last executing test programs: 1m36.077096984s ago: executing program 32 (id=310): r0 = socket(0x22, 0x2, 0x1) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x6002) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m23.590293663s ago: executing program 33 (id=544): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) 1m17.483656559s ago: executing program 34 (id=405): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f00000006c0)="ba", 0x1}, {&(0x7f0000000080)="364729035465b367113068c7", 0xc}], 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 1m3.267105609s ago: executing program 35 (id=819): io_setup(0x9, &(0x7f0000000080)=0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) socket$inet6(0xa, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x6000000e}) io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r3, 0x0, 0x0, 0x3, 0x0, 0x1, r2}]) 1m2.007284262s ago: executing program 7 (id=834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x400000f2, 0x0) 1m1.87755233s ago: executing program 7 (id=835): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="c884", 0x2}], 0x1}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 58.851224216s ago: executing program 7 (id=888): r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 58.719672684s ago: executing program 7 (id=889): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_bp={0x0}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 57.815219676s ago: executing program 7 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 57.76657401s ago: executing program 7 (id=905): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x407f8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x4}, 0x120, 0x10000, 0x33f8, 0x1, 0xb, 0x20007, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 49.776536296s ago: executing program 2 (id=1000): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xff) 49.71370129s ago: executing program 2 (id=1004): socket$inet_udp(0x2, 0x2, 0x0) unshare(0x40200) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}, {0x2, 0x100, 0x800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 48.85178405s ago: executing program 2 (id=1015): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0x53, 0x0) 47.99873451s ago: executing program 2 (id=1027): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(r1, &(0x7f0000000140)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 47.974958701s ago: executing program 2 (id=1029): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 47.955816822s ago: executing program 2 (id=1031): r0 = inotify_init() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 47.470256351s ago: executing program 4 (id=1038): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0x53, 0x0) 46.6136856s ago: executing program 4 (id=1044): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000700ffffff", @ANYRES8], 0x4}}, 0x0) sendfile(r2, r0, 0x0, 0x100000000) 46.564480263s ago: executing program 4 (id=1057): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x1, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 45.806820188s ago: executing program 4 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x2800810, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x3, 0x185, &(0x7f00000003c0)="$eJzs27GKE1EUBuAzJrvuKsjWYjFgYxXUylKRFcQBRUmxVgqrza4smGa0Cj6JrZVPJkiqFMKVZGKMITERHSea72tyMj8XzgmZXG5gnl15dXJ81nt59mgQe1kW7duRxzCLgzgXraj0AwD4nwxTis+7kzfvI6XUcEMAQO3G+39KKZ3vx779HwC2wsr9/9ZPFu/U3BwAUIvfOP9fqrUxAKA2T46ePrhTFIeP83wv4lO/7Jbd6rXK790vDq/nYwffVw3Kstua5jeqPP8x34kLk/zmwnw3rl2t8lF292Exl1+M4/rHBwAAgK3QyacWnu87nWV5Vc38PzB3fm/H5fZfGwMA+AW9N29Pnp+evnit+HeLtBltNFV8SSnNXBl9rddZ/u5DdQtsyBR/tsjW/BCWFw3/MAG16338dtM33QkAAAAAAAAAAAAAALDM6ueBjvYj1n5mKIuYvdJqejwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY6GsAAAD//1ZsRdQ=") 45.699378574s ago: executing program 4 (id=1058): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003680)}, 0x40012022) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, @perf_config_ext, 0x800, 0x7ff, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 44.954814607s ago: executing program 4 (id=1063): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 44.954600887s ago: executing program 36 (id=1063): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 42.66711548s ago: executing program 37 (id=905): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x407f8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x4}, 0x120, 0x10000, 0x33f8, 0x1, 0xb, 0x20007, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 32.828605885s ago: executing program 38 (id=1031): r0 = inotify_init() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 24.388005918s ago: executing program 6 (id=1430): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x5, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x1}, {0x7, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xe8) socket$inet6(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 24.314902151s ago: executing program 6 (id=1432): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000280)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x10}) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @remote}, 0x10) 24.293985603s ago: executing program 6 (id=1433): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 24.150777861s ago: executing program 6 (id=1436): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000cc0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x1228000, 0x0, 0xfffffffffffffdad, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 24.093883424s ago: executing program 6 (id=1439): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='4', 0x1}, {0x0}], 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1216, 0x0, 0x5, 0x6, 0xea64, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) listen(r0, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x10, {[@sack_perm={0x4, 0x2}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x4, @empty, 0x4}]}}}}}}}}, 0x0) 23.765490404s ago: executing program 6 (id=1448): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x0, 0x22}, 0x18) open(&(0x7f0000000100)='./file4\x00', 0x143142, 0x80) 23.726047626s ago: executing program 39 (id=1448): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x0, 0x22}, 0x18) open(&(0x7f0000000100)='./file4\x00', 0x143142, 0x80) 11.473914521s ago: executing program 8 (id=1678): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) 11.429855763s ago: executing program 8 (id=1681): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 11.355654587s ago: executing program 8 (id=1683): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x19, 0x0}, 0xd}], 0x1, 0x2, 0x0) 10.367290275s ago: executing program 8 (id=1698): r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x4, 0x2d1, &(0x7f0000000740)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x40009, 0x1b) readv(r0, &(0x7f0000001800), 0x0) 10.214053885s ago: executing program 8 (id=1712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x3, 0x2009140, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 9.838697026s ago: executing program 8 (id=1711): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x24, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x40) 9.7838161s ago: executing program 40 (id=1711): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x24, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x40) 2.534639192s ago: executing program 0 (id=1831): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) 2.495793355s ago: executing program 3 (id=1832): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000580), &(0x7f0000000680)=r2}, 0x20) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.455017257s ago: executing program 3 (id=1833): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) timer_create(0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) 2.40710057s ago: executing program 3 (id=1836): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a00000014"], 0x340a) 2.293003436s ago: executing program 3 (id=1837): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x31, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140), 0x1}, 0xc54) 2.254183929s ago: executing program 3 (id=1838): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000000000000000200000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) timer_delete(r0) 2.082939709s ago: executing program 3 (id=1852): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x8000000000000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 1.655941914s ago: executing program 0 (id=1844): socket$phonet(0x23, 0x2, 0x1) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.617403616s ago: executing program 0 (id=1845): keyctl$search(0xa, 0x0, &(0x7f0000002c80)='keyring\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x25) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xb}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 1.487941414s ago: executing program 0 (id=1846): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x57de, 0x0, 0x0, 0x0, 0x0) 1.351370062s ago: executing program 0 (id=1848): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x407f8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x4}, 0x120, 0x10000, 0x33f8, 0x1, 0xb, 0x20007, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8587}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.03997456s ago: executing program 0 (id=1851): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/150) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) 726.225738ms ago: executing program 9 (id=1857): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 700.832419ms ago: executing program 1 (id=1858): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 655.151852ms ago: executing program 5 (id=1859): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x100001) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xaee2, 0x10000, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 587.526506ms ago: executing program 9 (id=1860): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0xc, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) 555.882078ms ago: executing program 1 (id=1861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) 502.827671ms ago: executing program 5 (id=1862): perf_event_open(0x0, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x80010, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xfff, 0x200400, 0xfbfffffd, 0xc6cd, 0x91, "0000080100", 0x23fff9, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xa) 500.518341ms ago: executing program 1 (id=1863): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000400)="8ce2ad4d4f95e08741d66d1f81", 0xd, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 475.307543ms ago: executing program 9 (id=1864): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000980)="ee", 0x1}], 0x1) shutdown(r1, 0x1) 443.621955ms ago: executing program 1 (id=1865): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x215, 0x3ff, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0xffff, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000000000000000003"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 407.733917ms ago: executing program 5 (id=1866): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000440)=0x1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r0, &(0x7f0000000140)='\x00', 0x1, 0x4c090, &(0x7f0000000400)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 322.871872ms ago: executing program 1 (id=1867): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = inotify_init() ioperm(0x2, 0x9, 0x8) readv(r1, &(0x7f00000001c0), 0x55) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269ba, 0x8032, 0xffffffffffffffff, 0x99cef000) 322.650862ms ago: executing program 5 (id=1868): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x41009432, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xb9, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x83, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x3ff}, {"d3714dc0bcbd2d6e2aef5c71f52609844a63ecfab057e01994cdba6ec95a374b1e9c8f703a64b465578b610ebc9d5a80aa92476ce47f040b5a420d445cd7cf7a456f0093960ae9690fe312cb02566b12a06c664d475ffae8cb81d9d3ee3cf5fa77254d20eac5b0f27a545772eb3852"}}}}}}}, 0x0) 268.358715ms ago: executing program 9 (id=1869): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r1 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xa8bf, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x80, 0x0, 0x4000, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0xeffd) 166.216751ms ago: executing program 9 (id=1870): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 134.929373ms ago: executing program 5 (id=1871): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000400)="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", 0x218, 0x841, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100)={'dummy0', 0x32, 0x39}, 0x9) 60.410587ms ago: executing program 1 (id=1872): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) 59.911057ms ago: executing program 9 (id=1873): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 0s ago: executing program 5 (id=1874): unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x40000020, 0x0) kernel console output (not intermixed with test programs): for pid=5241 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.321453][ T29] audit: type=1326 audit(1769624953.007:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.6.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 73.344727][ T29] audit: type=1326 audit(1769624953.007:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.6.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 73.368355][ T29] audit: type=1326 audit(1769624953.007:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.6.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 73.391660][ T29] audit: type=1326 audit(1769624953.007:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.6.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 73.414989][ T29] audit: type=1326 audit(1769624953.007:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.6.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 73.594164][ T5262] loop5: detected capacity change from 0 to 512 [ 73.608478][ T5262] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 73.640509][ T5262] EXT4-fs (loop5): 1 truncate cleaned up [ 73.646557][ T5262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.791157][ T5274] loop2: detected capacity change from 0 to 1024 [ 73.807832][ T5274] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.838000][ T5274] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.849055][ T5274] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 73.888957][ T5274] JBD2: no valid journal superblock found [ 73.894771][ T5274] EXT4-fs (loop2): Could not load journal inode [ 73.996216][ T4371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.649654][ T5312] loop7: detected capacity change from 0 to 7 [ 74.909334][ T5319] chnl_net:caif_netlink_parms(): no params data found [ 74.952339][ T5319] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.959927][ T5319] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.967346][ T5319] bridge_slave_0: entered allmulticast mode [ 74.974336][ T5319] bridge_slave_0: entered promiscuous mode [ 74.981507][ T5319] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.988776][ T5319] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.995985][ T5319] bridge_slave_1: entered allmulticast mode [ 75.002664][ T5319] bridge_slave_1: entered promiscuous mode [ 75.021978][ T5319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.032979][ T5319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.056857][ T5319] team0: Port device team_slave_0 added [ 75.063947][ T5319] team0: Port device team_slave_1 added [ 75.080586][ T5319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.087573][ T5319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.113652][ T5319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.125552][ T5319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.132570][ T5319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.158685][ T5319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.194915][ T5319] hsr_slave_0: entered promiscuous mode [ 75.201364][ T5319] hsr_slave_1: entered promiscuous mode [ 75.239184][ T5319] debugfs: 'hsr0' already exists in 'hsr' [ 75.244978][ T5319] Cannot create hsr debugfs directory [ 75.458887][ T5319] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 75.478481][ T5319] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 75.504931][ T5319] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 75.544615][ T5319] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 75.680473][ T5319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.713166][ T5319] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.774357][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.781603][ T3923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.834337][ T3923] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.841651][ T3923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.932920][ T5319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.112653][ T5319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.156853][ T5391] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.252159][ T5391] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.322929][ T5391] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.352571][ T5319] veth0_vlan: entered promiscuous mode [ 76.366223][ T5319] veth1_vlan: entered promiscuous mode [ 76.386032][ T5391] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.408621][ T5319] veth0_macvtap: entered promiscuous mode [ 76.416967][ T5319] veth1_macvtap: entered promiscuous mode [ 76.452472][ T5319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.474781][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.487850][ T5319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.503135][ T3460] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.550395][ T3923] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.600204][ T3923] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.673935][ T3460] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.697979][ T3460] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.749970][ T3460] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.089491][ T3460] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.631466][ T5426] loop7: detected capacity change from 0 to 7 [ 78.661272][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 78.661309][ T29] audit: type=1326 audit(1769624958.367:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.6.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 78.740295][ T5516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.649'. [ 78.759348][ T5512] loop4: detected capacity change from 0 to 4096 [ 78.769172][ T29] audit: type=1326 audit(1769624958.407:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.6.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 78.792513][ T29] audit: type=1326 audit(1769624958.407:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.6.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 78.815880][ T29] audit: type=1326 audit(1769624958.407:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.6.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 78.839230][ T29] audit: type=1326 audit(1769624958.407:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.6.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 78.861053][ T5516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.649'. [ 78.862526][ T29] audit: type=1326 audit(1769624958.407:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.6.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 78.894714][ T29] audit: type=1326 audit(1769624958.407:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.6.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 78.918004][ T29] audit: type=1326 audit(1769624958.407:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.6.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 78.941216][ T29] audit: type=1326 audit(1769624958.407:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.6.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 78.964521][ T29] audit: type=1326 audit(1769624958.407:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.6.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 78.988304][ T5512] EXT4-fs: Ignoring removed bh option [ 78.993739][ T5512] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.098715][ T5512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.285211][ T5528] loop7: detected capacity change from 0 to 128 [ 79.318893][ T5528] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 79.356112][ T5528] FAT-fs (loop7): error, invalid FAT chain (i_pos 548, last_block 8) [ 79.364478][ T5528] FAT-fs (loop7): Filesystem has been set read-only [ 79.367735][ T5533] loop2: detected capacity change from 0 to 512 [ 79.374413][ T5528] FAT-fs (loop7): error, corrupted file size (i_pos 548, 522) [ 79.476554][ T5539] loop7: detected capacity change from 0 to 512 [ 79.491833][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.501502][ T5539] EXT4-fs: Ignoring removed oldalloc option [ 79.539290][ T5533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.552708][ T5533] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.567761][ T5539] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.657: Parent and EA inode have the same ino 15 [ 79.656175][ T5533] EXT4-fs error (device loop2): ext4_empty_dir:3075: inode #12: comm syz.2.655: invalid size [ 79.672348][ T5539] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.657: Parent and EA inode have the same ino 15 [ 79.688844][ T5533] EXT4-fs (loop2): Remounting filesystem read-only [ 79.695625][ T5539] EXT4-fs (loop7): 1 orphan inode deleted [ 79.702142][ T5539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.703462][ T5548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.661'. [ 79.724552][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz.6.662'. [ 79.751527][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.768407][ T2099] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.783299][ T2099] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 80.329868][ T5319] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.498787][ T5571] loop2: detected capacity change from 0 to 128 [ 80.512234][ T5571] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 80.545488][ T5571] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 80.553705][ T5571] FAT-fs (loop2): Filesystem has been set read-only [ 80.577482][ T5571] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 80.655080][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 80.667709][ T5577] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.678378][ T5577] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.705600][ T5579] wireguard0: entered promiscuous mode [ 80.711300][ T5579] wireguard0: entered allmulticast mode [ 80.738626][ T5577] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.749086][ T5577] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.832861][ T5577] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.853406][ T5577] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.921794][ T5577] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.932253][ T5577] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.977813][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.986120][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.061103][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.069382][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.088649][ T5587] loop6: detected capacity change from 0 to 512 [ 81.095348][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.103749][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.112761][ T5587] EXT4-fs: Ignoring removed oldalloc option [ 81.163539][ T5587] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.678: Parent and EA inode have the same ino 15 [ 81.208893][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.217184][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.250465][ T5587] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.678: Parent and EA inode have the same ino 15 [ 81.298383][ T5598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.325501][ T5587] EXT4-fs (loop6): 1 orphan inode deleted [ 81.344280][ T5598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.359741][ T5587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.430494][ T5601] loop2: detected capacity change from 0 to 512 [ 81.465616][ T5601] EXT4-fs: Ignoring removed orlov option [ 81.473325][ T5601] EXT4-fs: Ignoring removed i_version option [ 81.481903][ T5601] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.524039][ T5601] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 81.533069][ T5601] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 81.543749][ T5601] EXT4-fs (loop2): orphan cleanup on readonly fs [ 81.547236][ T5603] loop5: detected capacity change from 0 to 1024 [ 81.552185][ T5601] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 81.573192][ T5601] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 81.591892][ T5601] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.684: bg 0: block 40: padding at end of block bitmap is not set [ 81.609939][ T5601] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 81.631280][ T5601] EXT4-fs (loop2): 1 truncate cleaned up [ 81.652414][ T5601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.666611][ T5603] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 81.678050][ T5603] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 81.729257][ T5603] JBD2: no valid journal superblock found [ 81.735074][ T5603] EXT4-fs (loop5): Could not load journal inode [ 81.767284][ T5603] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 81.798784][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.962366][ T5108] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.289009][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.695'. [ 82.496259][ T5634] loop6: detected capacity change from 0 to 128 [ 82.515887][ T5634] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.556512][ T5634] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.840638][ T5645] loop5: detected capacity change from 0 to 512 [ 82.881075][ T5645] EXT4-fs: Ignoring removed orlov option [ 82.886904][ T5645] EXT4-fs: Ignoring removed i_version option [ 82.893045][ T5645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.961091][ T5645] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 82.970040][ T5645] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 82.983245][ T5645] EXT4-fs (loop5): orphan cleanup on readonly fs [ 82.992603][ T5645] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 83.008207][ T5645] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 83.020036][ T5645] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.702: bg 0: block 40: padding at end of block bitmap is not set [ 83.036197][ T5645] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 83.080318][ T5645] EXT4-fs (loop5): 1 truncate cleaned up [ 83.157356][ T5645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.279306][ T4371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.355872][ T5654] SELinux: policydb magic number 0x14 does not match expected magic number 0xf97cff8c [ 83.394487][ T5654] SELinux: failed to load policy [ 84.066681][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 84.066747][ T29] audit: type=1400 audit(1769625219.754:518): avc: denied { connect } for pid=5679 comm="syz.7.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.129805][ T5683] uprobe: syz.7.716:5683 failed to unregister, leaking uprobe [ 84.441962][ T29] audit: type=1326 audit(1769625220.154:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7a21aeb9 code=0x7ffc0000 [ 84.465380][ T29] audit: type=1326 audit(1769625220.154:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7a21aeb9 code=0x7ffc0000 [ 84.497999][ T5712] uprobe: syz.2.729:5712 failed to unregister, leaking uprobe [ 84.517111][ T29] audit: type=1326 audit(1769625220.204:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7a21aeb9 code=0x7ffc0000 [ 84.540455][ T29] audit: type=1326 audit(1769625220.204:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb7a1db78e code=0x7ffc0000 [ 84.563827][ T29] audit: type=1326 audit(1769625220.204:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7a21aeb9 code=0x7ffc0000 [ 84.587092][ T29] audit: type=1326 audit(1769625220.214:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7a21aeb9 code=0x7ffc0000 [ 84.610385][ T29] audit: type=1326 audit(1769625220.214:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7a21aeb9 code=0x7ffc0000 [ 84.633760][ T29] audit: type=1326 audit(1769625220.214:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7a21aeb9 code=0x7ffc0000 [ 84.657041][ T29] audit: type=1326 audit(1769625220.214:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5706 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb7a21aeb9 code=0x7ffc0000 [ 84.688340][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.741'. [ 84.708866][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.741'. [ 84.750854][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 84.814479][ T5719] 8021q: adding VLAN 0 to HW filter on device bond3 [ 84.871004][ T5723] bond3: (slave macvlan1): Enslaving as an active interface with an up link [ 85.071759][ T5738] netlink: 12 bytes leftover after parsing attributes in process `syz.7.740'. [ 85.081482][ T5738] netlink: 12 bytes leftover after parsing attributes in process `syz.7.740'. [ 85.147577][ T5745] netlink: 7 bytes leftover after parsing attributes in process `syz.2.744'. [ 85.157071][ T5745] netlink: 7 bytes leftover after parsing attributes in process `syz.2.744'. [ 85.248249][ T5749] netlink: 'syz.2.746': attribute type 29 has an invalid length. [ 85.273397][ T5755] netlink: 7 bytes leftover after parsing attributes in process `syz.6.758'. [ 85.284097][ T5755] netlink: 7 bytes leftover after parsing attributes in process `syz.6.758'. [ 85.299783][ T5749] netlink: 'syz.2.746': attribute type 29 has an invalid length. [ 85.312007][ T5757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.749'. [ 85.312014][ T5749] netlink: 'syz.2.746': attribute type 32 has an invalid length. [ 85.344817][ T5757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.384773][ T5757] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 85.456767][ T5770] loop4: detected capacity change from 0 to 512 [ 85.493476][ T5770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.511398][ T5770] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.543217][ T5770] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz.4.753: invalid size [ 85.563508][ T5770] EXT4-fs (loop4): Remounting filesystem read-only [ 85.602591][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.618531][ T2099] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.629233][ T2099] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.697002][ T5782] ipip0: entered promiscuous mode [ 85.740364][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.747709][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.810323][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.823691][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.869581][ T3460] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.878030][ T3460] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.891753][ T5791] netlink: 'syz.5.762': attribute type 29 has an invalid length. [ 85.901086][ T5791] netlink: 'syz.5.762': attribute type 29 has an invalid length. [ 85.909170][ T3460] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.911557][ T5791] netlink: 'syz.5.762': attribute type 32 has an invalid length. [ 85.917615][ T3460] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.958209][ T3460] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.966652][ T3460] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.987806][ T3460] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.996259][ T3460] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.258969][ T5818] uprobe: syz.6.775:5818 failed to unregister, leaking uprobe [ 86.475978][ T5831] loop2: detected capacity change from 0 to 512 [ 86.514555][ T5831] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.544460][ T5831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.601532][ T5831] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.747865][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 87.071583][ T5868] netlink: 'syz.5.794': attribute type 29 has an invalid length. [ 87.292084][ T5886] loop5: detected capacity change from 0 to 512 [ 87.391375][ T5886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.470882][ T5886] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.591080][ T5886] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 87.636148][ T5886] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 87.649011][ T5886] EXT4-fs (loop5): This should not happen!! Data will be lost [ 87.649011][ T5886] [ 87.658707][ T5886] EXT4-fs (loop5): Total free blocks count 0 [ 87.664776][ T5886] EXT4-fs (loop5): Free/Dirty block details [ 87.670747][ T5886] EXT4-fs (loop5): free_blocks=65280 [ 87.676055][ T5886] EXT4-fs (loop5): dirty_blocks=33 [ 87.681334][ T5886] EXT4-fs (loop5): Block reservation details [ 87.687339][ T5886] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 87.716067][ T5898] loop7: detected capacity change from 0 to 4096 [ 87.748434][ T5898] EXT4-fs: Ignoring removed bh option [ 87.753929][ T5898] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.773266][ T4371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.797516][ T5898] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.952826][ T5319] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.042535][ T5907] loop5: detected capacity change from 0 to 128 [ 89.813451][ T5952] loop6: detected capacity change from 0 to 4096 [ 89.838600][ T5952] EXT4-fs: Ignoring removed bh option [ 89.844075][ T5952] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.910969][ T5952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.959136][ T5966] loop7: detected capacity change from 0 to 128 [ 89.974070][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 89.989529][ T5966] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.012202][ T5966] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.128028][ T5108] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.154041][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.161319][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.169401][ T5941] bridge_slave_0: entered allmulticast mode [ 90.188466][ T5319] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.198146][ T5941] bridge_slave_0: entered promiscuous mode [ 90.213988][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.221219][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.232662][ T5941] bridge_slave_1: entered allmulticast mode [ 90.239660][ T5941] bridge_slave_1: entered promiscuous mode [ 90.265782][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.290357][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.333019][ T5941] team0: Port device team_slave_0 added [ 90.345565][ T5941] team0: Port device team_slave_1 added [ 90.388265][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.395266][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.421360][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.449129][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.456148][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.482099][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.528491][ T5941] hsr_slave_0: entered promiscuous mode [ 90.537431][ T5941] hsr_slave_1: entered promiscuous mode [ 90.543993][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 90.549858][ T5941] Cannot create hsr debugfs directory [ 90.713658][ T5941] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 90.725416][ T5941] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 90.737008][ T5941] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 90.746798][ T5941] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 90.794059][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.801296][ T5941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.808697][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.815832][ T5941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.867649][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.886398][ T3918] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.899208][ T3918] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.929560][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.943209][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.950387][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.962569][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.969702][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.041857][ T6014] loop2: detected capacity change from 0 to 4096 [ 91.050909][ T6014] EXT4-fs: Ignoring removed bh option [ 91.056404][ T6014] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.068148][ T6014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.183524][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.249110][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.368588][ T6044] __nla_validate_parse: 7 callbacks suppressed [ 91.368681][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 91.392157][ T6044] bridge_slave_1: left allmulticast mode [ 91.397891][ T6044] bridge_slave_1: left promiscuous mode [ 91.403816][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.433622][ T6044] bridge_slave_0: left allmulticast mode [ 91.439416][ T6044] bridge_slave_0: left promiscuous mode [ 91.445138][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.538082][ T5941] veth0_vlan: entered promiscuous mode [ 91.546502][ T5941] veth1_vlan: entered promiscuous mode [ 91.570181][ T5941] veth0_macvtap: entered promiscuous mode [ 91.585826][ T5941] veth1_macvtap: entered promiscuous mode [ 91.607962][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.617221][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.636822][ T3460] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.661633][ T3460] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.670720][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.867'. [ 91.683466][ T3460] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.703542][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.867'. [ 91.709766][ T3460] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.723063][ T3460] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.732650][ T3460] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.742316][ T3460] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.768257][ T3460] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.266170][ T6096] netlink: 'syz.6.872': attribute type 20 has an invalid length. [ 92.274183][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.872'. [ 92.338646][ T6096] netlink: 'syz.6.872': attribute type 20 has an invalid length. [ 92.346844][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.872'. [ 93.297626][ T6129] netlink: 'syz.4.887': attribute type 20 has an invalid length. [ 93.305566][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'. [ 93.329305][ T6129] netlink: 'syz.4.887': attribute type 20 has an invalid length. [ 93.337221][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'. [ 93.337546][ T3914] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.355005][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.8.886'. [ 93.377609][ T3914] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.398020][ T3914] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.407189][ T3914] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.446832][ T6127] team1: entered promiscuous mode [ 93.451996][ T6127] team1: entered allmulticast mode [ 93.458700][ T6127] 8021q: adding VLAN 0 to HW filter on device team1 [ 93.514296][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 93.514316][ T29] audit: type=1326 audit(1769625229.224:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.7.889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f211bdaaeb9 code=0x0 [ 93.552590][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.6.892'. [ 94.350290][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.8.901'. [ 96.367883][ T29] audit: type=1326 audit(1769625232.074:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.6.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 96.391291][ T29] audit: type=1326 audit(1769625232.074:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.6.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 96.414778][ T29] audit: type=1326 audit(1769625232.074:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.6.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 96.438095][ T29] audit: type=1326 audit(1769625232.074:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.6.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 96.461456][ T29] audit: type=1326 audit(1769625232.074:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.6.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 96.649483][ T29] audit: type=1326 audit(1769625232.074:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.6.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 96.672722][ T29] audit: type=1326 audit(1769625232.074:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.6.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 96.696765][ T29] audit: type=1326 audit(1769625232.074:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.6.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 96.720794][ T29] audit: type=1326 audit(1769625232.194:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.6.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 96.925618][ T6267] loop6: detected capacity change from 0 to 512 [ 96.953892][ T6267] EXT4-fs: Ignoring removed bh option [ 96.994040][ T6267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.048352][ T6267] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.206342][ T5108] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.281634][ T6282] netlink: 'syz.8.960': attribute type 15 has an invalid length. [ 98.159523][ T6308] loop2: detected capacity change from 0 to 128 [ 98.214424][ T6310] tipc: Enabling of bearer rejected, failed to enable media [ 98.279972][ T6312] loop8: detected capacity change from 0 to 1024 [ 98.286856][ T6312] EXT4-fs: Ignoring removed orlov option [ 98.292713][ T6312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.319883][ T6314] syz.2.962: attempt to access beyond end of device [ 98.319883][ T6314] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 98.334623][ T6312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.344433][ T6314] syz.2.962: attempt to access beyond end of device [ 98.344433][ T6314] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 98.386844][ T6314] syz.2.962: attempt to access beyond end of device [ 98.386844][ T6314] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 98.421885][ T6314] syz.2.962: attempt to access beyond end of device [ 98.421885][ T6314] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 98.507769][ T5941] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.570364][ T6321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.579112][ T6321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.978292][ T6352] netlink: 68 bytes leftover after parsing attributes in process `syz.6.978'. [ 100.007285][ T6352] netlink: 68 bytes leftover after parsing attributes in process `syz.6.978'. [ 100.259963][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.984'. [ 100.269042][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.984'. [ 100.454765][ T6374] netlink: 'syz.2.986': attribute type 15 has an invalid length. [ 100.663349][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 100.700847][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 100.700862][ T29] audit: type=1326 audit(1769625236.404:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 100.730376][ T29] audit: type=1326 audit(1769625236.414:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 100.753841][ T29] audit: type=1326 audit(1769625236.414:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 100.777119][ T29] audit: type=1326 audit(1769625236.414:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 100.800517][ T29] audit: type=1326 audit(1769625236.414:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 100.823846][ T29] audit: type=1326 audit(1769625236.414:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 100.847203][ T29] audit: type=1326 audit(1769625236.414:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 100.870740][ T29] audit: type=1326 audit(1769625236.414:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 100.894021][ T29] audit: type=1326 audit(1769625236.414:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 100.917355][ T29] audit: type=1326 audit(1769625236.414:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad3b0caeb9 code=0x7ffc0000 [ 101.125089][ T6378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.602934][ T6393] netlink: 68 bytes leftover after parsing attributes in process `syz.4.991'. [ 101.618604][ T6393] netlink: 68 bytes leftover after parsing attributes in process `syz.4.991'. [ 102.332638][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 102.341554][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'. [ 102.484073][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1002'. [ 102.510843][ T6420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.343189][ T6442] loop6: detected capacity change from 0 to 1024 [ 103.364391][ T6442] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.373572][ T6442] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.384729][ T6442] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 103.395904][ T6442] JBD2: no valid journal superblock found [ 103.401793][ T6442] EXT4-fs (loop6): Could not load journal inode [ 103.541622][ T6454] loop8: detected capacity change from 0 to 1024 [ 103.563272][ T6454] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.578494][ T6454] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.589551][ T6454] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 103.658816][ T6454] JBD2: no valid journal superblock found [ 103.664702][ T6454] EXT4-fs (loop8): Could not load journal inode [ 104.777574][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.800916][ T6495] bridge_slave_1: left allmulticast mode [ 104.806627][ T6495] bridge_slave_1: left promiscuous mode [ 104.812442][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.003763][ T6506] tipc: Enabling of bearer rejected, failed to enable media [ 105.659913][ T6513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.688602][ T6513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.002929][ T6525] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1049'. [ 106.376215][ T6536] loop4: detected capacity change from 0 to 128 [ 106.439800][ T6538] loop6: detected capacity change from 0 to 128 [ 106.587487][ T6538] syz.6.1056: attempt to access beyond end of device [ 106.587487][ T6538] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 106.652683][ T6538] syz.6.1056: attempt to access beyond end of device [ 106.652683][ T6538] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 106.727579][ T6538] syz.6.1056: attempt to access beyond end of device [ 106.727579][ T6538] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 106.962429][ T6543] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 106.984060][ T6543] team0 (unregistering): Port device team_slave_0 removed [ 107.000228][ T6543] team0 (unregistering): Failed to send options change via netlink (err -105) [ 107.019939][ T6543] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 107.051968][ T6543] team0 (unregistering): Port device team_slave_1 removed [ 107.278608][ T6549] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1065'. [ 107.571638][ T6550] chnl_net:caif_netlink_parms(): no params data found [ 107.741036][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.748271][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.773214][ T6550] bridge_slave_0: entered allmulticast mode [ 107.797559][ T6550] bridge_slave_0: entered promiscuous mode [ 107.824167][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.831469][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.854611][ T6550] bridge_slave_1: entered allmulticast mode [ 107.871150][ T6550] bridge_slave_1: entered promiscuous mode [ 107.911939][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.935510][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.984802][ T6550] team0: Port device team_slave_0 added [ 107.999380][ T6550] team0: Port device team_slave_1 added [ 108.036228][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.043290][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.069252][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.081045][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.088097][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.114128][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.169204][ T6550] hsr_slave_0: entered promiscuous mode [ 108.175441][ T6550] hsr_slave_1: entered promiscuous mode [ 108.181802][ T6550] debugfs: 'hsr0' already exists in 'hsr' [ 108.187581][ T6550] Cannot create hsr debugfs directory [ 108.281536][ T6550] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 108.327183][ T6550] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 108.350476][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 108.350495][ T29] audit: type=1400 audit(1769625244.064:589): avc: denied { watch_reads } for pid=6577 comm="syz.6.1068" path="/135" dev="tmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.353344][ T6550] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 108.429696][ T6550] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 108.436999][ T6580] loop6: detected capacity change from 0 to 512 [ 108.452052][ T6580] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.494803][ T6580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.518711][ T6580] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.572390][ T5108] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.578808][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.603518][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.641950][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.649182][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.687977][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.695097][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.738797][ T29] audit: type=1400 audit(1769625244.444:590): avc: denied { execute } for pid=6593 comm="syz.8.1071" name="file1" dev="ramfs" ino=18615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 108.760730][ T29] audit: type=1400 audit(1769625244.444:591): avc: denied { execute_no_trans } for pid=6593 comm="syz.8.1071" path="/file1" dev="ramfs" ino=18615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 108.815665][ T6550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.826226][ T6550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.997281][ T29] audit: type=1326 audit(1769625244.704:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.8.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e00c5aeb9 code=0x7ffc0000 [ 109.020802][ T29] audit: type=1326 audit(1769625244.704:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.8.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e00c5aeb9 code=0x7ffc0000 [ 109.052360][ T29] audit: type=1326 audit(1769625244.754:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.8.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4e00c5aeb9 code=0x7ffc0000 [ 109.062583][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.075940][ T29] audit: type=1326 audit(1769625244.754:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.8.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e00c5aeb9 code=0x7ffc0000 [ 109.106100][ T29] audit: type=1326 audit(1769625244.754:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6610 comm="syz.8.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e00c5aeb9 code=0x7ffc0000 [ 109.302908][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1082'. [ 109.327031][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1082'. [ 109.424440][ T6550] veth0_vlan: entered promiscuous mode [ 109.456318][ T29] audit: type=1400 audit(1769625245.154:597): avc: denied { name_bind } for pid=6635 comm="syz.6.1083" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 109.492240][ T6550] veth1_vlan: entered promiscuous mode [ 109.549343][ T6550] veth0_macvtap: entered promiscuous mode [ 109.558380][ T29] audit: type=1400 audit(1769625245.264:598): avc: denied { setopt } for pid=6638 comm="syz.6.1085" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.600602][ T6550] veth1_macvtap: entered promiscuous mode [ 109.646002][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.695938][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.731582][ T3506] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.770042][ T3506] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.800896][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.833526][ T3506] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.863494][ T3506] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.900600][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.996531][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.148670][ T6676] capability: warning: `syz.6.1105' uses 32-bit capabilities (legacy support in use) [ 110.308536][ T6676] io-wq is not configured for unbound workers [ 110.322740][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.413295][ T6644] chnl_net:caif_netlink_parms(): no params data found [ 110.535932][ T12] bridge_slave_1: left allmulticast mode [ 110.541721][ T12] bridge_slave_1: left promiscuous mode [ 110.547460][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.570647][ T12] bridge_slave_0: left allmulticast mode [ 110.576440][ T12] bridge_slave_0: left promiscuous mode [ 110.582196][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.751626][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.818907][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.852998][ T12] bond0 (unregistering): Released all slaves [ 110.998238][ T12] hsr_slave_0: left promiscuous mode [ 111.025732][ T12] hsr_slave_1: left promiscuous mode [ 111.038453][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.045898][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.080746][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.088299][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.102802][ T12] veth1_macvtap: left promiscuous mode [ 111.108460][ T12] veth0_macvtap: left promiscuous mode [ 111.114118][ T12] veth1_vlan: left promiscuous mode [ 111.120001][ T12] veth0_vlan: left promiscuous mode [ 111.296394][ T12] team0 (unregistering): Port device team_slave_1 removed [ 111.308054][ T12] team0 (unregistering): Port device team_slave_0 removed [ 111.374335][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.381495][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.389109][ T6644] bridge_slave_0: entered allmulticast mode [ 111.395730][ T6644] bridge_slave_0: entered promiscuous mode [ 111.420010][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.427290][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.439135][ T6644] bridge_slave_1: entered allmulticast mode [ 111.460946][ T6644] bridge_slave_1: entered promiscuous mode [ 111.507895][ T6644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.539086][ T6644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.604636][ T6644] team0: Port device team_slave_0 added [ 111.635313][ T6644] team0: Port device team_slave_1 added [ 111.679606][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1119'. [ 111.690551][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.697631][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.723979][ T6644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.745587][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1119'. [ 111.773467][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.780544][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.806770][ T6644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.922780][ T6644] hsr_slave_0: entered promiscuous mode [ 111.936013][ T6644] hsr_slave_1: entered promiscuous mode [ 111.946741][ T6644] debugfs: 'hsr0' already exists in 'hsr' [ 111.952593][ T6644] Cannot create hsr debugfs directory [ 112.169725][ T6644] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.180250][ T6644] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.333761][ T6644] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.344365][ T6644] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.408065][ T6644] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.418441][ T6644] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.493538][ T6644] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.503917][ T6644] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.610221][ T6644] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.620253][ T6644] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.649551][ T6644] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.666878][ T6644] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.801917][ T6644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.817376][ T6644] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.828671][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.835956][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.869655][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.876771][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.887721][ T6855] netlink: 'syz.8.1140': attribute type 1 has an invalid length. [ 112.918380][ T6855] bond2: entered promiscuous mode [ 112.923685][ T6855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.954753][ T6855] bond2: (slave bridge2): making interface the new active one [ 112.962390][ T6855] bridge2: entered promiscuous mode [ 112.972616][ T6855] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 113.023753][ T6644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.157360][ T6644] veth0_vlan: entered promiscuous mode [ 113.179514][ T6644] veth1_vlan: entered promiscuous mode [ 113.225179][ T6644] veth0_macvtap: entered promiscuous mode [ 113.249382][ T6644] veth1_macvtap: entered promiscuous mode [ 113.275837][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.292875][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.319573][ T3460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.338746][ T3460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.362807][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 113.362827][ T29] audit: type=1400 audit(1769625761.066:611): avc: denied { mounton } for pid=6644 comm="syz-executor" path="/root/syzkaller.TyK375/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 113.398441][ T3460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.407276][ T3460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.454297][ T6871] loop0: detected capacity change from 0 to 128 [ 113.463284][ T6873] loop6: detected capacity change from 0 to 128 [ 113.483374][ T6873] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.530776][ T29] audit: type=1400 audit(1769625761.196:612): avc: denied { execute } for pid=6869 comm="syz.8.1150" path="/85/rdma.current" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.530961][ T6873] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.635087][ T5108] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.748239][ T29] audit: type=1400 audit(1769625761.446:613): avc: denied { execute } for pid=6890 comm="syz.6.1147" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 113.856078][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1149'. [ 113.866065][ T6898] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1151'. [ 113.950099][ T29] audit: type=1400 audit(1769625761.656:614): avc: denied { ioctl } for pid=6902 comm="syz.9.1153" path="socket:[19624]" dev="sockfs" ino=19624 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.016253][ T29] audit: type=1400 audit(1769625761.716:615): avc: denied { watch watch_reads } for pid=6906 comm="syz.8.1156" path="/88/file0" dev="tmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.143158][ T6914] bridge_slave_0: left allmulticast mode [ 114.149026][ T6914] bridge_slave_0: left promiscuous mode [ 114.154912][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.208056][ T6914] bond0: (slave bond_slave_0): Releasing backup interface [ 114.223375][ T6914] bond0: (slave bond_slave_1): Releasing backup interface [ 114.248047][ T6914] team0: Port device team_slave_0 removed [ 114.268032][ T6914] team0: Port device team_slave_1 removed [ 114.283575][ T6914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.291140][ T6914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.339551][ T6914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.347037][ T6914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.403151][ T6914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.532236][ T6935] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1165'. [ 114.619085][ T6941] loop9: detected capacity change from 0 to 512 [ 114.637160][ T6941] EXT4-fs: Ignoring removed oldalloc option [ 114.652372][ T6941] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 114.673882][ T6943] loop8: detected capacity change from 0 to 1024 [ 114.686193][ T6941] netlink: 86172 bytes leftover after parsing attributes in process `syz.9.1169'. [ 114.719326][ T6941] netlink: zone id is out of range [ 114.724753][ T6941] netlink: zone id is out of range [ 114.730240][ T6943] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.741323][ T6943] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 114.751343][ T6941] netlink: zone id is out of range [ 114.756691][ T6941] netlink: zone id is out of range [ 114.762749][ T6941] netlink: zone id is out of range [ 114.768126][ T6943] JBD2: no valid journal superblock found [ 114.774022][ T6943] EXT4-fs (loop8): Could not load journal inode [ 114.780774][ T6941] netlink: zone id is out of range [ 114.785990][ T6941] netlink: zone id is out of range [ 114.791163][ T6941] netlink: zone id is out of range [ 114.796284][ T6941] netlink: zone id is out of range [ 114.832654][ T29] audit: type=1400 audit(1769625762.536:616): avc: denied { bind } for pid=6942 comm="syz.8.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.905259][ T6950] loop9: detected capacity change from 0 to 128 [ 114.926198][ T6950] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.053296][ T6950] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.084540][ T6959] bridge_slave_0: left allmulticast mode [ 115.090357][ T6959] bridge_slave_0: left promiscuous mode [ 115.096118][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.147690][ T6550] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.159491][ T6959] bridge_slave_1: left allmulticast mode [ 115.165189][ T6959] bridge_slave_1: left promiscuous mode [ 115.171085][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.209458][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1181'. [ 115.241490][ T6972] loop0: detected capacity change from 0 to 512 [ 115.248123][ T6972] EXT4-fs: Ignoring removed oldalloc option [ 115.269339][ T6959] bond0: (slave bond_slave_0): Releasing backup interface [ 115.287426][ T6972] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 115.307300][ T6959] bond0: (slave bond_slave_1): Releasing backup interface [ 115.323621][ T6972] netlink: 86172 bytes leftover after parsing attributes in process `syz.0.1183'. [ 115.335443][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.342966][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.383887][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1184'. [ 115.396199][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.403670][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.645101][ T6991] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 115.700874][ T29] audit: type=1400 audit(1769625763.406:617): avc: denied { create } for pid=6996 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 115.723074][ T29] audit: type=1400 audit(1769625763.426:618): avc: denied { bind } for pid=6996 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 115.859770][ T7004] SELinux: Context system_u: is not valid (left unmapped). [ 115.867305][ T29] audit: type=1400 audit(1769625763.566:619): avc: denied { relabelfrom } for pid=7003 comm="syz.9.1194" name="SCTPv6" dev="sockfs" ino=18146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 115.891054][ T29] audit: type=1400 audit(1769625763.566:620): avc: denied { relabelto } for pid=7003 comm="syz.9.1194" name="SCTPv6" dev="sockfs" ino=18146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:" [ 116.116646][ T7009] loop6: detected capacity change from 0 to 512 [ 116.158674][ T7009] EXT4-fs: Ignoring removed oldalloc option [ 116.184994][ T7009] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 116.221230][ T7009] netlink: 86172 bytes leftover after parsing attributes in process `syz.6.1196'. [ 116.549311][ T7024] bridge_slave_0: left allmulticast mode [ 116.555038][ T7024] bridge_slave_0: left promiscuous mode [ 116.560830][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.573601][ T7024] bridge_slave_1: left allmulticast mode [ 116.579454][ T7024] bridge_slave_1: left promiscuous mode [ 116.585203][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.596832][ T7024] bond0: (slave bond_slave_0): Releasing backup interface [ 116.620087][ T7024] bond0: (slave bond_slave_1): Releasing backup interface [ 116.652916][ T7024] team0: Port device team_slave_0 removed [ 116.673939][ T7024] team0: Port device team_slave_1 removed [ 116.691526][ T7024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.699177][ T7024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.728383][ T7024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.735858][ T7024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.883024][ T7032] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.471962][ T7061] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1216'. [ 117.835572][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1223'. [ 118.322729][ T7088] loop6: detected capacity change from 0 to 1024 [ 118.351771][ T7088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.371774][ T7088] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.423662][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1228'. [ 118.491363][ T7096] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.1236: Freeing blocks not in datazone - block = 0, count = 16 [ 118.669587][ T3460] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 118.696197][ T3460] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 118.708555][ T3460] EXT4-fs (loop6): This should not happen!! Data will be lost [ 118.708555][ T3460] [ 118.718482][ T3460] EXT4-fs (loop6): Total free blocks count 0 [ 118.724506][ T3460] EXT4-fs (loop6): Free/Dirty block details [ 118.730607][ T3460] EXT4-fs (loop6): free_blocks=16 [ 118.735748][ T3460] EXT4-fs (loop6): dirty_blocks=16 [ 118.740905][ T3460] EXT4-fs (loop6): Block reservation details [ 118.746919][ T3460] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 118.784675][ T5108] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 119.608311][ T7132] chnl_net:caif_netlink_parms(): no params data found [ 119.656647][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.663802][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.671455][ T7132] bridge_slave_0: entered allmulticast mode [ 119.678029][ T7132] bridge_slave_0: entered promiscuous mode [ 119.685014][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.692143][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.699621][ T7132] bridge_slave_1: entered allmulticast mode [ 119.706293][ T7132] bridge_slave_1: entered promiscuous mode [ 119.728648][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.744425][ T7149] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1250'. [ 119.760680][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.811751][ T7132] team0: Port device team_slave_0 added [ 119.821661][ T7157] loop8: detected capacity change from 0 to 1024 [ 119.826520][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1241'. [ 119.840882][ T7132] team0: Port device team_slave_1 added [ 119.859835][ T7157] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 119.876771][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.883827][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.891186][ T7157] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.909785][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.939967][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.947104][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.973222][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.012216][ T7161] tipc: Started in network mode [ 120.017150][ T7161] tipc: Node identity ac14140f, cluster identity 4711 [ 120.027432][ T7161] tipc: New replicast peer: 255.255.255.255 [ 120.033544][ T7161] tipc: Enabled bearer , priority 10 [ 120.066606][ T7132] hsr_slave_0: entered promiscuous mode [ 120.072988][ T7132] hsr_slave_1: entered promiscuous mode [ 120.081000][ T7132] debugfs: 'hsr0' already exists in 'hsr' [ 120.086795][ T7132] Cannot create hsr debugfs directory [ 120.205273][ T7157] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.1242: Freeing blocks not in datazone - block = 0, count = 16 [ 120.272951][ T12] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 120.288384][ T12] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 120.300730][ T12] EXT4-fs (loop8): This should not happen!! Data will be lost [ 120.300730][ T12] [ 120.310538][ T12] EXT4-fs (loop8): Total free blocks count 0 [ 120.316670][ T12] EXT4-fs (loop8): Free/Dirty block details [ 120.322637][ T12] EXT4-fs (loop8): free_blocks=16 [ 120.327690][ T12] EXT4-fs (loop8): dirty_blocks=16 [ 120.332863][ T12] EXT4-fs (loop8): Block reservation details [ 120.338965][ T12] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 120.374736][ T5941] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 120.459298][ T7132] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 120.468871][ T7132] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.478554][ T7132] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.488398][ T7132] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.664137][ T7132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.668003][ T7185] loop8: detected capacity change from 0 to 512 [ 120.705885][ T7132] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.732004][ T7185] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.753952][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.761077][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.772975][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.780156][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.790552][ T7185] EXT4-fs (loop8): orphan cleanup on readonly fs [ 120.857816][ T7132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.868388][ T7132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.890538][ T7195] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1265'. [ 120.921143][ T7185] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.1255: Allocating blocks 41-42 which overlap fs metadata [ 120.964685][ T7185] __quota_error: 18 callbacks suppressed [ 120.964757][ T7185] Quota error (device loop8): write_blk: dquota write failed [ 120.979667][ T7185] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 121.000482][ T7185] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.1255: Allocating blocks 41-42 which overlap fs metadata [ 121.023950][ T7185] Quota error (device loop8): write_blk: dquota write failed [ 121.033100][ T7185] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 121.059818][ T7185] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.1255: Failed to acquire dquot type 1 [ 121.126688][ T7132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.143781][ T7185] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 121.168268][ T1035] tipc: Node number set to 2886997007 [ 121.198805][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1257'. [ 121.202119][ T7185] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.1255: corrupted inode contents [ 121.224862][ T7185] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.1255: mark_inode_dirty error [ 121.261803][ T7185] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.1255: corrupted inode contents [ 121.288803][ T7185] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.1255: mark_inode_dirty error [ 121.304429][ T7185] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.1255: corrupted inode contents [ 121.321187][ T29] audit: type=1400 audit(1769625769.026:639): avc: denied { read } for pid=7218 comm="syz.6.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.341257][ T7185] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 121.345706][ T7132] veth0_vlan: entered promiscuous mode [ 121.359814][ T7132] veth1_vlan: entered promiscuous mode [ 121.377187][ T7132] veth0_macvtap: entered promiscuous mode [ 121.384006][ T7185] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.1255: corrupted inode contents [ 121.388011][ T7132] veth1_macvtap: entered promiscuous mode [ 121.411756][ T7185] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.1255: mark_inode_dirty error [ 121.412706][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.427387][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.448512][ T3460] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.458087][ T3460] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.473309][ T7185] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 121.485469][ T3460] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.495102][ T3460] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.525548][ T7185] EXT4-fs (loop8): 1 truncate cleaned up [ 121.553403][ T7185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.622108][ T29] audit: type=1400 audit(1769625769.316:640): avc: denied { write } for pid=7184 comm="syz.8.1255" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.656553][ T7231] tipc: Started in network mode [ 121.661534][ T7231] tipc: Node identity ac14140f, cluster identity 4711 [ 121.671644][ T5941] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.672890][ T7231] tipc: New replicast peer: 255.255.255.255 [ 121.686950][ T7231] tipc: Enabled bearer , priority 10 [ 121.736371][ T29] audit: type=1326 audit(1769625769.436:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.6.1264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x0 [ 122.070442][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1276'. [ 122.101127][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1276'. [ 122.206276][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1281'. [ 122.317524][ T29] audit: type=1400 audit(1769625770.016:642): avc: denied { bind } for pid=7284 comm="syz.0.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.340678][ T29] audit: type=1400 audit(1769625770.016:643): avc: denied { setopt } for pid=7284 comm="syz.0.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.700035][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1301'. [ 122.711791][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'. [ 122.798580][ T9] tipc: Node number set to 2886997007 [ 123.021242][ T29] audit: type=1326 audit(1769625770.726:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.6.1313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad3b0caeb9 code=0x0 [ 123.107743][ T7344] loop9: detected capacity change from 0 to 512 [ 123.128313][ T7344] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.1315: bad orphan inode 15 [ 123.151714][ T7344] ext4_test_bit(bit=14, block=5) = 0 [ 123.158671][ T7344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.191402][ T6550] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.141648][ T7415] loop6: detected capacity change from 0 to 512 [ 124.156924][ T7415] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1339: bad orphan inode 15 [ 124.177610][ T7415] ext4_test_bit(bit=14, block=5) = 0 [ 124.183499][ T7415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.210227][ T5108] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.310969][ T7425] kernel profiling enabled (shift: 8) [ 124.351034][ T7428] loop1: detected capacity change from 0 to 512 [ 124.385326][ T7428] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.399127][ T7428] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1344: bg 0: block 384: padding at end of block bitmap is not set [ 124.418536][ T7428] EXT4-fs (loop1): Remounting filesystem read-only [ 124.425367][ T7428] EXT4-fs (loop1): 1 truncate cleaned up [ 124.431838][ T7428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.505263][ T7132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.684195][ T7473] loop0: detected capacity change from 0 to 512 [ 124.734671][ T7473] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1351: bad orphan inode 15 [ 124.760306][ T7473] ext4_test_bit(bit=14, block=5) = 0 [ 124.767243][ T7473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.860330][ T6644] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.995749][ T7493] loop9: detected capacity change from 0 to 128 [ 125.124061][ T6550] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 125.132681][ T6550] FAT-fs (loop9): Filesystem has been set read-only [ 125.177298][ T6550] Trying to write to read-only block-device loop9 [ 125.806118][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1378'. [ 125.931400][ T7554] team1: entered promiscuous mode [ 125.936535][ T7554] team1: entered allmulticast mode [ 126.003438][ T7554] 8021q: adding VLAN 0 to HW filter on device team1 [ 126.035755][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1384'. [ 126.052325][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 126.115897][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1387'. [ 126.154192][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 126.154211][ T29] audit: type=1326 audit(1769625773.856:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.1.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feed0aeb9 code=0x7ffc0000 [ 126.210109][ T7577] netlink: 'syz.0.1389': attribute type 4 has an invalid length. [ 126.229536][ T7577] netlink: 'syz.0.1389': attribute type 4 has an invalid length. [ 126.251163][ T29] audit: type=1326 audit(1769625773.856:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.1.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0feed0aeb9 code=0x7ffc0000 [ 126.274801][ T29] audit: type=1326 audit(1769625773.916:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.1.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feed0aeb9 code=0x7ffc0000 [ 126.298340][ T29] audit: type=1326 audit(1769625773.916:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.1.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feed0aeb9 code=0x7ffc0000 [ 126.322013][ T29] audit: type=1326 audit(1769625773.926:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.1.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0feed0aeb9 code=0x7ffc0000 [ 126.345386][ T29] audit: type=1326 audit(1769625773.926:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.1.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feed0aeb9 code=0x7ffc0000 [ 126.368852][ T29] audit: type=1326 audit(1769625773.926:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.1.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feed0aeb9 code=0x7ffc0000 [ 126.392240][ T29] audit: type=1326 audit(1769625773.926:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.1.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0feed0c747 code=0x7ffc0000 [ 126.415702][ T29] audit: type=1326 audit(1769625773.926:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.1.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0feeccb78e code=0x7ffc0000 [ 126.439141][ T29] audit: type=1326 audit(1769625773.926:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.1.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0feeccb78e code=0x7ffc0000 [ 126.497306][ T7587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.606409][ T7605] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.657558][ T7611] loop0: detected capacity change from 0 to 512 [ 126.668497][ T7611] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.677525][ T7611] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #4: comm syz.0.1402: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 126.719222][ T7611] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.1402: Bad quota inode: 4, type: 1 [ 126.731208][ T7611] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.746383][ T7611] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 126.753909][ T7611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.770464][ T7611] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 126.831737][ T7611] EXT4-fs warning (device loop0): ext4_multi_mount_protect:328: MMP startup interrupted, failing mount [ 126.831737][ T7611] [ 126.865371][ T6644] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.902289][ T7623] xt_hashlimit: size too large, truncated to 1048576 [ 127.150479][ T7639] loop0: detected capacity change from 0 to 128 [ 127.171075][ T7639] syz.0.1414: attempt to access beyond end of device [ 127.171075][ T7639] loop0: rw=8390659, sector=104, nr_sectors = 937 limit=128 [ 127.187852][ T7642] gretap1: entered promiscuous mode [ 127.221841][ T7644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1417'. [ 127.239995][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 128.110757][ T7695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1438'. [ 128.438327][ T7713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.457158][ T7713] team0: Failed to send port change of device bond3 via netlink (err -105) [ 128.486358][ T7713] team0: Failed to send options change via netlink (err -105) [ 128.493947][ T7713] team0: Port device bond3 added [ 128.708435][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'. [ 128.754671][ T7735] hsr_slave_0: left promiscuous mode [ 128.788852][ T7735] hsr_slave_1: left promiscuous mode [ 128.885740][ T7719] chnl_net:caif_netlink_parms(): no params data found [ 128.987171][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.994396][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.001891][ T7719] bridge_slave_0: entered allmulticast mode [ 129.008880][ T7719] bridge_slave_0: entered promiscuous mode [ 129.016300][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.023422][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.030988][ T7719] bridge_slave_1: entered allmulticast mode [ 129.037633][ T7719] bridge_slave_1: entered promiscuous mode [ 129.060490][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.071581][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.119444][ T7719] team0: Port device team_slave_0 added [ 129.126763][ T7719] team0: Port device team_slave_1 added [ 129.194813][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.201973][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.227974][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.248461][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.255529][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.281557][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.358440][ T7719] hsr_slave_0: entered promiscuous mode [ 129.369019][ T7719] hsr_slave_1: entered promiscuous mode [ 129.382350][ T7719] debugfs: 'hsr0' already exists in 'hsr' [ 129.388278][ T7719] Cannot create hsr debugfs directory [ 129.498366][ T7774] syzkaller0: entered promiscuous mode [ 129.503927][ T7774] syzkaller0: entered allmulticast mode [ 129.654947][ T7719] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.715086][ T7719] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.808372][ T7719] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.850577][ T7719] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.871909][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1477'. [ 129.893160][ T7796] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.009129][ T7719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.030848][ T7719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.046509][ T7719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.061093][ T7719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.163317][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.184026][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.202839][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.210076][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.231284][ T3923] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.238524][ T3923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.356909][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.506690][ T7719] veth0_vlan: entered promiscuous mode [ 130.522644][ T7719] veth1_vlan: entered promiscuous mode [ 130.553247][ T7719] veth0_macvtap: entered promiscuous mode [ 130.561237][ T7719] veth1_macvtap: entered promiscuous mode [ 130.573742][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.586215][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.597711][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.606913][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.627322][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.640982][ T3460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.701986][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1484'. [ 130.809865][ T7844] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.1485'. [ 131.158654][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 131.158670][ T29] audit: type=1326 audit(1769625778.866:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.9.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f14c3d3aeb9 code=0x7ffc0000 [ 131.251289][ T29] audit: type=1400 audit(1769625778.956:809): avc: denied { mount } for pid=7858 comm="syz.1.1502" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 131.315530][ T29] audit: type=1400 audit(1769625778.976:810): avc: denied { search } for pid=7858 comm="syz.1.1502" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 131.337348][ T29] audit: type=1400 audit(1769625778.976:811): avc: denied { search } for pid=7858 comm="syz.1.1502" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 131.359268][ T29] audit: type=1400 audit(1769625778.976:812): avc: denied { read open } for pid=7858 comm="syz.1.1502" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 131.435975][ T7868] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1496'. [ 131.502293][ T7873] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.1499'. [ 131.528257][ T29] audit: type=1326 audit(1769625779.226:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7864 comm="syz.8.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e00c5aeb9 code=0x7fc00000 [ 132.073240][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1513'. [ 132.098595][ T7905] hsr_slave_0: left promiscuous mode [ 132.104478][ T7905] hsr_slave_1: left promiscuous mode [ 132.176394][ T29] audit: type=1326 audit(1769625779.876:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7864 comm="syz.8.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e00c5aeb9 code=0x7fc00000 [ 132.199793][ T29] audit: type=1326 audit(1769625779.876:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7864 comm="syz.8.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e00c5aeb9 code=0x7fc00000 [ 132.223168][ T29] audit: type=1326 audit(1769625779.876:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7864 comm="syz.8.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e00c5aeb9 code=0x7fc00000 [ 132.246577][ T29] audit: type=1326 audit(1769625779.876:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7864 comm="syz.8.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e00c5aeb9 code=0x7fc00000 [ 132.329090][ T7909] xt_hashlimit: size too large, truncated to 1048576 [ 132.732362][ T7922] loop9: detected capacity change from 0 to 512 [ 132.756994][ T7922] EXT4-fs (loop9): write access unavailable, skipping orphan cleanup [ 132.766102][ T7922] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.781204][ T7922] EXT4-fs (loop9): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 132.806049][ T6550] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.980861][ T7932] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 133.356893][ T7944] xt_hashlimit: size too large, truncated to 1048576 [ 133.386202][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1531'. [ 133.478532][ T7953] loop1: detected capacity change from 0 to 512 [ 133.494160][ T7953] EXT4-fs (loop1): orphan cleanup on readonly fs [ 133.511074][ T7953] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.1533: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 133.535190][ T7953] EXT4-fs error (device loop1): ext4_quota_enable:7180: comm syz.1.1533: Bad quota inode: 4, type: 1 [ 133.548494][ T7953] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 133.563464][ T7953] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 133.570857][ T7953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.613890][ T7953] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 133.669957][ T7953] EXT4-fs warning (device loop1): ext4_multi_mount_protect:328: MMP startup interrupted, failing mount [ 133.669957][ T7953] [ 133.708731][ T7132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.244187][ T7982] loop1: detected capacity change from 0 to 512 [ 134.253650][ T7983] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1544'. [ 134.263379][ T7982] EXT4-fs: Ignoring removed bh option [ 134.297010][ T7982] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 134.323826][ T7982] EXT4-fs (loop1): 1 truncate cleaned up [ 134.330816][ T7982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.346566][ T7982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1553'. [ 134.368622][ T7132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.573214][ T8011] sctp: [Deprecated]: syz.0.1555 (pid 8011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.573214][ T8011] Use struct sctp_sack_info instead [ 134.611231][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1556'. [ 134.896845][ T8027] loop0: detected capacity change from 0 to 1024 [ 134.936456][ T8027] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1560: bad orphan inode 134217728 [ 134.961400][ T8027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.330078][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1567'. [ 135.377786][ T8047] netlink: 'syz.8.1568': attribute type 4 has an invalid length. [ 135.403898][ T8047] netlink: 'syz.8.1568': attribute type 4 has an invalid length. [ 135.413214][ T6644] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.551564][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1571'. [ 135.662275][ T8060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.710611][ T8068] sctp: [Deprecated]: syz.8.1577 (pid 8068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.710611][ T8068] Use struct sctp_sack_info instead [ 136.071167][ T8091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1585'. [ 136.100105][ T8093] loop9: detected capacity change from 0 to 512 [ 136.109010][ T8093] EXT4-fs: Ignoring removed bh option [ 136.133339][ T8097] syzkaller1: entered promiscuous mode [ 136.139024][ T8097] syzkaller1: entered allmulticast mode [ 136.144680][ T8093] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1586'. [ 136.497769][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 136.497789][ T29] audit: type=1326 audit(1769625784.196:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0feed0aeb9 code=0x7fc00000 [ 137.348763][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1601'. [ 137.489769][ T8138] loop1: detected capacity change from 0 to 128 [ 137.572383][ T29] audit: type=1326 audit(1769625785.276:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc7daeb9 code=0x7ffc0000 [ 137.595887][ T29] audit: type=1326 audit(1769625785.276:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc7daeb9 code=0x7ffc0000 [ 137.679244][ T8151] loop1: detected capacity change from 0 to 2048 [ 137.712468][ T8154] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1611'. [ 137.728342][ T29] audit: type=1326 audit(1769625785.326:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5dbc7daeb9 code=0x7ffc0000 [ 137.751823][ T29] audit: type=1326 audit(1769625785.326:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc7daeb9 code=0x7ffc0000 [ 137.775263][ T29] audit: type=1326 audit(1769625785.326:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc7daeb9 code=0x7ffc0000 [ 137.798629][ T29] audit: type=1326 audit(1769625785.326:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5dbc7daeb9 code=0x7ffc0000 [ 137.821914][ T29] audit: type=1326 audit(1769625785.326:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc7daeb9 code=0x7ffc0000 [ 137.845412][ T29] audit: type=1326 audit(1769625785.326:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc7daeb9 code=0x7ffc0000 [ 137.868776][ T29] audit: type=1326 audit(1769625785.326:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5dbc7daeb9 code=0x7ffc0000 [ 138.084023][ T8165] netlink: 'syz.3.1614': attribute type 10 has an invalid length. [ 138.105050][ T8165] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 138.120036][ T8164] loop1: detected capacity change from 0 to 2048 [ 138.171609][ T3305] loop1: p1 < > [ 138.201081][ T8164] loop1: p1 < > [ 138.215309][ T8171] syzkaller0: entered promiscuous mode [ 138.220913][ T8171] syzkaller0: entered allmulticast mode [ 138.238345][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 138.291261][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 138.509613][ T8202] __nla_validate_parse: 5 callbacks suppressed [ 138.509635][ T8202] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.1626'. [ 138.525100][ T8202] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1626'. [ 138.965515][ T8213] loop8: detected capacity change from 0 to 128 [ 139.036040][ T8216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1634'. [ 139.108743][ T8213] syz.8.1633: attempt to access beyond end of device [ 139.108743][ T8213] loop8: rw=0, sector=121, nr_sectors = 120 limit=128 [ 139.152517][ T3460] kworker/u8:7: attempt to access beyond end of device [ 139.152517][ T3460] loop8: rw=1, sector=241, nr_sectors = 800 limit=128 [ 139.175918][ T8220] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 139.210721][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1636'. [ 139.228778][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1637'. [ 139.342960][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1641'. [ 139.638440][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1648'. [ 139.697385][ T8254] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1648'. [ 139.793137][ T8258] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 139.822388][ T8261] program syz.3.1652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.836452][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 139.846679][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 139.856966][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 139.891817][ T8255] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 140.162635][ T8284] loop9: detected capacity change from 0 to 256 [ 140.384546][ T8303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1666'. [ 140.394145][ T8303] unsupported nlmsg_type 40 [ 140.794947][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'. [ 140.847498][ T8333] loop3: detected capacity change from 0 to 128 [ 141.211734][ T8342] syzkaller0: entered promiscuous mode [ 141.217309][ T8342] syzkaller0: entered allmulticast mode [ 141.828799][ T8369] loop8: detected capacity change from 0 to 256 [ 141.924513][ T5941] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 141.938094][ T5941] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 142.079729][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 142.079749][ T29] audit: type=1326 audit(1769625789.776:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31515aeb9 code=0x7ffc0000 [ 142.109239][ T29] audit: type=1326 audit(1769625789.776:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31515aeb9 code=0x7ffc0000 [ 142.132649][ T29] audit: type=1326 audit(1769625789.786:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fa31515aeb9 code=0x7ffc0000 [ 142.152717][ T8392] loop1: detected capacity change from 0 to 128 [ 142.156311][ T29] audit: type=1326 audit(1769625789.786:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31515aeb9 code=0x7ffc0000 [ 142.185723][ T29] audit: type=1326 audit(1769625789.786:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fa31515aeb9 code=0x7ffc0000 [ 142.213548][ T29] audit: type=1326 audit(1769625789.786:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31515aeb9 code=0x7ffc0000 [ 142.236998][ T29] audit: type=1326 audit(1769625789.786:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.0.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31515aeb9 code=0x7ffc0000 [ 142.270029][ T8392] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.291413][ T8392] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.308496][ T29] audit: type=1400 audit(1769625790.016:951): avc: denied { setattr } for pid=8391 comm="syz.1.1708" path="/110/file1/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.352922][ T3460] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.371511][ T29] audit: type=1400 audit(1769625790.076:952): avc: denied { ioctl } for pid=8391 comm="syz.1.1708" path="/110/file1/file1" dev="loop1" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.410604][ T7132] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.453119][ T3460] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.537108][ T3460] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.677118][ T3460] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.995632][ T8438] loop0: detected capacity change from 0 to 512 [ 143.042760][ T8438] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.105094][ T8438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.180317][ T8438] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.1722: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 143.262472][ T3460] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 143.271221][ T29] audit: type=1400 audit(1769625790.986:953): avc: denied { nlmsg_read } for pid=8458 comm="syz.3.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.272289][ T3460] bridge2 (unregistering): left promiscuous mode [ 143.341381][ T6644] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 143.367261][ T6644] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.499018][ T8469] loop9: detected capacity change from 0 to 2048 [ 143.560365][ T3460] bond0 (unregistering): Released all slaves [ 143.571165][ T3460] bond1 (unregistering): Released all slaves [ 143.597558][ T3460] bond2 (unregistering): Released all slaves [ 143.610103][ T3460] team0: Port device bond3 removed [ 143.617028][ T3460] bond3 (unregistering): Released all slaves [ 143.689085][ T8467] syzkaller0: entered promiscuous mode [ 143.694649][ T8467] syzkaller0: entered allmulticast mode [ 143.705411][ T8406] chnl_net:caif_netlink_parms(): no params data found [ 143.726286][ T3460] hsr_slave_0: left promiscuous mode [ 143.739341][ T3460] hsr_slave_1: left promiscuous mode [ 143.756608][ T3460] veth1_macvtap: left promiscuous mode [ 143.766147][ T3460] veth0_macvtap: left promiscuous mode [ 143.778236][ T3460] veth1_vlan: left promiscuous mode [ 143.783889][ T3460] veth0_vlan: left promiscuous mode [ 143.997627][ T8499] __nla_validate_parse: 5 callbacks suppressed [ 143.997648][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1740'. [ 144.017220][ T8500] -1: renamed from syzkaller0 [ 144.031398][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 144.135384][ T8513] loop1: detected capacity change from 0 to 256 [ 144.142447][ T8406] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.149627][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.156965][ T8513] FAT-fs (loop1): Directory bread(block 1285) failed [ 144.164048][ T8513] FAT-fs (loop1): Directory bread(block 1286) failed [ 144.174904][ T8513] FAT-fs (loop1): Directory bread(block 1287) failed [ 144.182065][ T8513] FAT-fs (loop1): Directory bread(block 1288) failed [ 144.194034][ T8513] FAT-fs (loop1): Directory bread(block 1285) failed [ 144.204875][ T8406] bridge_slave_0: entered allmulticast mode [ 144.213559][ T8513] FAT-fs (loop1): Directory bread(block 1286) failed [ 144.220933][ T8406] bridge_slave_0: entered promiscuous mode [ 144.228339][ T8513] FAT-fs (loop1): Directory bread(block 1287) failed [ 144.235062][ T8513] FAT-fs (loop1): Directory bread(block 1288) failed [ 144.242543][ T8406] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.249806][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.257012][ T8519] FAT-fs (loop1): Directory bread(block 1285) failed [ 144.259389][ T8406] bridge_slave_1: entered allmulticast mode [ 144.264298][ T8519] FAT-fs (loop1): Directory bread(block 1286) failed [ 144.272684][ T8406] bridge_slave_1: entered promiscuous mode [ 144.358680][ T8530] sctp: [Deprecated]: syz.1.1750 (pid 8530) Use of int in max_burst socket option. [ 144.358680][ T8530] Use struct sctp_assoc_value instead [ 144.376078][ T8406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.427063][ T8406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.525338][ T8406] team0: Port device team_slave_0 added [ 144.544199][ T8406] team0: Port device team_slave_1 added [ 144.624650][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.631715][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.657697][ T8406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.750365][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.757376][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.783504][ T8406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.917815][ T8406] hsr_slave_0: entered promiscuous mode [ 144.931073][ T8406] hsr_slave_1: entered promiscuous mode [ 144.944347][ T8406] debugfs: 'hsr0' already exists in 'hsr' [ 144.950171][ T8406] Cannot create hsr debugfs directory [ 145.105024][ T8582] syzkaller1: entered promiscuous mode [ 145.110847][ T8582] syzkaller1: entered allmulticast mode [ 145.214642][ T8406] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.307717][ T8406] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.390119][ T8406] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.453601][ T8406] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.478457][ T8610] loop0: detected capacity change from 0 to 512 [ 145.511884][ T8610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.549107][ T8610] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.560335][ T8406] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.602039][ T8406] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.634270][ T8406] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.670434][ T3460] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x49 [ 145.700494][ T8406] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.684557][ T6644] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.760094][ T8406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.775880][ T8406] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.840012][ T3893] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.847143][ T3893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.875630][ T3893] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.882770][ T3893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.926572][ T8406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.937004][ T8406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.030283][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'. [ 147.165698][ T8656] team0: Port device team_slave_0 removed [ 147.287282][ T8406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.573876][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 147.573896][ T29] audit: type=1400 audit(1769625795.276:1003): avc: denied { shutdown } for pid=8690 comm="syz.9.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.632854][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1787'. [ 147.642971][ T8696] veth1_macvtap: left promiscuous mode [ 147.689582][ T8406] veth0_vlan: entered promiscuous mode [ 147.709042][ T8406] veth1_vlan: entered promiscuous mode [ 147.742147][ T8406] veth0_macvtap: entered promiscuous mode [ 147.762070][ T8406] veth1_macvtap: entered promiscuous mode [ 147.780188][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.795186][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.808731][ T3914] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.833834][ T3914] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.867223][ T3914] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.887649][ T3914] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.988853][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1795'. [ 148.004007][ T29] audit: type=1400 audit(1769625795.706:1004): avc: denied { bind } for pid=8721 comm="syz.3.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 148.067196][ T8728] loop9: detected capacity change from 0 to 512 [ 148.328532][ T29] audit: type=1400 audit(1769625796.026:1005): avc: denied { associate } for pid=8742 comm="syz.0.1801" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 148.487099][ T8750] netlink: 'syz.3.1807': attribute type 1 has an invalid length. [ 148.541703][ T8750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.631999][ T8753] bond1: (slave veth3): Enslaving as an active interface with a down link [ 148.680646][ T8750] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.714943][ T29] audit: type=1326 audit(1769625796.416:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6fcdaeb9 code=0x7ffc0000 [ 148.756246][ T8750] bond1: (slave batadv1): making interface the new active one [ 148.784349][ T8750] batadv1: entered promiscuous mode [ 148.808252][ T8750] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 148.822146][ T29] audit: type=1326 audit(1769625796.416:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6fcdaeb9 code=0x7ffc0000 [ 148.838762][ T8760] netlink: 'syz.0.1811': attribute type 29 has an invalid length. [ 148.845840][ T29] audit: type=1326 audit(1769625796.416:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6fcdaeb9 code=0x7ffc0000 [ 148.877001][ T29] audit: type=1326 audit(1769625796.416:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6fcdaeb9 code=0x7ffc0000 [ 148.900574][ T29] audit: type=1326 audit(1769625796.416:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffb6fcdaeb9 code=0x7ffc0000 [ 148.924134][ T29] audit: type=1326 audit(1769625796.476:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6fcdaeb9 code=0x7ffc0000 [ 148.942330][ T8760] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1811'. [ 148.947786][ T29] audit: type=1326 audit(1769625796.476:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.5.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffb6fcdac22 code=0x7ffc0000 [ 148.990064][ T8762] netlink: 'syz.0.1811': attribute type 29 has an invalid length. [ 149.270156][ T8783] loop9: detected capacity change from 0 to 512 [ 149.452580][ T8793] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.483291][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1825'. [ 149.774761][ T8821] capability: warning: `syz.1.1835' uses deprecated v2 capabilities in a way that may be insecure [ 150.315545][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1842'. [ 150.550306][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1843'. [ 150.631789][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1845'. [ 150.946221][ T8793] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.012191][ T8793] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.082223][ T8793] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.108664][ T8861] all: renamed from bridge_slave_0 (while UP) [ 151.178260][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.202055][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.223193][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.319060][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.472586][ T8874] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1857'. [ 151.531756][ T8877] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1857'. [ 151.605881][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1860'. [ 151.831784][ T8899] loop5: detected capacity change from 0 to 128 [ 151.849557][ T8899] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.912744][ T8899] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.037139][ T8406] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.184135][ T8834] ================================================================== [ 152.192289][ T8834] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 152.199267][ T8834] [ 152.201619][ T8834] read-write to 0xffff88811ae7ac6c of 4 bytes by task 8836 on cpu 0: [ 152.209715][ T8834] fifo_open+0x17f/0x5d0 [ 152.214183][ T8834] do_dentry_open+0x54b/0xa60 [ 152.218922][ T8834] vfs_open+0x37/0x1e0 [ 152.223043][ T8834] path_openat+0x1de9/0x23c0 [ 152.227679][ T8834] do_filp_open+0x15d/0x280 [ 152.232231][ T8834] do_sys_openat2+0xa6/0x150 [ 152.236875][ T8834] __x64_sys_openat+0xf2/0x120 [ 152.241709][ T8834] x64_sys_call+0x2b07/0x3000 [ 152.246435][ T8834] do_syscall_64+0xc0/0x2a0 [ 152.250999][ T8834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.256940][ T8834] [ 152.259299][ T8834] read to 0xffff88811ae7ac6c of 4 bytes by task 8834 on cpu 1: [ 152.266870][ T8834] wait_for_partner+0x117/0x1e0 [ 152.271758][ T8834] fifo_open+0x4b1/0x5d0 [ 152.276036][ T8834] do_dentry_open+0x54b/0xa60 [ 152.280749][ T8834] vfs_open+0x37/0x1e0 [ 152.284859][ T8834] path_openat+0x1de9/0x23c0 [ 152.289499][ T8834] do_filp_open+0x15d/0x280 [ 152.294039][ T8834] do_sys_openat2+0xa6/0x150 [ 152.298666][ T8834] __x64_sys_openat+0xf2/0x120 [ 152.303486][ T8834] x64_sys_call+0x2b07/0x3000 [ 152.308227][ T8834] do_syscall_64+0xc0/0x2a0 [ 152.312769][ T8834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.318697][ T8834] [ 152.321035][ T8834] value changed: 0x00000002 -> 0x00000001 [ 152.326765][ T8834] [ 152.329111][ T8834] Reported by Kernel Concurrency Sanitizer on: [ 152.335290][ T8834] CPU: 1 UID: 0 PID: 8834 Comm: syz.3.1852 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.345042][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.355119][ T8834] ================================================================== [ 159.908233][ T37] batadv1: left promiscuous mode