last executing test programs: 40.395544708s ago: executing program 1 (id=288): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff72, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001000)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 40.098776434s ago: executing program 1 (id=289): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 39.749670173s ago: executing program 1 (id=291): ioperm(0x101, 0x2, 0xf) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) open$dir(0x0, 0x100, 0x30) clock_gettime(0x0, &(0x7f0000000500)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000400)={0xb, 0x8a, 0xfffffffffffffff9, 0x5, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0xa, 0x9, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x85, 0x3, 0x3, 0x100000000, 0x5, 0x200000005, 0xfffffffffffffffe, 0x3, 0x5a1f0795}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2109}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0xffffffff) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 39.595492442s ago: executing program 1 (id=294): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8015, &(0x7f0000000000)={[{@bsdgroups}, {@nolazytime}, {@noblock_validity}, {@grpjquota}, {@bsdgroups}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@nogrpid}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 38.942137678s ago: executing program 1 (id=299): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) ioprio_set$pid(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r4, 0x0, 0x0) 38.555765319s ago: executing program 1 (id=303): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x4510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x66ab, 0x4, 0x2, 0x0, 0x0) 38.555450709s ago: executing program 32 (id=303): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x4510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x66ab, 0x4, 0x2, 0x0, 0x0) 2.978817385s ago: executing program 4 (id=720): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x116c, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000001c0)={0x79c, r1, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) 2.684815432s ago: executing program 5 (id=726): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) flock(0xffffffffffffffff, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd881}, 0x10000010) 2.540869699s ago: executing program 0 (id=729): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x10008}}, 0x20}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x12}, 0x68a5, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xe805, 0x0, 0x0, 0x0, 0x40000000000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x1, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.52015187s ago: executing program 5 (id=730): openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x20000004) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x40200) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r2, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}, {0x2, 0x100, 0x800}], 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 2.391333518s ago: executing program 4 (id=732): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.271967824s ago: executing program 0 (id=733): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10000800) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001240), 0x432a8c03c666292, 0x0) readv(r0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000000000000500"], 0x5c}, 0x1, 0x0, 0x0, 0x20000090}, 0x8084) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000030601020000ffffffff00000a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x52, 0x8, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @cond=[{0x0, 0x20c8, 0x20, 0x6, 0xaf}, {0x7ffe, 0x11, 0x1, 0x10, 0x5, 0xfaa}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) 2.189511249s ago: executing program 0 (id=735): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r1, 0x1) 2.112084623s ago: executing program 4 (id=736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x5ce, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.937294123s ago: executing program 2 (id=740): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x9, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) close(r3) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)=r3}, 0x20) 1.914974224s ago: executing program 2 (id=741): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x1a, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.890674905s ago: executing program 2 (id=742): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x1c, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000003c0)="e27ef9b547c7ebfb335b7b81f2327c8525a79c96f6b034f45856f0aafe636c914327a7152f8a87f90cad420959775a69109656161134d7fa901a972e389551fa0b4ae298beb820bed16e58b05419337b9fcd6db6cac9b5f4b1110aa2e2c2ad95034355e3647e2d799931248e8c1574d877b04e394f37940f940f863306454951476e1d50e119d7722740731c562eb218299c6ee49c91b7d9615f5e356a4c0bfa5f1f4b104f194ef084f83b182e12877bf88f7802f1e83f1454d6255a67df294ebaab3501076b2d0884b2e5242d46c859610b666218d3a075c299cd0c0d13efb50c9a", 0xe2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000b00)="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", 0x12b}], 0x1, &(0x7f0000000800)}}], 0x2, 0x5c004) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000001500)) sendmsg$unix(r2, 0x0, 0x4000) 1.6160204s ago: executing program 5 (id=743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x20008804) close_range(r7, 0xffffffffffffffff, 0x0) 1.388197773s ago: executing program 3 (id=748): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) setrlimit(0xa, &(0x7f0000000040)) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 1.295867998s ago: executing program 0 (id=749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c00188008000140a0000000080002400000000208000340000000022400018014000180080000010c000280050001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000004, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x1, 0x0, 0x101, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000006) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) 1.25997516s ago: executing program 4 (id=750): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0xdbc, 0x7e, 0x1, 0x403, 0xd, "0500"}) ioctl$TIOCSTI(r0, 0x5412, 0x0) 1.229520792s ago: executing program 3 (id=751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 1.168048215s ago: executing program 3 (id=752): syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r0 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000300)=""/132) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="100a06000908010014001a80100004800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) 1.151026646s ago: executing program 3 (id=753): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000440)=0x400, 0x4) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsmount(0xffffffffffffffff, 0x1, 0xf6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r2, 0x2, r0, 0x0, 0x80000}) 1.043966652s ago: executing program 2 (id=754): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0xf00) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000000, 0x1b54c8}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r2, &(0x7f0000000680)={0x11, 0x1, r3, 0x1, 0x9}, 0x14) epoll_create1(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0xe4, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x98, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @loopback, 0x6d2}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @loopback, 0x3}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) 764.090547ms ago: executing program 5 (id=755): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000720000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x10000000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0xb1130, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x26f, 0xc, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x4000011, r0, 0x0) r1 = io_uring_setup(0x168a, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x5, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) 608.883266ms ago: executing program 5 (id=756): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4001, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) open_tree(0xffffffffffffff9c, 0x0, 0x100) 358.72607ms ago: executing program 0 (id=757): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x1, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mknod(&(0x7f0000000200)='./file0\x00', 0x40, 0x7fff) r1 = syz_open_pts(0xffffffffffffffff, 0x141601) fcntl$setstatus(r1, 0x4, 0x2000) write(r1, &(0x7f0000000000), 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x8, 0x0, {0x9, 0x1}, {0x47, 0x2}, @cond=[{0x100, 0x20c8, 0x20, 0x4, 0xaf}, {0x7ffe, 0x11, 0x1, 0x0, 0x5, 0xfaa}]}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) sendmsg$nl_route_sched(r0, 0x0, 0x44080) 355.86318ms ago: executing program 2 (id=758): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x7f, 0x0, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0xfffffffffffffe9f) unshare(0x22020600) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 355.31294ms ago: executing program 4 (id=759): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) connect$netlink(0xffffffffffffffff, 0x0, 0x0) 354.71584ms ago: executing program 5 (id=760): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7", 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 278.112864ms ago: executing program 3 (id=761): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0xda6, &(0x7f00000000c0)={0x0, 0xdf65, 0x200, 0x3, 0x170}) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) getpgrp(0x0) syz_clone3(&(0x7f0000001000)={0x2016200, &(0x7f0000000240), 0x0, 0x0, {0x1b}, &(0x7f0000000440)=""/123, 0x7b, 0x0, 0x0, 0x0, {r1}}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 200.014909ms ago: executing program 0 (id=762): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000200)=0x7dffeffc) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x40400c6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, 0x0, 0x0, 0x1200, 0x41001, 0x3) 110.935483ms ago: executing program 3 (id=763): sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x20, 0xffffffffffffffff, 0x7}, 0x0) 88.498105ms ago: executing program 2 (id=764): sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00e1ffffff0c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c000600000000000000000008000b0005000000"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 4 (id=765): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@nodelalloc}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000005}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}], [{@flag='ro'}]}, 0xfd, 0x573, &(0x7f0000000640)="$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") kernel console output (not intermixed with test programs): 1253][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.689179][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.696214][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.723808][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.735056][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.742484][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.769276][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.792381][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.799598][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.826750][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.841151][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.848337][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.876823][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.888395][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.895831][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.923488][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.968536][ T3319] hsr_slave_0: entered promiscuous mode [ 29.974967][ T3319] hsr_slave_1: entered promiscuous mode [ 29.980946][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 29.987192][ T3319] Cannot create hsr debugfs directory [ 30.015105][ T3324] hsr_slave_0: entered promiscuous mode [ 30.021628][ T3324] hsr_slave_1: entered promiscuous mode [ 30.027737][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 30.033567][ T3324] Cannot create hsr debugfs directory [ 30.041957][ T3325] hsr_slave_0: entered promiscuous mode [ 30.048447][ T3325] hsr_slave_1: entered promiscuous mode [ 30.054570][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 30.060606][ T3325] Cannot create hsr debugfs directory [ 30.082058][ T3322] hsr_slave_0: entered promiscuous mode [ 30.088440][ T3322] hsr_slave_1: entered promiscuous mode [ 30.094242][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 30.100181][ T3322] Cannot create hsr debugfs directory [ 30.166320][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.187445][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.207813][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.226206][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.320126][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.331665][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.343907][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.356634][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.376450][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.385495][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.396245][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.408742][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.442361][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.458631][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.468262][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.478038][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.494712][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.524931][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.532896][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.544726][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.554335][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.563722][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.577424][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.584850][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.606531][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.613668][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.652548][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.672285][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.709891][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.723912][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.735977][ T1731] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.743095][ T1731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.757588][ T1731] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.765095][ T1731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.774820][ T1731] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.782036][ T1731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.798042][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.811816][ T1731] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.819111][ T1731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.841716][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.854264][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.871790][ T581] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.879594][ T581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.892091][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.903706][ T581] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.911252][ T581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.944480][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.958271][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.965748][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.975126][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.982311][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.061567][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.097100][ T3318] veth0_vlan: entered promiscuous mode [ 31.118335][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.136261][ T3318] veth1_vlan: entered promiscuous mode [ 31.162714][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.197004][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.219474][ T3318] veth0_macvtap: entered promiscuous mode [ 31.242874][ T3318] veth1_macvtap: entered promiscuous mode [ 31.269024][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.288874][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.308257][ T581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.338096][ T581] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.365724][ T581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.382371][ T581] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.397602][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.413099][ T3319] veth0_vlan: entered promiscuous mode [ 31.421746][ T3322] veth0_vlan: entered promiscuous mode [ 31.433622][ T3319] veth1_vlan: entered promiscuous mode [ 31.441858][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 31.441875][ T29] audit: type=1400 audit(1768903990.182:99): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.460226][ T3319] veth0_macvtap: entered promiscuous mode [ 31.473852][ T29] audit: type=1400 audit(1768903990.182:100): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.482531][ T3319] veth1_macvtap: entered promiscuous mode [ 31.511037][ T29] audit: type=1400 audit(1768903990.182:101): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.549420][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.565620][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.578775][ T3325] veth0_vlan: entered promiscuous mode [ 31.587740][ T3322] veth1_vlan: entered promiscuous mode [ 31.605109][ T581] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.624447][ T581] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.639822][ T3324] veth0_vlan: entered promiscuous mode [ 31.648977][ T581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.664761][ T3325] veth1_vlan: entered promiscuous mode [ 31.679123][ T581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.695939][ T3322] veth0_macvtap: entered promiscuous mode [ 31.705689][ T3322] veth1_macvtap: entered promiscuous mode [ 31.713099][ T3324] veth1_vlan: entered promiscuous mode [ 31.734445][ T3325] veth0_macvtap: entered promiscuous mode [ 31.750719][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.761108][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.779872][ T29] audit: type=1400 audit(1768903990.522:102): avc: denied { open } for pid=3493 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.796996][ T346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.799126][ T29] audit: type=1400 audit(1768903990.522:103): avc: denied { perfmon } for pid=3493 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.823310][ T346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.829806][ T29] audit: type=1400 audit(1768903990.522:104): avc: denied { kernel } for pid=3493 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.868662][ T3324] veth0_macvtap: entered promiscuous mode [ 31.878137][ T3324] veth1_macvtap: entered promiscuous mode [ 31.887315][ T3325] veth1_macvtap: entered promiscuous mode [ 31.907982][ T346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.933687][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.941763][ T3498] loop3: detected capacity change from 0 to 1024 [ 31.948685][ T29] audit: type=1400 audit(1768903990.622:105): avc: denied { prog_load } for pid=3493 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.955635][ T346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.968060][ T29] audit: type=1400 audit(1768903990.622:106): avc: denied { bpf } for pid=3493 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.983856][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.998155][ T29] audit: type=1400 audit(1768903990.622:107): avc: denied { prog_run } for pid=3493 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.011426][ T3498] ======================================================= [ 32.011426][ T3498] WARNING: The mand mount option has been deprecated and [ 32.011426][ T3498] and is ignored by this kernel. Remove the mand [ 32.011426][ T3498] option from the mount to silence this warning. [ 32.011426][ T3498] ======================================================= [ 32.024295][ T29] audit: type=1400 audit(1768903990.652:108): avc: denied { write } for pid=3493 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.088002][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.095178][ T3498] EXT4-fs: Ignoring removed orlov option [ 32.097703][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.101679][ T3498] EXT4-fs: inline encryption not supported [ 32.126764][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.136722][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.148994][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.156503][ T3498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.160452][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.188409][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.200938][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.223861][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.245275][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.487936][ T3498] Zero length message leads to an empty skb [ 32.637198][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.332557][ T3537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'. [ 33.483042][ T3546] netlink: 136 bytes leftover after parsing attributes in process `syz.1.19'. [ 33.492262][ T3546] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 33.675335][ T3557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 33.688244][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'. [ 34.965636][ T3627] netlink: 'syz.1.35': attribute type 1 has an invalid length. [ 34.978456][ T3627] Unknown options in mask 20 [ 35.097923][ T3631] netlink: 'syz.3.37': attribute type 4 has an invalid length. [ 35.346271][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.615321][ T3399] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.750708][ T3661] loop4: detected capacity change from 0 to 764 [ 35.803969][ T3661] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 36.446378][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 36.446396][ T29] audit: type=1326 audit(1768903995.192:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c9b50b58e code=0x7ffc0000 [ 36.646185][ T29] audit: type=1326 audit(1768903995.222:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c9b50b58e code=0x7ffc0000 [ 36.670218][ T29] audit: type=1326 audit(1768903995.222:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c9b544ad7 code=0x7ffc0000 [ 36.693962][ T29] audit: type=1326 audit(1768903995.232:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c9b4ec0d9 code=0x7ffc0000 [ 36.718967][ T29] audit: type=1326 audit(1768903995.232:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c9b50b58e code=0x7ffc0000 [ 36.743293][ T29] audit: type=1326 audit(1768903995.232:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 36.766909][ T29] audit: type=1326 audit(1768903995.232:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c9b50b58e code=0x7ffc0000 [ 36.792009][ T29] audit: type=1326 audit(1768903995.232:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c9b544ad7 code=0x7ffc0000 [ 36.816418][ T29] audit: type=1326 audit(1768903995.232:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c9b4ec0d9 code=0x7ffc0000 [ 36.840307][ T29] audit: type=1326 audit(1768903995.232:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 37.047148][ T3677] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 37.162243][ T3683] syzkaller0: entered promiscuous mode [ 37.168148][ T3683] syzkaller0: entered allmulticast mode [ 37.237516][ T3688] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.370564][ C0] hrtimer: interrupt took 45275 ns [ 37.990532][ T3719] tipc: Failed to remove unknown binding: 66,0,0/0:1573385223/1573385224 [ 38.008401][ T3719] tipc: Failed to remove unknown binding: 66,0,0/0:1573385223/1573385224 [ 38.067974][ T3729] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 38.153396][ T3729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 38.181372][ T3729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.218963][ T3729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.225666][ T3736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.76'. [ 38.247305][ T3736] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3736 comm=syz.0.76 [ 38.338876][ T3745] loop4: detected capacity change from 0 to 512 [ 38.350666][ T3745] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.79: invalid indirect mapped block 256 (level 2) [ 38.371648][ T3745] EXT4-fs (loop4): 2 truncates cleaned up [ 38.374311][ T3750] loop0: detected capacity change from 0 to 512 [ 38.378113][ T3745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.403647][ T3750] EXT4-fs: Ignoring removed nobh option [ 38.438384][ T3750] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 38.467998][ T3753] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.79: bg 0: block 5: invalid block bitmap [ 38.488022][ T3750] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.80: invalid indirect mapped block 256 (level 1) [ 38.525819][ T3750] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.80: invalid indirect mapped block 2683928664 (level 1) [ 38.559968][ T3577] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 38.572607][ T3577] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.572607][ T3577] [ 38.582621][ T3577] EXT4-fs (loop4): Total free blocks count 0 [ 38.588931][ T3577] EXT4-fs (loop4): Free/Dirty block details [ 38.594870][ T3577] EXT4-fs (loop4): free_blocks=0 [ 38.595376][ T3750] EXT4-fs (loop0): 1 truncate cleaned up [ 38.599966][ T3577] EXT4-fs (loop4): dirty_blocks=6409 [ 38.610968][ T3577] EXT4-fs (loop4): Block reservation details [ 38.616148][ T3750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.617436][ T3577] EXT4-fs (loop4): i_reserved_data_blocks=6409 [ 38.639510][ T3577] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 38.686535][ T3760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 38.696532][ T3760] netlink: 'syz.3.83': attribute type 5 has an invalid length. [ 38.704286][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 38.714550][ T3748] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.80: Invalid block bitmap block 3 in block_group 0 [ 38.728816][ T3748] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 38.749396][ T3748] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.80: invalid indirect mapped block 2683928664 (level 1) [ 38.788812][ T3765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.806301][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.848343][ T3765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.881833][ T3765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.956384][ T3779] process 'syz.4.89' launched '/dev/fd/4' with NULL argv: empty string added [ 38.979875][ T3765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.057011][ T3579] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.093461][ T3579] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.118969][ T3579] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.127834][ T3579] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.197254][ T3796] syz_tun: entered allmulticast mode [ 39.208168][ T3796] syz_tun: left allmulticast mode [ 39.306949][ T3798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 40.015908][ T3808] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 40.086552][ T3812] netlink: 'syz.0.100': attribute type 13 has an invalid length. [ 40.199128][ T3814] loop4: detected capacity change from 0 to 2048 [ 40.269654][ T3812] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.277383][ T3812] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.568289][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.583586][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.760852][ T3570] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.773494][ T3830] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 40.782049][ T3570] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.796104][ T3830] macvlan0: entered allmulticast mode [ 40.801964][ T3830] veth1_vlan: entered allmulticast mode [ 40.835134][ T3570] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.878228][ T3570] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.935449][ T3812] syz.0.100 (3812) used greatest stack depth: 10568 bytes left [ 41.002815][ T3836] loop0: detected capacity change from 0 to 1024 [ 41.035537][ T3836] EXT4-fs: Ignoring removed bh option [ 41.075861][ T3836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.150667][ T3836] EXT4-fs error (device loop0): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.0.108: path /17/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 41.183970][ T3836] EXT4-fs (loop0): Remounting filesystem read-only [ 41.202017][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.375244][ T3855] ªªªªªª: renamed from vlan0 (while UP) [ 41.536221][ T3866] loop4: detected capacity change from 0 to 128 [ 41.571988][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 41.572004][ T29] audit: type=1400 audit(1768904000.312:614): avc: denied { mount } for pid=3865 comm="syz.4.119" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.622487][ T3866] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 41.673927][ T29] audit: type=1400 audit(1768904000.412:615): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.680333][ T3868] loop1: detected capacity change from 0 to 512 [ 41.739352][ T3868] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.748567][ T29] audit: type=1326 audit(1768904000.422:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84a3eacb9 code=0x7ffc0000 [ 41.772715][ T29] audit: type=1326 audit(1768904000.422:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84a3eacb9 code=0x7ffc0000 [ 41.797149][ T29] audit: type=1326 audit(1768904000.422:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe84a3eacb9 code=0x7ffc0000 [ 41.821237][ T29] audit: type=1326 audit(1768904000.422:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84a3eacb9 code=0x7ffc0000 [ 41.845181][ T29] audit: type=1326 audit(1768904000.422:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84a3eacb9 code=0x7ffc0000 [ 41.869175][ T29] audit: type=1326 audit(1768904000.422:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fe84a3eacb9 code=0x7ffc0000 [ 41.893854][ T29] audit: type=1326 audit(1768904000.422:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84a3eacb9 code=0x7ffc0000 [ 41.917843][ T29] audit: type=1326 audit(1768904000.422:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe84a3eacb9 code=0x7ffc0000 [ 41.944419][ T3868] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.120: Allocating blocks 41-42 which overlap fs metadata [ 42.001973][ T3868] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.120: Allocating blocks 41-42 which overlap fs metadata [ 42.045664][ T3868] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.120: Failed to acquire dquot type 1 [ 42.083348][ T3868] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 42.115074][ T3868] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.120: corrupted inode contents [ 42.146290][ T3868] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.120: mark_inode_dirty error [ 42.173123][ T3868] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.120: corrupted inode contents [ 42.189071][ T3881] netlink: 120 bytes leftover after parsing attributes in process `syz.4.123'. [ 42.204106][ T3868] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.120: mark_inode_dirty error [ 42.233351][ T3868] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.120: corrupted inode contents [ 42.246612][ T3883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.125'. [ 42.262479][ T3868] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 42.290903][ T3868] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.120: corrupted inode contents [ 42.315336][ T3868] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.120: mark_inode_dirty error [ 42.347600][ T3868] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 42.349022][ T3884] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 42.374958][ T3868] EXT4-fs (loop1): 1 truncate cleaned up [ 42.376050][ T3883] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3883 comm=syz.2.125 [ 42.404800][ T3868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.462313][ T3891] netlink: 'syz.3.128': attribute type 13 has an invalid length. [ 42.528991][ T3868] syz.1.120 (3868) used greatest stack depth: 9968 bytes left [ 42.572347][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.633661][ T3891] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.641109][ T3891] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.766328][ T3891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.810464][ T3891] veth1_vlan: left allmulticast mode [ 42.853405][ T3570] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.873405][ T3570] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.903640][ T3570] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.915948][ T3570] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.928739][ T3905] loop1: detected capacity change from 0 to 256 [ 42.976593][ T3909] bridge_slave_0: left allmulticast mode [ 42.982886][ T3909] bridge_slave_0: left promiscuous mode [ 42.989272][ T3909] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.993014][ T3904] loop0: detected capacity change from 0 to 2048 [ 43.004586][ T3909] bridge_slave_1: left allmulticast mode [ 43.010676][ T3909] bridge_slave_1: left promiscuous mode [ 43.016818][ T3909] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.026302][ T3310] loop0: p1 < > p4 [ 43.031144][ T3310] loop0: p4 size 8388608 extends beyond EOD, truncated [ 43.040622][ T3909] bond0: (slave bond_slave_0): Releasing backup interface [ 43.049050][ T3904] loop0: p1 < > p4 [ 43.053837][ T3904] loop0: p4 size 8388608 extends beyond EOD, truncated [ 43.064328][ T3909] bond0: (slave bond_slave_1): Releasing backup interface [ 43.104901][ T3909] team0: Port device team_slave_0 removed [ 43.133167][ T3909] team0: Port device team_slave_1 removed [ 43.143394][ T3909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.152991][ T3916] loop0: detected capacity change from 0 to 1024 [ 43.164497][ T3916] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 43.194798][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 43.205504][ T3909] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 43.223931][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 43.243236][ T3913] team0: Mode changed to "activebackup" [ 43.302499][ T3921] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 43.324167][ T3921] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 43.337547][ T3921] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 43.347913][ T3921] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 43.427630][ T3923] delete_channel: no stack [ 43.513356][ T3927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.140'. [ 43.515497][ T3932] netlink: 'syz.2.142': attribute type 39 has an invalid length. [ 43.522404][ T3927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.140'. [ 44.001672][ T3944] xt_hashlimit: size too large, truncated to 1048576 [ 44.052672][ T3947] –: renamed from vxcan1 (while UP) [ 44.307290][ T3960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.152'. [ 44.327934][ T3960] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3960 comm=syz.0.152 [ 44.356575][ T3962] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 44.356575][ T3962] The task syz.1.150 (3962) triggered the difference, watch for misbehavior. [ 45.342511][ T3985] loop4: detected capacity change from 0 to 8192 [ 45.372339][ T3989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 45.772412][ T4002] loop4: detected capacity change from 0 to 1024 [ 46.206055][ T4002] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.168: bad orphan inode 134217728 [ 46.233775][ T4002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.443838][ T4017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.451619][ T4017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.461529][ T4017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.469331][ T4017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.580997][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 46.581017][ T29] audit: type=1400 audit(1768904005.322:761): avc: denied { name_bind } for pid=4009 comm="syz.0.171" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.609737][ T29] audit: type=1400 audit(1768904005.322:762): avc: denied { node_bind } for pid=4009 comm="syz.0.171" saddr=::ffff:172.20.20.187 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.974126][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.099156][ T4014] delete_channel: no stack [ 47.113897][ T4032] syzkaller1: entered promiscuous mode [ 47.119478][ T4032] syzkaller1: entered allmulticast mode [ 47.194157][ T29] audit: type=1400 audit(1768904005.882:763): avc: denied { block_suspend } for pid=4029 comm="syz.0.176" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.382074][ T4046] netlink: 'syz.2.182': attribute type 1 has an invalid length. [ 47.640141][ T4059] loop2: detected capacity change from 0 to 512 [ 47.657999][ T4059] EXT4-fs: Ignoring removed oldalloc option [ 47.704104][ T4059] EXT4-fs (loop2): 1 truncate cleaned up [ 47.737869][ T4059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.877660][ T4065] netlink: 'syz.1.187': attribute type 83 has an invalid length. [ 47.891441][ T4063] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.185: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 47.920746][ T4063] EXT4-fs (loop2): Remounting filesystem read-only [ 48.018784][ T29] audit: type=1400 audit(1768904006.762:764): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.040180][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.062561][ T29] audit: type=1400 audit(1768904006.802:765): avc: denied { bind } for pid=4072 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 48.087396][ T4075] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 48.110869][ T4075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.152543][ T4079] bond1: entered allmulticast mode [ 48.160212][ T29] audit: type=1400 audit(1768904006.882:766): avc: denied { read } for pid=4077 comm="syz.1.193" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.182880][ T29] audit: type=1400 audit(1768904006.892:767): avc: denied { open } for pid=4077 comm="syz.1.193" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.210895][ T4075] bond1: (slave ip6gretap0): making interface the new active one [ 48.219359][ T4075] ip6gretap0: entered allmulticast mode [ 48.226668][ T4075] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 48.251790][ T4083] loop0: detected capacity change from 0 to 256 [ 48.292074][ T4085] loop3: detected capacity change from 0 to 128 [ 48.303332][ T4083] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.314794][ T4085] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 48.342368][ T4085] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 48.350731][ T4085] FAT-fs (loop3): Filesystem has been set read-only [ 48.376014][ T29] audit: type=1400 audit(1768904007.102:768): avc: denied { name_connect } for pid=4087 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 48.424940][ T29] audit: type=1400 audit(1768904007.162:769): avc: denied { remount } for pid=4084 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 48.444772][ T29] audit: type=1400 audit(1768904007.162:770): avc: denied { listen } for pid=4087 comm="syz.4.196" lport=51704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.452089][ T4093] loop1: detected capacity change from 0 to 512 [ 48.526518][ T4093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.547493][ T4101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.200'. [ 48.565119][ T4093] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.582076][ T4083] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 48.590346][ T4083] FAT-fs (loop0): Filesystem has been set read-only [ 48.597087][ T4083] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 48.610702][ T4101] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4101 comm=syz.3.200 [ 48.627916][ T4093] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.198: corrupted inode contents [ 48.678105][ T4093] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.198: mark_inode_dirty error [ 48.752559][ T4093] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.198: corrupted inode contents [ 48.775760][ T4093] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.198: mark_inode_dirty error [ 48.996881][ T4104] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #21: comm syz.1.198: corrupted inode contents [ 49.030069][ T4104] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #21: comm syz.1.198: mark_inode_dirty error [ 49.030568][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 49.067419][ T4110] hsr_slave_1 (unregistering): left promiscuous mode [ 49.074491][ T4104] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #21: comm syz.1.198: corrupted inode contents [ 49.101485][ T4104] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #21: comm syz.1.198: mark_inode_dirty error [ 49.117088][ T4122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.206'. [ 49.138211][ T4122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4122 comm=syz.3.206 [ 49.165139][ T4104] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #21: comm syz.1.198: mark inode dirty (error -117) [ 49.187387][ T4104] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 49.264047][ T4129] netlink: 'syz.0.210': attribute type 4 has an invalid length. [ 49.273531][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.285866][ T4129] netlink: 'syz.0.210': attribute type 4 has an invalid length. [ 49.471267][ T4141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 49.519542][ T4141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 49.729936][ T4149] netlink: 48 bytes leftover after parsing attributes in process `syz.2.217'. [ 49.877639][ T4163] netlink: 'syz.1.223': attribute type 12 has an invalid length. [ 50.237246][ T4175] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 50.261066][ T4175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.281047][ T4175] macvlan2: entered promiscuous mode [ 50.286689][ T4175] macvlan2: entered allmulticast mode [ 50.293093][ T4175] bond1: entered promiscuous mode [ 50.298664][ T4175] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 50.315342][ T4175] bond1: left promiscuous mode [ 50.351334][ T4181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 50.372490][ T4181] team0 (unregistering): Port device team_slave_0 removed [ 50.392283][ T4181] team0 (unregistering): Port device team_slave_1 removed [ 50.627374][ T4193] loop4: detected capacity change from 0 to 512 [ 50.656753][ T4193] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.233: bg 0: block 248: padding at end of block bitmap is not set [ 50.671713][ T4193] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.233: Failed to acquire dquot type 1 [ 50.683620][ T4193] EXT4-fs (loop4): 1 truncate cleaned up [ 50.689782][ T4193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.702717][ T4193] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.872330][ T4205] netlink: 'syz.3.237': attribute type 10 has an invalid length. [ 50.880392][ T4205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.237'. [ 50.891686][ T4205] team0: Port device geneve1 added [ 50.897906][ T3600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.907325][ T3600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.916581][ T3600] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.929242][ T3600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.962291][ T4212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.240'. [ 50.973372][ T4193] syz.4.233 (4193) used greatest stack depth: 9272 bytes left [ 50.989425][ T4212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 50.999430][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.002421][ T4210] netlink: 'syz.3.239': attribute type 2 has an invalid length. [ 51.016489][ T4210] netlink: 199776 bytes leftover after parsing attributes in process `syz.3.239'. [ 51.033829][ T4214] tipc: Failed to remove unknown binding: 66,0,0/0:541113536/541113537 [ 51.044554][ T4214] tipc: Failed to remove unknown binding: 66,0,0/0:541113536/541113537 [ 51.175497][ T4224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 51.340398][ T4231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.248'. [ 51.352405][ T4233] netlink: 'syz.1.249': attribute type 4 has an invalid length. [ 51.609997][ T4252] loop1: detected capacity change from 0 to 1024 [ 51.636000][ T4252] EXT4-fs: Ignoring removed nobh option [ 51.641669][ T4252] EXT4-fs: inline encryption not supported [ 51.691151][ T4252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.714196][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 51.714212][ T29] audit: type=1400 audit(1768904010.452:848): avc: denied { setattr } for pid=4251 comm="syz.1.256" path="/60/file1" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.785579][ T29] audit: type=1400 audit(1768904010.532:849): avc: denied { append } for pid=4251 comm="syz.1.256" path="/60/file1/cpuset.effective_mems" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.880173][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.309158][ T29] audit: type=1400 audit(1768904011.052:850): avc: denied { create } for pid=4272 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 52.328904][ T29] audit: type=1400 audit(1768904011.052:851): avc: denied { write } for pid=4272 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 52.633135][ T4278] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.683454][ T29] audit: type=1400 audit(1768904011.422:852): avc: denied { mounton } for pid=4277 comm="syz.0.264" path="/47/file0" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.619122][ T29] audit: type=1326 audit(1768904012.362:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4289 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84a3eacb9 code=0x7ffc0000 [ 53.785876][ T29] audit: type=1326 audit(1768904012.382:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4289 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84a3eacb9 code=0x7ffc0000 [ 53.809467][ T29] audit: type=1326 audit(1768904012.382:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4289 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84a3eacb9 code=0x7ffc0000 [ 53.833210][ T29] audit: type=1326 audit(1768904012.382:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4289 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe84a3eacb9 code=0x7ffc0000 [ 53.856884][ T29] audit: type=1326 audit(1768904012.432:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4289 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84a3eacb9 code=0x7ffc0000 [ 54.164582][ T4308] validate_nla: 1 callbacks suppressed [ 54.164600][ T4308] netlink: 'syz.2.274': attribute type 30 has an invalid length. [ 54.364718][ T4316] uprobe: syz.1.277:4316 failed to unregister, leaking uprobe [ 54.941973][ T4349] __nla_validate_parse: 1 callbacks suppressed [ 54.941992][ T4349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'. [ 54.992951][ T4350] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4350 comm=syz.1.288 [ 55.269022][ T4346] loop4: detected capacity change from 0 to 32768 [ 55.665638][ T4357] mmap: syz.1.291 (4357) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.769637][ T4367] loop1: detected capacity change from 0 to 512 [ 55.805933][ T4367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.830465][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 55.831082][ T4367] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.909667][ T4367] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.294: bg 0: block 248: padding at end of block bitmap is not set [ 55.947617][ T4367] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.294: Failed to acquire dquot type 1 [ 55.978985][ T4367] EXT4-fs (loop1): 1 truncate cleaned up [ 55.997724][ T4367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.352024][ T4367] syz.1.294 (4367) used greatest stack depth: 9184 bytes left [ 56.353163][ T3319] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 56.390207][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'. [ 56.404867][ T3319] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 56.418382][ T3570] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.427411][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'. [ 56.437120][ T3570] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.450556][ T3570] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.464341][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'. [ 56.478976][ T3570] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.489688][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'. [ 56.562102][ T4383] loop4: detected capacity change from 0 to 512 [ 56.585324][ T4383] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 56.599191][ T4383] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 56.624668][ T3310] udevd[3310]: incorrect jbd checksum on /dev/loop4 [ 56.647245][ T3310] udevd[3310]: incorrect jbd checksum on /dev/loop4 [ 56.684047][ T4383] syz_tun: entered allmulticast mode [ 56.690626][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.716067][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 56.716087][ T29] audit: type=1326 audit(1768904015.462:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 56.748770][ T3570] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.784182][ T29] audit: type=1326 audit(1768904015.462:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 56.808783][ T29] audit: type=1326 audit(1768904015.492:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5c9b50b58e code=0x7ffc0000 [ 56.832294][ T29] audit: type=1326 audit(1768904015.492:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 56.855639][ T29] audit: type=1326 audit(1768904015.492:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 56.879505][ T29] audit: type=1326 audit(1768904015.502:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 56.903246][ T29] audit: type=1326 audit(1768904015.502:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 56.926126][ T3318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 56.926920][ T29] audit: type=1326 audit(1768904015.502:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 56.938270][ T3318] CPU: 0 UID: 0 PID: 3318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.938356][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.938368][ T3318] Call Trace: [ 56.938376][ T3318] [ 56.938385][ T3318] __dump_stack+0x1d/0x30 [ 56.938410][ T3318] dump_stack_lvl+0x95/0xd0 [ 56.938431][ T3318] dump_stack+0x15/0x1b [ 56.938546][ T3318] dump_header+0x80/0x240 [ 56.938566][ T3318] oom_kill_process+0x295/0x350 [ 56.938589][ T3318] out_of_memory+0x97d/0xb80 [ 56.938672][ T3318] try_charge_memcg+0x62e/0xa10 [ 56.938708][ T3318] charge_memcg+0x51/0xc0 [ 56.938737][ T3318] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 56.938769][ T3318] __read_swap_cache_async+0x17b/0x2d0 [ 56.938855][ T3318] swap_cluster_readahead+0x262/0x3c0 [ 56.938886][ T3318] swapin_readahead+0xde/0x840 [ 56.938913][ T3318] ? next_uptodate_folio+0x84c/0x8c0 [ 56.939001][ T3318] ? percpu_counter_add_batch+0xb6/0x130 [ 56.939028][ T3318] ? __rcu_read_unlock+0x4e/0x70 [ 56.939049][ T3318] ? swap_cache_get_folio+0x26f/0x280 [ 56.939077][ T3318] do_swap_page+0x2f4/0x2140 [ 56.939106][ T3318] ? css_rstat_updated+0xbb/0x280 [ 56.939171][ T3318] ? __pfx_default_wake_function+0x10/0x10 [ 56.939204][ T3318] handle_mm_fault+0xb40/0x3030 [ 56.939297][ T3318] ? vma_start_read+0x1c7/0x2c0 [ 56.939324][ T3318] do_user_addr_fault+0x62f/0x1050 [ 56.939359][ T3318] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 56.939382][ T3318] ? irqentry_exit+0x3c/0x510 [ 56.939486][ T3318] exc_page_fault+0x62/0xa0 [ 56.939524][ T3318] asm_exc_page_fault+0x26/0x30 [ 56.939568][ T3318] RIP: 0033:0x7f2df54c8db7 [ 56.939585][ T3318] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 ca ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c8 ed 00 48 01 d1 39 7c 24 [ 56.939603][ T3318] RSP: 002b:00007ffc6d2e7120 EFLAGS: 00010206 [ 56.939621][ T3318] RAX: 0000001b34024000 RBX: 00000000000000ac RCX: 000000000000dac0 [ 56.939635][ T3318] RDX: 000000000a53e8df RSI: 00007ffc6d2e71b0 RDI: 000000000000000a [ 56.939688][ T3318] RBP: 00007ffc6d2e715c R08: 000000002765b707 R09: 7fffffffffffffff [ 56.939702][ T3318] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 56.939716][ T3318] R13: 00000000000927c0 R14: 000000000000d9ee R15: 00007ffc6d2e71b0 [ 56.939734][ T3318] [ 56.939764][ T3318] memory: usage 307200kB, limit 307200kB, failcnt 405 [ 56.961998][ T29] audit: type=1326 audit(1768904015.502:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 56.972207][ T3318] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 56.982865][ T29] audit: type=1326 audit(1768904015.502:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 56.986338][ T3318] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 57.268536][ T3318] Memory cgroup stats for /syz3: [ 57.274526][ T3570] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.322907][ T3570] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.345224][ T3318] cache 0 [ 57.348305][ T3318] rss 4096 [ 57.351431][ T3318] shmem 0 [ 57.354467][ T3318] mapped_file 0 [ 57.357984][ T3318] dirty 0 [ 57.360933][ T3318] writeback 4096 [ 57.364485][ T3318] workingset_refault_anon 130 [ 57.369291][ T3318] workingset_refault_file 811 [ 57.374092][ T3318] swap 262144 [ 57.377483][ T3318] swapcached 4096 [ 57.381186][ T3318] pgpgin 24305 [ 57.384841][ T3318] pgpgout 24304 [ 57.388651][ T3318] pgfault 31811 [ 57.392177][ T3318] pgmajfault 36 [ 57.395786][ T3318] inactive_anon 4096 [ 57.399697][ T3318] active_anon 0 [ 57.403213][ T3318] inactive_file 0 [ 57.406983][ T3318] active_file 0 [ 57.410611][ T3318] unevictable 0 [ 57.414163][ T3318] hierarchical_memory_limit 314572800 [ 57.419692][ T3318] hierarchical_memsw_limit 9223372036854771712 [ 57.426067][ T3318] total_cache 0 [ 57.429806][ T3318] total_rss 4096 [ 57.433623][ T3318] total_shmem 0 [ 57.437318][ T3318] total_mapped_file 0 [ 57.441402][ T3318] total_dirty 0 [ 57.445022][ T3318] total_writeback 4096 [ 57.449183][ T3318] total_workingset_refault_anon 130 [ 57.454471][ T3318] total_workingset_refault_file 811 [ 57.459827][ T3318] total_swap 262144 [ 57.463766][ T3318] total_swapcached 4096 [ 57.468126][ T3318] total_pgpgin 24305 [ 57.472038][ T3318] total_pgpgout 24304 [ 57.476096][ T3318] total_pgfault 31811 [ 57.480261][ T3318] total_pgmajfault 36 [ 57.484263][ T3318] total_inactive_anon 4096 [ 57.488794][ T3318] total_active_anon 0 [ 57.492837][ T3318] total_inactive_file 0 [ 57.497047][ T3318] total_active_file 0 [ 57.501128][ T3318] total_unevictable 0 [ 57.505159][ T3318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.295,pid=4364,uid=0 [ 57.519939][ T3318] Memory cgroup out of memory: Killed process 4364 (syz.3.295) total-vm:96048kB, anon-rss:1204kB, file-rss:22028kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 57.548667][ T3570] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.587768][ T4395] loop0: detected capacity change from 0 to 1024 [ 57.606057][ T4366] syz.3.295 (4366) used greatest stack depth: 7096 bytes left [ 57.638921][ T3570] bridge_slave_1: left allmulticast mode [ 57.644761][ T3570] bridge_slave_1: left promiscuous mode [ 57.650530][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.680745][ T4395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.753903][ T3570] bridge_slave_0: left allmulticast mode [ 57.759650][ T3570] bridge_slave_0: left promiscuous mode [ 57.765375][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.776870][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.904025][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.919649][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.940004][ T3570] bond0 (unregistering): Released all slaves [ 58.019692][ T3570] hsr_slave_0: left promiscuous mode [ 58.037093][ T3570] hsr_slave_1: left promiscuous mode [ 58.055567][ T3570] veth1_macvtap: left promiscuous mode [ 58.061189][ T3570] veth0_macvtap: left promiscuous mode [ 58.075221][ T3570] veth1_vlan: left promiscuous mode [ 58.084570][ T3570] veth0_vlan: left promiscuous mode [ 58.180849][ T4433] loop4: detected capacity change from 0 to 128 [ 58.215519][ T4433] vfat: Unknown parameter 'shortn±ô½¥ame' [ 58.276193][ T4435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.313'. [ 58.509431][ T4387] chnl_net:caif_netlink_parms(): no params data found [ 58.686112][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.693558][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.715104][ T4387] bridge_slave_0: entered allmulticast mode [ 58.732489][ T4387] bridge_slave_0: entered promiscuous mode [ 58.739375][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.746495][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.753836][ T4387] bridge_slave_1: entered allmulticast mode [ 58.760534][ T4387] bridge_slave_1: entered promiscuous mode [ 58.786603][ T4488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.833001][ T4488] vlan2: entered allmulticast mode [ 58.838501][ T4488] bond2: entered allmulticast mode [ 58.873109][ T4387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.887076][ T4497] syz_tun: entered allmulticast mode [ 58.895758][ T4496] syz_tun: left allmulticast mode [ 58.902592][ T4387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.980343][ T4387] team0: Port device team_slave_0 added [ 59.000766][ T4387] team0: Port device team_slave_1 added [ 59.242528][ T4387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.249551][ T4387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.275651][ T4387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.365738][ T4387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.372750][ T4387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.398992][ T4387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.524820][ T4387] hsr_slave_0: entered promiscuous mode [ 59.561430][ T4387] hsr_slave_1: entered promiscuous mode [ 59.587615][ T4387] debugfs: 'hsr0' already exists in 'hsr' [ 59.593416][ T4387] Cannot create hsr debugfs directory [ 59.615336][ T4531] xt_hashlimit: size too large, truncated to 1048576 [ 59.711368][ T4533] –: renamed from vxcan1 (while UP) [ 59.913267][ T4545] delete_channel: no stack [ 59.973933][ T4387] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.010085][ T4387] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.010733][ T4563] netlink: 'syz.4.340': attribute type 39 has an invalid length. [ 60.036591][ T4387] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.069437][ T4387] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.267695][ T4387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.278992][ T4387] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.284701][ T4579] loop2: detected capacity change from 0 to 2048 [ 60.306337][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.313615][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.345525][ T3310] loop2: p1 < > p4 [ 60.350004][ T3310] loop2: p4 size 8388608 extends beyond EOD, truncated [ 60.368402][ T3585] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.375620][ T3585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.393790][ T4579] loop2: p1 < > p4 [ 60.394281][ T4387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.399536][ T4579] loop2: p4 size 8388608 extends beyond EOD, truncated [ 60.458015][ T4387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.475763][ T3007] loop2: p1 < > p4 [ 60.480328][ T3007] loop2: p4 size 8388608 extends beyond EOD, truncated [ 60.620577][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 60.632720][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 60.645622][ T4596] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 60.699849][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 60.766097][ T4607] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 60.776548][ T4387] veth0_vlan: entered promiscuous mode [ 60.786031][ T4387] veth1_vlan: entered promiscuous mode [ 60.825112][ T4387] veth0_macvtap: entered promiscuous mode [ 60.832679][ T4613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 60.856723][ T4387] veth1_macvtap: entered promiscuous mode [ 60.859930][ T4615] netlink: 'syz.2.352': attribute type 13 has an invalid length. [ 60.866601][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.878044][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.888611][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.896325][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.208251][ T4615] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.215845][ T4615] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.406628][ T4615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.432493][ T4615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.537954][ T3570] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.555858][ T3570] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.567065][ T4387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.586471][ T3570] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.596656][ T3570] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.626790][ T4387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.647007][ T3570] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.656685][ T3570] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.674686][ T3570] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.725197][ T3570] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.735794][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 61.735811][ T29] audit: type=1400 audit(1768904020.482:1148): avc: denied { mounton } for pid=4387 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.483658][ T4656] loop5: detected capacity change from 0 to 512 [ 62.518154][ T4640] loop2: detected capacity change from 0 to 32768 [ 62.553750][ T4656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.587519][ T4656] EXT4-fs (loop5): orphan cleanup on readonly fs [ 62.615053][ T4656] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.364: bg 0: block 248: padding at end of block bitmap is not set [ 62.658936][ T4656] Quota error (device loop5): write_blk: dquota write failed [ 62.666787][ T4656] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 62.676928][ T4656] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.364: Failed to acquire dquot type 1 [ 62.711008][ T4656] EXT4-fs (loop5): 1 truncate cleaned up [ 62.727357][ T4656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.818180][ T4661] netlink: 'syz.3.365': attribute type 13 has an invalid length. [ 62.966023][ T1731] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.979067][ T1731] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.999990][ T1731] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.028547][ T1731] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.143657][ T4671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 63.153363][ T4387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.020637][ T4684] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.062194][ T29] audit: type=1400 audit(1768904022.792:1149): avc: denied { name_bind } for pid=4688 comm="syz.2.374" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.129312][ T4684] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.188483][ T4684] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.279209][ T4684] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.358931][ T3563] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.372427][ T3563] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.403500][ T3563] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.423249][ T3563] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.516729][ T4713] netlink: 'syz.4.384': attribute type 1 has an invalid length. [ 65.547761][ T4713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 65.556182][ T4713] bond2: (slave bond3): making interface the new active one [ 65.563812][ T4713] bond2: (slave bond3): Enslaving as an active interface with an up link [ 65.592065][ T4713] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 65.604475][ T4713] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 65.991165][ T4727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 66.036104][ T4729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.388'. [ 66.067274][ T4729] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4729 comm=syz.3.388 [ 66.083739][ T4729] netlink: 'syz.3.388': attribute type 1 has an invalid length. [ 66.131883][ T29] audit: type=1400 audit(1768904024.872:1150): avc: denied { connect } for pid=4732 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.181475][ T4735] loop4: detected capacity change from 0 to 1024 [ 66.199441][ T4735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.225353][ T4735] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.250017][ T29] audit: type=1400 audit(1768904024.992:1151): avc: denied { read } for pid=4732 comm="syz.3.390" path="socket:[9666]" dev="sockfs" ino=9666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.286084][ T4735] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 66.294385][ T4735] System zones: 0-1, 3-36 [ 66.458274][ T4735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.555052][ T29] audit: type=1400 audit(1768904025.292:1152): avc: denied { mounton } for pid=4734 comm="syz.4.391" path="/82/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.577901][ T29] audit: type=1400 audit(1768904025.292:1153): avc: denied { override_creds } for pid=4734 comm="syz.4.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.615927][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.666449][ T4746] netlink: 'syz.4.395': attribute type 16 has an invalid length. [ 66.799156][ T29] audit: type=1400 audit(1768904025.472:1154): avc: denied { read } for pid=4747 comm="syz.0.396" path="socket:[10319]" dev="sockfs" ino=10319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.831830][ T4753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.396'. [ 66.906782][ T4756] netlink: 44 bytes leftover after parsing attributes in process `syz.4.398'. [ 66.916467][ T4756] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.923886][ T4756] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.940908][ T4756] netlink: 'syz.4.398': attribute type 10 has an invalid length. [ 66.950144][ T4756] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.957825][ T4756] bridge0: port 2(bridge_slave_1) entered listening state [ 66.965236][ T4756] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.972528][ T4756] bridge0: port 1(bridge_slave_0) entered listening state [ 66.984087][ T4756] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.991718][ T4756] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.143073][ T4763] loop4: detected capacity change from 0 to 4096 [ 67.163470][ T29] audit: type=1400 audit(1768904025.902:1155): avc: denied { mounton } for pid=4762 comm="syz.4.399" path="/file0" dev="bpf" ino=9705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 67.191148][ T4763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.205789][ T4763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.275942][ T4767] loop0: detected capacity change from 0 to 8192 [ 67.619205][ T9] kernel read not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 68.314541][ T4785] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.418783][ T4790] netlink: 'syz.4.410': attribute type 13 has an invalid length. [ 68.797214][ T4803] loop4: detected capacity change from 0 to 1024 [ 68.989691][ T4807] capability: warning: `syz.2.417' uses deprecated v2 capabilities in a way that may be insecure [ 69.058598][ T4808] loop2: detected capacity change from 0 to 128 [ 70.275344][ T4815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.421'. [ 70.307903][ T4815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 70.525093][ T29] audit: type=1326 audit(1768904029.262:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.2.425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee67b3acb9 code=0x0 [ 70.696786][ T29] audit: type=1400 audit(1768904029.442:1157): avc: denied { bind } for pid=4835 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.756553][ T29] audit: type=1326 audit(1768904029.482:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 70.780628][ T29] audit: type=1326 audit(1768904029.482:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 70.804339][ T29] audit: type=1326 audit(1768904029.482:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 70.827778][ T29] audit: type=1326 audit(1768904029.482:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 70.851674][ T29] audit: type=1326 audit(1768904029.482:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 70.874946][ T29] audit: type=1326 audit(1768904029.482:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 71.519312][ T4878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'. [ 71.555301][ T4858] loop2: detected capacity change from 0 to 512 [ 71.644639][ T4858] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 71.659151][ T4858] EXT4-fs (loop2): 1 truncate cleaned up [ 71.666753][ T4858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.680970][ T4858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.723542][ T4898] netlink: 'syz.3.439': attribute type 1 has an invalid length. [ 71.731582][ T4898] netlink: 668 bytes leftover after parsing attributes in process `syz.3.439'. [ 71.759093][ T4900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.440'. [ 71.880828][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 71.880894][ T29] audit: type=1400 audit(1768904030.622:1229): avc: denied { setopt } for pid=4906 comm="syz.3.443" lport=52589 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 71.968834][ T29] audit: type=1400 audit(1768904030.712:1230): avc: denied { read } for pid=4911 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.018343][ T4916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4916 comm=syz.3.445 [ 72.166379][ T4905] veth1_to_bond: entered allmulticast mode [ 72.180687][ T4905] veth1_to_bond: left allmulticast mode [ 72.291146][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 72.300427][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 72.336195][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 72.363091][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 72.372199][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 72.394574][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 72.458557][ T29] audit: type=1400 audit(1768904031.202:1231): avc: denied { map } for pid=4933 comm="syz.4.447" path="socket:[9882]" dev="sockfs" ino=9882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.505819][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 72.649346][ T4949] macvlan2: entered promiscuous mode [ 72.654741][ T4949] macvlan2: entered allmulticast mode [ 72.827656][ T29] audit: type=1400 audit(1768904031.202:1232): avc: denied { read } for pid=4933 comm="syz.4.447" path="socket:[9882]" dev="sockfs" ino=9882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.850873][ T29] audit: type=1400 audit(1768904031.472:1233): avc: denied { create } for pid=4951 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.905343][ T29] audit: type=1400 audit(1768904031.642:1234): avc: denied { allowed } for pid=4960 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.925015][ T29] audit: type=1400 audit(1768904031.642:1235): avc: denied { connect } for pid=4963 comm="syz.5.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.988051][ T4970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.045541][ T29] audit: type=1400 audit(1768904031.652:1236): avc: denied { bind } for pid=4958 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.065069][ T29] audit: type=1400 audit(1768904031.712:1237): avc: denied { create } for pid=4969 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.085007][ T29] audit: type=1400 audit(1768904031.732:1238): avc: denied { setopt } for pid=4969 comm="syz.2.457" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.236438][ T5000] netlink: 'syz.5.468': attribute type 4 has an invalid length. [ 73.250653][ T5000] netlink: 'syz.5.468': attribute type 4 has an invalid length. [ 73.494574][ T5017] netlink: 'syz.3.473': attribute type 6 has an invalid length. [ 73.760960][ T5030] netlink: 'syz.4.478': attribute type 142 has an invalid length. [ 73.837997][ T5030] loop4: detected capacity change from 0 to 8192 [ 74.270389][ T5054] loop4: detected capacity change from 0 to 512 [ 74.306300][ T5054] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 74.341961][ T5054] EXT4-fs (loop4): mount failed [ 75.134718][ T5074] ip6tnl0: Master is either lo or non-ether device [ 75.323746][ T9] IPVS: starting estimator thread 0... [ 75.415157][ T5083] IPVS: using max 2496 ests per chain, 124800 per kthread [ 75.750621][ T5097] loop2: detected capacity change from 0 to 512 [ 75.779351][ T5097] EXT4-fs: inline encryption not supported [ 75.820771][ T5097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.005998][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.148580][ T5115] loop2: detected capacity change from 0 to 512 [ 76.162758][ T5117] sit0: Caught tx_queue_len zero misconfig [ 76.177866][ T5115] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 76.206918][ T5115] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.299636][ T5115] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.508: Block bitmap for bg 0 marked uninitialized [ 76.330694][ T5125] loop4: detected capacity change from 0 to 764 [ 76.375575][ T5115] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 76.378428][ T5129] loop0: detected capacity change from 0 to 1024 [ 76.400574][ T5115] EXT4-fs (loop2): 1 orphan inode deleted [ 76.419027][ T5129] EXT4-fs: Ignoring removed orlov option [ 76.424878][ T5129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.427316][ T5115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 76.508677][ T5129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.690956][ T5153] __nla_validate_parse: 16 callbacks suppressed [ 76.690976][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.523'. [ 76.718946][ T5153] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 76.731658][ T5153] macvlan2: entered promiscuous mode [ 76.737139][ T5153] macvlan2: entered allmulticast mode [ 76.743250][ T5153] bond2: entered promiscuous mode [ 76.748546][ T5153] bridge1: entered promiscuous mode [ 76.754126][ T5153] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 76.762833][ T5153] bond2: left promiscuous mode [ 76.767866][ T5153] bridge1: left promiscuous mode [ 76.876467][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.993711][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.013315][ T29] kauditd_printk_skb: 513 callbacks suppressed [ 77.013333][ T29] audit: type=1400 audit(1768904035.752:1752): avc: denied { watch } for pid=5165 comm="syz.3.528" path="/110/file0" dev="tmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 77.050608][ T29] audit: type=1400 audit(1768904035.752:1753): avc: denied { mount } for pid=5168 comm="syz.2.529" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 77.075038][ T29] audit: type=1400 audit(1768904035.822:1754): avc: denied { watch } for pid=5168 comm="syz.2.529" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 77.125160][ T5172] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 77.139941][ T5172] bond3: (slave lo): Enslaving as a backup interface with an up link [ 77.148470][ T5172] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 77.195016][ T29] audit: type=1326 audit(1768904035.932:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 77.218846][ T29] audit: type=1326 audit(1768904035.932:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 77.242177][ T29] audit: type=1326 audit(1768904035.932:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 77.265986][ T29] audit: type=1326 audit(1768904035.932:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 77.290152][ T29] audit: type=1326 audit(1768904035.932:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 77.313748][ T29] audit: type=1326 audit(1768904035.932:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 77.336984][ T29] audit: type=1326 audit(1768904035.932:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 77.459632][ T5182] loop2: detected capacity change from 0 to 1024 [ 77.480308][ T5182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.536731][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.722855][ T5196] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.733575][ T5196] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.799597][ T5196] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.810267][ T5196] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.858696][ T5196] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.869249][ T5196] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.922948][ T5196] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.933512][ T5196] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.001584][ T3580] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.009887][ T3580] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.024476][ T3580] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.033194][ T3580] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.049017][ T3580] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.057626][ T3580] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.072006][ T3600] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.080747][ T3600] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.368282][ T5218] loop4: detected capacity change from 0 to 512 [ 78.505379][ T5218] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 78.519128][ T5218] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 78.529296][ T5218] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.544: Corrupt directory, running e2fsck is recommended [ 78.543226][ T5218] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 78.551673][ T5218] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.544: corrupted in-inode xattr: e_name out of bounds [ 78.567438][ T5218] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.544: couldn't read orphan inode 15 (err -117) [ 78.580157][ T5218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.677045][ T5222] futex_wake_op: syz.2.547 tries to shift op by -1; fix this program [ 79.004033][ T5235] loop2: detected capacity change from 0 to 512 [ 79.009995][ T5237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'. [ 79.029561][ T5235] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.552: ea_inode file size=4 entry size=6 [ 79.155961][ T5235] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.195625][ T5237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 79.205681][ T5240] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 79.214387][ T3600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 79.230678][ T3600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 79.240519][ T5218] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.251895][ T5235] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.552: corrupted inode contents [ 79.301674][ T5235] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.552: mark_inode_dirty error [ 79.319685][ T5235] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.552: corrupted inode contents [ 79.320027][ T5237] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 79.358426][ T5235] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.552: mark_inode_dirty error [ 79.375468][ T5235] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.552: mark inode dirty (error -117) [ 79.395404][ T5235] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 79.410657][ T5237] bond3 (unregistering): Released all slaves [ 79.412884][ T5235] EXT4-fs (loop2): 1 orphan inode deleted [ 79.455055][ T3600] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 79.474800][ T3600] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 79.513541][ T5235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.537065][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 79.551158][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 79.584474][ T5252] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 79.598830][ T5252] lo: entered allmulticast mode [ 79.604031][ T5252] bond2: (slave lo): Enslaving as a backup interface with an up link [ 79.631444][ T5252] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 79.666808][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.754255][ T5250] vlan2: entered promiscuous mode [ 79.760597][ T5250] bond0: entered promiscuous mode [ 79.930620][ T5266] loop4: detected capacity change from 0 to 1024 [ 79.972841][ T5266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.025628][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.088228][ T5277] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 80.135971][ T5277] 8021q: adding VLAN 0 to HW filter on device bond4 [ 80.150554][ T5280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.565'. [ 80.167526][ T5280] bond4: entered promiscuous mode [ 80.188737][ T5277] bond4: (slave dummy0): making interface the new active one [ 80.206156][ T5277] dummy0: entered promiscuous mode [ 80.212200][ T5277] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 80.542063][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'. [ 80.568552][ T5283] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 80.569171][ T5286] netlink: 'syz.3.567': attribute type 10 has an invalid length. [ 80.584473][ T5283] macvlan2: entered promiscuous mode [ 80.585188][ T5286] netlink: 156 bytes leftover after parsing attributes in process `syz.3.567'. [ 80.600154][ T5283] macvlan2: entered allmulticast mode [ 80.606172][ T5283] bond1: entered promiscuous mode [ 80.611215][ T5283] bridge1: entered promiscuous mode [ 80.617091][ T5283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 80.624585][ T5283] bond1: left promiscuous mode [ 80.629640][ T5283] bridge1: left promiscuous mode [ 80.803919][ T5296] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 80.818782][ T5296] bond1: (slave lo): Enslaving as a backup interface with an up link [ 80.828993][ T5296] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 81.158528][ T5312] loop0: detected capacity change from 0 to 1024 [ 81.176671][ T5312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.232463][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.598734][ T5323] netlink: 'syz.2.580': attribute type 10 has an invalid length. [ 81.606586][ T5323] netlink: 156 bytes leftover after parsing attributes in process `syz.2.580'. [ 81.999152][ T5336] loop5: detected capacity change from 0 to 764 [ 82.226475][ T5355] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 82.241395][ T5355] bond4: (slave lo): Enslaving as a backup interface with an up link [ 82.251331][ T5355] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 82.317362][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 82.317409][ T29] audit: type=1326 audit(1768904041.062:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5360 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 82.355853][ T29] audit: type=1326 audit(1768904041.092:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5360 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 82.379515][ T29] audit: type=1326 audit(1768904041.092:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5360 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 82.403038][ T29] audit: type=1326 audit(1768904041.092:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5360 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 82.426779][ T29] audit: type=1326 audit(1768904041.092:1999): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5360 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 82.450738][ T29] audit: type=1326 audit(1768904041.092:2000): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5360 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 82.474802][ T29] audit: type=1326 audit(1768904041.092:2001): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5360 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 82.499285][ T29] audit: type=1326 audit(1768904041.092:2002): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5360 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2df55facb9 code=0x7ffc0000 [ 82.523008][ T29] audit: type=1326 audit(1768904041.092:2003): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5360 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2df55faa22 code=0x7ffc0000 [ 82.550666][ T29] audit: type=1326 audit(1768904041.092:2004): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5360 comm="syz.3.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2df55bb58e code=0x7ffc0000 [ 83.208324][ T5381] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 83.251274][ T5381] 8021q: adding VLAN 0 to HW filter on device bond5 [ 83.279493][ T5381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.599'. [ 83.289022][ T5381] bond5: entered promiscuous mode [ 83.306354][ T5381] bond5: (slave dummy0): making interface the new active one [ 83.314198][ T5381] dummy0: entered promiscuous mode [ 83.319857][ T5381] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 83.341387][ T5387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.601'. [ 83.807930][ T5398] vlan2: entered promiscuous mode [ 83.814360][ T5398] bond0: entered promiscuous mode [ 83.820710][ T5398] bond_slave_0: entered promiscuous mode [ 83.830821][ T5398] bond_slave_1: entered promiscuous mode [ 83.977159][ T5405] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5405 comm=syz.2.610 [ 84.151262][ T5413] syzkaller0: entered promiscuous mode [ 84.151353][ T5413] syzkaller0: entered allmulticast mode [ 84.610298][ T5455] bond5: invalid ARP target 0.0.0.0 specified for addition [ 84.617605][ T5455] bond5: option arp_ip_target: invalid value (0) [ 84.624807][ T5455] bond5 (unregistering): Released all slaves [ 84.643574][ T5458] loop5: detected capacity change from 0 to 128 [ 84.663727][ T5458] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.676716][ T5458] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.735848][ T5468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.623'. [ 84.796829][ T4387] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.813706][ T5478] bond3: option mode: unable to set because the bond device has slaves [ 84.910317][ T5490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 84.945198][ T5486] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.955134][ T5486] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.045897][ T5505] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 85.057211][ T5486] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.067300][ T5486] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.111035][ T5505] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 85.121353][ T3585] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 85.133091][ T5505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.142724][ T5486] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.152670][ T5486] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.242245][ T3575] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 85.317653][ T5486] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.328030][ T5486] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.350610][ T5520] netlink: 'syz.0.630': attribute type 4 has an invalid length. [ 85.504647][ T3577] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.513368][ T3577] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.610134][ T3577] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.618654][ T3577] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.637918][ T3577] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.646322][ T3577] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.656308][ T3577] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.664611][ T3577] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.706938][ T5532] loop4: detected capacity change from 0 to 512 [ 85.727898][ T5532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.766450][ T5532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.804727][ T5542] loop2: detected capacity change from 0 to 2048 [ 85.822007][ T5532] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.915455][ T3310] loop2: p1 p3 p4 [ 85.943530][ T3310] loop2: p4 size 589824 extends beyond EOD, truncated [ 85.958065][ T5542] loop2: p1 p3 p4 [ 85.961465][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.967262][ T5542] loop2: p4 size 589824 extends beyond EOD, truncated [ 86.002292][ T5530] loop0: detected capacity change from 0 to 512 [ 86.020306][ T3007] loop2: p1 p3 p4 [ 86.028666][ T3007] loop2: p4 size 589824 extends beyond EOD, truncated [ 86.047078][ T5530] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.060927][ T5558] unsupported nla_type 52263 [ 86.061514][ T5530] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.128651][ T5530] EXT4-fs (loop0): 1 truncate cleaned up [ 86.150589][ T5530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.256368][ T5565] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 86.266712][ T5565] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 86.275068][ T5565] vhci_hcd vhci_hcd.0: Device attached [ 86.303495][ T5558] netlink: 'syz.4.641': attribute type 21 has an invalid length. [ 86.311473][ T5558] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.322614][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.339043][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 86.353542][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 86.397156][ T5566] vhci_hcd: connection closed [ 86.397424][ T3585] vhci_hcd vhci_hcd.2: stop threads [ 86.407919][ T3585] vhci_hcd vhci_hcd.2: release socket [ 86.408741][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 86.413310][ T3585] vhci_hcd vhci_hcd.2: disconnect device [ 86.429707][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 86.469974][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 86.484172][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 86.670234][ T5573] syzkaller0: entered promiscuous mode [ 86.675798][ T5573] syzkaller0: entered allmulticast mode [ 87.041888][ T5583] loop2: detected capacity change from 0 to 512 [ 87.088240][ T5583] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.133537][ T5583] EXT4-fs (loop2): 1 truncate cleaned up [ 87.140503][ T5585] netlink: 'syz.3.652': attribute type 39 has an invalid length. [ 87.148881][ T5583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.279095][ T5592] syz_tun: entered allmulticast mode [ 87.296222][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.326816][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 87.326831][ T29] audit: type=1326 audit(1768904046.072:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c9b544ad7 code=0x7ffc0000 [ 87.390037][ T29] audit: type=1326 audit(1768904046.102:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c9b4ec0d9 code=0x7ffc0000 [ 87.413690][ T29] audit: type=1326 audit(1768904046.102:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c9b544ad7 code=0x7ffc0000 [ 87.437193][ T29] audit: type=1326 audit(1768904046.102:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c9b4ec0d9 code=0x7ffc0000 [ 87.460563][ T29] audit: type=1326 audit(1768904046.102:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 87.484695][ T29] audit: type=1326 audit(1768904046.112:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c9b544ad7 code=0x7ffc0000 [ 87.508149][ T29] audit: type=1326 audit(1768904046.112:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c9b4ec0d9 code=0x7ffc0000 [ 87.531935][ T29] audit: type=1326 audit(1768904046.112:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 87.555921][ T29] audit: type=1326 audit(1768904046.112:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 87.579671][ T29] audit: type=1326 audit(1768904046.122:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c9b544ad7 code=0x7ffc0000 [ 87.665708][ T5605] syzkaller0: entered promiscuous mode [ 87.671240][ T5605] syzkaller0: entered allmulticast mode [ 87.749584][ T5614] loop0: detected capacity change from 0 to 512 [ 87.800344][ T5614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.836064][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.870929][ T5623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.663'. [ 87.888189][ T5623] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5623 comm=syz.3.663 [ 88.007465][ T5629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 88.016419][ T5629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.665'. [ 88.138740][ T5631] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 88.397316][ T5638] loop0: detected capacity change from 0 to 512 [ 88.411583][ T5638] EXT4-fs (loop0): orphan cleanup on readonly fs [ 88.418259][ T5638] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 88.433867][ T5638] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 88.473960][ T5638] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.669: attempt to clear invalid blocks 2 len 1 [ 88.488643][ T5641] netlink: 28 bytes leftover after parsing attributes in process `syz.5.670'. [ 88.497913][ T5641] netlink: 28 bytes leftover after parsing attributes in process `syz.5.670'. [ 88.544381][ T5638] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.669: invalid indirect mapped block 1819239214 (level 0) [ 88.574746][ T5638] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.669: invalid indirect mapped block 1819239214 (level 1) [ 88.589462][ T5638] EXT4-fs (loop0): 1 truncate cleaned up [ 88.595886][ T5638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.631515][ T5638] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 88.642318][ T5638] EXT4-fs error (device loop0): __ext4_remount:6789: comm syz.0.669: Abort forced by user [ 88.653108][ T5638] EXT4-fs (loop0): Remounting filesystem read-only [ 88.659803][ T5638] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 88.662020][ T5651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.685392][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 88.699558][ T5651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.719669][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.159569][ T3399] kernel read not supported for file bpf-prog (pid: 3399 comm: kworker/1:3) [ 89.212105][ T5657] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.219493][ T5657] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.341706][ T5660] netlink: 'syz.0.675': attribute type 2 has an invalid length. [ 89.538615][ T5661] loop0: detected capacity change from 0 to 8192 [ 89.569096][ T5661] netlink: 44 bytes leftover after parsing attributes in process `syz.0.675'. [ 89.580522][ T5657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.601136][ T5657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.658547][ T5657] macvlan2: left promiscuous mode [ 89.663640][ T5657] macvlan2: left allmulticast mode [ 89.677719][ T3563] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.696731][ T3563] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.736976][ T3563] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.775364][ T3563] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.856534][ T5667] loop5: detected capacity change from 0 to 512 [ 89.894452][ T5667] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 89.915263][ T5667] EXT4-fs (loop5): mount failed [ 90.060852][ T5678] bond0: (slave vlan2): Opening slave failed [ 90.232119][ T5685] netlink: 'syz.0.686': attribute type 1 has an invalid length. [ 90.261750][ T5685] 8021q: adding VLAN 0 to HW filter on device bond4 [ 90.336905][ T5685] veth9: entered promiscuous mode [ 90.358596][ T5685] bond4: (slave veth9): Enslaving as an active interface with a down link [ 90.368324][ T5696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.680'. [ 90.414368][ T5685] veth11: entered promiscuous mode [ 90.470848][ T5685] bond4: (slave veth11): Enslaving as an active interface with a down link [ 90.538847][ T5707] loop0: detected capacity change from 0 to 128 [ 90.579403][ T5707] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 90.587427][ T5707] FAT-fs (loop0): Filesystem has been set read-only [ 90.953653][ T5730] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 90.980564][ T5732] netlink: 'syz.0.701': attribute type 10 has an invalid length. [ 90.995038][ T5732] team0 (unregistering): Port device team_slave_0 removed [ 91.003264][ T5732] team0 (unregistering): Port device team_slave_1 removed [ 91.039853][ T5730] 8021q: adding VLAN 0 to HW filter on device bond6 [ 91.052974][ T5730] ip6erspan0: entered promiscuous mode [ 91.062681][ T5730] bond6: (slave ip6erspan0): making interface the new active one [ 91.072262][ T5730] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 91.089128][ T5730] macvlan2: entered promiscuous mode [ 91.095204][ T5730] bond6: entered promiscuous mode [ 91.101025][ T5730] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.109655][ T5730] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 91.126579][ T5730] bond6: left promiscuous mode [ 91.138001][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 91.147284][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.702'. [ 91.156339][ T5735] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 91.229765][ T5738] loop5: detected capacity change from 0 to 512 [ 91.235390][ T5739] loop4: detected capacity change from 0 to 128 [ 91.246118][ T5741] netlink: 'syz.0.705': attribute type 1 has an invalid length. [ 91.261185][ T5741] 8021q: adding VLAN 0 to HW filter on device bond5 [ 91.274743][ T5738] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.283869][ T5738] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.297851][ T5739] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.310266][ T5739] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.321080][ T5738] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.704: Allocating blocks 41-42 which overlap fs metadata [ 91.373402][ T5739] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.385543][ T5741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.705'. [ 91.401916][ T5738] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.704: Allocating blocks 41-42 which overlap fs metadata [ 91.415763][ T5741] bond5: entered promiscuous mode [ 91.420898][ T5741] bond5: entered allmulticast mode [ 91.465404][ T5738] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.704: Failed to acquire dquot type 1 [ 91.491474][ T5757] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 91.555322][ T5738] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 91.595090][ T5738] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.704: corrupted inode contents [ 91.635341][ T5738] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.704: mark_inode_dirty error [ 91.658416][ T5760] 8021q: adding VLAN 0 to HW filter on device bond7 [ 91.682713][ T5738] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.704: corrupted inode contents [ 91.695712][ T5738] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.704: mark_inode_dirty error [ 91.715906][ T5760] bond6: (slave bond7): making interface the new active one [ 91.723731][ T5760] bond6: (slave bond7): Enslaving as an active interface with an up link [ 91.725355][ T5738] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.704: corrupted inode contents [ 91.746586][ T5738] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 91.755533][ T5738] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.704: corrupted inode contents [ 91.767863][ T5738] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.704: mark_inode_dirty error [ 91.776651][ T5762] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 91.791300][ T5762] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 91.802050][ T5738] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 91.818804][ T5738] EXT4-fs (loop5): 1 truncate cleaned up [ 91.840826][ T5738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.892821][ T5738] tipc: Started in network mode [ 91.897846][ T5738] tipc: Node identity ac14140f, cluster identity 4711 [ 91.904809][ T5738] tipc: New replicast peer: 255.255.255.255 [ 91.910900][ T5738] tipc: Enabled bearer , priority 10 [ 91.930486][ T5767] loop0: detected capacity change from 0 to 164 [ 91.948003][ T4387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.958607][ T5767] Unable to read rock-ridge attributes [ 91.973712][ T5755] loop4: detected capacity change from 0 to 512 [ 91.983622][ T5767] Unable to read rock-ridge attributes [ 92.254131][ T5811] loop0: detected capacity change from 0 to 512 [ 92.342908][ T5811] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 92.387888][ T5811] EXT4-fs (loop0): mount failed [ 92.478823][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.723'. [ 92.488180][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.723'. [ 92.643726][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 92.643741][ T29] audit: type=1400 audit(1768904051.382:2357): avc: denied { lock } for pid=5836 comm="syz.5.726" path="/65/file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.684006][ T5840] loop2: detected capacity change from 0 to 128 [ 92.813131][ T5840] syz.2.727: attempt to access beyond end of device [ 92.813131][ T5840] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 92.855529][ T5840] syz.2.727: attempt to access beyond end of device [ 92.855529][ T5840] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 92.899384][ T5840] syz.2.727: attempt to access beyond end of device [ 92.899384][ T5840] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 92.933073][ T5859] netlink: 'syz.4.732': attribute type 13 has an invalid length. [ 92.935014][ T5840] syz.2.727: attempt to access beyond end of device [ 92.935014][ T5840] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 92.968864][ T5840] syz.2.727: attempt to access beyond end of device [ 92.968864][ T5840] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 92.982449][ T5859] gretap0: refused to change device tx_queue_len [ 92.997568][ T5859] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 93.013721][ T5840] syz.2.727: attempt to access beyond end of device [ 93.013721][ T5840] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 93.013767][ T5840] syz.2.727: attempt to access beyond end of device [ 93.013767][ T5840] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 93.013807][ T5840] syz.2.727: attempt to access beyond end of device [ 93.013807][ T5840] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 93.013879][ T5840] syz.2.727: attempt to access beyond end of device [ 93.013879][ T5840] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 93.014006][ T5840] syz.2.727: attempt to access beyond end of device [ 93.014006][ T5840] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 93.035118][ T3674] tipc: Node number set to 2886997007 [ 93.055226][ T5859] netlink: 'syz.4.732': attribute type 4 has an invalid length. [ 93.276495][ T29] audit: type=1400 audit(1768904052.022:2358): avc: denied { write } for pid=5874 comm="syz.2.738" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 93.660207][ T29] audit: type=1326 audit(1768904052.402:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.5.743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c32f1acb9 code=0x0 [ 93.824818][ T5896] bond4: (slave dummy0): Releasing active interface [ 93.831905][ T5896] dummy0: left promiscuous mode [ 93.838049][ T5896] batman_adv: batadv0: Adding interface: dummy0 [ 93.844443][ T5896] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.870143][ T5896] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 93.876107][ T29] audit: type=1400 audit(1768904052.622:2360): avc: denied { ioctl } for pid=5895 comm="syz.3.747" path="socket:[14205]" dev="sockfs" ino=14205 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.981957][ T5901] __nla_validate_parse: 6 callbacks suppressed [ 93.981978][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 94.020830][ T5899] hugetlbfs: syz.3.748 (5899): Using mlock ulimits for SHM_HUGETLB is obsolete [ 94.054338][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 94.063438][ T5901] netlink: 'syz.0.749': attribute type 1 has an invalid length. [ 94.962105][ T5933] loop5: detected capacity change from 0 to 128 [ 94.966108][ T5934] loop2: detected capacity change from 0 to 512 [ 94.983487][ T5932] loop4: detected capacity change from 0 to 512 [ 94.990737][ T5934] EXT4-fs: Ignoring removed oldalloc option [ 95.002087][ T5932] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.038063][ T5934] EXT4-fs (loop2): 1 truncate cleaned up [ 95.044414][ T5934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.067933][ T5932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.081877][ T5932] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.164198][ T29] audit: type=1400 audit(1768904053.902:2361): avc: denied { append } for pid=5929 comm="syz.4.759" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.218229][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.228723][ T29] audit: type=1400 audit(1768904053.942:2362): avc: denied { ioctl } for pid=5929 comm="syz.4.759" path="/149/bus/file1" dev="loop4" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.277638][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.296178][ T5948] syz.2.764 uses obsolete (PF_INET,SOCK_PACKET) [ 95.338373][ T5937] ================================================================== [ 95.346581][ T5937] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 95.353815][ T5937] [ 95.356149][ T5937] write to 0xffff88811a5c6014 of 4 bytes by task 5933 on cpu 1: [ 95.364139][ T5937] __xa_set_mark+0x172/0x1a0 [ 95.368751][ T5937] __folio_mark_dirty+0x383/0x490 [ 95.373821][ T5937] mark_buffer_dirty+0x11e/0x200 [ 95.378771][ T5937] block_write_end+0x12d/0x210 [ 95.383545][ T5937] generic_write_end+0x56/0x150 [ 95.388497][ T5937] fat_write_end+0x4f/0x160 [ 95.393220][ T5937] generic_perform_write+0x311/0x490 [ 95.398518][ T5937] __generic_file_write_iter+0x9e/0x120 [ 95.404171][ T5937] generic_file_write_iter+0x8d/0x310 [ 95.409559][ T5937] iter_file_splice_write+0x6bc/0xa80 [ 95.415046][ T5937] direct_splice_actor+0x156/0x2a0 [ 95.420179][ T5937] splice_direct_to_actor+0x311/0x670 [ 95.425655][ T5937] do_splice_direct+0x119/0x1a0 [ 95.430518][ T5937] do_sendfile+0x380/0x650 [ 95.434946][ T5937] __x64_sys_sendfile64+0x105/0x150 [ 95.440171][ T5937] x64_sys_call+0x2db1/0x3000 [ 95.444857][ T5937] do_syscall_64+0xc0/0x2a0 [ 95.449719][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.455620][ T5937] [ 95.457949][ T5937] read to 0xffff88811a5c6014 of 4 bytes by task 5937 on cpu 0: [ 95.465621][ T5937] xas_find_marked+0x5d7/0x620 [ 95.470587][ T5937] find_get_entry+0x5d/0x380 [ 95.475205][ T5937] filemap_get_folios_tag+0xb6/0x230 [ 95.480504][ T5937] file_write_and_wait_range+0x20c/0x2f0 [ 95.486240][ T5937] __generic_file_fsync+0x46/0x160 [ 95.491379][ T5937] fat_file_fsync+0x49/0x100 [ 95.496158][ T5937] vfs_fsync_range+0x10d/0x130 [ 95.501485][ T5937] generic_file_write_iter+0x1ba/0x310 [ 95.506980][ T5937] iter_file_splice_write+0x6bc/0xa80 [ 95.512421][ T5937] direct_splice_actor+0x156/0x2a0 [ 95.517535][ T5937] splice_direct_to_actor+0x311/0x670 [ 95.522915][ T5937] do_splice_direct+0x119/0x1a0 [ 95.527793][ T5937] do_sendfile+0x380/0x650 [ 95.532228][ T5937] __x64_sys_sendfile64+0x105/0x150 [ 95.537571][ T5937] x64_sys_call+0x2db1/0x3000 [ 95.542349][ T5937] do_syscall_64+0xc0/0x2a0 [ 95.546855][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.552844][ T5937] [ 95.555265][ T5937] value changed: 0x04000021 -> 0x0e000021 [ 95.561248][ T5937] [ 95.563779][ T5937] Reported by Kernel Concurrency Sanitizer on: [ 95.569957][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: syz.5.760 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.579780][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.589846][ T5937] ================================================================== [ 95.630092][ T5943] loop0: detected capacity change from 0 to 128 [ 95.632791][ T29] audit: type=1326 audit(1768904054.372:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 95.668144][ T5953] loop4: detected capacity change from 0 to 1024 [ 95.683229][ T29] audit: type=1326 audit(1768904054.412:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 95.706941][ T29] audit: type=1326 audit(1768904054.412:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 95.730535][ T29] audit: type=1326 audit(1768904054.412:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.4.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b54acb9 code=0x7ffc0000 [ 95.781579][ T5953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.873314][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.