last executing test programs: 1m10.91554059s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 1m10.677138253s ago: executing program 2 (id=7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa, '\x00\x00\x00\x00\x00c\t\x00'}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1m9.905407289s ago: executing program 2 (id=20): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000ac0)={0x0, 0xfffffffd, 0x100, 0xfffffffe, 0xca}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 1m9.88438799s ago: executing program 32 (id=20): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000ac0)={0x0, 0xfffffffd, 0x100, 0xfffffffe, 0xca}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 45.616937084s ago: executing program 1 (id=464): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) shutdown(r2, 0x2) 45.482055361s ago: executing program 1 (id=465): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}]}}}]}, 0x48}}, 0x0) 45.118326203s ago: executing program 1 (id=467): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 44.190876747s ago: executing program 1 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 44.14243672s ago: executing program 1 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r2}, 0xc) 44.071222584s ago: executing program 4 (id=493): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 43.901617084s ago: executing program 1 (id=495): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='.\x00', 0x100080, 0x4) flock(r2, 0x6) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 43.901406244s ago: executing program 4 (id=496): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004040) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/partitions\x00', 0x0, 0x0) lseek(r2, 0xc6c3, 0x0) 43.899600004s ago: executing program 33 (id=495): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='.\x00', 0x100080, 0x4) flock(r2, 0x6) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 43.828640968s ago: executing program 4 (id=498): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000003c0)='./bus\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 43.594471872s ago: executing program 4 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 43.505513917s ago: executing program 4 (id=504): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x10) unshare(0x2c020400) sync_file_range(r0, 0x889, 0x8, 0x2) waitid(0x2, 0x0, &(0x7f00000000c0), 0x20000000, 0x0) 43.161105008s ago: executing program 4 (id=513): unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) 43.12329284s ago: executing program 34 (id=513): unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) 13.057508724s ago: executing program 7 (id=1062): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e2b, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) 13.039429265s ago: executing program 7 (id=1064): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000180)={0x29}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) 12.943712721s ago: executing program 7 (id=1066): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x63cd, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 12.834419637s ago: executing program 7 (id=1069): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 12.737135733s ago: executing program 7 (id=1070): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)='@', 0x1}], 0x1, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) 12.041196893s ago: executing program 7 (id=1084): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0xa, 0x4e21, 0x763, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000002c0)='x', 0x1}], 0x1}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={r2, 0x1}, 0x8) 12.016485875s ago: executing program 35 (id=1084): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0xa, 0x4e21, 0x763, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000002c0)='x', 0x1}], 0x1}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={r2, 0x1}, 0x8) 11.964235418s ago: executing program 0 (id=1091): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56648, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) 11.92863846s ago: executing program 0 (id=1093): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 11.654506786s ago: executing program 0 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 11.514329645s ago: executing program 0 (id=1098): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 11.433225509s ago: executing program 0 (id=1099): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0xc0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) sendmsg(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, 0x0}, 0x4000) write$P9_RVERSION(r0, &(0x7f00000000c0)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 10.657442554s ago: executing program 0 (id=1106): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x8001}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x9}}, 0xffffff69) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) 10.617172207s ago: executing program 36 (id=1106): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x8001}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x9}}, 0xffffff69) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) 2.330969563s ago: executing program 9 (id=1222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x19}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xfff3}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20000090) 2.238117458s ago: executing program 9 (id=1227): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000400000000000000000000180000000400004000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) 2.173266523s ago: executing program 9 (id=1228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x127c8, 0x0, 0xffffffffffffffff, 0x20}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, r1, 0x25, 0x2, @val=@netkit={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0) 1.980069164s ago: executing program 9 (id=1242): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r0, 0x4, 0x6c00) write$UHID_INPUT(r0, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.578780817s ago: executing program 8 (id=1246): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x4c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 1.349146431s ago: executing program 8 (id=1259): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xff31}, 0xdb30}], 0x1, 0x40002142, 0x0) 1.297410094s ago: executing program 8 (id=1251): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x80ad}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 1.238852228s ago: executing program 3 (id=1254): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000400000000000000000000180000000400004000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) 1.197647079s ago: executing program 3 (id=1256): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.135648843s ago: executing program 8 (id=1257): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x2aa4}, 0x8200, 0x0, 0x10ffe, 0x0, 0x8002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.134935113s ago: executing program 8 (id=1260): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000000c0)={[{@grpid}, {@sb={'sb', 0x3d, 0x7ff}}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@grpid}]}, 0x0, 0x236, &(0x7f0000000300)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0xff) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfd}, 0x206c}}, 0x40010) 1.091945556s ago: executing program 9 (id=1262): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) wait4(0x0, 0x0, 0x80000000, 0x0) 1.015299551s ago: executing program 3 (id=1265): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x74, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0xffffffff, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x2, 0x6, 0xb, 0x1f89, 0x0, 0x9, 0x7}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xd1bb8ba2143d7d88}, 0x4000c00) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @remote, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) 968.695053ms ago: executing program 6 (id=1266): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 968.262643ms ago: executing program 6 (id=1267): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000400000000000000000000180000000400004000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) 934.939026ms ago: executing program 6 (id=1268): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) inotify_init() lremovexattr(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x7cc5c281160b411a, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xff}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 813.062042ms ago: executing program 5 (id=1271): mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 498.16058ms ago: executing program 3 (id=1272): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 432.688675ms ago: executing program 3 (id=1273): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 404.090116ms ago: executing program 3 (id=1274): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r0, 0x4, 0x6c00) write$UHID_INPUT(r0, &(0x7f00000011c0)={0x8, {"31442c0a4c29f71093243ec5395742dd90c72226073e22ab63947ea50c4460eb526c1e3744a9ca1230866c9b0c173eed8cab9d1aa302f7e290e59d3fc63f157b29d0aeef11c15da90b4f00607e9257160fb78f54d730e03bb906c541047ac2a8d56d9c2d7b2f8ed12ff06d9005fd46c4189027d2dc5b2b5f63d63c60abfab39833f13e603890909a6debcb54249a07c213a286201f98324c5bd2a1b793bf7bcf48e86bcdbdc02f5eedca80151c92020fdb4db44d99d247d5c75c60c9beac3d9945bcb3fd52a0958c4c3979ca9bd70840bc60ed939e9e4d09afe19b394d9d5d28ac7237421f9051ab4700c41d196994785f3f9876b0673b19a7bc8c68a07158c13c3a2b75144d1c5565071f229bde90d0f57df84974d375b0b6e61354a23b3afef76fb81401dc38b69182dc2829d853f3818129c40ecd9c85c30c67d64a13dc3e75938bbfd653c51766c838be5619be5e1ae938583a385f25c87a92d36e67c6b2a97937552fe1ded723d90305713ca40f626ab2606ec694428646e4e1d478b31a30d1099f31c77800f18936efff8950bceda5c30395cad5fca9cadbe28ff02209e3b2e51f8d22281dbd1111c6d17afca5571ba66762c495e6c97a97ffc554f171f0445c6fbb7cb1a09557c429f7849e75397bff9bb5ab01e2d3911df4b257fe81342fae980f7d6894e5bb611c92b16bd9e8dddf9543e5d28e2144bc78eeef02c6da25b56d33bf235172a0fe6a8cfef346eb6d5f5699685231d336495d65fca151381cd84c745fe580a2e4f2b345d89dfad4d4f45622d0e19509db7fc4be37d2ed8fb2efd2370036d08da446552b87fa1d30ee97191bb0171f5320fa4c81ef22f0a347f384813249f24a073fcb2bb144567acba03f93528d416ca27e0f49d127f77b81a2f60a39d9c5c8f3e1f0f812663fc6ceebada129a909e58ec8fd2f1405798c9b94d4c5f373e14baa2b5975e60732c07307bc4f6d5de124825315419423d113f3482197f196c4d7360b9dfc0c180901171638cbe6dc1577d2b86f24ab1cd16778db382b46466fce9ee6418fb91a1124ba50ce3041cac4678772f5db0d80b4c153ab9d557343bf59a25ad90af1fede148e734f407a94ebadd369bd16c99838039e6bb1f62ef49f6a4c00e5346e3c5eb125af77ebc16894613d1e4050a201496d0c1614e7747c2895cef9982e52af312c28289f39721add8c190ce7c6834836575b63ab6737067d267343952b11c0176e9c906857f6e2ffd95d5ce20766b03cc532e0a11bcb091ec449cba7e89dc4a978a546b0c3a6bf9dd22fc92b04d450dbd2518dc20066400fd11e4d1f17ee732063c4f3cf0d24183c5bdd7e9ac03b99b0acf8c8379e2e4581bb2787c452e6a3853cc654b7e82c331d0abb18df15b02748da0ab648ff43e6cd9eadc1b7f974670a762a7b70020142f03aa9817632b1c3fdc409d9ddf0585f87d5784e436fd8b3d8cf68bb0e62ea5a0c3af0a2202dfc63ee2271fe2ecbf11b2a4372fd6141b53fd1b4023a205df811c8308841b33c33ef718d5fbebff453564e4fc35ab0f1bc7be9274da25afab9039d6d5247e88730198a57e2965b5e5dc48c7d8b8499e5b9ca34a4b7b2fc14b968d9b370d0a892cd63f83446e804c73d7784e4cb10a1bba4608510ba880371fd6113fa440e89dfba8b545b67777eb0fa764c411885f4b2fff181ca6a6ba87318869430cb6acf0f39de176756497502571762449ba9a94b0591137c4c375c8a2b70b2243936d1967add1f07debd5ef0c2f1fc10ebac10f27befed17c6b75871a94dcc5c67abf0ccffeef3a50bff406476e28d9a6602f65c3ae48470cbc6294b4d3a830a288e90d792a9c7cc188a52fff8af3143458d9e2c4605640538a9c915a70792fcfbe2210c5e86a6498f3b6666a368df6717cad06d5744142bde2def01bf17bdd5c2b835be72703d3dd2eaf7cd3e795c40c72b52da860e2d18ca32d7d6f3497260e7489a627df2cdd20f69a92b0958d326b4550516cf2b141ee4bed3c630d1d8c2020c6144bceece9227cf6f77ed25f7e1f3dc3cdc8fecb77d8407b1f0cad703664eff4b78fa3649dd2e16d2df7995ad08736096e1cf514cb3f7bea06ce556f0bfa07eb10ffc4157455dee5327934a34fbefe11e6e5a2356c44d8e8105af5fc32bd916b0e54357c23ea488b8bfb2b81eeaaa87c2de401f51b899db0d657cb33d6b1800c331f6eb907c3803645891cef5ab91ede0777b18e68d20cf727e3315baec5b25a34e538ee06fbc80a90dfc75a640bdb3dc967368fdd1c5003e67a993a289e88dfd823054081e05bc1d486046ed352305270d714b40a6f8e14ce2274bb34de2e7594e3d74319e17f9fdc8f11e8ce55d488a4fa24fa6d00d30c6a13cd1895b676792380640b974dca3b3271c7e219b1db3fd1dc0a6151b3482c9297b8b934929dc646df519439a13e0660eb557558feae7e505422eda008f2a2a8c4852481dd91cf36344c885939cfc86dde36a3bbcd042395670815211ce605f5089a745780a79c0d9f9af7fbd3ccb3f7b7bfca1dcb0cec9afd7c4222da94dfbd04647e8ea557996fbbd5786a8010edd647cdef7d915c24cc9c30968dcb4948d90c843f22fe263835a549a20c44a7fc0356f2f25a5986c181f3e40a5a62715f2535ac9d10debae80db84670e09d00564b44a372e088cdfea3766b5c4d4e42f076b83e45016c4b4ddbab7381759304ae14492588ef9db81139f54a17a6948e10ea5d0831a88c77e55e8d64899360c73976a091c39a12638d5e97d1b6c97a1cca4723ed954e3545271708efee3e8062c4f07a2d8cc5a757bb6eb7c23320ecceab75a5727b73cd7854a63f81001ea6a385634e41c78fd73de33c28e58e669526fc2b6afbc2c3dc83287f6443e137ae13dd84d768088395546554fc6b12c03c5edbc0a527f62efdbfc46c4e520a150437b2d7465f34f5c4beb5b664d0a0a7e67a27bc3ba6d9e9857c7d1480b1a4fc5ca08bc21dafc3ee21001d2de7eab5f6d52cb846f94335bffbc49515c76017e4a2edfd4a40b79b37c95ad8dc0fad620a7e5dd6be06888a347085010e123f631fdd84887983a798fe203a42b58d39dc63829a3c8145a4c45ea1f7ed0672e341136eaf2ee0b1a76c3d83ca414c951d4195e374adb40feaba5212f23ba053e86397153bf1404b92c0f77e97c60e2bbcfa4dcc9520e77525625af42cec9f360adc24907cab3a878e40d158561d5ecb39fe00f1b30d992066e77e06406173a0248cdc30c0596de34d1584af0c650479c595a47fcaa6753d909cab215bab44b690a4c40e42cfb7261a80e4dd7c10288f2c021317b6e0875c7ae1128783e4e9f2ed29ea77aed7f5f2df52a6fdb901d42c95e2c1d252a5846c81f74485cd1dacc8dfd689b399247006b360f0bcd85f82821982e28972aaf1aebf46309f52ba94b17817e21b6c242e8bf5f61b9095419d3ea8bd3e69266d84fdb2ca8714686ff80f3f36210b7e9d8384480f2de56389e0ea7d4db384cdd4549d4ec83ae87bc7f99305fddea649cff25772db431001a5b21ba025b1da15b2b97e90a42d32bc636181bd328d526aa97a0d0e1500030566d1e95da170b2a1670842c936cd594db4aab354cd6ec82b29be3ae3f109e183af094556ee06e8fb178d5b888b5ac9d6237df46804160734cb20a2ba664402dcba5306e9b18192b9b86539919e4e6d32124fa98f4aa8b69d1a3ed9140ab8407ac00ddf8143bf1163da42f1b5a33f3a162866181ddd90d5bfd78cfc75158ca8fb120a17eba012e88f69c997fce26ea081449de49c3e972a4c49f140e3b50aef55191f65622ffe6c33186fd565df7b880db9c25ee39509eee4f87b34c1a0fb97318657e2b5261b5dc3c596d6b9f7fae27a8941510261e0a17208251c28869185c157c7a6f5006c2c8cf7d67ad1b74bd8111fb7e17ec00336628f3651078ed4678571f0ab6e10c5178efbef2ed16cc6f7f01bd9b52a61102fd19228bfaf06ca879a8a49b7f4faa0d375df2998f54613fc1d33f2e1a8ee0332ea3b63101c7009e29fd44f3aeea5c0ab382c405605155a60ef7bf05dd31e420e4df43ff38a72f6a47a80ed7997903c6bc4363a95b0920108a1ee60325c5d848f7ad1cd90073a424baf2aa23badb24d6b8c25151d991036d8443fd89abcafbe55b8468fe428e1cfdac0a9c3c9e6bf464e0ac3a67c31f63c9ec44f0c0c9f5c97ad44390b3f281ccd3499d1d66841a5775c8479550d2c1636b8a4de5f37b94ee9a47243cc4a47bab4d3420d1b5ad3e4fb634c73b6d4525915e44066094fbee72bd850ab83cc70ed47e119be5e609ebd292993f78cf92b9ea33cd77d713fd18f2c43b51280372dff422a71d1065702ddf5ddf4362f6777d9ef365f942d5fa5d3a0ea936826ac64385615a1df4fa3076ac818f5a3b9f3b449a2c655f165fc6d7bf83b54a2394e6b05286fd7c1555e0f53c0f3754636f93a57cc3459153442370668678572612e86ca7384a7bb33c71053467fa6f83d462b5204186f1d1f0a3fc3c98226acc7df83dd131392a746c25c3e42780e2d802182674ef1fd005353149f75e358399cba76ea36a76ed21e9d505e6e0b87873ac0d26746e35d0ff9e435d28b27340165ca12b8bf31daaef63ad7cc27791e3bdbb93ca65b3617efe1a7897b0f37ad4dc49a996d487b0d6fdb7b6fbd536ee0b070e99bfc75459aec1d3205a89c1e221f2c4eaa1725d4c32f502655fcece0094bf93a2f28e1ccb3c32208b8e38f77e6195247fe096fb08e173b226012002de279e2f853b000773569b0ce731a913aa83bf4c18288a1283846acd40d3283873743c10aab220d287ba1868fcf1f73a2859df5e5fff4ef56cea2dd393ce7d9de36bf1b6664aac690c8aa9cdcb5239630bb0a1859c6354493fcbe580db0007ef1ae66f2dcf4de4e029f92f519d09e4c807c3e110a94791bb982da89faf350fb3a1992df5d5c77f2e895cf047aead4edd8ed4527320b14a2f60e0f3ba7a6833e074c592efeea59810361a349a2ea9611efcf9e2ff49b0c712befebb9c866dfb919fb53b9f680c60c1cba096c6ac8075a97a7fbefa8f669210f2761445ee77cf51087772c4854d0dfcab3125719654fa15f23c59630e4d40c23d9cf1e05eda446cbeb9cfda4a103fdb0269766fa098bea50d9663653e59b912a3583ca5f7bac4435222525205025c578a5b9768e63297638a9b77afef9fd5c8ef97208896db4fd77e8a5057dbfef2b3eeaec02831cedc27d466d5b8f9ecab06860085da4377d3c9bd4750ddc93690b9a9552aac579b83bc393e7b55de21d4e15d3f4e1047da191b1c6b3375b5250ad74dec72cc0f15bb870bc8ab16617d00c9a93c99624de315484d11a9b42941f2d12132d097b6b600564a40428b2dc0d7d23aaa86595e12d1e200d4fbfa26bea0e6e2c334ece67dcb30153981e20d0c77d7aeec896bcb93602e22ed2ccc2104d5c7e0f21558a2162943921ed413f011402aa69a95d3ed59cb8bf9b0f8ec2d7401a2413bb76a770fcebf419a0378711e97efb1ff202d6a76cfadb115a4fd2405ae13c0642c5dff807ba66544e73df47760a8897f5dfdc7b40197f74a2e19a17dbba00422b7ac17ced2cd3913afcf3772fafb956260e62951d0bb4e72955bf3faf31e5c220c6c0bed8a7d4c7d9368065449133e14236b7f80d3f630764e2508fef35b9c75a74a013f144275fbc99374041a76c17bbf069a8cb39ef2fd7f12600de70c54530a64b5864620f9ee9745177d8a329c06b2ab97bda51b3cb96e12d812a100cb6afc246342da", 0x1000}}, 0x1006) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 387.300747ms ago: executing program 5 (id=1275): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r2, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x1}, 0x90) 336.03976ms ago: executing program 5 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 281.586223ms ago: executing program 9 (id=1277): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r1, 0x0, 0x100000004, 0x0) read(r2, &(0x7f0000000240)=""/84, 0x54) write(r0, 0x0, 0x0) 260.495105ms ago: executing program 6 (id=1278): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x208010, &(0x7f00000005c0)=ANY=[@ANYBLOB="646f733178666c259b343fd685792c0081b970078cc79a45f710a205e736e7d5c6a83a342ca3a9e4573f6a2b226f296215dc2c1f3a05ff21e745e594cd9b6badb7564e315f633cbfd46029080e9b9bba2287e278bb20501b89b2cec93e6bc2a60858cc0b40a6df"], 0x0, 0x217, &(0x7f0000000380)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) 259.498475ms ago: executing program 5 (id=1279): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x5a476f3fcb0229da}, 0xc045) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) 239.690496ms ago: executing program 5 (id=1280): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0x200, 0x20}, 0xc) 201.882468ms ago: executing program 5 (id=1281): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0x2, 0x20, 0x2, 0xf, 0x4}}, 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="500106"], 0x14) 179.413789ms ago: executing program 6 (id=1282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x40000) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x3, 0x1, 0x6ed, 0x19, 0xc}, @ipv4=@udp={{0x5, 0x4, 0x2, 0x2b, 0x28, 0x65, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @remote}, {0x4e24, 0x4e20, 0x14, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}, "1730ed47"}}}}, 0x32) 50.136787ms ago: executing program 6 (id=1283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x38ca8697, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r3, {0x7, 0xffe0}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) 0s ago: executing program 8 (id=1284): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 00000000. [ 45.957188][ T3995] capability: warning: `syz.1.157' uses deprecated v2 capabilities in a way that may be insecure [ 46.294114][ T4021] loop2: detected capacity change from 0 to 7 [ 46.300766][ T4021] loop2: [ 46.369464][ T4029] loop1: detected capacity change from 0 to 512 [ 46.385873][ T4029] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.501746][ T4043] netlink: 104 bytes leftover after parsing attributes in process `syz.5.179'. [ 46.691075][ T4053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 46.720028][ T3447] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.729206][ T4053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 46.748420][ T3447] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.764954][ T3447] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.788891][ T4055] batman_adv: batadv0: Adding interface: dummy0 [ 46.795246][ T4055] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.833676][ T4055] batman_adv: batadv0: Interface activated: dummy0 [ 46.853604][ T3447] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.864542][ T4056] batadv0: mtu less than device minimum [ 46.870689][ T4056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.881666][ T4056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.892534][ T4056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.903567][ T4056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.914460][ T4056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.925345][ T4056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.936183][ T4056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.947184][ T4056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.958023][ T4056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.150043][ T4073] process 'syz.4.192' launched './file2' with NULL argv: empty string added [ 47.275138][ T4088] netlink: 'syz.5.198': attribute type 4 has an invalid length. [ 47.288157][ T4088] netlink: 'syz.5.198': attribute type 4 has an invalid length. [ 47.379881][ T4090] wireguard0: entered promiscuous mode [ 47.387589][ T4090] wireguard0: entered allmulticast mode [ 47.997133][ T4112] netlink: 'syz.3.207': attribute type 15 has an invalid length. [ 48.009280][ T4110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.065092][ T4110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.079943][ T4110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.105800][ T4110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.428636][ T4114] loop5: detected capacity change from 0 to 2048 [ 48.448005][ T4110] netlink: 566 bytes leftover after parsing attributes in process `syz.1.206'. [ 48.487642][ T4114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.527520][ T4114] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.585644][ T4114] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.208: bg 0: block 345: padding at end of block bitmap is not set [ 48.600759][ T4114] EXT4-fs (loop5): Remounting filesystem read-only [ 48.632580][ T4129] loop3: detected capacity change from 0 to 512 [ 48.640784][ T4129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.649083][ T4129] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.669515][ T4129] EXT4-fs (loop3): 1 truncate cleaned up [ 48.675909][ T4129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.692036][ T4114] syz.5.208 (4114) used greatest stack depth: 9968 bytes left [ 48.702015][ T3553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.742846][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 48.742863][ T29] audit: type=1400 audit(1769472482.131:290): avc: denied { bind } for pid=4132 comm="syz.5.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.768202][ T29] audit: type=1400 audit(1769472482.131:291): avc: denied { setopt } for pid=4132 comm="syz.5.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.792196][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.883123][ T4149] loop3: detected capacity change from 0 to 128 [ 49.053683][ T4162] [syz.0.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 49.092831][ T29] audit: type=1400 audit(1769472482.481:292): avc: denied { mounton } for pid=4167 comm="syz.0.228" path="/proc/132/task" dev="proc" ino=6768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 49.152482][ T29] audit: type=1400 audit(1769472482.541:293): avc: denied { cpu } for pid=4174 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.313238][ T4179] ref_ctr increment failed for inode: 0x136 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810486f2c0 [ 49.325430][ T4178] uprobe: syz.0.232:4178 failed to unregister, leaking uprobe [ 49.744664][ T29] audit: type=1400 audit(1769472483.131:294): avc: denied { write } for pid=4195 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.128622][ T4218] loop4: detected capacity change from 0 to 128 [ 50.137766][ T4218] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615ÿâ…—úì' [ 50.165243][ T29] audit: type=1326 audit(1769472483.561:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3790aeb9 code=0x7ffc0000 [ 50.193533][ T29] audit: type=1326 audit(1769472483.581:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fcb3790aeb9 code=0x7ffc0000 [ 50.216953][ T29] audit: type=1326 audit(1769472483.581:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3790aeb9 code=0x7ffc0000 [ 50.240254][ T29] audit: type=1326 audit(1769472483.581:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3790aeb9 code=0x7ffc0000 [ 50.263848][ T29] audit: type=1326 audit(1769472483.581:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fcb3790aeb9 code=0x7ffc0000 [ 50.412399][ T4228] loop5: detected capacity change from 0 to 1024 [ 50.456601][ T4228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.484940][ T4228] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.531984][ T4228] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.251: lblock 3 mapped to illegal pblock 3 (length 3) [ 50.564202][ T4228] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 50.576578][ T4228] EXT4-fs (loop5): This should not happen!! Data will be lost [ 50.576578][ T4228] [ 50.589454][ T4228] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.251: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.605997][ T4228] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.251: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.620368][ T4228] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.251: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.644450][ T4228] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.251: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.654877][ T4119] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 50.662603][ T4228] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.251: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.688173][ T4228] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.251: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.708830][ T4228] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.251: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.766859][ T4228] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.251: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.869268][ T3553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.091252][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 51.103797][ T4270] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.158285][ T4270] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.209390][ T4270] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.268682][ T4270] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.322660][ T3447] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.334681][ T3447] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.347982][ T3751] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.359710][ T3751] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.590775][ T4289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 51.599668][ T4289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 51.608902][ T4289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 51.617812][ T4289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 51.715841][ T4297] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 51.723636][ T4297] netlink: 'syz.3.278': attribute type 4 has an invalid length. [ 51.731327][ T4297] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.278'. [ 51.798475][ T3486] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.815806][ T3486] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.849385][ T4311] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.892878][ T3486] kernel write not supported for file /context (pid: 3486 comm: kworker/1:4) [ 52.262600][ T4336] loop2: detected capacity change from 0 to 7 [ 52.382264][ T4348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4348 comm=syz.5.298 [ 52.401889][ T4348] netlink: 'syz.5.298': attribute type 1 has an invalid length. [ 52.422110][ T4348] bond1: (slave bridge1): making interface the new active one [ 52.430036][ T4348] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 52.945325][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.251442][ T3486] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 53.274852][ T3486] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.485965][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 53.514865][ T4392] bridge_slave_1: left allmulticast mode [ 53.520574][ T4392] bridge_slave_1: left promiscuous mode [ 53.526285][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.553840][ T4392] bridge_slave_0: left allmulticast mode [ 53.559597][ T4392] bridge_slave_0: left promiscuous mode [ 53.565376][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.705523][ T4401] bond_slave_0: entered promiscuous mode [ 53.711304][ T4401] bond_slave_1: entered promiscuous mode [ 53.724681][ T4401] bond_slave_0: left promiscuous mode [ 53.730188][ T4401] bond_slave_1: left promiscuous mode [ 53.772035][ T4404] netlink: 'syz.4.320': attribute type 4 has an invalid length. [ 53.847063][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 53.847080][ T29] audit: type=1326 audit(1769472487.241:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4412 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bd29aeb9 code=0x7ffc0000 [ 53.876574][ T29] audit: type=1326 audit(1769472487.241:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4412 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bd29aeb9 code=0x7ffc0000 [ 53.953035][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 53.961981][ T29] audit: type=1326 audit(1769472487.291:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4412 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f06bd29aeb9 code=0x7ffc0000 [ 53.985215][ T29] audit: type=1326 audit(1769472487.291:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06bd25b78e code=0x7ffc0000 [ 53.988098][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 54.008550][ T29] audit: type=1326 audit(1769472487.291:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4412 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bd29aeb9 code=0x7ffc0000 [ 54.040829][ T29] audit: type=1326 audit(1769472487.291:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4412 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bd29aeb9 code=0x7ffc0000 [ 54.204837][ T29] audit: type=1326 audit(1769472487.441:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f06bd29aeb9 code=0x7ffc0000 [ 54.228772][ T29] audit: type=1400 audit(1769472487.471:331): avc: denied { name_connect } for pid=4428 comm="syz.5.331" dest=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 54.250736][ T29] audit: type=1400 audit(1769472487.511:332): avc: denied { getattr } for pid=4435 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.276955][ T29] audit: type=1400 audit(1769472487.521:333): avc: denied { name_connect } for pid=4428 comm="syz.5.331" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 54.412493][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'. [ 54.421517][ T4463] bridge_slave_1: left allmulticast mode [ 54.427259][ T4463] bridge_slave_1: left promiscuous mode [ 54.433057][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.442302][ T4463] bridge_slave_0: left allmulticast mode [ 54.448078][ T4463] bridge_slave_0: left promiscuous mode [ 54.453813][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.700026][ T4478] loop3: detected capacity change from 0 to 1024 [ 54.728097][ T4478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.771749][ T4478] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.806666][ T4478] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.344: lblock 3 mapped to illegal pblock 3 (length 3) [ 54.852886][ T4478] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 54.865730][ T4478] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.865730][ T4478] [ 54.893399][ T4497] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.344: lblock 3 mapped to illegal pblock 3 (length 1) [ 54.943455][ T4497] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.344: lblock 3 mapped to illegal pblock 3 (length 1) [ 54.971110][ T4477] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.344: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.024150][ T4497] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.344: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.050742][ T4477] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.344: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.075360][ T4477] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.344: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.089720][ T4477] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.344: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.128724][ T4497] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.344: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.143256][ T4477] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.344: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.254089][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.807855][ T4562] loop4: detected capacity change from 0 to 1024 [ 55.976226][ T4562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.001589][ T4562] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.079239][ T4562] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.364: lblock 3 mapped to illegal pblock 3 (length 3) [ 56.152049][ T4562] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 56.164405][ T4562] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.164405][ T4562] [ 56.177576][ T4562] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.364: lblock 3 mapped to illegal pblock 3 (length 1) [ 56.202348][ T36] kernel write not supported for file /context (pid: 36 comm: kworker/1:1) [ 56.216369][ T4562] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.364: lblock 3 mapped to illegal pblock 3 (length 1) [ 56.235263][ T4602] netlink: 'syz.0.373': attribute type 2 has an invalid length. [ 56.242094][ T4560] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.364: lblock 3 mapped to illegal pblock 3 (length 1) [ 56.243189][ T4602] netlink: 'syz.0.373': attribute type 2 has an invalid length. [ 56.259055][ T4560] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.364: lblock 3 mapped to illegal pblock 3 (length 1) [ 56.299687][ T4562] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.364: lblock 3 mapped to illegal pblock 3 (length 1) [ 56.315321][ T4562] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.364: lblock 3 mapped to illegal pblock 3 (length 1) [ 56.330935][ T4560] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.364: lblock 3 mapped to illegal pblock 3 (length 1) [ 56.345289][ T4560] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.364: lblock 3 mapped to illegal pblock 3 (length 1) [ 56.359672][ T4562] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.364: lblock 3 mapped to illegal pblock 3 (length 1) [ 56.395136][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.243565][ T4630] chnl_net:caif_netlink_parms(): no params data found [ 57.341766][ T4630] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.342128][ T4660] netlink: 'syz.5.404': attribute type 27 has an invalid length. [ 57.348908][ T4630] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.364520][ T4630] bridge_slave_0: entered allmulticast mode [ 57.371928][ T4630] bridge_slave_0: entered promiscuous mode [ 57.379123][ T4630] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.386245][ T4630] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.395792][ T4630] bridge_slave_1: entered allmulticast mode [ 57.404179][ T4630] bridge_slave_1: entered promiscuous mode [ 57.438062][ T4660] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.445344][ T4660] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.486288][ T4660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.496586][ T4660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.530937][ T4662] bond_slave_0: entered promiscuous mode [ 57.536685][ T4662] bond_slave_1: entered promiscuous mode [ 57.556879][ T4663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.565648][ T4663] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.585231][ T4663] net_ratelimit: 11 callbacks suppressed [ 57.585248][ T4663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.617733][ T52] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.626825][ T52] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.635962][ T4662] bond_slave_0: left promiscuous mode [ 57.641444][ T4662] bond_slave_1: left promiscuous mode [ 57.649152][ T4630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.658360][ T52] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.667470][ T52] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.687679][ T4630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.698317][ T52] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.707481][ T52] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.719238][ T31] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.728193][ T31] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.759939][ T4630] team0: Port device team_slave_0 added [ 57.766738][ T4630] team0: Port device team_slave_1 added [ 57.782740][ T4630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.789996][ T4630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.816080][ T4630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.827799][ T4630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.834854][ T4630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.860865][ T4630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.896341][ T4630] hsr_slave_0: entered promiscuous mode [ 57.902714][ T4630] hsr_slave_1: entered promiscuous mode [ 57.909708][ T4630] debugfs: 'hsr0' already exists in 'hsr' [ 57.915554][ T4630] Cannot create hsr debugfs directory [ 57.980431][ T4630] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.016807][ T4630] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.028831][ T4676] loop0: detected capacity change from 0 to 1024 [ 58.046411][ T4676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.059100][ T4676] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.072068][ T4630] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.092283][ T4676] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.399: lblock 3 mapped to illegal pblock 3 (length 3) [ 58.106752][ T4676] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 58.119106][ T4676] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.119106][ T4676] [ 58.131622][ T4676] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.147676][ T4630] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.159168][ T4676] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.174023][ T4676] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.188939][ T4676] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.203181][ T4676] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.218649][ T4676] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.233362][ T4676] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.248164][ T4675] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.277579][ T4676] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.399: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.330388][ T4630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.339987][ T4630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.356518][ T4630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.366167][ T4630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.373898][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.422501][ T4630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.435421][ T4630] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.445410][ T3751] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.452485][ T3751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.463126][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.470320][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.518588][ T3329] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.529073][ T3329] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.543198][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 58.569333][ T3329] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.579826][ T3329] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.620213][ T4630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.664426][ T3329] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.674895][ T3329] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.736612][ T4711] bond_slave_0: entered promiscuous mode [ 58.742346][ T4711] bond_slave_1: entered promiscuous mode [ 58.744741][ T4715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 58.755336][ T4715] IPv6: NLM_F_CREATE should be set when creating new route [ 58.755484][ T4711] bond_slave_0: left promiscuous mode [ 58.762546][ T4715] IPv6: NLM_F_CREATE should be set when creating new route [ 58.775355][ T4711] bond_slave_1: left promiscuous mode [ 58.815779][ T3329] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.826137][ T3329] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.876050][ T4630] veth0_vlan: entered promiscuous mode [ 58.899398][ T4630] veth1_vlan: entered promiscuous mode [ 58.910185][ T4725] netlink: 'syz.4.410': attribute type 27 has an invalid length. [ 59.000970][ T4725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.017545][ T4725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.073918][ T4630] veth0_macvtap: entered promiscuous mode [ 59.115029][ T3329] bridge_slave_1: left allmulticast mode [ 59.120809][ T3329] bridge_slave_1: left promiscuous mode [ 59.126577][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.146852][ T3329] bridge_slave_0: left allmulticast mode [ 59.152542][ T3329] bridge_slave_0: left promiscuous mode [ 59.158385][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.247645][ T3329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.266370][ T3329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.285976][ T3329] bond0 (unregistering): Released all slaves [ 59.305064][ T4729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.313736][ T4729] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.323632][ T4729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.355135][ T3329] hsr_slave_0: left promiscuous mode [ 59.361079][ T3329] hsr_slave_1: left promiscuous mode [ 59.375165][ T3329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.382699][ T3329] batadv0: mtu less than device minimum [ 59.388719][ T3329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.399818][ T3329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.410807][ T3329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.421861][ T3329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.432798][ T3329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.443724][ T3329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.454792][ T3329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.472070][ T3329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.480113][ T3329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.498955][ T3329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.506990][ T3329] batman_adv: batadv0: Interface deactivated: dummy0 [ 59.513698][ T3329] batman_adv: batadv0: Removing interface: dummy0 [ 59.522768][ T3329] veth1_macvtap: left promiscuous mode [ 59.528504][ T3329] veth0_macvtap: left promiscuous mode [ 59.534022][ T3329] veth1_vlan: left promiscuous mode [ 59.539341][ T3329] veth0_vlan: left promiscuous mode [ 59.618160][ T3329] team0 (unregistering): Port device team_slave_1 removed [ 59.627929][ T3329] team0 (unregistering): Port device team_slave_0 removed [ 59.668254][ T52] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.679395][ T4630] veth1_macvtap: entered promiscuous mode [ 59.712660][ T4630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.722171][ T52] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.746977][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 59.746995][ T29] audit: type=1400 audit(1769472493.141:346): avc: denied { ioctl } for pid=4739 comm="syz.4.412" path="socket:[9160]" dev="sockfs" ino=9160 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.761414][ T4630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.803157][ T52] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.837181][ T52] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.858393][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.881077][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.916607][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.934015][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.959817][ T4706] chnl_net:caif_netlink_parms(): no params data found [ 60.036399][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.043598][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.084915][ T4706] bridge_slave_0: entered allmulticast mode [ 60.091606][ T4706] bridge_slave_0: entered promiscuous mode [ 60.099008][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.106230][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.113520][ T4706] bridge_slave_1: entered allmulticast mode [ 60.120389][ T4706] bridge_slave_1: entered promiscuous mode [ 60.131475][ T4772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 60.143255][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.156290][ T3329] IPVS: stop unused estimator thread 0... [ 60.167816][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.188143][ T4706] team0: Port device team_slave_0 added [ 60.188723][ T4772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 60.213784][ T4706] team0: Port device team_slave_1 added [ 60.236777][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.243875][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.269872][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.282584][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.289640][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.315653][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.408505][ T4706] hsr_slave_0: entered promiscuous mode [ 60.422861][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 60.431768][ T29] audit: type=1326 audit(1769472493.811:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 60.463730][ T29] audit: type=1326 audit(1769472493.811:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 60.492711][ T4706] hsr_slave_1: entered promiscuous mode [ 60.522460][ T29] audit: type=1326 audit(1769472493.821:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 60.545808][ T29] audit: type=1326 audit(1769472493.821:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 60.569156][ T29] audit: type=1326 audit(1769472493.821:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd648c6b78e code=0x7ffc0000 [ 60.592475][ T29] audit: type=1326 audit(1769472493.851:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 60.616010][ T29] audit: type=1326 audit(1769472493.851:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 60.639410][ T29] audit: type=1326 audit(1769472493.851:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 60.662677][ T29] audit: type=1326 audit(1769472493.851:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 61.136105][ T4796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.162539][ T4706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.170872][ T4796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.200707][ T4706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.232507][ T4706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.247467][ T4706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.333006][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.360499][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.371242][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.378407][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.421390][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.428530][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.449055][ T4706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.459495][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.551414][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.694360][ T4831] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 61.723203][ T4831] bond1: entered promiscuous mode [ 61.728386][ T4831] bond1: entered allmulticast mode [ 61.744884][ T4831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.767044][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 61.786043][ T4838] erspan1: entered allmulticast mode [ 61.796400][ T4838] bond1: (slave erspan1): making interface the new active one [ 61.803990][ T4838] erspan1: entered promiscuous mode [ 61.809689][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 61.834827][ T4838] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 61.852866][ T4706] veth0_vlan: entered promiscuous mode [ 61.889769][ T4706] veth1_vlan: entered promiscuous mode [ 61.929714][ T4706] veth0_macvtap: entered promiscuous mode [ 61.937339][ T4706] veth1_macvtap: entered promiscuous mode [ 61.988446][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.009950][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.054836][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.092030][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.127609][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.168269][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.497814][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.524508][ T3379] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.732490][ T4938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.741375][ T4938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.779798][ T4941] loop0: detected capacity change from 0 to 1024 [ 62.788636][ T4941] EXT4-fs: Ignoring removed nobh option [ 62.794718][ T4941] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.803656][ T4941] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 62.813465][ T4941] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 62.878917][ T4941] loop0: detected capacity change from 0 to 512 [ 62.910694][ T4941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.923839][ T4941] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.949041][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.125554][ T3485] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.155886][ T3485] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.428538][ T4985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.445418][ T4985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.463110][ T4985] ref_ctr_offset mismatch. inode: 0x186 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 64.630005][ T4998] loop0: detected capacity change from 0 to 1024 [ 64.656855][ T4998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.684085][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.704732][ T4994] loop3: detected capacity change from 0 to 32768 [ 65.070434][ T5022] loop5: detected capacity change from 0 to 128 [ 65.085992][ T5022] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 65.113899][ T5022] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 65.122061][ T5022] FAT-fs (loop5): Filesystem has been set read-only [ 65.131950][ T5022] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 65.293688][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.376466][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.434483][ T5043] loop4: detected capacity change from 0 to 512 [ 65.442362][ T5030] loop5: detected capacity change from 0 to 32768 [ 65.455324][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.465940][ T5043] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.477755][ T5043] EXT4-fs (loop4): 1 truncate cleaned up [ 65.484017][ T5043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.507735][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 65.507750][ T29] audit: type=1400 audit(1769472498.901:367): avc: denied { remove_name } for pid=5041 comm="syz.4.498" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.508087][ T5043] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.4.498: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 65.516163][ T29] audit: type=1400 audit(1769472498.901:368): avc: denied { rename } for pid=5041 comm="syz.4.498" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.562675][ T5043] EXT4-fs (loop4): Remounting filesystem read-only [ 65.585291][ T5043] EXT4-fs warning (device loop4): ext4_rename_delete:3729: inode #2: comm syz.4.498: Deleting old file: nlink 5, error=-117 [ 65.620163][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.644545][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.774661][ T37] bridge_slave_1: left allmulticast mode [ 65.780449][ T37] bridge_slave_1: left promiscuous mode [ 65.786271][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.806531][ T37] bridge_slave_0: left allmulticast mode [ 65.812289][ T37] bridge_slave_0: left promiscuous mode [ 65.818236][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.947703][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.966723][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.976641][ T37] bond0 (unregistering): Released all slaves [ 66.043383][ T37] hsr_slave_0: left promiscuous mode [ 66.066504][ T37] hsr_slave_1: left promiscuous mode [ 66.079493][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.087051][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.117089][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.124545][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.137115][ T37] veth1_macvtap: left promiscuous mode [ 66.142767][ T37] veth0_macvtap: left promiscuous mode [ 66.156234][ T37] veth1_vlan: left promiscuous mode [ 66.167041][ T37] veth0_vlan: left promiscuous mode [ 66.341031][ T37] team0 (unregistering): Port device team_slave_1 removed [ 66.360630][ T37] team0 (unregistering): Port device team_slave_0 removed [ 66.471848][ T5034] chnl_net:caif_netlink_parms(): no params data found [ 66.542784][ T5034] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.550047][ T5034] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.558367][ T5034] bridge_slave_0: entered allmulticast mode [ 66.565297][ T5034] bridge_slave_0: entered promiscuous mode [ 66.587041][ T5034] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.594203][ T5034] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.604318][ T5034] bridge_slave_1: entered allmulticast mode [ 66.611197][ T5034] bridge_slave_1: entered promiscuous mode [ 66.640350][ T5034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.651336][ T5034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.716015][ T5139] loop5: detected capacity change from 0 to 512 [ 66.723242][ T5034] team0: Port device team_slave_0 added [ 66.740669][ T5139] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 66.751357][ T5034] team0: Port device team_slave_1 added [ 66.777670][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 66.804201][ T5139] EXT4-fs (loop5): 1 truncate cleaned up [ 66.828182][ T5139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.851292][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.858445][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.884608][ T5034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.898560][ T5139] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.5.520: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 66.933713][ T5139] EXT4-fs (loop5): Remounting filesystem read-only [ 66.940497][ T5139] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #2: comm syz.5.520: Deleting old file: nlink 5, error=-117 [ 66.955312][ T29] audit: type=1326 audit(1769472500.321:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 66.978659][ T29] audit: type=1326 audit(1769472500.321:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 67.001917][ T29] audit: type=1326 audit(1769472500.321:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 67.025395][ T29] audit: type=1326 audit(1769472500.321:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 67.048745][ T29] audit: type=1326 audit(1769472500.321:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 67.072026][ T29] audit: type=1326 audit(1769472500.321:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 67.080318][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.095315][ T29] audit: type=1326 audit(1769472500.321:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 67.095349][ T29] audit: type=1326 audit(1769472500.321:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd648caaeb9 code=0x7ffc0000 [ 67.149039][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.175222][ T5034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.208224][ T3553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.332823][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.339977][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.364973][ T5089] bridge_slave_0: entered allmulticast mode [ 67.377864][ T5089] bridge_slave_0: entered promiscuous mode [ 67.387366][ T5034] hsr_slave_0: entered promiscuous mode [ 67.393465][ T5034] hsr_slave_1: entered promiscuous mode [ 67.399494][ T5034] debugfs: 'hsr0' already exists in 'hsr' [ 67.405325][ T5034] Cannot create hsr debugfs directory [ 67.415947][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.423083][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.430969][ T5089] bridge_slave_1: entered allmulticast mode [ 67.437423][ T5089] bridge_slave_1: entered promiscuous mode [ 67.504650][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.514134][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.524882][ T37] bond0 (unregistering): Released all slaves [ 67.534240][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.550144][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.572232][ T5089] team0: Port device team_slave_0 added [ 67.604491][ T5089] team0: Port device team_slave_1 added [ 67.612098][ T37] hsr_slave_0: left promiscuous mode [ 67.618071][ T37] hsr_slave_1: left promiscuous mode [ 67.623757][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.632500][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.714963][ T37] team0 (unregistering): Port device team_slave_1 removed [ 67.740053][ T37] team0 (unregistering): Port device team_slave_0 removed [ 67.918725][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.925785][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.951837][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.966769][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.973767][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.999810][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.078272][ T5223] bond2: invalid ARP target 0.0.0.0 specified for addition [ 68.085658][ T5223] bond2: option arp_ip_target: invalid value (0) [ 68.092975][ T5223] bond2 (unregistering): Released all slaves [ 68.144400][ T5089] hsr_slave_0: entered promiscuous mode [ 68.163230][ T5089] hsr_slave_1: entered promiscuous mode [ 68.175976][ T5089] debugfs: 'hsr0' already exists in 'hsr' [ 68.181759][ T5089] Cannot create hsr debugfs directory [ 68.228172][ T5228] loop5: detected capacity change from 0 to 512 [ 68.268500][ T5229] loop0: detected capacity change from 0 to 8192 [ 68.283724][ T5231] serio: Serial port ptm0 [ 68.313670][ T5228] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 68.326521][ T5228] EXT4-fs (loop5): 1 truncate cleaned up [ 68.333222][ T5228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.370362][ T3553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.382155][ T5034] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 68.410470][ T5034] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 68.438020][ T5034] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 68.449044][ T5231] serio: Serial port ptm0 [ 68.468380][ T5034] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 68.490095][ T5089] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 68.500596][ T5089] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 68.510895][ T5089] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 68.527777][ T5089] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 68.640571][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.671338][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.681102][ T5034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.694302][ T5034] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.708702][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.715854][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.734525][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.741695][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.767823][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.775010][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.784318][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.791403][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.906109][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.935092][ T5034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.100160][ T5089] veth0_vlan: entered promiscuous mode [ 69.110105][ T5089] veth1_vlan: entered promiscuous mode [ 69.129335][ T5089] veth0_macvtap: entered promiscuous mode [ 69.138984][ T5089] veth1_macvtap: entered promiscuous mode [ 69.151590][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.169049][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.180857][ T5034] veth0_vlan: entered promiscuous mode [ 69.195985][ T31] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.210027][ T5034] veth1_vlan: entered promiscuous mode [ 69.223083][ T31] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.243323][ T31] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.263219][ T31] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.273401][ T5034] veth0_macvtap: entered promiscuous mode [ 69.282219][ T5034] veth1_macvtap: entered promiscuous mode [ 69.314545][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.324483][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.362906][ T3329] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.378652][ T3329] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.420955][ T3329] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.440469][ T3329] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.513498][ T5346] SELinux: failed to load policy [ 69.566176][ T5362] netlink: 104 bytes leftover after parsing attributes in process `syz.6.552'. [ 69.696960][ T5379] netlink: 208 bytes leftover after parsing attributes in process `syz.5.560'. [ 69.706032][ T5379] netlink: 208 bytes leftover after parsing attributes in process `syz.5.560'. [ 69.749355][ T5370] loop7: detected capacity change from 0 to 8192 [ 69.865733][ T5396] netlink: 'syz.3.565': attribute type 25 has an invalid length. [ 69.873557][ T5396] netlink: 'syz.3.565': attribute type 7 has an invalid length. [ 69.881349][ T5396] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 69.889133][ T5396] netlink: 156 bytes leftover after parsing attributes in process `syz.3.565'. [ 69.898249][ T5396] bridge0: port 1(bridge_slave_0) entered learning state [ 70.017349][ T5407] loop5: detected capacity change from 0 to 128 [ 70.276266][ T5425] netlink: 208 bytes leftover after parsing attributes in process `syz.6.574'. [ 70.285501][ T5425] netlink: 208 bytes leftover after parsing attributes in process `syz.6.574'. [ 70.860400][ T5453] loop0: detected capacity change from 0 to 512 [ 70.964650][ T5453] EXT4-fs: Ignoring removed bh option [ 71.005330][ T5457] loop3: detected capacity change from 0 to 512 [ 71.029241][ T5457] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.051293][ T5457] EXT4-fs (loop3): 1 truncate cleaned up [ 71.060107][ T5457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.094600][ T5453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.157211][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.185677][ T5453] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.236654][ T5465] netlink: 208 bytes leftover after parsing attributes in process `syz.3.587'. [ 71.245863][ T5465] netlink: 208 bytes leftover after parsing attributes in process `syz.3.587'. [ 71.355300][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.446984][ T5477] loop3: detected capacity change from 0 to 512 [ 71.453743][ T5477] EXT4-fs: Ignoring removed nobh option [ 71.471330][ T5477] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 71.515216][ T5477] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.596: invalid indirect mapped block 256 (level 1) [ 71.551688][ T5483] netlink: 'syz.0.591': attribute type 3 has an invalid length. [ 71.554250][ T5477] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.596: invalid indirect mapped block 2683928664 (level 1) [ 71.559425][ T5483] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.591'. [ 71.581771][ T5477] EXT4-fs (loop3): 1 truncate cleaned up [ 71.628731][ T5477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.685571][ T5477] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.596: Invalid block bitmap block 3 in block_group 0 [ 71.715428][ T5477] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 71.734940][ T5477] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.596: invalid indirect mapped block 2683928664 (level 1) [ 71.821940][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.835226][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 71.835244][ T29] audit: type=1400 audit(1769472505.231:455): avc: denied { bind } for pid=5500 comm="syz.7.603" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.837904][ T5501] netlink: 48 bytes leftover after parsing attributes in process `syz.6.602'. [ 71.866720][ T29] audit: type=1400 audit(1769472505.251:456): avc: denied { setopt } for pid=5500 comm="syz.7.603" laddr=172.20.20.170 lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.892591][ T29] audit: type=1400 audit(1769472505.251:457): avc: denied { connect } for pid=5500 comm="syz.7.603" laddr=172.20.20.170 lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.914884][ T29] audit: type=1400 audit(1769472505.251:458): avc: denied { write } for pid=5500 comm="syz.7.603" path="socket:[12947]" dev="sockfs" ino=12947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.999359][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.022550][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.048671][ T5516] loop7: detected capacity change from 0 to 128 [ 72.055493][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.075657][ T52] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.414090][ T5544] syzkaller0: entered allmulticast mode [ 72.435177][ T5544] syzkaller0: entered promiscuous mode [ 72.454324][ T5544] syzkaller0 (unregistering): left allmulticast mode [ 72.461305][ T5544] syzkaller0 (unregistering): left promiscuous mode [ 72.599339][ T5554] loop3: detected capacity change from 0 to 512 [ 72.606401][ T5554] EXT4-fs: Ignoring removed bh option [ 72.626999][ T5554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.640054][ T5554] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.719030][ T5561] loop6: detected capacity change from 0 to 512 [ 72.741579][ T5561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.793362][ T5561] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.836959][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.853229][ T5561] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 72.876901][ T5567] EXT4-fs: Ignoring removed nobh option [ 72.882784][ T29] audit: type=1326 audit(1769472506.271:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5568 comm="syz.3.630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c7bd5aeb9 code=0x0 [ 72.920735][ T5567] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 72.935215][ T5567] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.629: invalid indirect mapped block 256 (level 1) [ 72.959327][ T5034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.969000][ T5567] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.629: invalid indirect mapped block 2683928664 (level 1) [ 73.023829][ T5567] EXT4-fs (loop5): 1 truncate cleaned up [ 73.030265][ T5567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.047175][ T5567] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.629: Invalid block bitmap block 3 in block_group 0 [ 73.064990][ T5567] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 73.074422][ T5567] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.629: invalid indirect mapped block 2683928664 (level 1) [ 73.100490][ T3553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.270923][ T5591] syzkaller0: entered allmulticast mode [ 73.273471][ T5594] set_capacity_and_notify: 2 callbacks suppressed [ 73.273518][ T5594] loop6: detected capacity change from 0 to 512 [ 73.295777][ T5594] EXT4-fs: Ignoring removed bh option [ 73.298992][ T5591] syzkaller0: entered promiscuous mode [ 73.329642][ T5594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.349736][ T5595] loop5: detected capacity change from 0 to 4096 [ 73.361092][ T5591] syzkaller0 (unregistering): left allmulticast mode [ 73.367906][ T5591] syzkaller0 (unregistering): left promiscuous mode [ 73.376237][ T5594] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.399632][ T5595] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 73.439444][ T5595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.483408][ T5595] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 73.535285][ T5601] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 73.558428][ T5034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.565016][ T5601] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 73.614229][ T3553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.773306][ T1704] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.795185][ T1704] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.804048][ T3447] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.813619][ T3447] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.908487][ T5623] loop3: detected capacity change from 0 to 512 [ 73.927349][ T5623] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.373165][ T5644] loop2: detected capacity change from 0 to 7 [ 74.380274][ T5644] loop2: [ 74.641275][ T5662] __nla_validate_parse: 6 callbacks suppressed [ 74.641289][ T5662] netlink: 104 bytes leftover after parsing attributes in process `syz.3.668'. [ 75.401968][ T5673] loop6: detected capacity change from 0 to 128 [ 75.408679][ T5670] loop2: detected capacity change from 0 to 7 [ 75.415898][ T5670] loop2: [ 75.689858][ T5690] wireguard0: entered promiscuous mode [ 75.695864][ T5690] wireguard0: entered allmulticast mode [ 75.866588][ T5711] batman_adv: batadv0: Adding interface: dummy0 [ 75.872954][ T5711] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.899177][ T5711] batman_adv: batadv0: Interface activated: dummy0 [ 75.917121][ T5711] net_ratelimit: 32 callbacks suppressed [ 75.917140][ T5711] batadv0: mtu less than device minimum [ 75.929132][ T5711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.940309][ T5711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.951394][ T5711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.962345][ T5711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.973344][ T5711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.984366][ T5711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.995356][ T5711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.006423][ T5711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.017248][ T5711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.207391][ T5732] loop0: detected capacity change from 0 to 512 [ 76.236811][ T5732] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.456694][ T5749] batman_adv: batadv0: Adding interface: dummy0 [ 76.463019][ T5749] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.509137][ T5749] batman_adv: batadv0: Interface activated: dummy0 [ 76.576179][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.7.702'. [ 76.625366][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.658798][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.7.702'. [ 76.769102][ T5767] loop7: detected capacity change from 0 to 512 [ 76.786129][ T5767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.793075][ T5767] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 76.804574][ T5767] EXT4-fs (loop7): 1 truncate cleaned up [ 76.810869][ T5767] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.892641][ T5089] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.035244][ T5793] loop5: detected capacity change from 0 to 128 [ 77.060793][ T5784] wireguard0: entered promiscuous mode [ 77.068637][ T5784] wireguard0: entered allmulticast mode [ 77.099948][ T5796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.110576][ T5796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.121970][ T5796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.138932][ T5796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.171320][ T5796] netlink: 566 bytes leftover after parsing attributes in process `syz.7.718'. [ 77.316391][ T5807] batman_adv: batadv0: Adding interface: dummy0 [ 77.322795][ T5807] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.349466][ T5807] batman_adv: batadv0: Interface activated: dummy0 [ 77.515145][ T5813] netlink: 'syz.3.728': attribute type 4 has an invalid length. [ 77.540016][ T5813] netlink: 'syz.3.728': attribute type 4 has an invalid length. [ 77.876387][ T5831] loop0: detected capacity change from 0 to 512 [ 77.889695][ T5831] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.899228][ T5831] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.915392][ T5831] EXT4-fs (loop0): 1 truncate cleaned up [ 77.926950][ T5831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.009638][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.267704][ T5856] [syz.7.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 78.742852][ T5876] loop7: detected capacity change from 0 to 32768 [ 78.861129][ T5890] loop7: detected capacity change from 0 to 1024 [ 78.879157][ T5890] EXT4-fs: Ignoring removed nobh option [ 78.897204][ T5890] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.911856][ T5890] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 78.932575][ T5890] EXT4-fs (loop7): filesystem has both journal inode and journal device! [ 79.258938][ T5900] loop5: detected capacity change from 0 to 1024 [ 79.300540][ T5890] loop7: detected capacity change from 0 to 512 [ 79.322502][ T5900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.460546][ T5890] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.492598][ T3553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.533965][ T5890] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.549837][ T5918] loop5: detected capacity change from 0 to 128 [ 79.557043][ T5914] syz.0.767 (5914) used greatest stack depth: 9336 bytes left [ 79.581510][ T29] audit: type=1400 audit(1769472512.971:460): avc: denied { mounton } for pid=5917 comm="syz.5.769" path="/153/file0/file0" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 79.655459][ T29] audit: type=1400 audit(1769472513.001:461): avc: denied { mounton } for pid=5917 comm="syz.5.769" path="/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 79.677669][ T29] audit: type=1400 audit(1769472513.021:462): avc: denied { unmount } for pid=3553 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 79.710107][ T5089] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.782147][ T29] audit: type=1400 audit(1769472513.171:463): avc: denied { unmount } for pid=4706 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.816136][ T5936] loop0: detected capacity change from 0 to 2048 [ 79.875908][ T5936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.915135][ T5936] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.989671][ T29] audit: type=1326 audit(1769472513.381:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.5.779" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e1c14aeb9 code=0x0 [ 80.014618][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.029329][ T5936] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.773: bg 0: block 345: padding at end of block bitmap is not set [ 80.043854][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.070699][ T5957] ref_ctr_offset mismatch. inode: 0x10a offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 80.086354][ T5936] EXT4-fs (loop0): Remounting filesystem read-only [ 80.139309][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.342369][ T5976] loop6: detected capacity change from 0 to 1024 [ 80.349242][ T5979] af_packet: tpacket_rcv: packet too big, clamped from 65386 to 3944. macoff=96 [ 80.349270][ T5976] EXT4-fs: Ignoring removed nobh option [ 80.371517][ T5976] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.384914][ T5976] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 80.396229][ T5976] EXT4-fs (loop6): filesystem has both journal inode and journal device! [ 80.413428][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 80.422329][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 80.502130][ T5976] loop6: detected capacity change from 0 to 512 [ 80.558017][ T5976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.572163][ T5976] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.607359][ T5034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.634962][ T29] audit: type=1326 audit(1769472514.031:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.6.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa264aeb9 code=0x7ffc0000 [ 80.658440][ T29] audit: type=1326 audit(1769472514.031:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.6.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa264aeb9 code=0x7ffc0000 [ 80.685421][ T29] audit: type=1326 audit(1769472514.071:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.6.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfa264aeb9 code=0x7ffc0000 [ 80.708685][ T29] audit: type=1326 audit(1769472514.081:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.6.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa264aeb9 code=0x7ffc0000 [ 80.731966][ T29] audit: type=1326 audit(1769472514.081:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.6.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa264aeb9 code=0x7ffc0000 [ 81.019073][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.795'. [ 81.028017][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.795'. [ 82.031689][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.810'. [ 82.040554][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.810'. [ 82.084705][ T52] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.112940][ T52] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.142401][ T52] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.163978][ T52] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.283329][ T6150] infiniband !yz!: set down [ 82.287962][ T6150] infiniband !yz!: added team_slave_0 [ 82.331331][ T6150] RDS/IB: !yz!: added [ 82.338510][ T6150] smc: adding ib device !yz! with port count 1 [ 82.367769][ T6150] smc: ib device !yz! port 1 has no pnetid [ 82.505125][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 82.548640][ T6156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.128183][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.6.825'. [ 83.137166][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.6.825'. [ 83.191750][ T6188] loop0: detected capacity change from 0 to 512 [ 83.206277][ T52] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.213562][ T6188] EXT4-fs: Ignoring removed bh option [ 83.222971][ T52] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.242436][ T6188] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 83.243085][ T52] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.265575][ T6188] EXT4-fs (loop0): 1 truncate cleaned up [ 83.271789][ T52] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.275597][ T6188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.363132][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.376600][ T6191] netlink: 'syz.6.830': attribute type 9 has an invalid length. [ 83.384331][ T6191] netlink: 16166 bytes leftover after parsing attributes in process `syz.6.830'. [ 83.456192][ T6197] loop6: detected capacity change from 0 to 164 [ 83.507897][ T6197] iso9660: Unknown parameter '‘ä ¥;F¼G•ìy]|Û¦¬.×ïÚ‘âó¼XˆòÛº»„ÒŸ<­åñmÅ‚¿ÀÜé¢kžESI85 Jv°' [ 83.637320][ T6218] EXT4-fs: Ignoring removed bh option [ 83.708230][ T6218] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 83.770062][ T6218] EXT4-fs (loop6): 1 truncate cleaned up [ 83.815783][ T6218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.866416][ T5034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.087571][ T6254] set_capacity_and_notify: 1 callbacks suppressed [ 84.087607][ T6254] loop5: detected capacity change from 0 to 256 [ 84.170129][ T6257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.425877][ T6268] loop3: detected capacity change from 0 to 512 [ 84.442387][ T6268] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 84.512875][ T6268] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.527247][ T6268] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.855: Block bitmap for bg 0 marked uninitialized [ 84.589218][ T6272] loop7: detected capacity change from 0 to 512 [ 84.607292][ T6272] EXT4-fs: Ignoring removed bh option [ 84.608920][ T6268] EXT4-fs (loop3): Remounting filesystem read-only [ 84.619699][ T6272] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 84.630553][ T6268] EXT4-fs (loop3): 1 orphan inode deleted [ 84.665701][ T6268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.717200][ T6272] EXT4-fs (loop7): 1 truncate cleaned up [ 84.730594][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.731805][ T6272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.839054][ T5089] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.000678][ T6303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.009759][ T6305] netlink: 'syz.5.869': attribute type 9 has an invalid length. [ 85.228592][ T6328] loop3: detected capacity change from 0 to 256 [ 85.244827][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 85.244847][ T29] audit: type=1400 audit(1769472518.631:504): avc: denied { bind } for pid=6325 comm="syz.7.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.271422][ T29] audit: type=1400 audit(1769472518.631:505): avc: denied { setopt } for pid=6325 comm="syz.7.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.425067][ T6337] netlink: 'syz.7.882': attribute type 9 has an invalid length. [ 85.432844][ T6337] __nla_validate_parse: 7 callbacks suppressed [ 85.432875][ T6337] netlink: 16166 bytes leftover after parsing attributes in process `syz.7.882'. [ 85.917991][ T6358] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 85.963847][ T29] audit: type=1400 audit(1769472519.341:506): avc: denied { ioctl } for pid=6360 comm="syz.3.890" path="socket:[15599]" dev="sockfs" ino=15599 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.023841][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 86.600338][ T6399] netlink: 84 bytes leftover after parsing attributes in process `syz.5.904'. [ 86.615565][ T29] audit: type=1326 audit(1769472519.991:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.6.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa264aeb9 code=0x7ffc0000 [ 86.638956][ T29] audit: type=1326 audit(1769472519.991:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.6.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa264aeb9 code=0x7ffc0000 [ 86.662217][ T29] audit: type=1326 audit(1769472519.991:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.6.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfa264aeb9 code=0x7ffc0000 [ 86.685620][ T29] audit: type=1326 audit(1769472519.991:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.6.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa264aeb9 code=0x7ffc0000 [ 86.708947][ T29] audit: type=1326 audit(1769472519.991:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.6.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdfa264aeb9 code=0x7ffc0000 [ 86.732185][ T29] audit: type=1326 audit(1769472519.991:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.6.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa264aeb9 code=0x7ffc0000 [ 86.755572][ T29] audit: type=1326 audit(1769472519.991:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.6.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdfa264aeb9 code=0x7ffc0000 [ 86.941140][ T6412] netlink: 19 bytes leftover after parsing attributes in process `syz.6.910'. [ 87.419842][ T6426] loop3: detected capacity change from 0 to 512 [ 87.459343][ T6426] EXT4-fs: Ignoring removed i_version option [ 87.465410][ T6426] EXT4-fs: Ignoring removed bh option [ 87.514807][ T6426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.536679][ T6426] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.750157][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.806801][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 88.048324][ T6455] loop6: detected capacity change from 0 to 256 [ 88.139296][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.926'. [ 88.195481][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.926'. [ 88.583873][ T3485] IPVS: starting estimator thread 0... [ 88.674836][ T6477] IPVS: using max 2160 ests per chain, 108000 per kthread [ 88.738873][ T6484] loop0: detected capacity change from 0 to 512 [ 88.755412][ T6484] EXT4-fs: Ignoring removed i_version option [ 88.761458][ T6484] EXT4-fs: Ignoring removed bh option [ 88.825518][ T6484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.851776][ T6484] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.976828][ T1704] IPVS: stop unused estimator thread 0... [ 89.092210][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.561548][ T6532] loop7: detected capacity change from 0 to 1024 [ 89.606685][ T6532] EXT4-fs: Ignoring removed orlov option [ 89.647848][ T6532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 89.664963][ T6532] System zones: 0-1, 3-12 [ 89.675092][ T6532] EXT4-fs (loop7): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.010270][ T5089] EXT4-fs (loop7): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 90.286103][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 90.286120][ T29] audit: type=1400 audit(1769472523.681:543): avc: denied { write } for pid=6563 comm="syz.6.969" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.995262][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.979'. [ 91.004098][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.979'. [ 92.013138][ T29] audit: type=1400 audit(1769472525.391:544): avc: denied { execute } for pid=6622 comm="syz.5.993" path="/194/cpu.stat" dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.199670][ T6628] loop0: detected capacity change from 0 to 1024 [ 92.236456][ T6628] EXT4-fs: Ignoring removed orlov option [ 92.275054][ T6628] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 92.285119][ T6628] System zones: 0-1, 3-12 [ 92.315218][ T6628] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.461032][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 92.555144][ T6653] loop0: detected capacity change from 0 to 1024 [ 92.587925][ T6653] EXT4-fs: inline encryption not supported [ 92.614934][ C1] net_ratelimit: 50 callbacks suppressed [ 92.614957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.649162][ T6653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.845059][ T3486] IPVS: starting estimator thread 0... [ 92.892618][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.944952][ T6661] IPVS: using max 2592 ests per chain, 129600 per kthread [ 93.058663][ T37] IPVS: stop unused estimator thread 0... [ 93.076341][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1010'. [ 93.089041][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1011'. [ 93.108662][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1010'. [ 93.176208][ T6675] loop5: detected capacity change from 0 to 1024 [ 93.244661][ T6675] EXT4-fs: Ignoring removed orlov option [ 93.318809][ T6675] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 93.327263][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.339065][ T6675] System zones: 0-1, 3-12 [ 93.340436][ T6690] loop7: detected capacity change from 0 to 1024 [ 93.344608][ T6675] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.390059][ T6690] EXT4-fs: inline encryption not supported [ 93.468510][ T6690] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.481937][ T3553] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 93.747076][ T5089] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.134823][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'. [ 94.157755][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'. [ 94.460227][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'. [ 94.501999][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'. [ 94.554808][ T3485] IPVS: starting estimator thread 0... [ 94.640297][ T29] audit: type=1326 audit(1769472528.031:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7bd5aeb9 code=0x7ffc0000 [ 94.655108][ T6725] IPVS: using max 2544 ests per chain, 127200 per kthread [ 94.675101][ T29] audit: type=1326 audit(1769472528.031:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c7bd5aeb9 code=0x7ffc0000 [ 94.679152][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 94.698578][ T29] audit: type=1326 audit(1769472528.031:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7bd5aeb9 code=0x7ffc0000 [ 94.730829][ T29] audit: type=1326 audit(1769472528.031:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7bd5aeb9 code=0x7ffc0000 [ 94.754325][ T29] audit: type=1326 audit(1769472528.031:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f0c7bd5aeb9 code=0x7ffc0000 [ 94.777666][ T29] audit: type=1326 audit(1769472528.031:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7bd5aeb9 code=0x7ffc0000 [ 94.801101][ T29] audit: type=1326 audit(1769472528.031:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7bd5aeb9 code=0x7ffc0000 [ 94.824474][ T29] audit: type=1326 audit(1769472528.031:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.3.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c7bd5aeb9 code=0x7ffc0000 [ 94.927150][ T52] IPVS: stop unused estimator thread 0... [ 95.284209][ T6760] TCP: TCP_TX_DELAY enabled [ 95.334953][ T3658] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.718279][ T6780] loop5: detected capacity change from 0 to 512 [ 95.727327][ T6780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 95.735668][ T6780] System zones: 1-12 [ 95.740254][ T6780] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.1054: corrupted in-inode xattr: e_value size too large [ 95.763452][ T6780] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1054: couldn't read orphan inode 15 (err -117) [ 95.776152][ T6780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.222563][ T3553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.233529][ T6804] __nla_validate_parse: 2 callbacks suppressed [ 96.233681][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1064'. [ 96.408722][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 96.408740][ T29] audit: type=1400 audit(1769472529.801:558): avc: denied { mount } for pid=6813 comm="syz.7.1069" name="/" dev="configfs" ino=1606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 96.437546][ T29] audit: type=1400 audit(1769472529.801:559): avc: denied { search } for pid=6813 comm="syz.7.1069" name="/" dev="configfs" ino=1606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.460190][ T29] audit: type=1400 audit(1769472529.801:560): avc: denied { search } for pid=6813 comm="syz.7.1069" name="/" dev="configfs" ino=1606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.484468][ T29] audit: type=1400 audit(1769472529.801:561): avc: denied { mounton } for pid=6813 comm="syz.7.1069" path="/" dev="configfs" ino=1606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.506754][ T29] audit: type=1400 audit(1769472529.811:562): avc: denied { unmount } for pid=5089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 96.562388][ T6819] loop0: detected capacity change from 0 to 256 [ 97.382524][ T29] audit: type=1400 audit(1769472530.771:563): avc: denied { read } for pid=6867 comm="syz.5.1094" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.405711][ T29] audit: type=1400 audit(1769472530.771:564): avc: denied { open } for pid=6867 comm="syz.5.1094" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.464817][ T29] audit: type=1400 audit(1769472530.821:565): avc: denied { ioctl } for pid=6867 comm="syz.5.1094" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.518260][ T6862] chnl_net:caif_netlink_parms(): no params data found [ 97.593678][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.600843][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.600964][ T6887] loop5: detected capacity change from 0 to 256 [ 97.609263][ T6862] bridge_slave_0: entered allmulticast mode [ 97.621147][ T6862] bridge_slave_0: entered promiscuous mode [ 97.628089][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.635193][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.642737][ T6862] bridge_slave_1: entered allmulticast mode [ 97.649524][ T6862] bridge_slave_1: entered promiscuous mode [ 97.670724][ T6862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.681506][ T6862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.702875][ T6862] team0: Port device team_slave_0 added [ 97.709791][ T6862] team0: Port device team_slave_1 added [ 97.741180][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.748348][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.774316][ T6862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.846314][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.853312][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.879406][ T6862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.964489][ T6862] hsr_slave_0: entered promiscuous mode [ 97.975426][ T6862] hsr_slave_1: entered promiscuous mode [ 97.981612][ T6862] debugfs: 'hsr0' already exists in 'hsr' [ 97.987444][ T6862] Cannot create hsr debugfs directory [ 98.048105][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1101'. [ 98.057250][ T6899] netlink: 'syz.5.1101': attribute type 11 has an invalid length. [ 98.101289][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1101'. [ 98.110331][ T6899] netlink: 'syz.5.1101': attribute type 11 has an invalid length. [ 98.176906][ T6862] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 98.199984][ T6862] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 98.217854][ T6862] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 98.239450][ T6862] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 98.329944][ T6862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.361243][ T6862] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.382886][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.390127][ T3329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.424139][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.431337][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.495923][ T6915] loop3: detected capacity change from 0 to 1024 [ 98.503247][ T6915] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.520732][ T6915] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 98.531358][ T6915] System zones: 0-1, 3-36 [ 98.543901][ T6915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.610424][ T6862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.629851][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.718689][ T6936] erspan0: entered promiscuous mode [ 98.742051][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 98.820917][ T6945] loop6: detected capacity change from 0 to 256 [ 98.940220][ T6862] veth0_vlan: entered promiscuous mode [ 98.963935][ T6862] veth1_vlan: entered promiscuous mode [ 99.003056][ T6862] veth0_macvtap: entered promiscuous mode [ 99.025079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.034583][ T6862] veth1_macvtap: entered promiscuous mode [ 99.047926][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.076743][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.104485][ T1704] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.136380][ T1704] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.147428][ T1704] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.192175][ T1704] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.202537][ T29] audit: type=1400 audit(1769472532.581:566): avc: denied { mounton } for pid=6862 comm="syz-executor" path="/root/syzkaller.5nx8Kq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 99.234777][ T29] audit: type=1400 audit(1769472532.621:567): avc: denied { mount } for pid=6862 comm="syz-executor" name="/" dev="gadgetfs" ino=4387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 99.455858][ T6929] chnl_net:caif_netlink_parms(): no params data found [ 99.548323][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.555448][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.563500][ T6929] bridge_slave_0: entered allmulticast mode [ 99.594923][ T6929] bridge_slave_0: entered promiscuous mode [ 99.604676][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.611894][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.620715][ T6929] bridge_slave_1: entered allmulticast mode [ 99.633693][ T6929] bridge_slave_1: entered promiscuous mode [ 99.715407][ T6929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.733709][ T6929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.769926][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'. [ 99.779028][ T6981] netlink: 'syz.3.1124': attribute type 11 has an invalid length. [ 99.820592][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'. [ 99.829820][ T6981] netlink: 'syz.3.1124': attribute type 11 has an invalid length. [ 99.862601][ T6929] team0: Port device team_slave_0 added [ 99.873459][ T6929] team0: Port device team_slave_1 added [ 99.909355][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.916512][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.942460][ T6929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.954034][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.961020][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.986980][ T6929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.073821][ T6929] hsr_slave_0: entered promiscuous mode [ 100.082027][ T6929] hsr_slave_1: entered promiscuous mode [ 100.088489][ T6929] debugfs: 'hsr0' already exists in 'hsr' [ 100.094258][ T6929] Cannot create hsr debugfs directory [ 100.143146][ T6964] chnl_net:caif_netlink_parms(): no params data found [ 100.319313][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.326582][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.333823][ T6964] bridge_slave_0: entered allmulticast mode [ 100.340777][ T6964] bridge_slave_0: entered promiscuous mode [ 100.347940][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.355075][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.362653][ T6964] bridge_slave_1: entered allmulticast mode [ 100.370105][ T6964] bridge_slave_1: entered promiscuous mode [ 100.436772][ T6964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.446783][ T6929] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 100.468923][ T6964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.478933][ T6929] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 100.496131][ T6929] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 100.532245][ T6964] team0: Port device team_slave_0 added [ 100.538572][ T6929] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 100.559840][ T6964] team0: Port device team_slave_1 added [ 100.594359][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.601489][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.627672][ T6964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.639251][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.646296][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.672427][ T6964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.717654][ T6964] hsr_slave_0: entered promiscuous mode [ 100.723772][ T6964] hsr_slave_1: entered promiscuous mode [ 100.729793][ T6964] debugfs: 'hsr0' already exists in 'hsr' [ 100.735584][ T6964] Cannot create hsr debugfs directory [ 100.846189][ T6929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.854044][ T6964] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.873833][ T6929] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.893398][ T1704] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.900512][ T1704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.915811][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.922973][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.932102][ T6964] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.986600][ T6964] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.025642][ T6929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.066001][ T6964] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.129654][ T6964] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.140590][ T6964] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.150478][ T6964] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.160643][ T6964] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.239315][ T6929] veth0_vlan: entered promiscuous mode [ 101.251418][ T6929] veth1_vlan: entered promiscuous mode [ 101.278257][ T6964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.285945][ T6929] veth0_macvtap: entered promiscuous mode [ 101.296018][ T6929] veth1_macvtap: entered promiscuous mode [ 101.315095][ T6964] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.324295][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.338014][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.345217][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.354716][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.368946][ T1704] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.376057][ T1704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.391416][ T3329] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.405538][ T3329] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.422005][ T3329] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.432596][ T3329] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.498587][ T7057] loop6: detected capacity change from 0 to 512 [ 101.512506][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 101.512545][ T29] audit: type=1400 audit(1769472534.901:572): avc: denied { remount } for pid=7054 comm="syz.9.1107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.545746][ T7057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 101.564896][ T7057] System zones: 1-12 [ 101.569218][ T7057] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.1138: corrupted in-inode xattr: e_value size too large [ 101.591715][ T6964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.599243][ T7057] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1138: couldn't read orphan inode 15 (err -117) [ 101.626073][ T7057] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.904377][ T6964] veth0_vlan: entered promiscuous mode [ 101.939136][ T6964] veth1_vlan: entered promiscuous mode [ 102.025070][ T6964] veth0_macvtap: entered promiscuous mode [ 102.060255][ T6964] veth1_macvtap: entered promiscuous mode [ 102.085630][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.109171][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.149041][ T3751] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.444883][ T3751] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.462335][ T3751] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.564672][ T3751] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.733381][ T7090] syz_tun: entered allmulticast mode [ 102.762134][ T7089] syz_tun: left allmulticast mode [ 102.807464][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1136'. [ 102.831944][ T7092] loop5: detected capacity change from 0 to 1024 [ 102.846334][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1136'. [ 102.902927][ T7092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.950077][ T7092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 102.975144][ T7092] System zones: 0-1, 3-36 [ 103.024452][ T7092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.055331][ T6964] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.640661][ T7117] netlink: 'syz.9.1145': attribute type 6 has an invalid length. [ 103.867374][ T7119] netlink: 84 bytes leftover after parsing attributes in process `syz.9.1146'. [ 103.876526][ T7119] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 103.940805][ T29] audit: type=1400 audit(1769472537.331:573): avc: denied { execute_no_trans } for pid=7129 comm="syz.9.1152" path="/7/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.399671][ T29] audit: type=1326 audit(1769472537.791:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843e2eaeb9 code=0x7ffc0000 [ 104.423126][ T29] audit: type=1326 audit(1769472537.791:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843e2eaeb9 code=0x7ffc0000 [ 104.446786][ T29] audit: type=1326 audit(1769472537.791:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f843e2eaeb9 code=0x7ffc0000 [ 104.470135][ T29] audit: type=1400 audit(1769472537.791:577): avc: denied { watch watch_reads } for pid=7151 comm="syz.5.1162" path="/proc/17/task" dev="proc" ino=19157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 104.493562][ T29] audit: type=1326 audit(1769472537.791:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843e2eaeb9 code=0x7ffc0000 [ 104.516914][ T29] audit: type=1326 audit(1769472537.791:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f843e2eaeb9 code=0x7ffc0000 [ 104.540258][ T29] audit: type=1326 audit(1769472537.791:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843e2eaeb9 code=0x7ffc0000 [ 104.563612][ T29] audit: type=1326 audit(1769472537.791:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843e2eaeb9 code=0x7ffc0000 [ 104.620973][ T5034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.050710][ T7176] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1171'. [ 105.059879][ T7176] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 105.148441][ T7186] syz_tun: entered allmulticast mode [ 105.158171][ T7185] syz_tun: left allmulticast mode [ 105.586943][ T7219] syz_tun: entered allmulticast mode [ 105.593267][ T7218] syz_tun: left allmulticast mode [ 105.631768][ T7223] capability: warning: `syz.6.1191' uses 32-bit capabilities (legacy support in use) [ 105.667089][ T7225] loop6: detected capacity change from 0 to 512 [ 105.677942][ T7225] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1192: inode has both inline data and extents flags [ 105.698948][ T7214] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1186'. [ 105.699467][ T7225] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1192: couldn't read orphan inode 15 (err -117) [ 105.707990][ T7214] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 105.722570][ T7221] bridge_slave_0: left allmulticast mode [ 105.732916][ T7221] bridge_slave_0: left promiscuous mode [ 105.738736][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.749802][ T7225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.784478][ T7221] bridge_slave_1: left allmulticast mode [ 105.790226][ T7221] bridge_slave_1: left promiscuous mode [ 105.796107][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.846997][ T7221] bond0: (slave bond_slave_0): Releasing backup interface [ 105.865100][ T7221] bond0: (slave bond_slave_1): Releasing backup interface [ 105.887078][ T5034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.907885][ T7221] team0: Port device team_slave_0 removed [ 105.943274][ T7221] team0: Port device team_slave_1 removed [ 105.952980][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.960490][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.980055][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.987569][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.999421][ T7221] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.048930][ T7241] loop6: detected capacity change from 0 to 128 [ 106.075148][ T7241] /dev/loop6: Can't open blockdev [ 106.274912][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1204'. [ 106.283936][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1204'. [ 106.343566][ T1704] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.352447][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1204'. [ 106.361471][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1204'. [ 106.377138][ T1704] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.389274][ T1704] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.408362][ T1704] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.438547][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1207'. [ 106.457346][ T7267] team1: entered promiscuous mode [ 106.462496][ T7267] team1: entered allmulticast mode [ 106.474330][ T7267] 8021q: adding VLAN 0 to HW filter on device team1 [ 106.605705][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 106.605724][ T29] audit: type=1400 audit(1769472540.001:601): avc: denied { bind } for pid=7271 comm="syz.9.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.831732][ T7289] loop5: detected capacity change from 0 to 128 [ 106.851774][ T7289] EXT4-fs (loop5): unable to read superblock [ 107.063317][ T7303] bridge_slave_0: left allmulticast mode [ 107.069058][ T7303] bridge_slave_0: left promiscuous mode [ 107.074851][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.084103][ T7303] bridge_slave_1: left allmulticast mode [ 107.090116][ T7303] bridge_slave_1: left promiscuous mode [ 107.096257][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.109407][ T7303] bond0: (slave bond_slave_0): Releasing backup interface [ 107.124075][ T7303] bond0: (slave bond_slave_1): Releasing backup interface [ 107.136839][ T7303] team0: Port device team_slave_0 removed [ 107.146217][ T7303] team0: Port device team_slave_1 removed [ 107.153189][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.160787][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.169385][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.176931][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.186921][ T7303] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.453508][ T7330] loop8: detected capacity change from 0 to 128 [ 107.462558][ T7330] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 107.615898][ T29] audit: type=1400 audit(1769472541.011:602): avc: denied { mount } for pid=7342 comm="syz.8.1245" name="/" dev="rpc_pipefs" ino=19737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 108.111172][ T7373] loop8: detected capacity change from 0 to 128 [ 108.160496][ T7373] EXT4-fs (loop8): unable to read superblock [ 108.337260][ T29] audit: type=1400 audit(1769472541.731:603): avc: denied { read open } for pid=7395 comm="syz.5.1270" path="/" dev="configfs" ino=1606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.397811][ T29] audit: type=1326 audit(1769472541.791:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.9.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1bf2aeb9 code=0x7ffc0000 [ 108.421368][ T29] audit: type=1326 audit(1769472541.791:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.9.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1bf2aeb9 code=0x7ffc0000 [ 108.444716][ T29] audit: type=1326 audit(1769472541.791:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.9.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e1bf2aeb9 code=0x7ffc0000 [ 108.468342][ T29] audit: type=1326 audit(1769472541.791:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.9.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1bf2aeb9 code=0x7ffc0000 [ 108.491862][ T29] audit: type=1326 audit(1769472541.791:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.9.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e1bf2aeb9 code=0x7ffc0000 [ 108.557819][ T7401] bridge_slave_0: left allmulticast mode [ 108.563526][ T7401] bridge_slave_0: left promiscuous mode [ 108.563603][ T29] audit: type=1326 audit(1769472541.791:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.9.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1bf2aeb9 code=0x7ffc0000 [ 108.569387][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.592550][ T29] audit: type=1326 audit(1769472541.791:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.9.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f7e1bf2aeb9 code=0x7ffc0000 [ 108.629686][ T7401] bridge_slave_1: left allmulticast mode [ 108.635445][ T7401] bridge_slave_1: left promiscuous mode [ 108.641170][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.677447][ T7401] bond0: (slave bond_slave_0): Releasing backup interface [ 108.687898][ T7401] bond0: (slave bond_slave_1): Releasing backup interface [ 108.703760][ T7401] team0: Port device team_slave_0 removed [ 108.713739][ T7401] team0: Port device team_slave_1 removed [ 108.720813][ T7401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.728265][ T7401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.738134][ T7401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.745685][ T7401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.756936][ T7401] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.881115][ T7397] __nla_validate_parse: 1 callbacks suppressed [ 108.881135][ T7397] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1268'. [ 108.999068][ T7419] loop6: detected capacity change from 0 to 128 [ 109.015562][ T7419] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 109.079164][ T7429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.239110][ T2999] ================================================================== [ 109.247260][ T2999] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 109.255295][ T2999] [ 109.257639][ T2999] write to 0xffff88811add73f0 of 8 bytes by task 5064 on cpu 0: [ 109.265279][ T2999] dentry_unlink_inode+0x65/0x260 [ 109.270340][ T2999] d_delete+0xc8/0xe0 [ 109.274335][ T2999] d_delete_notify+0x32/0x100 [ 109.279022][ T2999] vfs_unlink+0x331/0x440 [ 109.283361][ T2999] do_unlinkat+0x1e2/0x4b0 [ 109.287783][ T2999] __x64_sys_unlink+0x2e/0x40 [ 109.292471][ T2999] x64_sys_call+0x2f48/0x3000 [ 109.297168][ T2999] do_syscall_64+0xc0/0x2a0 [ 109.301703][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.307617][ T2999] [ 109.309950][ T2999] read to 0xffff88811add73f0 of 8 bytes by task 2999 on cpu 1: [ 109.317510][ T2999] step_into_slowpath+0x12c/0x4c0 [ 109.322560][ T2999] path_lookupat+0x330/0x500 [ 109.327197][ T2999] filename_lookup+0x190/0x390 [ 109.331987][ T2999] do_readlinkat+0x7d/0x340 [ 109.336531][ T2999] __x64_sys_readlink+0x47/0x60 [ 109.341412][ T2999] x64_sys_call+0x2af1/0x3000 [ 109.346117][ T2999] do_syscall_64+0xc0/0x2a0 [ 109.350644][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.356566][ T2999] [ 109.358902][ T2999] value changed: 0xffff888104b90368 -> 0x0000000000000000 [ 109.366012][ T2999] [ 109.368338][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 109.374506][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.383797][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.393863][ T2999] ==================================================================