last executing test programs: 1m58.71569832s ago: executing program 4 (id=221): socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x292ca90c, 0xffffffffffffb2eb}, 0x119b10, 0x1, 0xe, 0x4, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 1m58.432027184s ago: executing program 4 (id=224): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) cachestat(r0, &(0x7f00000001c0)={0x8000000000000000, 0x2000000000000}, &(0x7f0000000200), 0x0) 1m58.346534049s ago: executing program 4 (id=227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r0, 0x1) ppoll(&(0x7f0000000080)=[{r0, 0x9085}], 0x1, 0x0, 0x0, 0x0) 1m58.190371876s ago: executing program 4 (id=228): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2835973810000000000d300e6d60200000000000000000000000100", [0x8]}) pwrite64(r0, &(0x7f0000000180)="77ce", 0x2, 0xf49) 1m57.385398487s ago: executing program 4 (id=239): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@ifindex, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback=r0, r2, 0x2f, 0x2030, 0x4, @void, @void, @value=r3}, 0x20) 1m56.834142094s ago: executing program 4 (id=252): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x218, 0x218, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1m56.791376897s ago: executing program 32 (id=252): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x218, 0x218, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1m42.12559773s ago: executing program 2 (id=437): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0) 1m41.783568947s ago: executing program 2 (id=446): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable', 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 1m40.853516254s ago: executing program 2 (id=459): r0 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x1000, 0x2, 0x2c9}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xaf4, 0x0) close_range(r0, r0, 0x0) 1m37.825410165s ago: executing program 5 (id=486): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) close(r1) 1m37.756720249s ago: executing program 2 (id=487): r0 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 1m37.756448159s ago: executing program 5 (id=488): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) 1m37.467838133s ago: executing program 2 (id=496): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0, 0x8}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r0, 0x0, 0x1000002, 0x37, 0x0, 0x0) 1m37.276100383s ago: executing program 2 (id=499): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r0 = fsopen(&(0x7f0000000140)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 1m37.256926854s ago: executing program 33 (id=499): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r0 = fsopen(&(0x7f0000000140)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 1m36.686111393s ago: executing program 5 (id=505): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(r2) 1m36.191643937s ago: executing program 5 (id=507): r0 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 1m35.907937631s ago: executing program 5 (id=509): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x1ff, 0x2, 0x0, 0x62ba1814, 0xc, 0x0, 0x8001, 0x1, r3}, 0x20) 1m35.540221579s ago: executing program 5 (id=514): socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m35.470067383s ago: executing program 34 (id=514): socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 2.490090995s ago: executing program 3 (id=1903): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x181) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000005000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x2ddf, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x20000a, 0x60}) 2.20560438s ago: executing program 7 (id=1909): r0 = open(&(0x7f0000000000)='./file1\x00', 0x14d1c2, 0xf) close$binfmt(r0) r1 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) close(r1) mq_unlink(&(0x7f0000000000)='eth0\x00') 2.175459632s ago: executing program 7 (id=1911): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x6, 0x0, 0x0, 0x0, 0xb, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x200000000008, 0x5}, 0x7e75, 0x5, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20008000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 2.081143486s ago: executing program 7 (id=1912): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100000000000000000000000000008500000075"], 0x0}, 0x94) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.014757299s ago: executing program 6 (id=1913): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad4301000000000095"], 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x7, 0x0, 0x1000000002, 0x0, 0x6, 0x6}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1.882387086s ago: executing program 1 (id=1915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.60840339s ago: executing program 3 (id=1916): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x7c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x1ff, 0x4, 0x0, 0x2, 0xfffffffd, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x63}, @TCA_NETEM_REORDER={0xc, 0x3, {0x3, 0x2}}, @TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7, 0x3}}]}}}]}, 0x7c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 1.358265632s ago: executing program 1 (id=1917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x200006, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r1) 1.344216043s ago: executing program 3 (id=1918): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb2993000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r2, 0x0, 0x0, 0x8800000) 1.337169953s ago: executing program 0 (id=1919): clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd(0x7) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x40000) clock_settime(0x0, &(0x7f0000009ac0)={r0, r1+10000000}) 1.280419606s ago: executing program 7 (id=1921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 1.210094429s ago: executing program 1 (id=1922): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r0, &(0x7f0000000600)="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", 0xfec) write$char_usb(r0, &(0x7f0000000280)="f1", 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 1.209756959s ago: executing program 1 (id=1923): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r2], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 1.137158263s ago: executing program 6 (id=1924): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r2, 0x1, 0x1) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1.136844023s ago: executing program 7 (id=1925): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0x7dd6, 0x8, 0x0, 0x0) 1.092274996s ago: executing program 6 (id=1926): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@remote]}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) 1.071779756s ago: executing program 7 (id=1927): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000040)='./file0\x00') 911.542074ms ago: executing program 1 (id=1928): syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x7, 0x1) capget(0x0, 0x0) 792.55388ms ago: executing program 6 (id=1929): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x2000) 774.822321ms ago: executing program 6 (id=1930): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x802, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 584.330171ms ago: executing program 6 (id=1931): io_uring_setup(0x3eaf, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_io_uring_setup(0x3b3, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 486.030906ms ago: executing program 0 (id=1932): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x4) 413.32115ms ago: executing program 0 (id=1933): syz_io_uring_setup(0x10c, &(0x7f0000000240)={0x0, 0xffeffffe, 0x3000, 0x3, 0x108}, 0x0, 0x0) syz_io_uring_setup(0x2152, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x8000153}, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 336.285023ms ago: executing program 3 (id=1934): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) epoll_create1(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 295.462455ms ago: executing program 0 (id=1935): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) 145.612053ms ago: executing program 0 (id=1936): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x1, @empty, 0x7}], 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)={0x14, 0x0, 0x731, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x2}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 124.670514ms ago: executing program 3 (id=1937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, 0x0}, 0x94) 45.764408ms ago: executing program 3 (id=1938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 6.84376ms ago: executing program 0 (id=1939): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r4, &(0x7f00000006c0)}, 0x20) 0s ago: executing program 1 (id=1940): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) kernel console output (not intermixed with test programs): start 4284289 is beyond EOD, truncated [ 59.749776][ T5135] loop1: p3 < > p4 < > [ 59.755516][ T5135] loop1: partition table partially beyond EOD, truncated [ 59.763439][ T5135] loop1: p3 start 4284289 is beyond EOD, truncated [ 59.809857][ T4077] udevd[4077]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 60.307153][ T28] audit: type=1400 audit(1773978255.524:381): avc: denied { setopt } for pid=5151 comm="syz.5.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.368863][ T28] audit: type=1400 audit(1773978255.574:382): avc: denied { read } for pid=5153 comm="syz.5.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.463043][ T28] audit: type=1400 audit(1773978255.684:383): avc: denied { read } for pid=5163 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.464659][ T5156] loop2: detected capacity change from 0 to 8192 [ 60.507670][ T5156] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.525288][ T28] audit: type=1400 audit(1773978255.744:384): avc: denied { mounton } for pid=5154 comm="syz.2.487" path="/74/file1/bus" dev="loop2" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 60.538072][ T3823] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.548648][ T5127] Bluetooth: hci0: command 0x1003 tx timeout [ 60.578089][ T28] audit: type=1400 audit(1773978255.754:385): avc: denied { allowed } for pid=5168 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.638881][ T815] IPVS: starting estimator thread 0... [ 60.738094][ T5175] IPVS: using max 2592 ests per chain, 129600 per kthread [ 60.812687][ T3995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.862605][ T3995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.911193][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 60.931252][ T3995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.985386][ T3995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.082414][ T3995] bridge_slave_1: left allmulticast mode [ 61.090771][ T3995] bridge_slave_1: left promiscuous mode [ 61.096557][ T3995] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.106948][ T3995] bridge_slave_0: left allmulticast mode [ 61.115454][ T3995] bridge_slave_0: left promiscuous mode [ 61.122520][ T3995] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.337461][ T5212] loop3: detected capacity change from 0 to 512 [ 61.472385][ T3995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.491296][ T3995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.509802][ T3995] bond0 (unregistering): Released all slaves [ 61.570136][ T3995] hsr_slave_0: left promiscuous mode [ 61.579810][ T3995] hsr_slave_1: left promiscuous mode [ 61.585475][ T3995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.601666][ T3995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.620823][ T3995] veth1_macvtap: left promiscuous mode [ 61.626426][ T3995] veth0_macvtap: left promiscuous mode [ 61.637086][ T3995] veth1_vlan: left promiscuous mode [ 61.648612][ T3995] veth0_vlan: left promiscuous mode [ 61.798764][ T3995] team0 (unregistering): Port device team_slave_1 removed [ 61.821014][ T3995] team0 (unregistering): Port device team_slave_0 removed [ 61.914872][ T5186] chnl_net:caif_netlink_parms(): no params data found [ 61.970138][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.977377][ T5186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.984777][ T5186] bridge_slave_0: entered allmulticast mode [ 61.991358][ T5186] bridge_slave_0: entered promiscuous mode [ 61.998261][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.005418][ T5186] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.014602][ T5186] bridge_slave_1: entered allmulticast mode [ 62.025588][ T5186] bridge_slave_1: entered promiscuous mode [ 62.030702][ T5225] loop5: detected capacity change from 0 to 8192 [ 62.068958][ T5225] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.080558][ T5186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.121248][ T5186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.181517][ T5186] team0: Port device team_slave_0 added [ 62.204410][ T5186] team0: Port device team_slave_1 added [ 62.246906][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.255122][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.307525][ T5186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.312642][ T5246] loop3: detected capacity change from 0 to 1024 [ 62.325800][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.334514][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.338641][ T5246] EXT4-fs: Ignoring removed nobh option [ 62.386252][ T5246] EXT4-fs: Ignoring removed bh option [ 62.391834][ T5186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.426620][ T5246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.452355][ T5186] hsr_slave_0: entered promiscuous mode [ 62.458701][ T5186] hsr_slave_1: entered promiscuous mode [ 62.469214][ T5259] process 'syz.0.513' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 62.474317][ T5186] debugfs: 'hsr0' already exists in 'hsr' [ 62.479331][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 62.479346][ T28] audit: type=1400 audit(1773978257.694:391): avc: denied { execute } for pid=5258 comm="syz.0.513" name="file1" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.484793][ T5186] Cannot create hsr debugfs directory [ 62.538526][ T28] audit: type=1400 audit(1773978257.704:392): avc: denied { execute_no_trans } for pid=5258 comm="syz.0.513" path="/98/file1" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.590501][ T5262] loop0: detected capacity change from 0 to 128 [ 62.608282][ T3995] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.642258][ T28] audit: type=1400 audit(1773978257.804:393): avc: denied { create } for pid=5261 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.679640][ T5246] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 62.698067][ T28] audit: type=1400 audit(1773978257.804:394): avc: denied { setopt } for pid=5261 comm="syz.0.515" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.731417][ T28] audit: type=1400 audit(1773978257.824:395): avc: denied { add_name } for pid=5245 comm="syz.3.511" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.792337][ T3995] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.797789][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.875811][ T3995] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.940359][ T28] audit: type=1400 audit(1773978258.154:396): avc: denied { block_suspend } for pid=5288 comm="syz.3.520" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.971284][ T3995] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.036031][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 63.045002][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 63.058148][ T5186] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 63.079434][ T5186] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 63.107074][ T5186] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 63.135737][ T5186] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 63.219223][ T3995] bridge_slave_1: left allmulticast mode [ 63.235017][ T3995] bridge_slave_1: left promiscuous mode [ 63.241882][ T3995] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.260198][ T3995] bridge_slave_0: left allmulticast mode [ 63.265945][ T3995] bridge_slave_0: left promiscuous mode [ 63.283708][ T3995] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.391280][ T3995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.401387][ T3995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.419172][ T3995] bond0 (unregistering): Released all slaves [ 63.474635][ T3995] hsr_slave_0: left promiscuous mode [ 63.481103][ T3995] hsr_slave_1: left promiscuous mode [ 63.486747][ T3995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.508014][ T3995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.515698][ T3995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.528052][ T3995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.541873][ T3995] veth1_macvtap: left promiscuous mode [ 63.547367][ T3995] veth0_macvtap: left promiscuous mode [ 63.563185][ T3995] veth1_vlan: left promiscuous mode [ 63.568575][ T3995] veth0_vlan: left promiscuous mode [ 63.661903][ T28] audit: type=1400 audit(1773978258.884:397): avc: denied { create } for pid=5301 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.681958][ T3995] team0 (unregistering): Port device team_slave_1 removed [ 63.708608][ T3995] team0 (unregistering): Port device team_slave_0 removed [ 63.762259][ T5186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.792294][ T5186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.806219][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.813383][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.828429][ T28] audit: type=1400 audit(1773978259.024:398): avc: denied { setopt } for pid=5301 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.892440][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.899613][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.155439][ T5186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.176137][ T5186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.250460][ T5275] chnl_net:caif_netlink_parms(): no params data found [ 64.344490][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.352676][ T5275] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.359968][ T5275] bridge_slave_0: entered allmulticast mode [ 64.366607][ T5275] bridge_slave_0: entered promiscuous mode [ 64.373600][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.382157][ T5275] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.390866][ T5275] bridge_slave_1: entered allmulticast mode [ 64.397553][ T5275] bridge_slave_1: entered promiscuous mode [ 64.428895][ T5275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.444462][ T5275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.487912][ T5340] netlink: 44 bytes leftover after parsing attributes in process `syz.3.527'. [ 64.502576][ T5340] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 64.535624][ T5186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.556485][ T5275] team0: Port device team_slave_0 added [ 64.569614][ T5275] team0: Port device team_slave_1 added [ 64.639041][ T5275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.655078][ T5275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.681869][ T5275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.693578][ T5275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.700937][ T5275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.748394][ T5275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.864263][ T28] audit: type=1400 audit(1773978260.084:399): avc: denied { setopt } for pid=5366 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.970263][ T28] audit: type=1400 audit(1773978260.194:400): avc: denied { bind } for pid=5394 comm="syz.3.536" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.659016][ T5275] hsr_slave_0: entered promiscuous mode [ 65.669649][ T5275] hsr_slave_1: entered promiscuous mode [ 65.680320][ T5275] debugfs: 'hsr0' already exists in 'hsr' [ 65.687783][ T5275] Cannot create hsr debugfs directory [ 65.785677][ T10] hid-generic 0000:0003:0001.0001: unknown main item tag 0x0 [ 65.810195][ T10] hid-generic 0000:0003:0001.0001: unknown main item tag 0x0 [ 65.812872][ T5186] veth0_vlan: entered promiscuous mode [ 65.843508][ T10] hid-generic 0000:0003:0001.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 65.844973][ T5186] veth1_vlan: entered promiscuous mode [ 65.909293][ T5186] veth0_macvtap: entered promiscuous mode [ 65.928607][ T5186] veth1_macvtap: entered promiscuous mode [ 65.953139][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.968966][ T5275] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 65.988606][ T5275] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 66.017213][ T5275] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 66.040640][ T5275] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 66.069743][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.115540][ T3873] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.144764][ T3873] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.170659][ T3873] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.188111][ T3873] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.261105][ T5447] loop3: detected capacity change from 0 to 512 [ 66.347495][ T5447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.391445][ T5275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.398224][ T5447] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.412932][ T5447] EXT4-fs (loop3): shut down requested (2) [ 66.449120][ T5275] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.471853][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.511566][ T4002] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.518687][ T4002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.582489][ T4002] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.589722][ T4002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.625301][ T5275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.777674][ T5275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.938332][ T5510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 67.114121][ T5275] veth0_vlan: entered promiscuous mode [ 67.150868][ T5275] veth1_vlan: entered promiscuous mode [ 67.212389][ T5275] veth0_macvtap: entered promiscuous mode [ 67.234919][ T5275] veth1_macvtap: entered promiscuous mode [ 67.256179][ T5275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.280054][ T5275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.365726][ T4002] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.389537][ T4002] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.411831][ T4002] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.468619][ T4002] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.528595][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 67.528612][ T28] audit: type=1400 audit(1773978262.754:420): avc: denied { mount } for pid=5275 comm="syz-executor" name="/" dev="gadgetfs" ino=4667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.796736][ T5573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 68.186025][ T28] audit: type=1400 audit(1773978263.404:421): avc: denied { ioctl } for pid=5610 comm="syz.7.580" path="socket:[10829]" dev="sockfs" ino=10829 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.330366][ T5623] loop7: detected capacity change from 0 to 1024 [ 68.432899][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.7.586'. [ 68.632208][ T28] audit: type=1400 audit(1773978263.844:422): avc: denied { watch watch_reads } for pid=5669 comm="syz.3.588" path="/130/file0" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.769674][ T5681] loop3: detected capacity change from 0 to 4096 [ 68.787786][ T5681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.830498][ T28] audit: type=1400 audit(1773978264.054:423): avc: denied { write } for pid=5680 comm="syz.3.591" name="file3" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 68.901323][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.931130][ T28] audit: type=1400 audit(1773978264.074:424): avc: denied { remove_name } for pid=5680 comm="syz.3.591" name="file3" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.958514][ T5688] loop7: detected capacity change from 0 to 256 [ 68.999992][ T28] audit: type=1400 audit(1773978264.074:425): avc: denied { setattr } for pid=5680 comm="syz.3.591" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.098647][ T5692] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 69.114607][ T5692] netlink: 64475 bytes leftover after parsing attributes in process `syz.0.596'. [ 69.780972][ T28] audit: type=1400 audit(1773978264.994:426): avc: denied { module_load } for pid=5714 comm="syz.1.605" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=14923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 69.878412][ T5715] Invalid ELF header magic: != ELF [ 69.970824][ T5719] loop1: detected capacity change from 0 to 2048 [ 69.990195][ T5719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.003015][ T5719] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.014913][ T28] audit: type=1400 audit(1773978265.244:427): avc: denied { read write } for pid=5718 comm="syz.1.607" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.037499][ T28] audit: type=1400 audit(1773978265.244:428): avc: denied { open } for pid=5718 comm="syz.1.607" path="/146/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.077228][ T5722] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.607: bg 0: block 345: padding at end of block bitmap is not set [ 70.113121][ T5722] EXT4-fs (loop1): Remounting filesystem read-only [ 70.131123][ T4875] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 70.134949][ T5719] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #15: comm syz.1.607: ES cache extent failed: add [0,16,112,0x1] conflict with existing [1,15,113,0x12] [ 70.134949][ T5719] [ 70.275202][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.038180][ T28] audit: type=1400 audit(1773978266.254:429): avc: denied { shutdown } for pid=5755 comm="syz.1.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.269800][ T5767] syzkaller0: entered promiscuous mode [ 71.290189][ T5767] syzkaller0: entered allmulticast mode [ 71.992588][ T5799] sg_write: data in/out 4915180/120 bytes for SCSI command 0x0-- guessing data in; [ 71.992588][ T5799] program syz.3.635 not setting count and/or reply_len properly [ 73.125337][ T5818] loop0: detected capacity change from 0 to 128 [ 73.232239][ T5818] syz.0.641: attempt to access beyond end of device [ 73.232239][ T5818] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 73.241363][ T5820] loop7: detected capacity change from 0 to 4096 [ 73.247334][ T5818] syz.0.641: attempt to access beyond end of device [ 73.247334][ T5818] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 73.269732][ T5818] syz.0.641: attempt to access beyond end of device [ 73.269732][ T5818] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 73.283557][ T5818] syz.0.641: attempt to access beyond end of device [ 73.283557][ T5818] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 73.305452][ T5820] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.324712][ T5818] syz.0.641: attempt to access beyond end of device [ 73.324712][ T5818] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 73.378195][ T5818] syz.0.641: attempt to access beyond end of device [ 73.378195][ T5818] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 73.392657][ T5818] syz.0.641: attempt to access beyond end of device [ 73.392657][ T5818] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 73.406502][ T5818] syz.0.641: attempt to access beyond end of device [ 73.406502][ T5818] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 73.420205][ T5818] syz.0.641: attempt to access beyond end of device [ 73.420205][ T5818] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 73.435096][ T5275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.435980][ T5818] syz.0.641: attempt to access beyond end of device [ 73.435980][ T5818] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 73.537053][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 73.537070][ T28] audit: type=1400 audit(1773978268.754:433): avc: denied { remount } for pid=5832 comm="syz.7.645" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.644621][ T28] audit: type=1400 audit(1773978268.864:434): avc: denied { read } for pid=5847 comm="syz.0.650" path="socket:[15241]" dev="sockfs" ino=15241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 73.670578][ T5846] loop6: detected capacity change from 0 to 1024 [ 73.705145][ T5846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.778354][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 74.079154][ T5186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.134146][ T28] audit: type=1400 audit(1773978269.354:435): avc: denied { cmd } for pid=5858 comm="syz.0.656" path="socket:[15268]" dev="sockfs" ino=15268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.396129][ T5876] loop3: detected capacity change from 0 to 512 [ 74.431112][ T5876] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.452120][ T5876] EXT4-fs (loop3): 1 truncate cleaned up [ 74.628609][ T5876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.667719][ T28] audit: type=1400 audit(1773978269.874:436): avc: denied { setattr } for pid=5875 comm="syz.3.664" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.794644][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 74.795054][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.844883][ T28] audit: type=1400 audit(1773978270.064:437): avc: denied { unmount } for pid=5884 comm="syz.6.669" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.945880][ T28] audit: type=1400 audit(1773978270.164:438): avc: denied { append } for pid=5897 comm="syz.0.675" name="rt_cache" dev="proc" ino=4026532698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 74.994085][ T28] audit: type=1400 audit(1773978270.164:439): avc: denied { setopt } for pid=5896 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.248049][ T28] audit: type=1400 audit(1773978270.454:440): avc: denied { read } for pid=5921 comm="syz.1.684" path="socket:[16505]" dev="sockfs" ino=16505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.456001][ T5928] loop1: detected capacity change from 0 to 128 [ 75.634430][ T5929] loop3: detected capacity change from 0 to 128 [ 75.951508][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.7.688'. [ 76.010352][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.053740][ T28] audit: type=1400 audit(1773978271.274:441): avc: denied { read } for pid=5938 comm="syz.7.692" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.191787][ T28] audit: type=1400 audit(1773978271.274:442): avc: denied { open } for pid=5938 comm="syz.7.692" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.254821][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.288231][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.364593][ T5952] loop7: detected capacity change from 0 to 2048 [ 76.394027][ T5952] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.408123][ T5952] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.548179][ T5965] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.695: bg 0: block 345: padding at end of block bitmap is not set [ 76.572710][ T5965] EXT4-fs (loop7): Remounting filesystem read-only [ 76.597201][ T50] EXT4-fs warning (device loop7): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 76.869706][ T5275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.008701][ T6009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.139345][ T6028] loop0: detected capacity change from 0 to 1024 [ 77.156141][ T6028] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 77.167173][ T6028] System zones: 0-1, 3-36 [ 77.192167][ T6028] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.707: bad orphan inode 134217728 [ 77.229090][ T6028] loop0: lost filesystem error report for type 5 error -117 [ 77.231279][ T6028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.334901][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.293547][ T6083] netlink: 'syz.0.723': attribute type 4 has an invalid length. [ 78.565208][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 78.565225][ T28] audit: type=1400 audit(1773978273.784:446): avc: denied { name_bind } for pid=6099 comm="syz.1.728" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 78.827054][ T28] audit: type=1400 audit(1773978274.044:447): avc: denied { watch watch_reads } for pid=6128 comm="syz.6.732" path="/30" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.949250][ T815] IPVS: starting estimator thread 0... [ 78.955644][ T6150] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 78.984388][ T28] audit: type=1400 audit(1773978274.204:448): avc: denied { map } for pid=6155 comm="syz.6.737" path="socket:[18713]" dev="sockfs" ino=18713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 79.018294][ T5127] Bluetooth: hci0: command 0x1003 tx timeout [ 79.018351][ T3823] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.038222][ T6151] IPVS: using max 2400 ests per chain, 120000 per kthread [ 79.192364][ T6183] loop0: detected capacity change from 0 to 2048 [ 79.235855][ T6183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.249160][ T28] audit: type=1400 audit(1773978274.454:449): avc: denied { create } for pid=6186 comm="syz.7.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.253842][ T6183] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.283496][ T28] audit: type=1400 audit(1773978274.494:450): avc: denied { read } for pid=6186 comm="syz.7.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.325315][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.7.742'. [ 79.334264][ T28] audit: type=1400 audit(1773978274.544:451): avc: denied { write } for pid=6186 comm="syz.7.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.428995][ T6195] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.739: bg 0: block 345: padding at end of block bitmap is not set [ 79.443355][ T6191] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 79.456035][ T6195] EXT4-fs (loop0): Remounting filesystem read-only [ 79.465861][ T560] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 79.601465][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.746'. [ 79.663148][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.764617][ T28] audit: type=1400 audit(1773978274.984:452): avc: denied { read } for pid=6215 comm="syz.6.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.828112][ T28] audit: type=1400 audit(1773978275.044:453): avc: denied { audit_read } for pid=6217 comm="syz.0.752" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.903178][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.765'. [ 80.043284][ T6241] loop3: detected capacity change from 0 to 2048 [ 80.069978][ T6241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.098183][ T6241] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.200215][ T6248] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.760: bg 0: block 345: padding at end of block bitmap is not set [ 80.215066][ T6248] EXT4-fs (loop3): Remounting filesystem read-only [ 80.221987][ T4879] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 80.361493][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.624536][ T28] audit: type=1400 audit(1773978275.844:454): avc: denied { accept } for pid=6258 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.808024][ T6260] loop0: detected capacity change from 0 to 512 [ 80.861790][ T6260] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 80.906830][ T6260] EXT4-fs (loop0): 1 truncate cleaned up [ 80.960342][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'. [ 80.974229][ T6260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.095312][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.132707][ T28] audit: type=1400 audit(1773978276.354:455): avc: denied { create } for pid=6279 comm="syz.0.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.987058][ T6313] loop3: detected capacity change from 0 to 8192 [ 81.999008][ T6313] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.014021][ T6313] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.023096][ T6313] FAT-fs (loop3): Filesystem has been set read-only [ 82.030027][ T6313] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.054173][ T6313] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.071178][ T6313] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.081192][ T6313] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.090306][ T6313] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.109211][ T6313] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.118376][ T6313] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.127314][ T6313] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.138848][ T6313] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.267064][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.7.794'. [ 82.298442][ T6330] bridge_slave_1: left allmulticast mode [ 82.304127][ T6330] bridge_slave_1: left promiscuous mode [ 82.318133][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.355959][ T6330] bridge_slave_0: left allmulticast mode [ 82.393517][ T6330] bridge_slave_0: left promiscuous mode [ 82.420915][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.491514][ T6338] netlink: 'syz.6.798': attribute type 1 has an invalid length. [ 82.534230][ T6338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.619046][ T6338] bond1: (slave veth3): Enslaving as an active interface with a down link [ 82.641180][ T6349] netlink: 24 bytes leftover after parsing attributes in process `syz.7.802'. [ 82.690169][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 82.698380][ T6354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.804'. [ 82.708679][ T6338] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 82.980594][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 82.992238][ T6364] loop1: detected capacity change from 0 to 256 [ 82.999840][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.080041][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 83.089285][ T6375] bridge_slave_1: left allmulticast mode [ 83.100468][ T6375] bridge_slave_1: left promiscuous mode [ 83.106467][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.117524][ T6375] bridge_slave_0: left allmulticast mode [ 83.123397][ T6375] bridge_slave_0: left promiscuous mode [ 83.129321][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.349192][ T6394] loop1: detected capacity change from 0 to 256 [ 83.394105][ T6394] FAT-fs (loop1): codepage cp863 not found [ 83.410838][ T6397] loop3: detected capacity change from 0 to 128 [ 83.534053][ T6397] bio_check_eod: 12087 callbacks suppressed [ 83.534071][ T6397] syz.3.822: attempt to access beyond end of device [ 83.534071][ T6397] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 83.535532][ T6403] gre1: entered allmulticast mode [ 83.558391][ T6397] syz.3.822: attempt to access beyond end of device [ 83.558391][ T6397] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 83.596572][ T6397] syz.3.822: attempt to access beyond end of device [ 83.596572][ T6397] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 83.688081][ T6397] syz.3.822: attempt to access beyond end of device [ 83.688081][ T6397] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 83.735461][ T6397] syz.3.822: attempt to access beyond end of device [ 83.735461][ T6397] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 83.749343][ T6397] syz.3.822: attempt to access beyond end of device [ 83.749343][ T6397] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 83.749618][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 83.749632][ T28] audit: type=1400 audit(1773978278.954:467): avc: denied { bind } for pid=6406 comm="syz.0.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.762940][ T6397] syz.3.822: attempt to access beyond end of device [ 83.762940][ T6397] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 83.801966][ T6397] syz.3.822: attempt to access beyond end of device [ 83.801966][ T6397] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 83.815549][ T6397] syz.3.822: attempt to access beyond end of device [ 83.815549][ T6397] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 83.866122][ T6397] syz.3.822: attempt to access beyond end of device [ 83.866122][ T6397] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 83.909508][ T28] audit: type=1400 audit(1773978279.084:468): avc: denied { read } for pid=6418 comm="syz.0.829" path="socket:[18185]" dev="sockfs" ino=18185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.016638][ T28] audit: type=1400 audit(1773978279.164:469): avc: denied { read } for pid=6425 comm="syz.1.832" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.098023][ T28] audit: type=1400 audit(1773978279.224:470): avc: denied { setopt } for pid=6430 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 84.110347][ T6438] sctp: [Deprecated]: syz.0.836 (pid 6438) Use of int in max_burst socket option deprecated. [ 84.110347][ T6438] Use struct sctp_assoc_value instead [ 84.170359][ T28] audit: type=1400 audit(1773978279.394:471): avc: denied { append } for pid=6446 comm="syz.3.838" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.239861][ T6453] tipc: Failed to remove unknown binding: 66,1,1/0:1819047300/1819047302 [ 84.378069][ T28] audit: type=1400 audit(1773978279.584:472): avc: denied { name_connect } for pid=6473 comm="syz.7.846" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 84.424722][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.7.847'. [ 84.435104][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.7.847'. [ 85.020742][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.6.856'. [ 85.135018][ T6551] loop1: detected capacity change from 0 to 8192 [ 85.153473][ T6551] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.258931][ T6574] netlink: 'syz.3.861': attribute type 5 has an invalid length. [ 85.266671][ T6574] netlink: 1132 bytes leftover after parsing attributes in process `syz.3.861'. [ 85.318133][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.861'. [ 85.674462][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 85.683987][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 85.735770][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 86.196367][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 86.521363][ T28] audit: type=1326 audit(1773978281.744:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.0.879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x0 [ 86.706095][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.885'. [ 86.718904][ T6712] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 86.729084][ T6712] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 86.940432][ T6719] loop3: detected capacity change from 0 to 128 [ 87.029170][ T6719] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.079616][ T6719] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.188597][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.463436][ T6733] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 87.981083][ T6770] loop7: detected capacity change from 0 to 128 [ 88.237723][ T6786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.372431][ T6796] gre2: entered allmulticast mode [ 88.551435][ T6770] bio_check_eod: 1866 callbacks suppressed [ 88.551456][ T6770] syz.7.897: attempt to access beyond end of device [ 88.551456][ T6770] loop7: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 88.574557][ T6770] syz.7.897: attempt to access beyond end of device [ 88.574557][ T6770] loop7: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 88.588570][ T6770] syz.7.897: attempt to access beyond end of device [ 88.588570][ T6770] loop7: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 88.602517][ T6770] syz.7.897: attempt to access beyond end of device [ 88.602517][ T6770] loop7: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 88.616781][ T6770] syz.7.897: attempt to access beyond end of device [ 88.616781][ T6770] loop7: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 88.637496][ T6770] syz.7.897: attempt to access beyond end of device [ 88.637496][ T6770] loop7: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 88.677534][ T6770] syz.7.897: attempt to access beyond end of device [ 88.677534][ T6770] loop7: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 88.692054][ T6770] syz.7.897: attempt to access beyond end of device [ 88.692054][ T6770] loop7: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 88.748049][ T28] audit: type=1400 audit(1773978283.954:474): avc: denied { accept } for pid=6835 comm="syz.1.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.797929][ T6770] syz.7.897: attempt to access beyond end of device [ 88.797929][ T6770] loop7: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 88.838224][ T6770] syz.7.897: attempt to access beyond end of device [ 88.838224][ T6770] loop7: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 88.855222][ T6838] loop3: detected capacity change from 0 to 512 [ 88.893678][ T6838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.936305][ T28] audit: type=1400 audit(1773978284.154:475): avc: denied { watch watch_reads } for pid=6845 comm="syz.0.911" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 88.969586][ T6838] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.011128][ T6838] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.909: corrupted xattr block 33: e_value size too large [ 89.055088][ T6838] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 89.078434][ T6838] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.909: corrupted xattr block 33: e_value size too large [ 89.119346][ T6838] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 89.133159][ T6838] EXT4-fs error (device loop3): ext4_xattr_block_list:766: inode #15: comm syz.3.909: corrupted xattr block 33: e_value size too large [ 89.208035][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.217198][ T6866] xt_hashlimit: size too large, truncated to 1048576 [ 89.477814][ T28] audit: type=1400 audit(1773978284.694:476): avc: denied { create } for pid=6884 comm="syz.1.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.561925][ T6889] loop7: detected capacity change from 0 to 128 [ 89.577010][ T28] audit: type=1400 audit(1773978284.794:477): avc: denied { open } for pid=6890 comm="syz.6.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.631053][ T28] audit: type=1400 audit(1773978284.794:478): avc: denied { kernel } for pid=6890 comm="syz.6.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.720408][ T28] audit: type=1400 audit(1773978284.794:479): avc: denied { write } for pid=6890 comm="syz.6.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.782253][ T6894] loop3: detected capacity change from 0 to 512 [ 89.788852][ T28] audit: type=1400 audit(1773978285.004:480): avc: denied { cpu } for pid=6893 comm="syz.3.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.811765][ T6894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.834664][ T6894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.005630][ T6894] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.064134][ T6899] ipip1: entered promiscuous mode [ 90.107658][ T6899] ipip1: entered allmulticast mode [ 90.216532][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.265427][ T28] audit: type=1400 audit(1773978285.474:481): avc: denied { tracepoint } for pid=6906 comm="syz.3.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 90.292083][ T28] audit: type=1400 audit(1773978285.484:482): avc: denied { read } for pid=6908 comm="syz.0.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 90.394460][ T28] audit: type=1400 audit(1773978285.614:483): avc: denied { create } for pid=6919 comm="syz.6.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.444383][ T28] audit: type=1400 audit(1773978285.614:484): avc: denied { write } for pid=6919 comm="syz.6.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.095716][ T6986] loop0: detected capacity change from 0 to 128 [ 91.919846][ T7046] loop0: detected capacity change from 0 to 128 [ 92.368766][ T7059] loop7: detected capacity change from 0 to 512 [ 92.404457][ T7059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.437950][ T7059] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.479971][ T6885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.684876][ T5275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.762867][ T7070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7070 comm=syz.7.967 [ 92.807180][ T7070] netlink: 'syz.7.967': attribute type 2 has an invalid length. [ 92.828062][ T7070] __nla_validate_parse: 1 callbacks suppressed [ 92.828082][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.967'. [ 92.961508][ T7090] netlink: 'syz.0.978': attribute type 1 has an invalid length. [ 92.983917][ T7090] netlink: 'syz.0.978': attribute type 4 has an invalid length. [ 93.017238][ T7090] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.978'. [ 93.163922][ T7100] netlink: 'syz.6.981': attribute type 10 has an invalid length. [ 93.202512][ T7100] netlink: 55 bytes leftover after parsing attributes in process `syz.6.981'. [ 93.732714][ T7102] loop1: detected capacity change from 0 to 1024 [ 93.782263][ T7102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.862854][ T7113] netlink: 'syz.6.985': attribute type 13 has an invalid length. [ 93.868778][ T7102] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.992: Allocating blocks 385-513 which overlap fs metadata [ 93.885022][ T7113] gretap0: refused to change device tx_queue_len [ 93.898473][ T7113] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 93.932206][ T7102] EXT4-fs (loop1): pa ffff8881079e0380: logic 16, phys. 129, len 24 [ 93.940349][ T7102] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 7 [ 93.999795][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.012069][ T7098] --map-set only usable from mangle table [ 94.259109][ T7127] loop0: detected capacity change from 0 to 256 [ 94.592646][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 94.592665][ T28] audit: type=1400 audit(1773978289.814:488): avc: denied { ioctl } for pid=7133 comm="syz.1.994" path="socket:[22429]" dev="sockfs" ino=22429 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.658673][ T7137] syzkaller1: entered promiscuous mode [ 94.670762][ T7137] syzkaller1: entered allmulticast mode [ 94.803133][ T28] audit: type=1400 audit(1773978290.024:489): avc: denied { sys_module } for pid=7138 comm="syz.0.996" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.722324][ T28] audit: type=1400 audit(1773978292.934:490): avc: denied { setopt } for pid=7163 comm="syz.1.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.759948][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1004'. [ 97.780380][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1007'. [ 97.808781][ T7169] loop1: detected capacity change from 0 to 512 [ 97.900932][ T7169] EXT4-fs: Ignoring removed nobh option [ 97.903777][ T7148] loop3: detected capacity change from 0 to 512 [ 97.933600][ T7169] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.979521][ T7169] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.997677][ T7169] EXT4-fs (loop1): 1 truncate cleaned up [ 98.012791][ T7169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.103102][ T7148] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 98.103795][ T7169] Invalid option length (255) for dns_resolver key [ 98.294270][ T7148] EXT4-fs (loop3): 1 truncate cleaned up [ 98.341699][ T7148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.462983][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.473975][ T7178] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.479571][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.497796][ T7178] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.578136][ T28] audit: type=1400 audit(1773978293.804:491): avc: denied { setopt } for pid=7188 comm="syz.1.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.599053][ T7190] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1016'. [ 98.626084][ T7178] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.627121][ T7191] netlink: 'syz.6.1017': attribute type 2 has an invalid length. [ 98.636596][ T7178] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.723281][ T7178] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.738059][ T7178] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.769412][ T7202] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1021'. [ 98.829217][ T7178] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.868104][ T7178] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.994487][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.028011][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.043707][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.066961][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.082207][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.090985][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.104535][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.113328][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.363504][ T7232] netlink: 'syz.1.1033': attribute type 10 has an invalid length. [ 99.372538][ T7232] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1033'. [ 99.852899][ T3408] kernel read not supported for file /syz1 (pid: 3408 comm: kworker/1:4) [ 99.981744][ T28] audit: type=1326 audit(1773978295.204:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7fc00000 [ 100.224776][ T7262] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 100.275983][ T7266] loop0: detected capacity change from 0 to 512 [ 100.389953][ T7266] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.749377][ T7266] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 100.769627][ T7266] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1047: bg 0: block 248: padding at end of block bitmap is not set [ 100.799739][ T7266] loop0: lost filesystem error report for type 5 error -117 [ 100.800017][ T7266] Quota error (device loop0): write_blk: dquota write failed [ 100.814870][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 100.814888][ C1] EXT4-fs (loop0): last error at time 1773978296: ext4_validate_block_bitmap:441 [ 100.838052][ T7266] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 100.848113][ T7266] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1047: Failed to acquire dquot type 1 [ 100.860159][ T7266] loop0: lost filesystem error report for type 5 error -117 [ 100.860763][ T7266] EXT4-fs (loop0): 1 truncate cleaned up [ 100.876884][ T7266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 101.258840][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 101.503099][ T7293] loop3: detected capacity change from 0 to 256 [ 101.710680][ T7308] loop1: detected capacity change from 0 to 1024 [ 101.723722][ T7308] EXT4-fs: Ignoring removed nobh option [ 101.769776][ T7308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.089531][ T7323] netlink: 'syz.0.1069': attribute type 10 has an invalid length. [ 102.097533][ T7323] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1069'. [ 102.199804][ T28] audit: type=1400 audit(1773978297.354:493): avc: denied { write } for pid=7324 comm="syz.6.1070" name="/" dev="configfs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.651704][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.215842][ T28] audit: type=1400 audit(1773978298.434:494): avc: denied { getopt } for pid=7352 comm="syz.7.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.540287][ T7367] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 103.557934][ T7367] batman_adv: batadv0: Adding interface: ip6gretap1 [ 103.565348][ T7367] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.591452][ T7367] batman_adv: batadv0: Interface activated: ip6gretap1 [ 103.888251][ T7375] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1089'. [ 104.080567][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1092'. [ 104.552693][ T7402] netlink: 'syz.3.1101': attribute type 10 has an invalid length. [ 104.566290][ T7402] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1101'. [ 104.641654][ T7409] loop1: detected capacity change from 0 to 512 [ 104.657942][ T7409] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.702706][ T7409] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 104.717569][ T7409] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1102: bg 0: block 248: padding at end of block bitmap is not set [ 104.732356][ T7409] loop1: lost filesystem error report for type 5 error -117 [ 104.732570][ T7409] Quota error (device loop1): write_blk: dquota write failed [ 104.740003][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 104.740023][ C0] EXT4-fs (loop1): last error at time 1773978299: ext4_validate_block_bitmap:441 [ 104.763348][ T7409] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 104.773325][ T7409] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1102: Failed to acquire dquot type 1 [ 104.784767][ T7409] loop1: lost filesystem error report for type 5 error -117 [ 104.785484][ T7409] EXT4-fs (loop1): 1 truncate cleaned up [ 104.799005][ T7409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 104.898773][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 105.039383][ T7425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1107'. [ 105.058370][ T7425] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1107'. [ 105.070116][ T7425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1107'. [ 105.148134][ T7425] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1107'. [ 105.321710][ T28] audit: type=1400 audit(1773978300.544:495): avc: denied { connect } for pid=7437 comm="syz.6.1113" lport=48233 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 105.358078][ T28] audit: type=1400 audit(1773978300.544:496): avc: denied { name_connect } for pid=7437 comm="syz.6.1113" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 105.504842][ T7450] netlink: 'syz.7.1117': attribute type 10 has an invalid length. [ 105.524826][ T7450] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1117'. [ 106.112198][ T3396] IPVS: starting estimator thread 0... [ 106.208174][ T7462] IPVS: using max 2592 ests per chain, 129600 per kthread [ 106.690928][ T7486] loop3: detected capacity change from 0 to 512 [ 106.730389][ T7490] loop1: detected capacity change from 0 to 512 [ 106.754657][ T7486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.774949][ T7486] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.793675][ T7490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.844941][ T7486] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1132: corrupted xattr block 33: invalid checksum [ 106.848337][ T7490] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.870367][ T7488] loop7: detected capacity change from 0 to 256 [ 106.894569][ T28] audit: type=1400 audit(1773978302.114:497): avc: denied { create } for pid=7489 comm="syz.1.1133" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 106.936558][ T28] audit: type=1400 audit(1773978302.114:498): avc: denied { rmdir } for pid=7489 comm="syz.1.1133" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 106.936643][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1134'. [ 107.001588][ T7486] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 107.031588][ T7486] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1132: corrupted xattr block 33: invalid checksum [ 107.046105][ T7502] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1132: corrupted xattr block 33: invalid checksum [ 107.051903][ T7503] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1132: corrupted xattr block 33: invalid checksum [ 107.099367][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.101565][ T7486] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 107.123037][ T7503] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 107.147444][ T7502] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 107.176853][ T7486] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1132: corrupted xattr block 33: invalid checksum [ 107.190532][ T28] audit: type=1400 audit(1773978302.394:499): avc: denied { append } for pid=7483 comm="syz.3.1132" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.316856][ T7503] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1132: corrupted xattr block 33: invalid checksum [ 107.330347][ T28] audit: type=1400 audit(1773978302.534:500): avc: denied { read write } for pid=7483 comm="syz.3.1132" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.360293][ T7502] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1132: corrupted xattr block 33: invalid checksum [ 107.367640][ T7486] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 107.374285][ T7502] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1132: corrupted xattr block 33: invalid checksum [ 107.440486][ T7502] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 107.450132][ T28] audit: type=1400 audit(1773978302.674:501): avc: denied { open } for pid=7483 comm="syz.3.1132" path="/237/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.473427][ T7503] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 107.500307][ T7509] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:105: comm syz.3.1132: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 107.505841][ T28] audit: type=1400 audit(1773978302.724:502): avc: denied { append } for pid=7519 comm="syz.7.1145" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 107.685502][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.851918][ T7511] loop1: detected capacity change from 0 to 512 [ 107.917503][ T7511] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 107.973026][ T7511] EXT4-fs (loop1): 1 truncate cleaned up [ 108.009766][ T7511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.151662][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.186542][ T7543] netlink: 'syz.1.1154': attribute type 4 has an invalid length. [ 108.212216][ T7543] netlink: 'syz.1.1154': attribute type 4 has an invalid length. [ 108.297150][ T28] audit: type=1326 audit(1773978303.514:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7fc00000 [ 108.348793][ T28] audit: type=1326 audit(1773978303.514:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7bc0dac799 code=0x7fc00000 [ 108.383935][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1156'. [ 108.429416][ T7553] sctp: [Deprecated]: syz.7.1158 (pid 7553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.429416][ T7553] Use struct sctp_sack_info instead [ 108.516070][ T7563] loop1: detected capacity change from 0 to 512 [ 108.577424][ T7563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.628168][ T7563] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.664726][ T7563] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1162: corrupted xattr block 33: invalid checksum [ 108.679089][ T7563] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 108.688374][ T7563] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1162: corrupted xattr block 33: invalid checksum [ 108.706056][ T7563] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 108.715451][ T7574] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1162: corrupted xattr block 33: invalid checksum [ 108.738940][ T7563] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1162: corrupted xattr block 33: invalid checksum [ 108.752706][ T7574] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 108.778348][ T7574] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1162: corrupted xattr block 33: invalid checksum [ 108.805939][ T7563] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 108.819165][ T7574] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1162: corrupted xattr block 33: invalid checksum [ 108.837297][ T7575] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1162: corrupted xattr block 33: invalid checksum [ 108.850302][ T7563] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:105: comm syz.1.1162: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 108.866765][ T7574] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 108.884972][ T7575] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 108.970119][ T7575] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1162: corrupted xattr block 33: invalid checksum [ 109.078052][ T7575] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 109.153597][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.281370][ T7589] loop1: detected capacity change from 0 to 1024 [ 109.327788][ T7589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.354826][ T7589] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 109.446238][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.614701][ T7599] __nla_validate_parse: 2 callbacks suppressed [ 109.614721][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1176'. [ 110.020463][ T7609] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 110.027028][ T7609] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 110.083617][ T7609] vhci_hcd vhci_hcd.0: Device attached [ 110.096581][ T7618] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 110.103143][ T7618] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.149917][ T7618] vhci_hcd vhci_hcd.0: Device attached [ 110.158818][ T7609] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 110.165387][ T7609] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 110.198052][ T7609] vhci_hcd vhci_hcd.0: Device attached [ 110.242239][ T7609] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(7) [ 110.248858][ T7609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.259697][ T7609] vhci_hcd vhci_hcd.0: Device attached [ 110.275655][ T7609] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 110.282870][ T7609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.316934][ T7609] vhci_hcd vhci_hcd.0: Device attached [ 110.330602][ T7618] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.353876][ T7609] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.370233][ T3361] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 110.379096][ T7609] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(17) [ 110.385837][ T7609] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 110.403021][ T7609] vhci_hcd vhci_hcd.0: Device attached [ 110.415692][ T7633] vhci_hcd: connection closed [ 110.417181][ T7627] vhci_hcd: connection closed [ 110.420829][ T37] vhci_hcd vhci_hcd.3: stop threads [ 110.422318][ T7623] vhci_hcd: connection closed [ 110.426611][ T37] vhci_hcd vhci_hcd.3: release socket [ 110.439271][ T7610] vhci_hcd: connection reset by peer [ 110.442413][ T7625] vhci_hcd: connection closed [ 110.447341][ T7619] vhci_hcd: connection closed [ 110.458145][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 110.488539][ T37] vhci_hcd vhci_hcd.3: stop threads [ 110.500162][ T37] vhci_hcd vhci_hcd.3: release socket [ 110.522286][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 110.529637][ T37] vhci_hcd vhci_hcd.3: stop threads [ 110.534928][ T37] vhci_hcd vhci_hcd.3: release socket [ 110.540623][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 110.565236][ T37] vhci_hcd vhci_hcd.3: stop threads [ 110.572649][ T37] vhci_hcd vhci_hcd.3: release socket [ 110.588640][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 110.607738][ T37] vhci_hcd vhci_hcd.3: stop threads [ 110.613403][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.616218][ T37] vhci_hcd vhci_hcd.3: release socket [ 110.630392][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 110.638273][ T37] vhci_hcd vhci_hcd.3: stop threads [ 110.646227][ T37] vhci_hcd vhci_hcd.3: release socket [ 110.653988][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 110.677594][ T7604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.700480][ T7604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.758563][ T37] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.774840][ T7648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1186'. [ 110.785263][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.802489][ T37] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.828984][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.864991][ T37] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.878918][ T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.887372][ T37] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.896329][ T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.028967][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 111.044508][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 111.048879][ T7668] loop7: detected capacity change from 0 to 512 [ 111.074797][ T7668] __quota_error: 20 callbacks suppressed [ 111.074866][ T7668] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 111.091057][ T7668] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.106674][ T28] audit: type=1400 audit(1773978306.324:525): avc: denied { mount } for pid=7671 comm="syz.0.1196" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 111.110829][ T7668] EXT4-fs (loop7): mount failed [ 111.136083][ T28] audit: type=1400 audit(1773978306.324:526): avc: denied { watch } for pid=7671 comm="syz.0.1196" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 111.503151][ T7689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1203'. [ 111.521199][ T7689] netlink: 'syz.1.1203': attribute type 7 has an invalid length. [ 111.532520][ T7689] netlink: 'syz.1.1203': attribute type 8 has an invalid length. [ 111.540635][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 111.853054][ T7710] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1211'. [ 111.867859][ T7710] netlink: 'syz.6.1211': attribute type 7 has an invalid length. [ 111.889216][ T7710] netlink: 'syz.6.1211': attribute type 8 has an invalid length. [ 111.898038][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1211'. [ 112.147085][ T7721] loop1: detected capacity change from 0 to 1024 [ 112.208257][ T7721] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 112.236691][ T7721] System zones: 0-1, 3-36 [ 112.250319][ T7721] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1216: bad orphan inode 134217728 [ 112.267320][ T7721] loop1: lost filesystem error report for type 5 error -117 [ 112.268355][ T7721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.311722][ T7730] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1220'. [ 112.373208][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1222'. [ 112.382961][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.420150][ T28] audit: type=1400 audit(1773978308.644:527): avc: denied { listen } for pid=7770 comm="syz.1.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.474334][ T28] audit: type=1400 audit(1773978308.694:528): avc: denied { getopt } for pid=7773 comm="syz.1.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.632772][ T7782] netlink: 'syz.6.1243': attribute type 10 has an invalid length. [ 113.707446][ T7794] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 113.791796][ T7794] bond1: entered promiscuous mode [ 113.809273][ T7794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.849884][ T7794] bond1: (slave bridge4): making interface the new active one [ 113.857408][ T7794] bridge4: entered promiscuous mode [ 113.864419][ T7794] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 115.499310][ T3361] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 115.925969][ T28] audit: type=1400 audit(1773978311.144:529): avc: denied { create } for pid=7884 comm="syz.7.1285" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.936742][ T7887] __nla_validate_parse: 10 callbacks suppressed [ 115.936759][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1286'. [ 115.964554][ T28] audit: type=1400 audit(1773978311.174:530): avc: denied { write } for pid=7884 comm="syz.7.1285" name="file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.987503][ T28] audit: type=1400 audit(1773978311.174:531): avc: denied { open } for pid=7884 comm="syz.7.1285" path="/136/file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.032756][ T28] audit: type=1400 audit(1773978311.214:532): avc: denied { accept } for pid=7878 comm="syz.6.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.083556][ T28] audit: type=1400 audit(1773978311.244:533): avc: denied { unlink } for pid=5275 comm="syz-executor" name="file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.242872][ T28] audit: type=1400 audit(1773978311.464:534): avc: denied { read } for pid=7901 comm="syz.3.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.620747][ T7909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1296'. [ 116.664935][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1298'. [ 118.410609][ T7978] chnl_net:caif_netlink_parms(): no params data found [ 118.521262][ T7978] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.528462][ T7978] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.535751][ T7978] bridge_slave_0: entered allmulticast mode [ 118.542707][ T7978] bridge_slave_0: entered promiscuous mode [ 118.549932][ T7978] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.557077][ T7978] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.564584][ T7978] bridge_slave_1: entered allmulticast mode [ 118.571370][ T7978] bridge_slave_1: entered promiscuous mode [ 118.591072][ T7978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.601602][ T7978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.623163][ T7978] team0: Port device team_slave_0 added [ 118.630005][ T7978] team0: Port device team_slave_1 added [ 118.647554][ T7978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.654747][ T7978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.681313][ T7978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.226667][ T7978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.241398][ T7978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.269075][ T7978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.309951][ T28] audit: type=1326 audit(1773978314.534:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 119.336098][ T28] audit: type=1326 audit(1773978314.534:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 119.363454][ T28] audit: type=1326 audit(1773978314.534:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 119.370920][ T7978] hsr_slave_0: entered promiscuous mode [ 119.387051][ T28] audit: type=1326 audit(1773978314.534:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 119.422823][ T8017] loop0: detected capacity change from 0 to 512 [ 119.440484][ T7978] hsr_slave_1: entered promiscuous mode [ 119.446552][ T7978] debugfs: 'hsr0' already exists in 'hsr' [ 119.452557][ T7978] Cannot create hsr debugfs directory [ 119.453130][ T8017] EXT4-fs (loop0): 1 truncate cleaned up [ 119.474948][ T8017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.523679][ T28] audit: type=1326 audit(1773978314.554:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 119.547514][ T28] audit: type=1326 audit(1773978314.554:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 119.571232][ T28] audit: type=1326 audit(1773978314.554:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 119.572118][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.595117][ T28] audit: type=1326 audit(1773978314.564:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 119.806867][ T7978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.816139][ T7978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.825736][ T7978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.834837][ T7978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.887723][ T7978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.901700][ T7978] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.912541][ T3993] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.919721][ T3993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.933617][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.940803][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.960966][ T7978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.972018][ T7978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.074986][ T7978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.141305][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1347'. [ 120.185641][ T7978] veth0_vlan: entered promiscuous mode [ 120.196906][ T7978] veth1_vlan: entered promiscuous mode [ 120.204404][ T8081] uprobe: syz.7.1350:8081 failed to unregister, leaking uprobe [ 120.211556][ T7978] veth0_macvtap: entered promiscuous mode [ 120.226686][ T7978] veth1_macvtap: entered promiscuous mode [ 120.239858][ T7978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.251370][ T7978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.269131][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.284879][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.296928][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.306093][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.422669][ T8098] bridge_slave_1: left allmulticast mode [ 120.439364][ T8098] bridge_slave_1: left promiscuous mode [ 120.448345][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.001913][ T8119] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 121.032525][ T8119] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 121.082264][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.100396][ T8123] netlink: 'syz.3.1367': attribute type 1 has an invalid length. [ 121.210913][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.228214][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.298618][ T8126] loop0: detected capacity change from 0 to 256 [ 121.326194][ T8123] bond1: entered promiscuous mode [ 121.359130][ T8123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.426337][ T8128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.437626][ T8128] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 121.468110][ T8128] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 121.498474][ T8128] bond1: (slave vti0): making interface the new active one [ 121.505921][ T8128] vti0: entered promiscuous mode [ 121.550007][ T8128] bond1: (slave vti0): Enslaving as an active interface with an up link [ 121.578842][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.607219][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.658612][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.688172][ T4875] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.708596][ T8148] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1377'. [ 121.722666][ T8148] loop0: detected capacity change from 0 to 256 [ 121.786113][ T8148] FAT-fs (loop0): Directory bread(block 64) failed [ 121.799367][ T8148] FAT-fs (loop0): Directory bread(block 65) failed [ 121.811211][ T8148] FAT-fs (loop0): Directory bread(block 66) failed [ 121.819858][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 121.819938][ T28] audit: type=1400 audit(1773978317.044:589): avc: denied { mount } for pid=8154 comm="syz.7.1380" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 121.848207][ T8148] FAT-fs (loop0): Directory bread(block 67) failed [ 121.855194][ T8148] FAT-fs (loop0): Directory bread(block 68) failed [ 121.862036][ T8148] FAT-fs (loop0): Directory bread(block 69) failed [ 121.877357][ T8148] FAT-fs (loop0): Directory bread(block 70) failed [ 121.884052][ T8148] FAT-fs (loop0): Directory bread(block 71) failed [ 121.890737][ T8148] FAT-fs (loop0): Directory bread(block 72) failed [ 121.897383][ T8148] FAT-fs (loop0): Directory bread(block 73) failed [ 122.175349][ T8170] random: crng reseeded on system resumption [ 122.184627][ T28] audit: type=1400 audit(1773978317.394:590): avc: denied { write } for pid=8167 comm="syz.0.1385" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.241971][ T28] audit: type=1400 audit(1773978317.394:591): avc: denied { open } for pid=8167 comm="syz.0.1385" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.374375][ T8176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8176 comm=syz.0.1389 [ 122.640834][ T8186] loop1: detected capacity change from 0 to 512 [ 122.968057][ T28] audit: type=1326 audit(1773978318.154:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8194 comm="syz.3.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5497bc799 code=0x7ffc0000 [ 122.969083][ T8186] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1393: invalid indirect mapped block 256 (level 2) [ 123.008018][ T28] audit: type=1326 audit(1773978318.154:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8194 comm="syz.3.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5497bc799 code=0x7ffc0000 [ 123.031777][ T28] audit: type=1326 audit(1773978318.154:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8194 comm="syz.3.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5497bc799 code=0x7ffc0000 [ 123.055530][ T28] audit: type=1326 audit(1773978318.154:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8194 comm="syz.3.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5497bc799 code=0x7ffc0000 [ 123.080892][ T28] audit: type=1326 audit(1773978318.154:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8194 comm="syz.3.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5497bc799 code=0x7ffc0000 [ 123.104538][ T28] audit: type=1326 audit(1773978318.154:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8194 comm="syz.3.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5497bc799 code=0x7ffc0000 [ 123.127988][ T28] audit: type=1326 audit(1773978318.154:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8194 comm="syz.3.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5497bc799 code=0x7ffc0000 [ 123.159051][ T8186] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.159454][ T8186] EXT4-fs (loop1): 2 truncates cleaned up [ 123.168659][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 123.168681][ C0] EXT4-fs (loop1): initial error at time 1773978318: ext4_free_branches:1023: inode 11 [ 123.168722][ C0] EXT4-fs (loop1): last error at time 1773978318: ext4_free_branches:1023: inode 11 [ 123.200747][ T8186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.226836][ T8186] EXT4-fs error (device loop1): ext4_check_dx_root:2201: inode #2: comm syz.1.1393: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 123.384441][ T7978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.330364][ T8233] loop3: detected capacity change from 0 to 256 [ 124.595237][ T8258] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1421'. [ 124.665239][ T8261] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1422'. [ 124.904636][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 124.953971][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1429'. [ 124.969334][ T8282] netlink: 'syz.1.1431': attribute type 4 has an invalid length. [ 124.991236][ T8282] netlink: 'syz.1.1431': attribute type 4 has an invalid length. [ 125.053819][ T8286] loop3: detected capacity change from 0 to 256 [ 125.102225][ T8286] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.822469][ T8307] random: crng reseeded on system resumption [ 126.214476][ T8327] netlink: 'syz.6.1449': attribute type 1 has an invalid length. [ 126.389507][ T8327] bond2: entered promiscuous mode [ 126.425596][ T8327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.362278][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1458'. [ 127.700710][ T8365] loop1: detected capacity change from 0 to 256 [ 128.744091][ T8403] netlink: 'syz.0.1477': attribute type 4 has an invalid length. [ 128.774661][ T8403] netlink: 'syz.0.1477': attribute type 4 has an invalid length. [ 128.837521][ T8403] gre1: left allmulticast mode [ 129.449084][ T8423] netlink: 'syz.1.1485': attribute type 12 has an invalid length. [ 129.667292][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1491'. [ 129.729268][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1491'. [ 129.774792][ T8434] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1491'. [ 129.885626][ T8436] loop1: detected capacity change from 0 to 1024 [ 129.892500][ T8436] EXT4-fs: Ignoring removed orlov option [ 129.898425][ T8436] EXT4-fs: Ignoring removed nobh option [ 129.909822][ T8436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.045351][ T7978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.392656][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1493'. [ 130.411654][ T28] kauditd_printk_skb: 360 callbacks suppressed [ 130.411670][ T28] audit: type=1326 audit(1773978325.634:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.3.1498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5497bc799 code=0x0 [ 130.490485][ T8449] team0: Port device team_slave_0 removed [ 130.843910][ T8475] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.1505'. [ 130.924004][ T8478] netlink: 'syz.1.1506': attribute type 4 has an invalid length. [ 130.936864][ T8478] netlink: 'syz.1.1506': attribute type 4 has an invalid length. [ 131.059895][ T8480] netlink: 'syz.1.1507': attribute type 4 has an invalid length. [ 131.079639][ T8480] netlink: 'syz.1.1507': attribute type 4 has an invalid length. [ 131.867658][ T8513] loop3: detected capacity change from 0 to 8192 [ 131.911740][ T28] audit: type=1400 audit(1773978327.134:960): avc: denied { watch watch_reads } for pid=8512 comm="syz.3.1519" path=2F3331342F2E02 dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 132.088001][ T28] audit: type=1400 audit(1773978327.304:961): avc: denied { mount } for pid=8525 comm="syz.3.1525" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 132.137489][ T8526] loop3: detected capacity change from 0 to 128 [ 132.149863][ T8526] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.162179][ T8526] ext4 filesystem being mounted at /316/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.257152][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.754537][ T8537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.781345][ T8537] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.844144][ T8537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.925895][ T28] audit: type=1400 audit(1773978328.144:962): avc: denied { create } for pid=8551 comm="syz.1.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.950171][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 132.958035][ T28] audit: type=1400 audit(1773978328.174:963): avc: denied { ioctl } for pid=8551 comm="syz.1.1532" path="socket:[34607]" dev="sockfs" ino=34607 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.983769][ T28] audit: type=1400 audit(1773978328.174:964): avc: denied { connect } for pid=8551 comm="syz.1.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.242677][ T28] audit: type=1400 audit(1773978328.464:965): avc: denied { watch_reads } for pid=8572 comm="syz.1.1543" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 133.265925][ T8574] netlink: 'syz.6.1542': attribute type 27 has an invalid length. [ 133.331060][ T8574] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.338451][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.368694][ T28] audit: type=1400 audit(1773978328.594:966): avc: denied { create } for pid=8581 comm="syz.3.1545" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.423608][ T8574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.431494][ T28] audit: type=1400 audit(1773978328.654:967): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=1690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.459799][ T8574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.500754][ T8574] gre2: left allmulticast mode [ 133.526736][ T8574] bond2: left promiscuous mode [ 133.552797][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.561918][ T8580] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.572141][ T8580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.608046][ T3993] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.638531][ T3993] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.657096][ T28] audit: type=1400 audit(1773978328.854:968): avc: denied { getopt } for pid=8589 comm="syz.1.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.686400][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.708255][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.728595][ T8599] loop0: detected capacity change from 0 to 128 [ 133.863074][ T8599] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.881336][ T8599] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.965433][ T8599] EXT4-fs (loop0): shut down requested (2) [ 134.054145][ T8599] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.881472][ T8666] loop1: detected capacity change from 0 to 256 [ 134.892354][ T8666] FAT-fs (loop1): bogus number of FAT sectors [ 134.915174][ T8666] FAT-fs (loop1): Can't find a valid FAT filesystem [ 135.384736][ T8689] netlink: 'syz.1.1586': attribute type 3 has an invalid length. [ 135.396144][ T8689] netlink: 'syz.1.1586': attribute type 3 has an invalid length. [ 135.659282][ T8715] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 135.674357][ T8715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.713494][ T8715] bond1: (slave ip6erspan0): making interface the new active one [ 135.725442][ T8715] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 135.814353][ T8729] loop1: detected capacity change from 0 to 512 [ 135.867564][ T8729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.896991][ T8734] loop0: detected capacity change from 0 to 512 [ 135.945412][ T8734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.964197][ T8734] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.092690][ T8734] EXT4-fs (loop0): shut down requested (0) [ 136.110394][ T8734] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 136.123130][ T8734] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 136.132487][ T8734] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 136.133466][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 136.133480][ T28] audit: type=1400 audit(1773978331.364:973): avc: denied { write } for pid=8733 comm="syz.0.1603" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.169581][ T28] audit: type=1400 audit(1773978331.374:974): avc: denied { setattr } for pid=8733 comm="syz.0.1603" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.169995][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.229630][ T28] audit: type=1400 audit(1773978331.454:975): avc: denied { read write } for pid=8745 comm="syz.0.1604" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 136.269813][ T7978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.276482][ T28] audit: type=1400 audit(1773978331.454:976): avc: denied { open } for pid=8745 comm="syz.0.1604" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 136.365659][ T28] audit: type=1400 audit(1773978331.584:977): avc: denied { ioctl } for pid=8752 comm="syz.0.1607" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.704397][ T8728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.714590][ T8728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.755040][ T8762] geneve2: entered promiscuous mode [ 136.762384][ T3993] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.771604][ T3993] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.780842][ T28] audit: type=1400 audit(1773978332.004:978): avc: denied { getopt } for pid=8767 comm="syz.1.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.781833][ T3993] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.841182][ T3993] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.850341][ T3993] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 34243 - 0 [ 136.858923][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1615'. [ 136.869211][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1615'. [ 136.878685][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1615'. [ 136.880753][ T8773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8773 comm=syz.7.1615 [ 136.887784][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1615'. [ 136.907046][ T8773] netlink: 'syz.7.1615': attribute type 21 has an invalid length. [ 136.909960][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1615'. [ 136.917005][ T8773] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.926039][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1615'. [ 136.934064][ T8773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.945559][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1615'. [ 136.949855][ T8773] IPv6: NLM_F_CREATE should be set when creating new route [ 136.949871][ T8773] IPv6: NLM_F_CREATE should be set when creating new route [ 136.959367][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1615'. [ 136.966239][ T8773] IPv6: NLM_F_CREATE should be set when creating new route [ 136.990302][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1615'. [ 136.999711][ T3993] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 34243 - 0 [ 137.008339][ T8774] netlink: 'syz.7.1615': attribute type 21 has an invalid length. [ 137.016250][ T3993] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 34243 - 0 [ 137.024827][ T8774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.032416][ T3993] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 34243 - 0 [ 137.304205][ T28] audit: type=1400 audit(1773978332.524:979): avc: denied { setopt } for pid=8789 comm="syz.7.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.377551][ T28] audit: type=1400 audit(1773978332.594:980): avc: denied { lock } for pid=8799 comm="syz.7.1625" path="socket:[38965]" dev="sockfs" ino=38965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.520350][ T8805] geneve2: entered promiscuous mode [ 137.526538][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 137.536003][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 137.545390][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 137.554754][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 137.667234][ T8645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.839561][ T8810] mmap: syz.7.1629 (8810) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.126189][ T8830] loop0: detected capacity change from 0 to 1024 [ 138.183753][ T28] audit: type=1326 audit(1773978333.404:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8835 comm="syz.1.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1075c799 code=0x7ffc0000 [ 138.209912][ T28] audit: type=1326 audit(1773978333.404:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8835 comm="syz.1.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1075c799 code=0x7ffc0000 [ 138.242554][ T8836] loop1: detected capacity change from 0 to 512 [ 138.248733][ T8830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.251639][ T8830] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.290950][ T8836] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.298988][ T8830] EXT4-fs (loop0): shut down requested (0) [ 138.308240][ T8836] EXT4-fs (loop1): 1 truncate cleaned up [ 138.314624][ T8836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.345840][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.383665][ T7978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.913056][ T8893] __nla_validate_parse: 60 callbacks suppressed [ 139.913076][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1664'. [ 139.991334][ T8897] netlink: 'syz.1.1666': attribute type 13 has an invalid length. [ 140.197774][ T8913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13588 sclass=netlink_route_socket pid=8913 comm=syz.7.1673 [ 140.220415][ T8913] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1673'. [ 140.262857][ T3396] kernel write not supported for file bpf-prog (pid: 3396 comm: kworker/0:3) [ 140.272613][ T8921] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1676'. [ 140.308376][ T8927] loop0: detected capacity change from 0 to 256 [ 140.348211][ T8930] netlink: 'syz.1.1680': attribute type 27 has an invalid length. [ 140.363603][ T8932] loop3: detected capacity change from 0 to 128 [ 140.394622][ T8930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.406326][ T8930] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.452402][ T8930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.544167][ T8945] loop1: detected capacity change from 0 to 512 [ 140.572935][ T8945] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.591446][ T8945] EXT4-fs (loop1): 1 truncate cleaned up [ 140.597601][ T8945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.683152][ T7978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.714897][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'. [ 140.743115][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 140.757066][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 141.002192][ T8971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1704'. [ 141.639530][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 141.639549][ T28] audit: type=1400 audit(1773978336.864:1051): avc: denied { listen } for pid=8987 comm="syz.7.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.918917][ T8991] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 141.980612][ T28] audit: type=1326 audit(1773978337.204:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8995 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d35cc799 code=0x7ffc0000 [ 142.013594][ T8991] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 142.040347][ T28] audit: type=1326 audit(1773978337.204:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8995 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d35cc799 code=0x7ffc0000 [ 142.085590][ T28] audit: type=1326 audit(1773978337.204:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8995 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d35cc799 code=0x7ffc0000 [ 142.119255][ T8991] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 142.141772][ T28] audit: type=1326 audit(1773978337.204:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8995 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d35cc799 code=0x7ffc0000 [ 142.181040][ T8991] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 142.194125][ T28] audit: type=1326 audit(1773978337.204:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8995 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f43d35cc799 code=0x7ffc0000 [ 142.262792][ T28] audit: type=1326 audit(1773978337.254:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8995 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d35cc799 code=0x7ffc0000 [ 142.289992][ T28] audit: type=1326 audit(1773978337.254:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8995 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d35cc799 code=0x7ffc0000 [ 142.340036][ T37] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 142.354862][ T37] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 142.367006][ T9017] sctp: [Deprecated]: syz.6.1706 (pid 9017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.367006][ T9017] Use struct sctp_sack_info instead [ 142.412069][ T37] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 142.429602][ T28] audit: type=1326 audit(1773978337.294:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8995 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d35cc799 code=0x7ffc0000 [ 142.460844][ T37] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 142.520085][ T28] audit: type=1326 audit(1773978337.344:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8995 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d35cc799 code=0x7ffc0000 [ 143.962433][ T9152] loop0: detected capacity change from 0 to 128 [ 144.560909][ T9188] netlink: 'syz.0.1740': attribute type 13 has an invalid length. [ 144.719588][ T9196] xt_l2tp: unknown flags: 10 [ 144.909076][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1751'. [ 145.323352][ T9229] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1760'. [ 145.354755][ T9232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1761'. [ 145.550843][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1768'. [ 145.568578][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 145.582779][ T9249] tipc: Enabling of bearer rejected, failed to enable media [ 145.916024][ T9261] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1773'. [ 146.400581][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1781'. [ 146.598556][ T9295] netlink: 'syz.1.1787': attribute type 1 has an invalid length. [ 146.644419][ T9295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.681377][ T9298] bond2: (slave veth3): Enslaving as an active interface with a down link [ 146.710678][ T9295] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 146.730767][ T9295] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 147.022096][ T7644] IPVS: starting estimator thread 0... [ 147.118038][ T9318] IPVS: using max 2592 ests per chain, 129600 per kthread [ 147.682887][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 147.682906][ T28] audit: type=1400 audit(1773978342.904:1089): avc: denied { setopt } for pid=9325 comm="syz.6.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 148.695962][ T28] audit: type=1400 audit(1773978343.914:1090): avc: denied { unmount } for pid=9430 comm="syz.7.1810" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 148.757495][ T9444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1812'. [ 148.840127][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1815'. [ 150.334857][ T28] audit: type=1326 audit(1773978345.554:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.7.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336983c799 code=0x7ffc0000 [ 150.383438][ T28] audit: type=1326 audit(1773978345.584:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.7.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336983c799 code=0x7ffc0000 [ 150.478164][ T28] audit: type=1326 audit(1773978345.584:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.7.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336983c799 code=0x7ffc0000 [ 150.537387][ T28] audit: type=1326 audit(1773978345.584:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.7.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336983c799 code=0x7ffc0000 [ 150.607985][ T28] audit: type=1326 audit(1773978345.584:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.7.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f336983c799 code=0x7ffc0000 [ 150.678006][ T28] audit: type=1326 audit(1773978345.584:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.7.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336983c799 code=0x7ffc0000 [ 150.726261][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1836'. [ 150.738026][ T28] audit: type=1326 audit(1773978345.584:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.7.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336983c799 code=0x7ffc0000 [ 150.818003][ T28] audit: type=1326 audit(1773978345.584:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.7.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f336983c799 code=0x7ffc0000 [ 152.264323][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'. [ 154.001616][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1862'. [ 154.306411][ T9654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1868'. [ 154.319674][ T9654] gtp0: entered promiscuous mode [ 154.831686][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'. [ 154.953452][ T9693] netlink: 'syz.3.1886': attribute type 29 has an invalid length. [ 154.970740][ T9693] netlink: 'syz.3.1886': attribute type 29 has an invalid length. [ 155.026722][ T9693] netlink: 'syz.3.1886': attribute type 29 has an invalid length. [ 155.319056][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1894'. [ 155.396707][ T9719] sctp: [Deprecated]: syz.0.1897 (pid 9719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.396707][ T9719] Use struct sctp_sack_info instead [ 155.440986][ T9723] tipc: Failed to remove unknown binding: 66,1,1/0:1846374418/1846374420 [ 155.455865][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 155.455883][ T28] audit: type=1326 audit(1773978350.674:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.0.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 155.490653][ T28] audit: type=1326 audit(1773978350.704:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.0.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 155.523272][ T9727] loop1: detected capacity change from 0 to 1024 [ 155.527593][ T28] audit: type=1326 audit(1773978350.704:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.0.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 155.554009][ T28] audit: type=1326 audit(1773978350.704:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.0.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 155.589586][ T28] audit: type=1326 audit(1773978350.704:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.0.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 155.644045][ T9727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.648066][ T28] audit: type=1326 audit(1773978350.704:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.0.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 155.659627][ T9727] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.768154][ T28] audit: type=1326 audit(1773978350.704:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.0.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 155.791739][ T28] audit: type=1326 audit(1773978350.704:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.0.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 155.815225][ T28] audit: type=1326 audit(1773978350.704:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.0.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 155.838885][ T28] audit: type=1326 audit(1773978350.704:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.0.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc0dac799 code=0x7ffc0000 [ 155.930485][ T7978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 155.980153][ T9755] netlink: 'syz.1.1920': attribute type 10 has an invalid length. [ 155.989220][ T9755] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1920'. [ 156.000355][ T9755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.011417][ T9755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.022524][ T9755] hsr0: entered promiscuous mode [ 156.050474][ T9755] bridge0: port 2(hsr0) entered blocking state [ 156.059267][ T9755] bridge0: port 2(hsr0) entered disabled state [ 156.070977][ T9755] hsr0: entered allmulticast mode [ 156.095759][ T9755] hsr_slave_0: entered allmulticast mode [ 156.104728][ T9755] hsr_slave_1: entered allmulticast mode [ 156.543187][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1916'. [ 156.902001][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1923'. [ 156.924587][ T9785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.982369][ T9785] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 157.037245][ T9785] bond3 (unregistering): (slave syz_tun): Releasing backup interface [ 157.066346][ T9785] bond3 (unregistering): Released all slaves [ 158.125734][ T9796] ================================================================== [ 158.133870][ T9796] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 158.140839][ T9796] [ 158.143178][ T9796] read-write to 0xffff88811b9fb1ec of 4 bytes by task 9795 on cpu 0: [ 158.151261][ T9796] fifo_open+0x86/0x5d0 [ 158.155436][ T9796] do_dentry_open+0x4ca/0xa90 [ 158.160125][ T9796] vfs_open+0x37/0x1e0 [ 158.164191][ T9796] path_openat+0x1b70/0x2050 [ 158.168800][ T9796] do_file_open+0x16c/0x290 [ 158.173316][ T9796] do_sys_openat2+0x94/0x130 [ 158.177914][ T9796] __x64_sys_creat+0x65/0x90 [ 158.182531][ T9796] x64_sys_call+0x2ea0/0x3020 [ 158.187218][ T9796] do_syscall_64+0x12c/0x370 [ 158.191818][ T9796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.197715][ T9796] [ 158.200039][ T9796] read to 0xffff88811b9fb1ec of 4 bytes by task 9796 on cpu 1: [ 158.207588][ T9796] wait_for_partner+0xd5/0x1e0 [ 158.212360][ T9796] fifo_open+0x4b1/0x5d0 [ 158.216627][ T9796] do_dentry_open+0x4ca/0xa90 [ 158.221320][ T9796] vfs_open+0x37/0x1e0 [ 158.225483][ T9796] path_openat+0x1b70/0x2050 [ 158.230084][ T9796] do_file_open+0x16c/0x290 [ 158.234672][ T9796] file_open_name+0xfa/0x120 [ 158.239272][ T9796] __se_sys_acct+0x8c/0x500 [ 158.243789][ T9796] __x64_sys_acct+0x1f/0x30 [ 158.248304][ T9796] x64_sys_call+0x2e7f/0x3020 [ 158.253009][ T9796] do_syscall_64+0x12c/0x370 [ 158.257605][ T9796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.263498][ T9796] [ 158.265818][ T9796] value changed: 0x00000001 -> 0x00000002 [ 158.271534][ T9796] [ 158.273863][ T9796] Reported by Kernel Concurrency Sanitizer on: [ 158.280011][ T9796] CPU: 1 UID: 0 PID: 9796 Comm: syz.7.1927 Not tainted syzkaller #0 PREEMPT(full) [ 158.289396][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.299552][ T9796] ==================================================================