xa, 0xfffffffc, 0x7fffffff, 0x7, 0x6, 0xffffffed, 0x8, 0x81, 0xffff, 0x10001, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0x7e, 0x5, 0xfffffff9, 0x1ff, 0x7f, 0x1000, 0xa4, 0x3, 0x27, 0x3, 0x4, 0xff, 0x0, 0xd, 0x8, 0x6, 0x5eba, 0x4, 0x4, 0x1ff, 0x5, 0xf684, 0x7, 0x7, 0xfffffff9, 0x5836, 0x4, 0x5, 0x0, 0x3, 0x3, 0xfd5a, 0xe8, 0xffffff7f, 0x6, 0x9, 0x4, 0x9, 0x1ff, 0x8, 0x4, 0x2, 0x4, 0x5, 0xffff, 0x8, 0xfffffffe, 0x3c, 0x33, 0xb, 0x2, 0x5, 0x1c, 0xec6, 0xffffffcc, 0x5, 0x3, 0x7, 0x8000, 0x9, 0x4, 0x9, 0x37, 0x2, 0x3, 0x3d, 0x1000, 0x4, 0x0, 0xc7, 0x3, 0x1470, 0x3, 0xe1, 0x5, 0x5, 0xb0, 0x1, 0x4, 0x10, 0xb7a8, 0x81, 0x0, 0x4, 0x9, 0x38000000, 0x2, 0xfffffbf7, 0x7f, 0xaa, 0x2, 0x1, 0x8, 0x5, 0x4, 0xbd2a, 0x5, 0x9, 0x7f, 0x54, 0xfff, 0xe6, 0x4, 0x2, 0xc, 0x40, 0x7, 0x8, 0x2, 0x1, 0x10000, 0x7, 0x800000, 0xfd8, 0x7fff, 0x8, 0x6, 0x8, 0x9, 0x4, 0x7, 0x7, 0x4, 0xfff]}]}, @TCA_CGROUP_ACT={0x30, 0x1, [@m_ife={0x2c, 0x9, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xa40, 0x9, 0x18}}}]}]}]}}]}, 0x488}}, 0x40) 2.018366689s ago: executing program 5 (id=2283): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x200204) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x200204) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) 1.984780062s ago: executing program 5 (id=2284): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = semget$private(0x0, 0x4000, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x891b, 0x0) semctl$GETALL(r0, 0x0, 0xd, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.982849132s ago: executing program 7 (id=2286): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x4, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006f40), 0x2002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) 1.939668094s ago: executing program 8 (id=2288): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) r1 = socket$igmp(0x2, 0x3, 0x2) accept4$inet(r1, 0x0, &(0x7f0000000180), 0x80800) sendmsg$inet(r1, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x4) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f00000002c0)={0x1, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5e}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x85}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000800}, 0x44000) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r3, &(0x7f0000000680)={0x11, 0x1, r4, 0x1, 0x9}, 0x14) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xf, 0xffe0}, {0xd, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20058054) 1.935108894s ago: executing program 5 (id=2289): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) write$P9_RREAD(0xffffffffffffffff, 0x0, 0xb) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) r4 = dup(r3) r5 = dup3(r4, r3, 0x0) write$UHID_SET_REPORT_REPLY(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.880212038s ago: executing program 5 (id=2290): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) 1.795697283s ago: executing program 5 (id=2292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x10003, 0x3, 0x1, 0x8, 0x20005, 0xb900, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.795479973s ago: executing program 7 (id=2293): pipe(&(0x7f00000001c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) clock_getres(0x7, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) r1 = syz_io_uring_setup(0x5c4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x8000000}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345, {0x0, r4}}) io_uring_enter(r1, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r5 = syz_open_pts(r0, 0x80) r6 = dup3(r5, r0, 0x80000) read$watch_queue(r6, &(0x7f0000002d40)=""/4105, 0x1009) 1.752862625s ago: executing program 2 (id=2295): r0 = fsmount(0xffffffffffffffff, 0x1, 0x1) fchdir(r0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x41, 0x9}}], 0x18}, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x420e, &(0x7f0000003240)=ANY=[], 0x6, 0x364, &(0x7f00000007c0)="$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") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x13, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@fallback, r2, 0x24, 0x2, r4, @void, @value=r4, @void, @void, r5}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) pwritev2(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x1200, 0x41001, 0x3) 1.750666905s ago: executing program 8 (id=2296): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 1.710528868s ago: executing program 5 (id=2297): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) close(0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x1008000, &(0x7f0000000380)={[{@fat=@errors_continue}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}]}, 0x1, 0x29d, &(0x7f0000000000)="$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") 1.637446003s ago: executing program 6 (id=2298): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) waitid(0x1, 0x0, 0x0, 0x40000004, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) 1.285565573s ago: executing program 8 (id=2299): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") getuid() r0 = syz_create_resource$binfmt(0x0) syz_create_resource$binfmt(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept4(r1, &(0x7f0000000180)=@alg, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000280)) 1.284552143s ago: executing program 2 (id=2309): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x4000000) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 1.275479774s ago: executing program 6 (id=2300): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0xe, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) epoll_create1(0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e21, 0xffffffff, @remote, 0x101}}}, 0xa0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_ethernet(0x77a, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x400) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88040, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) keyctl$session_to_parent(0x12) 1.257366505s ago: executing program 2 (id=2301): r0 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x4100c0, 0x1}, 0x47) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000004c0)) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000940), 0x0, 0x0, 0x2) futimesat(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x4c1, &(0x7f00000012c0)="$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") getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, 0x0, 0x0) getsockname$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000380)=0x1c) 1.125990873s ago: executing program 6 (id=2302): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/175, 0xaf}], 0x1, 0x9, 0xfffffff6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$unix(r1, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000300)='*', 0x1}], 0x1, 0x0, 0x0, 0x40}}], 0x1, 0x4) 1.033673888s ago: executing program 2 (id=2303): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 945.709293ms ago: executing program 7 (id=2304): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodioread_nolock}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) fallocate(r0, 0x0, 0x0, 0x1955) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) memfd_secret(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x66) 921.337255ms ago: executing program 8 (id=2305): openat$urandom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0xcd, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 777.702634ms ago: executing program 7 (id=2306): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x46, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:*\t\n', @ANYRESHEX=r2], 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000240), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10, 0x0}, 0x20008890) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x303) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 273.090244ms ago: executing program 6 (id=2307): getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={@private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20000001, 0x2, 0x0, 0x100, 0x1000007c, 0x80040200}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) 253.199595ms ago: executing program 6 (id=2308): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x7}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000c80)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x30, 0x0, @opaque="4d76f364d54d1525c6dc09eae42d5d07ec5464c11985ebb9370b19644e22c7324089b744134d59ad"}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) io_uring_setup(0x4fee, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x9, 0x6, 0x7f, 0x4, 0xfffffffffffffffb, 0xffffffffffffffff}) process_vm_writev(r2, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 182.677529ms ago: executing program 2 (id=2310): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) sched_setscheduler(0x0, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x9, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) 158.406161ms ago: executing program 6 (id=2311): bpf$MAP_CREATE(0x0, 0x0, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x70) write$char_usb(0xffffffffffffffff, 0x0, 0x18) 77.518866ms ago: executing program 2 (id=2312): r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x10, r0, 0x41d1000) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) connect$unix(r4, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYRES32], 0x48) 0s ago: executing program 8 (id=2313): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008046, &(0x7f00000003c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@grpid}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@dax_never}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@discard}]}, 0x11, 0x556, &(0x7f00000005c0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8H7nZO7k3O/ebe7+m5OTckgKE1kf1TiHg5Ir5JIg5GRJKvG4185cTadqv3r85mSxKNxqd/Jc3tsnrrtVrP259XXoqI376KOF7Y2G5teWWhVC6ni3l9sl65NFlbXjlxoVKaT+fTi9MzM6fenpl+7913+hbrG2f/+f6T2x+e+vro6ne/3D10M4nTcSBf1x7HE7jWXpmIifw9GYvTj2w41YfGdoJd+f/JgPeD7RnJ83wssj7gYIzkWQ/8/30ZEQ1gSCXyH4ZUaxzQurbv03Xwc+PeB2sXQBvjH137bCT2NK+N9q0mD10ZZde7431oP2vj1z9v3cyW6N/nEABbunY9Ik6Ojm7s/5K8/9u+kz1s82gb+j94dm5n4583O41/Cuvjn+gw/tnfIXe3Y+v8L9ztQzNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq59/JctWfutsWC+H3dHdz/8nLlSvfQkMbe7dz3ilY7j32T9+Ccdjn/2fpztsY0j6a3Xuq3bOv6nq/FTxOsdj/+DGa1k8/nJyeb5MNk6Kzb6+8aR37u1P+j4s+O/b/P4x5P2+dra47fx455/027rHoo/ej//dyWfNcut+ccrpXp9cSpiV/LxxsenHzy3VW9tn8V/7Ojm/V+n839vRHzeY/w3Dv/8ak/xD+j4zz3W8X/8wp2PvvihW/u99X9vNUvH8kd66f963cEnee8AAAAAAABgpylExIFICsX1cqFQLK7d33E49hXK1Vr9+Pnq0sW5aH5XdjzGCq2Z7oNt90NM5ffDturTj9RnIuJQRHw7srdZL85Wy3ODDh4AAAAAAAAAAAAAAAAAAAB2iP1dvv+f+WNk0HsHPHV+8huG15b5349fegJ2JH//YXjJfxhe8h+Gl/yH4SX/YXjJfxhe8h+Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACAvjp75ky2NFbvX53N6nOXl5cWqpdPzKW1hWJlabY4W128VJyvVufLaXG2Wtnq9crV6qWp6Vi6MllPa/XJ2vLKuUp16WL93IVKaT49l449k6gAAAAAAAAAAAAAAAAAAADg+VJbXlkolcvpooLCtgqjO2M3FPpcGHTPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//xVY3tw==") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', 0x48042, 0x1b7) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): 85303][ T29] audit: type=1400 audit(1769102992.345:708): avc: denied { create } for pid=6279 comm="syz.6.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.051716][ T6285] netlink: 'syz.7.788': attribute type 1 has an invalid length. [ 80.066287][ T6287] loop6: detected capacity change from 0 to 512 [ 80.092105][ T6287] EXT4-fs: Ignoring removed nobh option [ 80.116380][ T6287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.182194][ T29] audit: type=1326 audit(1769102992.545:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 80.211857][ T6287] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.224167][ T29] audit: type=1326 audit(1769102992.545:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 80.247500][ T29] audit: type=1326 audit(1769102992.565:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 80.270761][ T29] audit: type=1326 audit(1769102992.565:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 80.294103][ T29] audit: type=1326 audit(1769102992.565:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 80.317715][ T29] audit: type=1326 audit(1769102992.565:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 80.341225][ T29] audit: type=1326 audit(1769102992.565:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6300 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 80.366385][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.377597][ T6299] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.413911][ T6299] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.794: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 80.433826][ T6287] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.789: corrupted inode contents [ 80.461089][ T6313] ext4: Unknown parameter 'subj_type' [ 80.472335][ T6299] lo speed is unknown, defaulting to 1000 [ 80.482435][ T6287] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #18: comm syz.6.789: mark_inode_dirty error [ 80.494425][ T6287] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.789: corrupted inode contents [ 80.506417][ T6287] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #18: comm syz.6.789: mark_inode_dirty error [ 80.507677][ T3310] udevd[3310]: incorrect ext4 checksum on /dev/loop8 [ 80.530596][ T6287] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #18: comm syz.6.789: mark inode dirty (error -117) [ 80.621849][ T6287] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 80.694156][ T4038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.886869][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.966868][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.7.805'. [ 80.976468][ T6336] bridge_slave_1: left allmulticast mode [ 80.982283][ T6336] bridge_slave_1: left promiscuous mode [ 80.988084][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.006340][ T6336] bridge_slave_0: left allmulticast mode [ 81.012185][ T6336] bridge_slave_0: left promiscuous mode [ 81.017914][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.037157][ T6341] siw: device registration error -23 [ 81.202871][ T6358] lo speed is unknown, defaulting to 1000 [ 81.330134][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.6.820'. [ 81.463175][ T6384] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.525071][ T6384] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.595112][ T6384] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.644600][ T6404] netlink: 'syz.6.831': attribute type 10 has an invalid length. [ 81.653955][ T6384] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.676572][ T6404] team0: Port device dummy0 added [ 81.768661][ T404] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.821220][ T2840] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.843559][ T2840] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.856973][ T2840] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.905459][ T6419] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6419 comm=syz.5.836 [ 82.029222][ T6434] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.844: bad orphan inode 134217728 [ 82.048153][ T6434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.109294][ T6441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.122773][ T6441] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.847: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 82.154010][ T6441] lo speed is unknown, defaulting to 1000 [ 82.497810][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.538877][ T6470] netlink: 'syz.7.855': attribute type 4 has an invalid length. [ 82.550459][ T6470] netlink: 'syz.7.855': attribute type 4 has an invalid length. [ 82.603910][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.7.857'. [ 82.621302][ T6474] l2tp_ppp: sess 2/0: no socket in recv [ 82.652220][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.710868][ T6482] set_capacity_and_notify: 4 callbacks suppressed [ 82.710882][ T6482] loop2: detected capacity change from 0 to 512 [ 82.743310][ T6482] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 82.751524][ T6482] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.759179][ T6482] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 82.780478][ T6482] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 82.787525][ T6482] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.860: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 82.805783][ T6482] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.860: couldn't read orphan inode 13 (err -117) [ 82.820375][ T6482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.854282][ T6482] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.860: deleted inode referenced: 12 [ 82.898213][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.017571][ T6514] lo speed is unknown, defaulting to 1000 [ 83.484241][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 83.539254][ T6566] loop2: detected capacity change from 0 to 2048 [ 83.574915][ T6566] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.893: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 83.644186][ T6573] lo speed is unknown, defaulting to 1000 [ 83.671293][ T6572] syzkaller0: entered promiscuous mode [ 83.676876][ T6572] syzkaller0: entered allmulticast mode [ 84.229394][ T6592] loop2: detected capacity change from 0 to 2048 [ 84.313208][ T6592] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.330570][ T6592] EXT4-fs (loop2): Remounting filesystem read-only [ 84.531345][ T6614] netlink: 'syz.5.911': attribute type 29 has an invalid length. [ 84.540071][ T6614] netlink: 'syz.5.911': attribute type 29 has an invalid length. [ 84.549888][ T6614] netlink: 500 bytes leftover after parsing attributes in process `syz.5.911'. [ 85.034920][ T6647] loop8: detected capacity change from 0 to 512 [ 85.043275][ T6647] EXT4-fs: Ignoring removed oldalloc option [ 85.061807][ T6647] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.921: Parent and EA inode have the same ino 15 [ 85.078748][ T6647] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.921: Parent and EA inode have the same ino 15 [ 85.091477][ T6647] EXT4-fs (loop8): 1 orphan inode deleted [ 85.578089][ T6663] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÛß% [ 86.024102][ T6685] loop2: detected capacity change from 0 to 8192 [ 86.068264][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 86.068283][ T29] audit: type=1326 audit(1769102998.425:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.6.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 86.097722][ T29] audit: type=1326 audit(1769102998.425:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.6.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 86.126829][ T29] audit: type=1326 audit(1769102998.485:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.6.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 86.152783][ T29] audit: type=1326 audit(1769102998.515:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.6.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 86.184769][ T29] audit: type=1326 audit(1769102998.535:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.6.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 86.208139][ T29] audit: type=1326 audit(1769102998.545:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.6.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 86.231399][ T29] audit: type=1326 audit(1769102998.545:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.6.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 86.254703][ T29] audit: type=1326 audit(1769102998.545:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.6.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 86.277936][ T29] audit: type=1326 audit(1769102998.545:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.6.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 86.301278][ T29] audit: type=1326 audit(1769102998.545:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.6.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 86.632000][ T6699] Set syz1 is full, maxelem 65536 reached [ 86.677844][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.8.949'. [ 86.730219][ T6717] lo speed is unknown, defaulting to 1000 [ 87.207654][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.8.967'. [ 87.684130][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.968'. [ 87.684651][ T6763] loop7: detected capacity change from 0 to 2048 [ 87.734765][ T6767] Cannot find add_set index 0 as target [ 87.873487][ T6775] lo speed is unknown, defaulting to 1000 [ 87.915903][ T6779] gtp0: entered promiscuous mode [ 88.020947][ T6778] loop2: detected capacity change from 0 to 8192 [ 88.230110][ T6797] loop2: detected capacity change from 0 to 128 [ 88.348077][ T6797] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.484548][ T6810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.996'. [ 88.495123][ T6810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.996'. [ 88.809527][ T6822] lo speed is unknown, defaulting to 1000 [ 88.860547][ T6829] netlink: 7 bytes leftover after parsing attributes in process `syz.8.992'. [ 89.082644][ T6858] loop8: detected capacity change from 0 to 512 [ 89.097028][ T6858] EXT4-fs: Ignoring removed i_version option [ 89.103097][ T6858] EXT4-fs: Ignoring removed nobh option [ 89.125834][ T6858] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 89.165320][ T6858] EXT4-fs (loop8): 1 truncate cleaned up [ 89.203397][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1008'. [ 89.212562][ T6864] bridge_slave_1: left allmulticast mode [ 89.218237][ T6864] bridge_slave_1: left promiscuous mode [ 89.223930][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.265877][ T6864] bridge_slave_0: left allmulticast mode [ 89.271704][ T6864] bridge_slave_0: left promiscuous mode [ 89.277419][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.479332][ T6892] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 89.506650][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1024'. [ 89.661003][ T6906] loop7: detected capacity change from 0 to 2048 [ 89.709170][ T6906] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.1027: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 89.789136][ T6906] lo speed is unknown, defaulting to 1000 [ 89.811628][ T3388] IPVS: starting estimator thread 0... [ 89.857763][ T3388] Process accounting resumed [ 89.902359][ T6921] IPVS: using max 2448 ests per chain, 122400 per kthread [ 90.467983][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1038'. [ 90.477049][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1038'. [ 90.550329][ T6949] loop7: detected capacity change from 0 to 1024 [ 90.573028][ T6951] loop8: detected capacity change from 0 to 256 [ 90.599383][ T6949] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 90.666375][ T6959] bridge_slave_1: left allmulticast mode [ 90.672149][ T6959] bridge_slave_1: left promiscuous mode [ 90.677947][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.701428][ T6959] bridge_slave_0: left allmulticast mode [ 90.707229][ T6959] bridge_slave_0: left promiscuous mode [ 90.713051][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.827136][ T6974] netlink: 'syz.5.1059': attribute type 29 has an invalid length. [ 90.862686][ T6974] netlink: 'syz.5.1059': attribute type 29 has an invalid length. [ 91.197437][ T6988] loop8: detected capacity change from 0 to 1024 [ 91.209821][ T6988] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1052: bad orphan inode 134217728 [ 91.515910][ T7003] loop2: detected capacity change from 0 to 1024 [ 91.550990][ T7003] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 91.598873][ T7015] loop8: detected capacity change from 0 to 512 [ 91.629761][ T7013] lo speed is unknown, defaulting to 1000 [ 91.636425][ T7015] EXT4-fs: Ignoring removed nobh option [ 91.664745][ T7015] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.693838][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 91.693854][ T29] audit: type=1400 audit(1769103004.055:897): avc: denied { read write } for pid=7014 comm="syz.8.1063" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.725997][ T29] audit: type=1400 audit(1769103004.055:898): avc: denied { open } for pid=7014 comm="syz.8.1063" path="/133/bus/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.059523][ T7039] loop2: detected capacity change from 0 to 4096 [ 92.092397][ T7037] lo speed is unknown, defaulting to 1000 [ 92.216552][ T7052] netlink: 'syz.7.1078': attribute type 1 has an invalid length. [ 92.224390][ T7052] __nla_validate_parse: 2 callbacks suppressed [ 92.224402][ T7052] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1078'. [ 92.357132][ T29] audit: type=1400 audit(1769103004.715:899): avc: denied { shutdown } for pid=7057 comm="syz.2.1080" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.406379][ T7061] netlink: 'syz.2.1081': attribute type 10 has an invalid length. [ 92.414397][ T7061] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1081'. [ 92.428350][ T7061] batman_adv: batadv0: Adding interface: veth1_vlan [ 92.435013][ T7061] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.461128][ T7061] batman_adv: batadv0: Interface activated: veth1_vlan [ 92.649146][ T29] audit: type=1326 audit(1769103005.005:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 92.649170][ T7066] EXT4-fs: Ignoring removed nobh option [ 92.679421][ T29] audit: type=1326 audit(1769103005.035:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 92.702877][ T29] audit: type=1326 audit(1769103005.035:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 92.726434][ T29] audit: type=1326 audit(1769103005.035:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 92.729218][ T7066] EXT4-fs: old and new quota format mixing [ 92.749824][ T29] audit: type=1326 audit(1769103005.035:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 92.749877][ T29] audit: type=1326 audit(1769103005.035:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 92.802292][ T29] audit: type=1326 audit(1769103005.035:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7065 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 93.030710][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1087'. [ 93.040009][ T7074] ip6gre0: Master is either lo or non-ether device [ 93.188856][ T7071] set_capacity_and_notify: 1 callbacks suppressed [ 93.188930][ T7071] loop8: detected capacity change from 0 to 2048 [ 93.216914][ T7077] loop2: detected capacity change from 0 to 512 [ 93.238707][ T7077] ext4 filesystem being mounted at /213/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.285348][ T7071] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.300740][ T7071] EXT4-fs (loop8): Remounting filesystem read-only [ 93.385726][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1090'. [ 93.434047][ T7090] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 93.441853][ T7090] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1092'. [ 93.502464][ T7093] loop2: detected capacity change from 0 to 1024 [ 93.527270][ T7093] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1105: missing EA_INODE flag [ 93.545002][ T7093] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1105: error while reading EA inode 11 err=-117 [ 94.858781][ T7144] loop2: detected capacity change from 0 to 512 [ 94.890856][ T7144] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.918456][ T7143] loop8: detected capacity change from 0 to 8192 [ 94.968664][ T7153] gtp0: entered promiscuous mode [ 94.999034][ T3388] Process accounting resumed [ 95.037253][ T7156] lo speed is unknown, defaulting to 1000 [ 95.067744][ T7158] EXT4-fs (loop2): shut down requested (0) [ 95.471385][ T7175] loop2: detected capacity change from 0 to 512 [ 95.498767][ T7175] EXT4-fs: Ignoring removed i_version option [ 95.504884][ T7175] EXT4-fs: Ignoring removed nobh option [ 95.534377][ T7175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.552794][ T7175] EXT4-fs (loop2): 1 truncate cleaned up [ 95.909213][ T7192] loop7: detected capacity change from 0 to 1024 [ 95.929761][ T7194] loop2: detected capacity change from 0 to 512 [ 95.992101][ T7194] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 96.032058][ T7194] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1126: invalid indirect mapped block 2683928664 (level 1) [ 96.105501][ T7194] EXT4-fs (loop2): Remounting filesystem read-only [ 96.117113][ T7192] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 18: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 96.125982][ T7194] EXT4-fs (loop2): 1 truncate cleaned up [ 97.081053][ T7246] loop7: detected capacity change from 0 to 512 [ 97.091977][ T7246] EXT4-fs: Ignoring removed nobh option [ 97.112174][ T7246] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 97.123669][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.133238][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.142977][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 97.152061][ T7246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 97.183995][ T7246] System zones: 1-12 [ 97.189600][ T7246] EXT4-fs (loop7): 1 truncate cleaned up [ 97.326545][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1163'. [ 97.758947][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 97.758984][ T29] audit: type=1400 audit(1769103010.115:965): avc: denied { unmount } for pid=7299 comm="syz.5.1173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 97.826431][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811c36b800: rx timeout, send abort [ 97.834913][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811c36b800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 98.135420][ T7342] loop2: detected capacity change from 0 to 128 [ 98.148622][ T7342] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.297094][ T7351] .1!€ÿ: renamed from bond_slave_0 [ 98.307788][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.320524][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.340354][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1183'. [ 98.353850][ T7357] loop8: detected capacity change from 0 to 512 [ 98.361076][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1183'. [ 98.384430][ T7357] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.459456][ T29] audit: type=1326 audit(1769103010.815:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.5.1186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57b6dcacb9 code=0x0 [ 98.749243][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1188'. [ 98.778092][ T29] audit: type=1326 audit(1769103011.135:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 98.803704][ T29] audit: type=1326 audit(1769103011.135:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 98.827493][ T29] audit: type=1326 audit(1769103011.135:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 98.850928][ T29] audit: type=1326 audit(1769103011.135:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 98.874341][ T29] audit: type=1326 audit(1769103011.135:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 98.897755][ T29] audit: type=1326 audit(1769103011.135:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 98.921286][ T29] audit: type=1326 audit(1769103011.135:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 98.944676][ T29] audit: type=1326 audit(1769103011.135:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 99.287067][ T7357] syz.8.1184 (7357) used greatest stack depth: 6160 bytes left [ 99.332179][ T4798] EXT4-fs unmount: 43 callbacks suppressed [ 99.332213][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.386152][ T7396] loop7: detected capacity change from 0 to 1024 [ 99.409663][ T7396] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.437372][ T7396] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 99.448889][ T7396] EXT4-fs (loop7): orphan cleanup on readonly fs [ 99.455604][ T7396] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.1201: Freeing blocks not in datazone - block = 0, count = 4096 [ 99.469451][ T7396] EXT4-fs (loop7): 1 orphan inode deleted [ 99.475786][ T7396] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.686804][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.697526][ T7407] lo speed is unknown, defaulting to 1000 [ 99.714873][ T7413] loop7: detected capacity change from 0 to 512 [ 99.724783][ T7413] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 99.741458][ T7413] EXT4-fs (loop7): 1 truncate cleaned up [ 99.792860][ T7417] loop2: detected capacity change from 0 to 512 [ 99.799614][ T7413] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.812532][ T7417] EXT4-fs: Ignoring removed bh option [ 99.888435][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.900392][ T7417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.949154][ T7417] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.988518][ T7428] loop7: detected capacity change from 0 to 512 [ 100.007720][ T7428] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1212: inode has both inline data and extents flags [ 100.034238][ T7428] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1212: couldn't read orphan inode 15 (err -117) [ 100.048009][ T7428] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.083165][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.139364][ T7438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1214'. [ 100.210427][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.881666][ T3701] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 100.889212][ T3701] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 100.896771][ T3701] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 100.905009][ T3701] hid-generic 0003:0003:0000.0004: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 100.934276][ T7466] fido_id[7466]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.985450][ T7474] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1224'. [ 101.022445][ T7476] lo speed is unknown, defaulting to 1000 [ 101.157116][ T7486] loop2: detected capacity change from 0 to 128 [ 101.360082][ T4712] kworker/u8:19: attempt to access beyond end of device [ 101.360082][ T4712] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 101.419820][ T4712] kworker/u8:19: attempt to access beyond end of device [ 101.419820][ T4712] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 101.461846][ T4712] kworker/u8:19: attempt to access beyond end of device [ 101.461846][ T4712] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 101.499439][ T4712] kworker/u8:19: attempt to access beyond end of device [ 101.499439][ T4712] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 101.544067][ T4712] kworker/u8:19: attempt to access beyond end of device [ 101.544067][ T4712] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 101.581473][ T4712] kworker/u8:19: attempt to access beyond end of device [ 101.581473][ T4712] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 101.621613][ T4712] kworker/u8:19: attempt to access beyond end of device [ 101.621613][ T4712] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 101.645329][ T4712] kworker/u8:19: attempt to access beyond end of device [ 101.645329][ T4712] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 101.664302][ T4712] kworker/u8:19: attempt to access beyond end of device [ 101.664302][ T4712] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 101.678534][ T4712] kworker/u8:19: attempt to access beyond end of device [ 101.678534][ T4712] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 102.083563][ T7562] lo speed is unknown, defaulting to 1000 [ 102.235022][ T7567] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 102.622182][ T7587] xt_hashlimit: size too large, truncated to 1048576 [ 102.819085][ T3701] IPVS: starting estimator thread 0... [ 102.911681][ T7594] IPVS: using max 2064 ests per chain, 103200 per kthread [ 103.150548][ T7631] loop7: detected capacity change from 0 to 2048 [ 103.185982][ T7635] loop8: detected capacity change from 0 to 128 [ 103.198214][ T7635] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.261992][ T7631] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.1273'. [ 103.284458][ T7635] ext4 filesystem being mounted at /168/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.375590][ T4798] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.025312][ T7699] loop2: detected capacity change from 0 to 512 [ 104.055563][ T7699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.094699][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.183360][ T7712] SELinux: failed to load policy [ 104.217366][ T7717] loop8: detected capacity change from 0 to 512 [ 104.226892][ T7715] loop7: detected capacity change from 0 to 1024 [ 104.237531][ T7715] EXT4-fs: inline encryption not supported [ 104.244675][ T7717] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.258775][ T7717] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.273905][ T7715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.321570][ T7725] loop2: detected capacity change from 0 to 512 [ 104.334593][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.345106][ T7715] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 104.360273][ T7715] EXT4-fs (loop7): Remounting filesystem read-only [ 104.370710][ T7725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.393281][ T7725] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.404344][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.484306][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.544405][ T7735] loop7: detected capacity change from 0 to 2048 [ 104.574020][ T3310] Alternate GPT is invalid, using primary GPT. [ 104.580467][ T3310] loop7: p1 p2 p3 [ 104.584265][ T3310] loop7: partition table partially beyond EOD, truncated [ 104.615461][ T7735] Alternate GPT is invalid, using primary GPT. [ 104.621766][ T7735] loop7: p1 p2 p3 [ 104.625488][ T7735] loop7: partition table partially beyond EOD, truncated [ 104.796683][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.803958][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.861754][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.891442][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.950214][ T7749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.981633][ T7749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.998366][ T7749] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 105.026867][ T7749] gtp0: left promiscuous mode [ 105.033468][ T2971] lo speed is unknown, defaulting to 1000 [ 105.039278][ T2971] syz2: Port: 1 Link DOWN [ 105.044312][ T1725] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.053293][ T1725] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.084933][ T1725] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.093892][ T1725] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.130774][ T1725] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.139808][ T1725] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.179347][ T1725] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.188338][ T1725] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.460192][ T7779] loop8: detected capacity change from 0 to 128 [ 105.489457][ T7779] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.554416][ T7784] loop5: detected capacity change from 0 to 7 [ 105.670955][ T7784] loop5: [ 105.691879][ T7779] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.875617][ T7794] loop2: detected capacity change from 0 to 512 [ 105.885430][ T7794] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.899337][ T7794] EXT4-fs (loop2): 1 truncate cleaned up [ 105.907834][ T7794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.927408][ T4798] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.958794][ T7803] loop8: detected capacity change from 0 to 1024 [ 105.978826][ T7794] xt_hashlimit: size too large, truncated to 1048576 [ 106.007758][ T7803] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.065767][ T7803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.068237][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 106.068284][ T29] audit: type=1400 audit(1769103018.425:1000): avc: denied { map } for pid=7802 comm="syz.8.1334" path="/184/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.073110][ T7803] IPv6: NLM_F_CREATE should be set when creating new route [ 106.079172][ T29] audit: type=1400 audit(1769103018.425:1001): avc: denied { execute } for pid=7802 comm="syz.8.1334" path="/184/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.102097][ T7803] IPv6: NLM_F_CREATE should be set when creating new route [ 106.102109][ T7803] IPv6: NLM_F_CREATE should be set when creating new route [ 106.174035][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.220367][ T7815] loop8: detected capacity change from 0 to 512 [ 106.240842][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.255534][ T7815] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.282836][ T7815] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.320528][ T29] audit: type=1326 audit(1769103018.675:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.2.1341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b3649acb9 code=0x0 [ 106.352468][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.532643][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a906e00: rx timeout, send abort [ 107.032666][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a906200: rx timeout, send abort [ 107.041005][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a906e00: abort rx timeout. Force session deactivation [ 107.274957][ T7853] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.314450][ T7854] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1353'. [ 107.541010][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a906200: abort rx timeout. Force session deactivation [ 107.551757][ T29] audit: type=1400 audit(1769103019.895:1003): avc: denied { bind } for pid=7873 comm="syz.7.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.850811][ T7902] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1375'. [ 107.859999][ T29] audit: type=1326 audit(1769103020.205:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 107.883461][ T29] audit: type=1326 audit(1769103020.205:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 107.906959][ T29] audit: type=1326 audit(1769103020.205:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 107.930390][ T29] audit: type=1326 audit(1769103020.205:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 107.953875][ T29] audit: type=1326 audit(1769103020.205:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 107.977443][ T29] audit: type=1326 audit(1769103020.205:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b3649acb9 code=0x7ffc0000 [ 108.096542][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.107161][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.147419][ T7900] team1: left promiscuous mode [ 108.152450][ T7900] team1: left allmulticast mode [ 108.158345][ T7900] gtp0: left promiscuous mode [ 108.186395][ T4679] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.196685][ T4679] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.226569][ T4679] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.258247][ T4679] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.515928][ T7930] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1381: inode has both inline data and extents flags [ 108.537761][ T7930] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1381: couldn't read orphan inode 15 (err -117) [ 108.554152][ T7930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.681202][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.907877][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.917729][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.957639][ T404] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.966191][ T404] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.988412][ T404] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.997045][ T404] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.025493][ T404] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.034108][ T404] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.061804][ T404] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.070223][ T404] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.203185][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1389'. [ 109.363959][ T7966] dvmrp1: entered allmulticast mode [ 109.370086][ T7967] xt_hashlimit: size too large, truncated to 1048576 [ 109.377000][ T7968] set_capacity_and_notify: 1 callbacks suppressed [ 109.377015][ T7968] loop8: detected capacity change from 0 to 512 [ 109.447172][ T7974] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1396'. [ 109.457092][ T7968] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1395: inode has both inline data and extents flags [ 109.505170][ T7968] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1395: couldn't read orphan inode 15 (err -117) [ 109.522283][ T7968] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.590463][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1402'. [ 110.144602][ T8000] loop7: detected capacity change from 0 to 512 [ 110.191093][ T7989] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 110.222281][ T8000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.240873][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.349725][ T8000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.368505][ T8000] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.619519][ T8021] loop8: detected capacity change from 0 to 1024 [ 110.818224][ T8037] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1422'. [ 110.979206][ T8053] xt_hashlimit: size too large, truncated to 1048576 [ 111.074795][ T8021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.118037][ T8054] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1429'. [ 111.190696][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.217303][ T8059] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1432'. [ 111.339420][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 111.339440][ T29] audit: type=1400 audit(1769103023.695:1033): avc: denied { accept } for pid=8068 comm="syz.8.1437" lport=45917 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.414153][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.462784][ T29] audit: type=1400 audit(1769103023.825:1034): avc: denied { accept } for pid=8084 comm="syz.6.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.519066][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1442'. [ 111.631599][ T29] audit: type=1400 audit(1769103023.985:1035): avc: denied { bind } for pid=8097 comm="syz.6.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.660302][ T8099] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.775291][ T29] audit: type=1326 audit(1769103024.125:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.7.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 111.799005][ T29] audit: type=1326 audit(1769103024.125:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.7.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 111.822554][ T29] audit: type=1326 audit(1769103024.125:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.7.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 111.846098][ T29] audit: type=1326 audit(1769103024.125:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.7.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 111.869458][ T29] audit: type=1326 audit(1769103024.125:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.7.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 111.893246][ T29] audit: type=1326 audit(1769103024.125:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.7.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 111.916643][ T29] audit: type=1326 audit(1769103024.125:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.7.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 111.920693][ T8112] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1451'. [ 111.949746][ T8103] xt_hashlimit: size too large, truncated to 1048576 [ 112.101051][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1458'. [ 112.192091][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1464'. [ 112.753108][ T8178] loop2: detected capacity change from 0 to 8192 [ 113.202968][ T8187] tipc: Failed to remove unknown binding: 66,1,1/0:2872692884/2872692886 [ 113.212731][ T8187] tipc: Failed to remove unknown binding: 66,1,1/0:2872692884/2872692886 [ 113.221216][ T8187] tipc: Failed to remove unknown binding: 66,1,1/0:2872692884/2872692886 [ 113.396653][ T8209] loop7: detected capacity change from 0 to 128 [ 114.125075][ T8270] loop2: detected capacity change from 0 to 128 [ 114.151296][ T8270] bio_check_eod: 54 callbacks suppressed [ 114.151309][ T8270] syz.2.1524: attempt to access beyond end of device [ 114.151309][ T8270] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 114.186536][ T8270] syz.2.1524: attempt to access beyond end of device [ 114.186536][ T8270] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 114.201323][ T8270] syz.2.1524: attempt to access beyond end of device [ 114.201323][ T8270] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 114.243712][ T8270] syz.2.1524: attempt to access beyond end of device [ 114.243712][ T8270] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 114.303615][ T8281] tipc: Failed to remove unknown binding: 66,1,1/0:699902011/699902013 [ 114.319843][ T8278] loop7: detected capacity change from 0 to 2048 [ 114.320089][ T8282] syz.2.1524: attempt to access beyond end of device [ 114.320089][ T8282] loop2: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 114.353327][ T8270] syz.2.1524: attempt to access beyond end of device [ 114.353327][ T8270] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 114.353927][ T8281] tipc: Failed to remove unknown binding: 66,1,1/0:699902011/699902013 [ 114.367683][ T8270] syz.2.1524: attempt to access beyond end of device [ 114.367683][ T8270] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 114.375118][ T8281] tipc: Failed to remove unknown binding: 66,1,1/0:699902011/699902013 [ 114.391898][ T8282] syz.2.1524: attempt to access beyond end of device [ 114.391898][ T8282] loop2: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 114.398939][ T8270] syz.2.1524: attempt to access beyond end of device [ 114.398939][ T8270] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 114.424183][ T8270] syz.2.1524: attempt to access beyond end of device [ 114.424183][ T8270] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 114.440431][ T8278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.476372][ T8278] netlink: 'syz.7.1527': attribute type 2 has an invalid length. [ 114.484197][ T8278] __nla_validate_parse: 8 callbacks suppressed [ 114.484279][ T8278] netlink: 199792 bytes leftover after parsing attributes in process `syz.7.1527'. [ 114.561100][ T8270] Buffer I/O error on dev loop2, logical block 305, async page read [ 114.577351][ T8270] Buffer I/O error on dev loop2, logical block 306, async page read [ 114.592203][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.593354][ T8270] Buffer I/O error on dev loop2, logical block 307, async page read [ 114.614755][ T8270] Buffer I/O error on dev loop2, logical block 308, async page read [ 114.626260][ T8270] Buffer I/O error on dev loop2, logical block 309, async page read [ 114.644118][ T8270] Buffer I/O error on dev loop2, logical block 310, async page read [ 114.652559][ T8270] Buffer I/O error on dev loop2, logical block 311, async page read [ 114.667281][ T8270] Buffer I/O error on dev loop2, logical block 312, async page read [ 114.676455][ T8270] Buffer I/O error on dev loop2, logical block 305, async page read [ 114.685074][ T8270] Buffer I/O error on dev loop2, logical block 306, async page read [ 115.027703][ T8315] loop2: detected capacity change from 0 to 512 [ 115.035729][ T8315] EXT4-fs: Ignoring removed nobh option [ 115.047720][ T8315] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.059822][ T8315] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 115.068084][ T8315] System zones: 1-12 [ 115.072884][ T8315] EXT4-fs (loop2): 1 truncate cleaned up [ 115.079051][ T8315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.152375][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.239476][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1547'. [ 115.248606][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1547'. [ 115.329404][ T8349] loop2: detected capacity change from 0 to 512 [ 115.355195][ T8349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.387827][ T8356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8356 comm=syz.8.1552 [ 115.418669][ T8354] ip6t_rpfilter: unknown options [ 115.480752][ T8349] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.022600][ T4679] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 116.039782][ T4679] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 116.052445][ T4679] EXT4-fs (loop2): This should not happen!! Data will be lost [ 116.052445][ T4679] [ 116.062117][ T4679] EXT4-fs (loop2): Total free blocks count 0 [ 116.068190][ T4679] EXT4-fs (loop2): Free/Dirty block details [ 116.074155][ T4679] EXT4-fs (loop2): free_blocks=65280 [ 116.079453][ T4679] EXT4-fs (loop2): dirty_blocks=8192 [ 116.084843][ T4679] EXT4-fs (loop2): Block reservation details [ 116.090851][ T4679] EXT4-fs (loop2): i_reserved_data_blocks=8192 [ 116.120211][ T2817] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 116.229992][ T8381] loop2: detected capacity change from 0 to 256 [ 116.376671][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.386270][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 116.386284][ T29] audit: type=1326 audit(1769103028.745:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.6.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 116.416669][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.568627][ T8413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8413 comm=syz.7.1572 [ 116.581154][ T8413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8413 comm=syz.7.1572 [ 116.593689][ T8413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8413 comm=syz.7.1572 [ 116.606218][ T8413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8413 comm=syz.7.1572 [ 116.618699][ T8413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8413 comm=syz.7.1572 [ 116.631176][ T8413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8413 comm=syz.7.1572 [ 116.643663][ T8413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8413 comm=syz.7.1572 [ 116.656116][ T8413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8413 comm=syz.7.1572 [ 116.668601][ T8413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8413 comm=syz.7.1572 [ 116.862320][ T29] audit: type=1326 audit(1769103029.225:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.5.1580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57b6dcacb9 code=0x0 [ 117.153845][ T8442] pim6reg9: entered allmulticast mode [ 117.247642][ T29] audit: type=1400 audit(1769103029.605:1198): avc: denied { cpu } for pid=8448 comm="syz.2.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 117.438692][ T8466] lo speed is unknown, defaulting to 1000 [ 117.488882][ T8471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.507884][ T8471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.630859][ T8466] netlink: 764 bytes leftover after parsing attributes in process `syz.7.1592'. [ 117.946678][ T8494] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1603'. [ 117.969253][ T29] audit: type=1400 audit(1769103030.325:1199): avc: denied { mount } for pid=8495 comm="syz.5.1604" name="/" dev="autofs" ino=22038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 118.194043][ T8512] loop8: detected capacity change from 0 to 1024 [ 118.202561][ T8512] EXT4-fs: inline encryption not supported [ 118.208581][ T8512] EXT4-fs: dax option not supported [ 118.292640][ T8514] raw_sendmsg: syz.8.1612 forgot to set AF_INET. Fix it! [ 118.309349][ T8516] lo speed is unknown, defaulting to 1000 [ 118.486210][ T29] audit: type=1400 audit(1769103030.845:1200): avc: denied { setattr } for pid=8526 comm="syz.8.1616" name="/" dev="configfs" ino=1788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.877515][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1624'. [ 119.090714][ T29] audit: type=1400 audit(1769103031.445:1201): avc: denied { write } for pid=8556 comm="syz.7.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 119.203909][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1629'. [ 119.366947][ T8572] loop8: detected capacity change from 0 to 1024 [ 119.378344][ T8572] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.404495][ T8572] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 119.412719][ T8572] EXT4-fs (loop8): orphan cleanup on readonly fs [ 119.419220][ T8572] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.1632: Freeing blocks not in datazone - block = 0, count = 4096 [ 119.433518][ T8572] EXT4-fs (loop8): 1 orphan inode deleted [ 119.439638][ T8572] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.553287][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.582115][ T8583] l2tp_ppp: sess 2/0: no socket in recv [ 119.615571][ T3483] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 119.623096][ T3483] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 119.630496][ T3483] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 119.656274][ T3483] hid-generic 0003:0003:0000.0005: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 119.694365][ T8589] fido_id[8589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 119.730827][ T8594] lo speed is unknown, defaulting to 1000 [ 120.252589][ T29] audit: type=1400 audit(1769103032.605:1202): avc: denied { name_bind } for pid=8619 comm="syz.5.1661" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 120.314601][ T29] audit: type=1400 audit(1769103032.635:1203): avc: denied { name_connect } for pid=8619 comm="syz.5.1661" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 120.462697][ T8594] Set syz1 is full, maxelem 65536 reached [ 120.725108][ T8634] lo speed is unknown, defaulting to 1000 [ 120.892065][ T8634] RDS: rds_bind could not find a transport for ::ffff:172.20.20.23, load rds_tcp or rds_rdma? [ 121.146443][ T29] audit: type=1400 audit(1769103033.495:1204): avc: denied { mounton } for pid=8664 comm="syz.5.1669" path="/file0" dev="ramfs" ino=22856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 121.218888][ T8675] loop2: detected capacity change from 0 to 1024 [ 121.235644][ T8675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.282604][ T29] audit: type=1400 audit(1769103033.645:1205): avc: denied { setattr } for pid=8674 comm="syz.2.1673" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.349493][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1677'. [ 121.393177][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.492959][ T8700] netlink: 'syz.2.1682': attribute type 1 has an invalid length. [ 121.509043][ T8700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.523809][ T8700] bond1: (slave geneve2): making interface the new active one [ 121.532681][ T8700] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 121.541326][ T122] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.648036][ T122] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.684733][ T122] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.705999][ T122] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.962057][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1689'. [ 122.067022][ T29] audit: type=1400 audit(1769103034.395:1206): avc: denied { bind } for pid=8704 comm="syz.2.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.139744][ T8730] tipc: Started in network mode [ 122.144705][ T8730] tipc: Node identity ac14140f, cluster identity 4711 [ 122.151999][ T8730] tipc: New replicast peer: 255.255.255.255 [ 122.158141][ T8730] tipc: Enabled bearer , priority 10 [ 122.331104][ T8739] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1693'. [ 122.508623][ T8744] loop2: detected capacity change from 0 to 2048 [ 122.572877][ T8744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.644741][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.821643][ T29] audit: type=1400 audit(1769103035.185:1207): avc: denied { write } for pid=8767 comm="syz.7.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.902131][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1708'. [ 123.271626][ T3485] tipc: Node number set to 2886997007 [ 123.313535][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1714'. [ 123.322513][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1714'. [ 123.557859][ T8807] loop2: detected capacity change from 0 to 2048 [ 123.583520][ T8807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.709485][ T29] audit: type=1400 audit(1769103036.065:1208): avc: denied { getopt } for pid=8806 comm="syz.2.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.709924][ T8807] EXT4-fs (loop2): shut down requested (0) [ 123.735916][ T8819] loop7: detected capacity change from 0 to 128 [ 123.744728][ T91] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.760255][ T91] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 123.772909][ T91] EXT4-fs (loop2): This should not happen!! Data will be lost [ 123.772909][ T91] [ 123.782846][ T91] EXT4-fs (loop2): Total free blocks count 0 [ 123.788847][ T91] EXT4-fs (loop2): Free/Dirty block details [ 123.794806][ T91] EXT4-fs (loop2): free_blocks=2415919104 [ 123.800632][ T91] EXT4-fs (loop2): dirty_blocks=16 [ 123.805810][ T91] EXT4-fs (loop2): Block reservation details [ 123.811831][ T91] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 123.859144][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1728'. [ 123.868163][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1728'. [ 123.942003][ T29] audit: type=1400 audit(1769103036.285:1209): avc: denied { write } for pid=8826 comm="syz.6.1729" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 123.970195][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1730'. [ 123.982097][ T8832] team0 (unregistering): Port device team_slave_0 removed [ 123.990208][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1731'. [ 124.003060][ T8832] team0 (unregistering): Port device team_slave_1 removed [ 124.021656][ T29] audit: type=1400 audit(1769103036.345:1210): avc: denied { read } for pid=8833 comm="syz.8.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.042247][ T8832] team0 (unregistering): Port device dummy0 removed [ 124.068512][ T8838] netlink: 'syz.2.1732': attribute type 30 has an invalid length. [ 124.160576][ T8841] xt_hashlimit: size too large, truncated to 1048576 [ 124.233962][ T91] bio_check_eod: 25761 callbacks suppressed [ 124.233980][ T91] kworker/u8:4: attempt to access beyond end of device [ 124.233980][ T91] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 124.276450][ T29] audit: type=1400 audit(1769103036.615:1211): avc: denied { watch watch_reads } for pid=8846 comm="syz.8.1737" path="/245/file0" dev="tmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 124.334034][ T91] kworker/u8:4: attempt to access beyond end of device [ 124.334034][ T91] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 124.360383][ T91] kworker/u8:4: attempt to access beyond end of device [ 124.360383][ T91] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 124.373911][ T91] kworker/u8:4: attempt to access beyond end of device [ 124.373911][ T91] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 124.391915][ T91] kworker/u8:4: attempt to access beyond end of device [ 124.391915][ T91] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 124.407415][ T91] kworker/u8:4: attempt to access beyond end of device [ 124.407415][ T91] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 124.421398][ T91] kworker/u8:4: attempt to access beyond end of device [ 124.421398][ T91] loop7: rw=1, sector=241, nr_sectors = 8 limit=128 [ 124.461673][ T91] kworker/u8:4: attempt to access beyond end of device [ 124.461673][ T91] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 124.488064][ T91] kworker/u8:4: attempt to access beyond end of device [ 124.488064][ T91] loop7: rw=1, sector=273, nr_sectors = 8 limit=128 [ 124.535511][ T91] kworker/u8:4: attempt to access beyond end of device [ 124.535511][ T91] loop7: rw=1, sector=289, nr_sectors = 8 limit=128 [ 124.624531][ C1] sd 0:0:1:0: [sda] tag#6786 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 124.634947][ C1] sd 0:0:1:0: [sda] tag#6786 CDB: Read(6) 08 00 00 00 07 00 [ 124.816177][ T8880] loop8: detected capacity change from 0 to 1024 [ 124.843203][ T8880] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.070088][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.382194][ T29] audit: type=1400 audit(1769103037.735:1212): avc: denied { read } for pid=8908 comm="syz.2.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.484622][ T8919] netlink: 'syz.6.1761': attribute type 5 has an invalid length. [ 125.598595][ T8927] loop2: detected capacity change from 0 to 256 [ 125.616297][ T29] audit: type=1400 audit(1769103037.975:1213): avc: denied { nlmsg_write } for pid=8926 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 126.135868][ T29] audit: type=1400 audit(1769103038.495:1214): avc: denied { ioctl } for pid=8944 comm="syz.8.1771" path="socket:[23844]" dev="sockfs" ino=23844 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.699547][ T29] audit: type=1400 audit(1769103039.055:1215): avc: denied { getopt } for pid=8955 comm="syz.2.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.909555][ T8994] sch_tbf: burst 2 is lower than device ip6gre0 mtu (1448) ! [ 127.023981][ T8952] loop7: detected capacity change from 0 to 512 [ 127.052090][ T8952] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 127.073114][ T29] audit: type=1400 audit(1769103039.425:1216): avc: denied { read } for pid=9003 comm="syz.5.1782" name="file2" dev="tmpfs" ino=1922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.163291][ T29] audit: type=1400 audit(1769103039.525:1217): avc: denied { setopt } for pid=8996 comm="syz.6.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.184459][ T8952] EXT4-fs (loop7): 1 truncate cleaned up [ 127.232449][ T8952] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.835282][ T9025] netlink: 'syz.6.1788': attribute type 30 has an invalid length. [ 127.925005][ T9029] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 128.076203][ T9043] netlink: 'syz.5.1797': attribute type 1 has an invalid length. [ 128.165689][ T9043] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 128.175968][ T9043] bond1: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 128.189862][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.211396][ T9058] __nla_validate_parse: 2 callbacks suppressed [ 128.211414][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1797'. [ 128.229601][ T9060] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1804'. [ 128.232030][ T9043] bond1: (slave vxcan1): making interface the new active one [ 128.253548][ T9043] bond1: (slave vxcan1): Enslaving as an active interface with an up link [ 128.292932][ T9058] bond1 (unregistering): (slave vxcan1): Releasing backup interface [ 128.310768][ T9058] bond1 (unregistering): Released all slaves [ 128.321448][ T9060] selinux_netlink_send: 73 callbacks suppressed [ 128.321465][ T9060] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9060 comm=syz.6.1804 [ 128.344003][ T9067] loop8: detected capacity change from 0 to 128 [ 128.362832][ T9067] vfat: Unknown parameter 'shortn±ô½¥ame' [ 128.396081][ T29] audit: type=1400 audit(1769103040.755:1218): avc: denied { bind } for pid=9070 comm="syz.5.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 128.442424][ T9076] 9p: Bad value for 'rfdno' [ 128.460032][ T9077] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.503363][ T9077] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.515596][ T29] audit: type=1400 audit(1769103040.875:1219): avc: denied { setopt } for pid=9082 comm="syz.6.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.583166][ T9077] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.627694][ T9094] loop8: detected capacity change from 0 to 1024 [ 128.636445][ T9094] EXT4-fs: Ignoring removed orlov option [ 128.642222][ T9094] EXT4-fs: inline encryption not supported [ 128.650916][ T9077] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.673144][ T9094] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.686345][ T9092] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 128.713454][ T122] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.729482][ T122] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.744625][ T122] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.763206][ T122] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.813091][ T29] audit: type=1326 audit(1769103041.175:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 128.843280][ T29] audit: type=1326 audit(1769103041.175:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 128.866815][ T29] audit: type=1326 audit(1769103041.175:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 128.890280][ T29] audit: type=1326 audit(1769103041.175:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 128.914662][ T29] audit: type=1326 audit(1769103041.225:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 128.938248][ T29] audit: type=1326 audit(1769103041.225:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f90b6baaa22 code=0x7ffc0000 [ 128.968708][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.164278][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1819'. [ 129.182708][ T9100] hsr_slave_1 (unregistering): left promiscuous mode [ 129.264410][ T9130] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1828'. [ 129.388754][ T9134] netlink: 'syz.6.1830': attribute type 1 has an invalid length. [ 129.431087][ T9134] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 129.518686][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1828'. [ 129.535012][ T9130] hsr_slave_1 (unregistering): left promiscuous mode [ 129.651158][ T9143] lo speed is unknown, defaulting to 1000 [ 129.664321][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 130.501916][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1845'. [ 130.884041][ T9185] loop8: detected capacity change from 0 to 2048 [ 130.903560][ T9185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.981603][ T9185] netlink: 'syz.8.1849': attribute type 2 has an invalid length. [ 130.989718][ T9185] netlink: 199792 bytes leftover after parsing attributes in process `syz.8.1849'. [ 131.092085][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.523699][ T9225] netlink: 'syz.2.1863': attribute type 2 has an invalid length. [ 131.531596][ T9225] netlink: 199776 bytes leftover after parsing attributes in process `syz.2.1863'. [ 132.053464][ T9272] lo speed is unknown, defaulting to 1000 [ 132.371953][ T9280] syzkaller0: entered promiscuous mode [ 132.377510][ T9280] syzkaller0: entered allmulticast mode [ 132.803468][ T9287] syzkaller0: entered promiscuous mode [ 132.809039][ T9287] syzkaller0: entered allmulticast mode [ 133.004448][ T9296] loop2: detected capacity change from 0 to 2048 [ 133.047275][ T9296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.093441][ T9307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1891'. [ 133.177379][ T9296] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1888: bg 0: block 234: padding at end of block bitmap is not set [ 133.200343][ T9296] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 348 with error 28 [ 133.212789][ T9296] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.212789][ T9296] [ 133.222552][ T9296] EXT4-fs (loop2): Total free blocks count 0 [ 133.228633][ T9296] EXT4-fs (loop2): Free/Dirty block details [ 133.234596][ T9296] EXT4-fs (loop2): free_blocks=0 [ 133.239551][ T9296] EXT4-fs (loop2): dirty_blocks=352 [ 133.244955][ T9296] EXT4-fs (loop2): Block reservation details [ 133.251075][ T9296] EXT4-fs (loop2): i_reserved_data_blocks=22 [ 133.301973][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.520716][ T9333] loop2: detected capacity change from 0 to 8192 [ 133.920553][ T9364] loop7: detected capacity change from 0 to 512 [ 133.927237][ T9364] EXT4-fs: Ignoring removed bh option [ 133.945127][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1906'. [ 134.025488][ T9364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.038455][ T9364] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.129858][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 134.129936][ T29] audit: type=1400 audit(1769103046.475:1362): avc: denied { create } for pid=9363 comm="syz.7.1911" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 134.132270][ T9364] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1911'. [ 134.188134][ T29] audit: type=1400 audit(1769103046.545:1363): avc: denied { read } for pid=9363 comm="syz.7.1911" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 134.293609][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.453087][ T29] audit: type=1400 audit(1769103046.815:1364): avc: denied { bind } for pid=9390 comm="syz.6.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.510789][ T9396] netlink: 'syz.8.1919': attribute type 11 has an invalid length. [ 134.740788][ T9412] loop2: detected capacity change from 0 to 164 [ 134.763310][ T9412] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.847394][ T29] audit: type=1326 audit(1769103047.205:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.8.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e8617acb9 code=0x7ffc0000 [ 134.878872][ T9408] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.942808][ T9408] Symlink component flag not implemented [ 134.948506][ T9408] Symlink component flag not implemented [ 134.960713][ T29] audit: type=1326 audit(1769103047.235:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.8.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e8617acb9 code=0x7ffc0000 [ 134.984216][ T29] audit: type=1326 audit(1769103047.235:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.8.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e8617acb9 code=0x7ffc0000 [ 134.984274][ T9408] Symlink component flag not implemented (7) [ 134.984284][ T9408] Symlink component flag not implemented (116) [ 135.007648][ T29] audit: type=1326 audit(1769103047.235:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.8.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e8617acb9 code=0x7ffc0000 [ 135.007683][ T29] audit: type=1326 audit(1769103047.235:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.8.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e8617acb9 code=0x7ffc0000 [ 135.066688][ T29] audit: type=1326 audit(1769103047.235:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.8.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5e8617acb9 code=0x7ffc0000 [ 135.090047][ T29] audit: type=1326 audit(1769103047.235:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.8.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e8617acb9 code=0x7ffc0000 [ 135.137117][ T9419] loop2: detected capacity change from 0 to 164 [ 135.286903][ T2840] syzkaller0: tun_net_xmit 76 [ 135.291991][ T2840] syzkaller0: tun_net_xmit 48 [ 135.301684][ T9425] syzkaller0: create flow: hash 181970779 index 1 [ 135.311302][ T9425] syzkaller0: delete flow: hash 181970779 index 1 [ 135.345678][ T9433] loop2: detected capacity change from 0 to 736 [ 135.357463][ T9432] siw: device registration error -23 [ 135.378931][ T9433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1942'. [ 135.415253][ T9435] netlink: 'syz.6.1934': attribute type 13 has an invalid length. [ 135.506091][ T9444] lo speed is unknown, defaulting to 1000 [ 135.755380][ T9465] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1947'. [ 135.773400][ T9463] loop2: detected capacity change from 0 to 1024 [ 135.791076][ T9463] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 135.802226][ T9463] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 135.826783][ T9463] EXT4-fs (loop2): invalid journal inode [ 135.832969][ T9463] EXT4-fs (loop2): can't get journal size [ 135.839827][ T9463] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 135.847946][ T9465] loop8: detected capacity change from 0 to 1024 [ 135.856885][ T9463] EXT4-fs (loop2): mount failed [ 135.862206][ T9465] EXT4-fs: Ignoring removed bh option [ 135.888218][ T9465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.906347][ T9462] uprobe: syz.2.1945:9462 failed to unregister, leaking uprobe [ 135.936103][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.948397][ T9478] netlink: 'syz.7.1951': attribute type 13 has an invalid length. [ 136.010161][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1954'. [ 136.065896][ T9478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.077348][ T9478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.164639][ T2840] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.176228][ T2840] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.186718][ T2840] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.195786][ T2840] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.221119][ T9489] lo speed is unknown, defaulting to 1000 [ 136.241724][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 136.253109][ T9493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.260761][ T9493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.268519][ T9493] batman_adv: batadv0: Removing interface: veth1_vlan [ 136.313783][ T9496] netlink: 'syz.7.1957': attribute type 1 has an invalid length. [ 136.329391][ T9496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.342677][ T9496] bond1: (slave dummy0): making interface the new active one [ 136.351492][ T9496] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 136.363416][ T9496] bond1: entered allmulticast mode [ 136.368851][ T9496] dummy0: entered allmulticast mode [ 136.394437][ T9501] sch_tbf: burst 1885 is lower than device lo mtu (11337746) ! [ 136.404016][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1959'. [ 136.666290][ T9526] netlink: 'syz.7.1968': attribute type 1 has an invalid length. [ 136.694205][ T9526] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 136.706757][ T9526] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 136.717069][ T9526] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 137.169968][ T9547] loop7: detected capacity change from 0 to 512 [ 137.255155][ T9547] loop7: detected capacity change from 0 to 2048 [ 137.271275][ T9547] EXT4-fs: Ignoring removed bh option [ 137.374916][ T9547] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.519085][ T9547] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1975: bg 0: block 234: padding at end of block bitmap is not set [ 137.534511][ T9547] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 137.547027][ T9547] EXT4-fs (loop7): This should not happen!! Data will be lost [ 137.547027][ T9547] [ 137.556693][ T9547] EXT4-fs (loop7): Total free blocks count 0 [ 137.563402][ T9547] EXT4-fs (loop7): Free/Dirty block details [ 137.569313][ T9547] EXT4-fs (loop7): free_blocks=0 [ 137.574322][ T9547] EXT4-fs (loop7): dirty_blocks=3056 [ 137.579621][ T9547] EXT4-fs (loop7): Block reservation details [ 137.585671][ T9547] EXT4-fs (loop7): i_reserved_data_blocks=191 [ 137.707752][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.904198][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1980'. [ 137.913156][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1980'. [ 137.929522][ T9573] macsec1: entered promiscuous mode [ 137.934818][ T9573] ip6gretap0: entered promiscuous mode [ 137.940429][ T9573] macsec1: entered allmulticast mode [ 137.945882][ T9573] ip6gretap0: entered allmulticast mode [ 137.948124][ T9575] EXT4-fs: Ignoring removed nobh option [ 137.972592][ T9575] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 137.981917][ T9575] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1983: invalid indirect mapped block 256 (level 1) [ 137.996022][ T9575] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1983: invalid indirect mapped block 2683928664 (level 1) [ 138.011138][ T9575] EXT4-fs (loop2): 1 truncate cleaned up [ 138.020846][ T9575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.045273][ T9575] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1983: Invalid block bitmap block 3 in block_group 0 [ 138.060237][ T9575] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1983: Invalid block bitmap block 3 in block_group 0 [ 138.075346][ T9575] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1983: Invalid block bitmap block 3 in block_group 0 [ 138.097878][ T9582] set_capacity_and_notify: 1 callbacks suppressed [ 138.097899][ T9582] loop7: detected capacity change from 0 to 512 [ 138.113864][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.133026][ T9582] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1986: invalid indirect mapped block 256 (level 2) [ 138.152593][ T9586] loop8: detected capacity change from 0 to 512 [ 138.171832][ T9582] EXT4-fs (loop7): 2 truncates cleaned up [ 138.180775][ T9582] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.202604][ T9586] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 138.218290][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1986'. [ 138.230234][ T9582] bond1: (slave dummy0): Releasing active interface [ 138.237058][ T9586] EXT4-fs (loop8): mount failed [ 138.243408][ T9582] dummy0 (unregistering): left allmulticast mode [ 138.460418][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.519108][ T9606] loop8: detected capacity change from 0 to 1024 [ 138.531965][ T9606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.550264][ T9606] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.570419][ T9606] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 138.591860][ T9606] System zones: 0-1, 3-36 [ 138.611097][ T9606] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.636768][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.711750][ T9621] netlink: 'syz.5.1999': attribute type 142 has an invalid length. [ 138.910448][ T9631] syzkaller0: entered promiscuous mode [ 138.916021][ T9631] syzkaller0: entered allmulticast mode [ 139.090075][ T9646] loop8: detected capacity change from 0 to 512 [ 139.116300][ T9646] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.130554][ T9646] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.188378][ T9646] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.2009: corrupted xattr block 6: invalid header [ 139.217426][ T9646] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 139.304631][ T9646] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.2009: corrupted xattr block 6: invalid header [ 139.332964][ T9646] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 139.344144][ T9646] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.2009: corrupted xattr block 6: invalid header [ 139.373046][ T9646] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 139.382320][ T9646] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.2009: corrupted xattr block 6: invalid header [ 139.442315][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.466315][ T9662] netlink: 'syz.2.2014': attribute type 6 has an invalid length. [ 139.490775][ T9660] lo speed is unknown, defaulting to 1000 [ 139.537202][ T9670] __nla_validate_parse: 3 callbacks suppressed [ 139.537223][ T9670] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.2016'. [ 139.553131][ T9670] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2016'. [ 139.575565][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 139.575578][ T29] audit: type=1400 audit(1769103307.926:1525): avc: denied { write } for pid=9671 comm="syz.2.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.634764][ T9677] loop2: detected capacity change from 0 to 256 [ 139.641701][ T9677] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.657360][ T29] audit: type=1400 audit(1769103308.016:1526): avc: denied { associate } for pid=9678 comm="syz.6.2013" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 139.784524][ T9682] bond0: (slave team0): Releasing backup interface [ 139.791659][ T9682] bridge_slave_0: left allmulticast mode [ 139.797377][ T9682] bridge_slave_0: left promiscuous mode [ 139.803140][ T9682] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.822403][ T9682] bridge_slave_1: left allmulticast mode [ 139.828251][ T9682] bridge_slave_1: left promiscuous mode [ 139.834088][ T9682] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.847997][ T9682] bond0: (slave .1!€ÿ): Releasing backup interface [ 139.859419][ T9682] bond0: (slave bond_slave_1): Releasing backup interface [ 139.873619][ T9682] team0: Port device team_slave_0 removed [ 139.885794][ T9682] team0: Port device team_slave_1 removed [ 139.892701][ T9682] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.918245][ T9684] team0: Mode changed to "activebackup" [ 140.390371][ T9699] loop8: detected capacity change from 0 to 512 [ 140.433643][ T9699] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.2026: corrupted in-inode xattr: e_value size too large [ 140.461672][ T9699] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2026: couldn't read orphan inode 15 (err -117) [ 140.502197][ T9699] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.601201][ T9693] lo speed is unknown, defaulting to 1000 [ 140.725115][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.754810][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2035'. [ 140.763853][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2035'. [ 140.774143][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2035'. [ 140.783080][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2035'. [ 140.794926][ T29] audit: type=1400 audit(1769103309.156:1527): avc: denied { create } for pid=9717 comm="syz.5.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.916532][ T9728] syzkaller0: entered promiscuous mode [ 140.922829][ T9728] syzkaller0: entered allmulticast mode [ 140.936454][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2039'. [ 140.984183][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2041'. [ 140.997669][ T9733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.024636][ T9733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.083724][ T29] audit: type=1400 audit(1769103309.436:1528): avc: denied { ioctl } for pid=9729 comm="syz.5.2039" path="socket:[27149]" dev="sockfs" ino=27149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.243767][ T9737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.259381][ T9737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.303694][ T8970] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.316768][ T8970] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.351208][ T8970] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.353576][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2048'. [ 141.360608][ T29] audit: type=1400 audit(1769103309.696:1529): avc: denied { ioctl } for pid=9751 comm="syz.8.2048" path="socket:[26173]" dev="sockfs" ino=26173 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.394752][ T9752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.406720][ T8970] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.514635][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2049'. [ 141.567343][ T9763] syzkaller0: entered promiscuous mode [ 141.573604][ T9763] syzkaller0: entered allmulticast mode [ 141.841195][ T9776] delete_channel: no stack [ 143.217278][ T9800] lo speed is unknown, defaulting to 1000 [ 143.307135][ T29] audit: type=1400 audit(1769103311.656:1530): avc: denied { map } for pid=9817 comm="syz.2.2068" path="socket:[26383]" dev="sockfs" ino=26383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.394158][ T9828] can0: slcan on ptm0. [ 143.431672][ T9828] can0 (unregistered): slcan off ptm0. [ 143.494572][ T29] audit: type=1400 audit(1769103311.846:1531): avc: denied { create } for pid=9832 comm="syz.2.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 143.782246][ T29] audit: type=1400 audit(1769103312.136:1532): avc: denied { connect } for pid=9851 comm="syz.6.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.806296][ T9873] loop7: detected capacity change from 0 to 512 [ 143.891450][ T9880] netlink: 'syz.8.2081': attribute type 10 has an invalid length. [ 143.900826][ T9880] bond0: (slave .1!€ÿ): Releasing backup interface [ 145.215275][ T9930] __nla_validate_parse: 4 callbacks suppressed [ 145.215292][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2100'. [ 145.245444][ T9930] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 145.259797][ T9930] team1: entered promiscuous mode [ 145.264945][ T9930] team1: entered allmulticast mode [ 145.373809][ T9941] ref_ctr increment failed for inode: 0x8f4 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810f5f8d80 [ 145.410246][ T9943] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2107'. [ 145.768085][ T9969] netlink: 'syz.6.2113': attribute type 1 has an invalid length. [ 145.776119][ T9969] netlink: 668 bytes leftover after parsing attributes in process `syz.6.2113'. [ 145.909556][ T29] audit: type=1400 audit(1769103314.256:1533): avc: denied { getopt } for pid=9966 comm="syz.5.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.604086][ T29] audit: type=1326 audit(1769103314.956:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b6dcacb9 code=0x7ffc0000 [ 146.628586][ T29] audit: type=1326 audit(1769103314.956:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b6dcacb9 code=0x7ffc0000 [ 146.652824][ T29] audit: type=1326 audit(1769103314.956:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f57b6dc9b97 code=0x7ffc0000 [ 146.676335][ T29] audit: type=1326 audit(1769103314.956:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b6dcacb9 code=0x7ffc0000 [ 146.699803][ T29] audit: type=1326 audit(1769103314.956:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b6dcacb9 code=0x7ffc0000 [ 146.723966][ T29] audit: type=1326 audit(1769103314.956:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f57b6dcacb9 code=0x7ffc0000 [ 146.747432][ T29] audit: type=1326 audit(1769103314.956:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9985 comm="syz.5.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57b6dcacb9 code=0x7ffc0000 [ 146.775662][ T9995] netlink: 'syz.5.2121': attribute type 1 has an invalid length. [ 146.784380][ T9995] Unknown options in mask 20 [ 146.828259][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2122'. [ 146.849781][ T9997] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 146.858959][ T8971] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.866924][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2122'. [ 146.868336][ T8971] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.885937][ T9997] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 146.896643][ T9997] bond3 (unregistering): Released all slaves [ 146.906436][ T8971] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 146.915851][ T8971] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 147.066512][T10004] tipc: Started in network mode [ 147.071472][T10004] tipc: Node identity , cluster identity 4711 [ 147.077654][T10004] tipc: Failed to obtain node identity [ 147.083184][T10004] tipc: Enabling of bearer rejected, failed to enable media [ 147.176176][T10000] veth1_to_bond: entered allmulticast mode [ 147.183462][T10000] veth1_to_bond: left allmulticast mode [ 147.266692][T10013] bond0: (slave bond_slave_0): Releasing backup interface [ 147.278955][T10013] bond0: (slave bond_slave_1): Releasing backup interface [ 147.295752][T10013] team0: Port device team_slave_0 removed [ 147.308845][T10013] team0: Port device team_slave_1 removed [ 147.322960][T10013] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.375467][T10019] capability: warning: `syz.5.2130' uses deprecated v2 capabilities in a way that may be insecure [ 147.523932][ T29] audit: type=1400 audit(1769103315.876:1541): avc: denied { block_suspend } for pid=10020 comm="syz.5.2131" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.574723][T10034] vlan3: entered promiscuous mode [ 147.579883][T10034] bond0: entered promiscuous mode [ 147.709092][T10046] loop7: detected capacity change from 0 to 512 [ 147.721293][T10046] EXT4-fs (loop7): orphan cleanup on readonly fs [ 147.733656][T10046] Quota error (device loop7): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 147.744255][T10046] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.767131][T10046] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 147.776249][T10052] netlink: 'syz.5.2139': attribute type 13 has an invalid length. [ 147.783153][T10046] EXT4-fs error (device loop7): __ext4_iget:5426: inode #14: block 1886221359: comm syz.7.2140: invalid block [ 147.796434][T10046] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2140: couldn't read orphan inode 14 (err -117) [ 147.808675][T10046] EXT4-fs (loop7): 1 truncate cleaned up [ 147.815049][T10046] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.845882][T10052] gretap0: refused to change device tx_queue_len [ 147.853017][T10052] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 147.881055][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.181282][T10072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2144'. [ 148.382722][T10076] loop8: detected capacity change from 0 to 128 [ 148.420005][T10076] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.504446][T10076] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.573417][T10080] netlink: 'syz.2.2147': attribute type 1 has an invalid length. [ 148.701370][ T4798] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.785217][T10083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2149'. [ 149.112614][T10090] netlink: 'syz.8.2148': attribute type 1 has an invalid length. [ 149.302309][T10090] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2148'. [ 149.802032][T10090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.878277][T10090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.898318][T10090] bond1: (slave geneve2): making interface the new active one [ 149.923202][T10090] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 149.932684][ T8971] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 150.030728][ T8971] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 150.063575][ T8971] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 150.104542][ T8971] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 150.234673][T10111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2158'. [ 150.268915][T10111] loop2: detected capacity change from 0 to 1024 [ 150.276019][T10107] syzkaller0: entered promiscuous mode [ 150.281644][T10107] syzkaller0: entered allmulticast mode [ 150.295233][T10111] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 150.306324][T10111] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 150.333360][T10111] JBD2: no valid journal superblock found [ 150.339209][T10111] EXT4-fs (loop2): Could not load journal inode [ 150.436273][T10114] netlink: 'syz.2.2159': attribute type 39 has an invalid length. [ 150.527956][T10118] syzkaller0: entered promiscuous mode [ 150.533511][T10118] syzkaller0: entered allmulticast mode [ 150.564350][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2162'. [ 150.639085][T10127] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 150.694831][T10132] netlink: 'syz.7.2168': attribute type 27 has an invalid length. [ 151.000257][T10142] lo speed is unknown, defaulting to 1000 [ 151.569655][T10156] xt_hashlimit: size too large, truncated to 1048576 [ 151.715288][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 151.715307][ T29] audit: type=1400 audit(1769103320.066:1553): avc: denied { write } for pid=10159 comm="syz.6.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.070331][T10167] lo speed is unknown, defaulting to 1000 [ 152.382002][T10176] loop7: detected capacity change from 0 to 764 [ 152.726856][ T29] audit: type=1326 audit(1769103321.076:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.7.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 152.774821][T10189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.821763][T10189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.890636][ T29] audit: type=1326 audit(1769103321.116:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.7.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 152.914741][ T29] audit: type=1326 audit(1769103321.116:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.7.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 152.938343][ T29] audit: type=1326 audit(1769103321.116:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.7.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 152.962333][ T29] audit: type=1326 audit(1769103321.116:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.7.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 152.985908][ T29] audit: type=1326 audit(1769103321.116:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.7.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 153.009993][ T29] audit: type=1326 audit(1769103321.116:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.7.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 153.034141][ T29] audit: type=1326 audit(1769103321.116:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.7.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 153.057676][ T29] audit: type=1326 audit(1769103321.116:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.7.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b6baacb9 code=0x7ffc0000 [ 153.154848][T10189] lo speed is unknown, defaulting to 1000 [ 153.657594][T10206] netlink: 'syz.6.2194': attribute type 1 has an invalid length. [ 153.794615][T10208] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 153.848922][T10210] bridge0: entered allmulticast mode [ 154.470062][T10233] loop7: detected capacity change from 0 to 512 [ 154.534795][T10233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.609850][T10233] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.645524][T10233] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.674169][T10240] dvmrp1: tun_chr_ioctl cmd 35108 [ 154.922760][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.937284][T10243] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 155.016752][T10246] loop7: detected capacity change from 0 to 512 [ 155.024487][T10243] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 155.056079][T10246] journal_path: Non-blockdev passed as './file1' [ 155.062523][T10246] EXT4-fs: error: could not find journal device path [ 155.092969][T10243] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 155.182847][T10243] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 155.271589][ T8971] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 155.311566][ T2840] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 155.323877][ T2840] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 155.336973][ T2840] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 155.518679][T10255] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2215'. [ 155.800770][T10273] loop8: detected capacity change from 0 to 1024 [ 155.810236][T10275] netlink: 'syz.2.2219': attribute type 7 has an invalid length. [ 155.818074][T10275] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2219'. [ 155.828599][T10273] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.833193][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2219'. [ 155.851943][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 155.861340][T10273] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.2220: Allocating blocks 385-513 which overlap fs metadata [ 155.876954][T10273] EXT4-fs (loop8): pa ffff888107a78bd0: logic 16, phys. 129, len 24 [ 155.885127][T10273] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 155.895835][T10273] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 155.908255][T10273] EXT4-fs (loop8): This should not happen!! Data will be lost [ 155.908255][T10273] [ 155.918041][T10273] EXT4-fs (loop8): Total free blocks count 0 [ 155.924079][T10273] EXT4-fs (loop8): Free/Dirty block details [ 155.929981][T10273] EXT4-fs (loop8): free_blocks=128 [ 155.935165][T10273] EXT4-fs (loop8): dirty_blocks=0 [ 155.940212][T10273] EXT4-fs (loop8): Block reservation details [ 155.946257][T10273] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 156.070143][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2225'. [ 156.083922][T10287] netlink: 'syz.2.2225': attribute type 1 has an invalid length. [ 156.119876][T10289] loop7: detected capacity change from 0 to 512 [ 156.128788][T10289] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 156.142233][T10289] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 156.150856][T10289] System zones: 1-12 [ 156.156326][T10289] EXT4-fs (loop7): 1 truncate cleaned up [ 156.162238][T10291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2226'. [ 156.163780][T10289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.854301][T10331] loop8: detected capacity change from 0 to 512 [ 156.860957][T10331] EXT4-fs: Ignoring removed bh option [ 156.891153][T10331] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.904062][T10331] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.919863][T10331] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2242'. [ 156.952589][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.975955][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.491368][T10344] lo speed is unknown, defaulting to 1000 [ 157.532844][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 157.532864][ T29] audit: type=1400 audit(1769103325.886:1603): avc: denied { execute } for pid=10346 comm="syz.2.2247" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 158.023692][T10363] loop7: detected capacity change from 0 to 1024 [ 158.063694][T10363] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 158.074113][T10363] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 158.084314][T10363] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 158.540746][T10375] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2256'. [ 158.979787][T10398] loop7: detected capacity change from 0 to 512 [ 159.022597][T10398] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.2265: corrupted in-inode xattr: e_value size too large [ 159.050742][T10398] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2265: couldn't read orphan inode 15 (err -117) [ 159.064789][T10398] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.207697][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.478566][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2271'. [ 159.563014][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2272'. [ 159.600675][T10415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.615361][T10417] tipc: Enabled bearer , priority 0 [ 159.628224][T10417] syzkaller0: entered promiscuous mode [ 159.633801][T10417] syzkaller0: entered allmulticast mode [ 159.645662][T10415] loop8: detected capacity change from 0 to 512 [ 159.700711][T10415] macvlan2: entered promiscuous mode [ 159.706216][T10415] macvlan2: entered allmulticast mode [ 159.745378][T10415] bond2: entered promiscuous mode [ 159.753354][T10415] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 159.760973][T10415] bond2: left promiscuous mode [ 159.786593][T10417] tipc: Resetting bearer [ 159.798014][T10416] tipc: Resetting bearer [ 159.813041][T10416] tipc: Disabling bearer [ 159.813922][T10430] netlink: 'syz.5.2276': attribute type 1 has an invalid length. [ 159.830219][T10428] lo: entered allmulticast mode [ 159.841360][T10430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.865336][T10430] bond1: (slave dummy0): making interface the new active one [ 159.874073][T10430] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 159.887173][T10430] bond1: entered allmulticast mode [ 159.892479][T10430] dummy0: entered allmulticast mode [ 159.920887][T10433] loop8: detected capacity change from 0 to 512 [ 159.954631][T10433] EXT4-fs: inline encryption not supported [ 159.962885][T10433] ext4: Bad value for 'debug_want_extra_isize' [ 159.984634][T10433] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 160.063722][T10441] netlink: 'syz.8.2282': attribute type 1 has an invalid length. [ 160.078500][ T29] audit: type=1400 audit(1769103328.426:1604): avc: denied { ioctl } for pid=10444 comm="syz.5.2284" path="socket:[30689]" dev="sockfs" ino=30689 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.159452][T10454] usb usb1: usbfs: process 10454 (syz.8.2288) did not claim interface 0 before use [ 160.194609][ T29] audit: type=1400 audit(1769103328.546:1605): avc: denied { append } for pid=10460 comm="syz.2.2291" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 160.302468][T10470] loop2: detected capacity change from 0 to 128 [ 160.332721][T10473] syzkaller0: entered promiscuous mode [ 160.338337][T10473] syzkaller0: entered allmulticast mode [ 160.385902][T10470] bio_check_eod: 102 callbacks suppressed [ 160.385925][T10470] syz.2.2295: attempt to access beyond end of device [ 160.385925][T10470] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 160.405577][T10470] syz.2.2295: attempt to access beyond end of device [ 160.405577][T10470] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 160.427478][T10470] syz.2.2295: attempt to access beyond end of device [ 160.427478][T10470] loop2: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 160.441120][T10470] syz.2.2295: attempt to access beyond end of device [ 160.441120][T10470] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 160.463740][T10470] syz.2.2295: attempt to access beyond end of device [ 160.463740][T10470] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 160.478157][T10470] syz.2.2295: attempt to access beyond end of device [ 160.478157][T10470] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 160.493388][T10470] syz.2.2295: attempt to access beyond end of device [ 160.493388][T10470] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 160.507702][ T29] audit: type=1326 audit(1769103328.856:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.6.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 160.533375][T10470] syz.2.2295: attempt to access beyond end of device [ 160.533375][T10470] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 160.547250][ T29] audit: type=1326 audit(1769103328.856:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.6.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 160.573542][T10470] syz.2.2295: attempt to access beyond end of device [ 160.573542][T10470] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 160.587421][T10470] syz.2.2295: attempt to access beyond end of device [ 160.587421][T10470] loop2: rw=2049, sector=305, nr_sectors = 16 limit=128 [ 160.601327][ T29] audit: type=1326 audit(1769103328.906:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.6.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 160.624909][ T29] audit: type=1326 audit(1769103328.906:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.6.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 160.648515][ T29] audit: type=1326 audit(1769103328.916:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.6.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 160.672192][ T29] audit: type=1326 audit(1769103328.916:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.6.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 160.695830][ T29] audit: type=1326 audit(1769103328.916:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.6.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3f4dc7acb9 code=0x7ffc0000 [ 160.814986][T10490] loop2: detected capacity change from 0 to 512 [ 160.853346][T10490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.893272][T10490] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.985228][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.010698][T10484] loop8: detected capacity change from 0 to 512 [ 161.062400][T10484] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 161.079278][T10484] EXT4-fs (loop8): 1 truncate cleaned up [ 161.087326][T10484] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.130659][T10503] loop7: detected capacity change from 0 to 1024 [ 161.139401][ T4798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.154455][T10503] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 161.173070][T10503] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.184794][T10503] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.2304: lblock 0 mapped to illegal pblock 0 (length 6) [ 161.207500][T10503] Set syz1 is full, maxelem 65536 reached [ 161.243034][ T4386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 161.815282][T10515] __nla_validate_parse: 5 callbacks suppressed [ 161.815303][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2308'. [ 162.064474][ T3008] ================================================================== [ 162.072611][ T3008] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 162.080618][ T3008] [ 162.082949][ T3008] write to 0xffff88811b8bb7b0 of 8 bytes by task 3310 on cpu 0: [ 162.090583][ T3008] dentry_unlink_inode+0x65/0x260 [ 162.095624][ T3008] d_delete+0x164/0x180 [ 162.099794][ T3008] d_delete_notify+0x32/0x100 [ 162.104478][ T3008] vfs_unlink+0x32c/0x440 [ 162.108812][ T3008] do_unlinkat+0x1e2/0x4b0 [ 162.113242][ T3008] __x64_sys_unlink+0x2e/0x40 [ 162.117943][ T3008] x64_sys_call+0x2f48/0x3000 [ 162.122637][ T3008] do_syscall_64+0xc0/0x2a0 [ 162.127154][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.133053][ T3008] [ 162.135382][ T3008] read to 0xffff88811b8bb7b0 of 8 bytes by task 3008 on cpu 1: [ 162.142926][ T3008] step_into_slowpath+0x12c/0x4c0 [ 162.147970][ T3008] path_lookupat+0x330/0x500 [ 162.152574][ T3008] filename_lookup+0x190/0x390 [ 162.157352][ T3008] do_readlinkat+0x7d/0x340 [ 162.161876][ T3008] __x64_sys_readlink+0x47/0x60 [ 162.166750][ T3008] x64_sys_call+0x2af1/0x3000 [ 162.171439][ T3008] do_syscall_64+0xc0/0x2a0 [ 162.175956][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.181865][ T3008] [ 162.184191][ T3008] value changed: 0xffff88814f6a2f00 -> 0x0000000000000000 [ 162.191294][ T3008] [ 162.193619][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 162.199799][ T3008] CPU: 1 UID: 0 PID: 3008 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.210667][ T3008] Tainted: [W]=WARN [ 162.214467][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.224526][ T3008] ================================================================== [ 162.407480][T10527] loop8: detected capacity change from 0 to 1024 [ 162.414926][T10527] EXT4-fs: inline encryption not supported [ 162.452443][T10527] EXT4-fs: dax option not supported