last executing test programs: 1m49.356159955s ago: executing program 0 (id=241): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) 1m49.28197293s ago: executing program 0 (id=242): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r3, 0x4, 0x3, 0x7, 0x7, 0x8000}, &(0x7f0000000080)=0x14) 1m49.189445925s ago: executing program 0 (id=244): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') unshare(0x60000600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0) 1m48.924234791s ago: executing program 0 (id=250): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@jqfmt_vfsold}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 1m48.730236554s ago: executing program 0 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000140)={0x0, 0x980a, 0x2, 0x400002, 0xc5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) 1m48.291784851s ago: executing program 0 (id=266): syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x25, &(0x7f0000000540)=@string={0x25, 0x3, "7036aae76ff4739f39be35830a3e80a091594647f0b23f18fd91ece93955bbe7ec49e6"}}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m48.291508691s ago: executing program 32 (id=266): syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x25, &(0x7f0000000540)=@string={0x25, 0x3, "7036aae76ff4739f39be35830a3e80a091594647f0b23f18fd91ece93955bbe7ec49e6"}}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m45.072588018s ago: executing program 1 (id=324): r0 = io_uring_setup(0x516, &(0x7f0000000540)={0x0, 0x7dc6, 0x1, 0x503fa, 0x8100014a}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = epoll_create1(0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000340)={0x90000019}) close_range(r0, 0xffffffffffffffff, 0x0) 1m45.029097901s ago: executing program 1 (id=325): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) accept4(r0, 0x0, 0x0, 0x80000) getpeername(r0, 0x0, 0x0) 1m44.012725853s ago: executing program 1 (id=334): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) 1m43.866852662s ago: executing program 1 (id=339): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204]}) write$UHID_INPUT2(r0, 0x0, 0x90) 1m42.935665479s ago: executing program 1 (id=358): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1m42.583959751s ago: executing program 1 (id=368): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020bd70100600010007000000080009000200000008000b000000000008000c00a80a0000050012"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m42.563335422s ago: executing program 33 (id=368): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020bd70100600010007000000080009000200000008000b000000000008000c00a80a0000050012"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m3.304690062s ago: executing program 2 (id=1304): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0007}]}) socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) 1m3.273362024s ago: executing program 2 (id=1305): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) 1m3.256600556s ago: executing program 2 (id=1306): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$eJzs281qE1EYxvGnH9ra2k60Wm1FfFEE3QxtvIJQWhADSm3EDxCmdqIh06RkQiUitju3Xkdx6U4Qb6AbL0BcuOvGZRfiSCexTdoUdWFGzf+3OW85fcI5vGfCWWS27r5aLuZDN+9V1dtj6pfWtS2l1Ks+1fU0xt64Pqpm67o6lv10/va9+zcy2ezsvNlcZuFa2sxGL7x7+vz1xffV4TtvRt8OaDP1cOtL+vPm+ObE1reFJ4XQCqGVylXzbLFcrnqLgW9LhbDomt26/NELfSuUQr/SMp8PyisrNfNKSyNDKxU/DM0r1azo16xatmqlZt5jr1Ay13VtZEj4mdzG/LyXSXoV+LMqlYw3I2nywExuI5EFAQCARP2d9//A5/7fCdz/u8HO/f9B4/ltxf0fAAAAAAAAAAAAAAAAAAAAAIB/wXYUOVEUOT/GI1L8hk/U+PuYpCFJw5KOSxqRNCrJkZSSdELSSUljkk5JOi1pXNIZSWclTTR9VtJ7xUGH9b+P/ncFnv/uRv+7W9OLu4PS8svV3GquPtbnM3kVFMjXlBx9jXvZUK/nrmdnpyyW0rnltUZ+bTXX15qflrNzYNrlp+t5a80PxOduN5+Ws3PA2uXTbfODunKpKe/K0YdHKivQUnwm9/Ivps1mbmb35Sfj//vfubarbf9c97D5ev4Xzkc01bY//ZrsT3bvkMLas6IXBH6FgoKCYrdI+psJnbDX9KRXAgAAAAAAAAAAAAAAAAD4HZ34OWHSewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYL/vAQAA//94NGA9") r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 1m3.210684698s ago: executing program 2 (id=1308): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x105142, 0x2c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) 1m3.02914257s ago: executing program 2 (id=1315): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu>00||!') 1m2.86596354s ago: executing program 2 (id=1319): openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m2.86581678s ago: executing program 34 (id=1319): openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 30.539128945s ago: executing program 6 (id=2083): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 30.334336708s ago: executing program 6 (id=2084): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000000), 0xcff5}, 0x38) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 30.236422053s ago: executing program 6 (id=2085): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e23, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffe}, 0x18, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x40c0) 30.183444627s ago: executing program 6 (id=2087): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) unshare(0x22020600) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ftruncate(0xffffffffffffffff, 0x2007ffb) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 29.943727161s ago: executing program 6 (id=2093): setresuid(0xee00, 0xee00, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) write$P9_RREADDIR(r0, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) 29.543012396s ago: executing program 6 (id=2100): set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 29.525558707s ago: executing program 35 (id=2100): set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 25.665818044s ago: executing program 7 (id=2171): r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r0, 0xb) r1 = socket(0x1e, 0x1, 0x0) recvmmsg(r1, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') shmctl$SHM_UNLOCK(r0, 0xc) 25.619153777s ago: executing program 7 (id=2181): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) setfsgid(0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r3) 25.555755101s ago: executing program 7 (id=2174): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002340)=@delchain={0x24, 0x65, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x9, 0xfff1}, {0xfff1, 0xfff1}, {0xc, 0x8}}}, 0x24}}, 0x0) 25.506409644s ago: executing program 7 (id=2176): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 25.468782846s ago: executing program 7 (id=2177): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000b80)=[{&(0x7f0000000280)='X', 0x1}, {&(0x7f0000000180)="b6", 0x1}, {&(0x7f0000000380)="88", 0x1}, {&(0x7f0000000400)="83", 0x1}, {&(0x7f0000004480)="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", 0xb81}, {&(0x7f0000000500)="f4", 0x1}, {&(0x7f0000002480)="c97a88346df66dc806356e1c85d733680cc02564c94f5f37c7634acca95056e312e2c4e2aae43958a102a119a8409f0614e58311ea1b31bca31fba9a638c7c274b8caf83b750dd9decc6abf210c35fbd825f88154d569747dfd2c6b722cb3f9099b47b3e71cf8b9607a37930598ba484da31766119af0802938049d220ca835cfba3445e57144ce6490edc384b4f6aa0a18c39c6c288134c56ccdf02ca0bb82ad9166d84f4cf57cbba1b8510b59e1e1f05a5a59762d5a4499fa60a5e37ddd1f3ecc114191d029cd516bed757b945653b27ec471addfc4c7e1781895cc40e823236d85f1ce35f6e281906788def77b1a9c0801c5b6a4ed5be855df7fdac2ee9d05386795de9bb191c90a6d9f0d1b0af10d07d9cbbf96c3128fe9479e156ff8033c958b52651f850db80a112cb8deef82cd07c9eeca9e79f9a3d2c68ac334e696a5b2451e845e63bd45f95196fd8779bbecc7419f4d551bd64c2c4c5f6a65658752fcb4ec33cb0f69e5eba554a4b74873699a3c2b3cf102d00ba5ee9cd5712c0ea3019cdc8857a272a80d6dd19c716b6c37b69eb4978b52bb5d4b399768617afb153f68242aec7610e375e36602ed746c29652afd1beb2b1408cce1f7d600e7d867d584c5a6c014b7eff90bb3fe6858d28a859c366d93e517eaf6b977aa2462a90e36eff6a3a0a08cbe6c9909e61d0dfcf130f8e213fe5ac78cd721f8d02b02c0095a12524ac68058eb6f81b560eb9befeaa15d5df273529a4ddf8a0a05746e27bd3383ce6a3a90a4c40ccde276d4a433b31afa8ba4ed2c3c954933e78c7eeeab597696ee13e5947a8a441c0c42caebee1cdcc6ef52963aa718e99f979c7dfba653954a886eb421ac39a30e14acddabf6536542f18129ce8bd02a886fe9aa15799185d866c980869ce035b78910df718d4d0b32bb7e3b736ca493a7040a6443e024f2beca2995553177c80a6aa3ae6d53110db0bd099450e41e1fe16592b6e67e076129020a04a49b9e406ff7908049258b8f3b966097503dffe4962db096ae189ccecb81b7b26259b8d8ba4e3ca0de7cb1d1c34c1f34e575e98c5cb5aa91afab8e5819483f097b166935382d42b20d032a63a3887f950b2a435c1575334dfadaac0bf2ef2e1c40a3f63b5505ae6bd810a681a531ae3ef2821cdc929a335ef7d7a1491cb8c1abcfadccfcd212df07997ab36b3c5d82f1318cd069c3e6df2167e1168462958b0437f3b18678aca2977ef8ae3d610a2f31c6b19581411384a4e0d88bdeb7b80106277685f157413ed92ce2815b74a2f5437a3a6fb6b08ace0776173f8219c709e1f8b965f62a949b842020a766820c1f457ba15dc41764d01925c05fc5f9f48808fe46cfb364861cdb3a4008338c55f31ce4b0317cdd3578bc8efc37285bb3fe0309f83b5dc622af1c02d5df2b73530d0a6dcf94f27012bfa79be3bc19f5fe389555d8fbdce26fa31f0dc910a95525336a2d83d35b3d0e2e3a9a74d8af294a58845ceb134f0003dd8c2085504842508313342b9aafb2ff3a1104e657967858e24ebbb0eea5d688b7315bf918aa3b20b71c635c84eee5a23de1c7a2d4c5bd7714134a1cec622f24c26b11428263d25518ed9e85d33b807e1110cf2c2c31fbcb34cfd69abe5363b7e838e8a3f3766a6c953d32ccbfc9e8e3c02d7486692849888899be048e8bb30355a9e592f406717c6d44891192f59dc712872a73c5f1fef0b040f1b5445be8b4427c0f7925a2c77b1e4684de6158235e303254dbd5e09a55d689b9d4e5e8f5fe04ea39dbf779e3d9ff616fbe9be261c086e30c27c89df5acf8624be587af6d13b11d0abcf16cd70f82897963e8dd327526999d053a39bb6f39d7f5bbd43352cd8e776025f4144589e1a8c24cdfa97cc09a7ba4bd442bc9fa02e56ced0454edef90089db6b82ae2979dc7b4a53d4b6b812a56dcda4121e26a3a3232cc81cd1c38644af4e206784e3d1c1f3d9d78f1d75272cd45bd4e8552f071598194b128413ed9f92175add17399fa3741f36750ed9716e00089fd003f3c0864eb0fc991dcb7eb59a827e19575cc79ca269e7e42729234bd8b0c1756ac0c7095484a980ba2406e818fd8a126fc2e2276f28736857f6d5933548b57ed5ac87145bd1acfc89962276d24d6374a939f9950c4298ba663b3f57af1795e1140fdcbf82ac5b4c686fd44a713a39e5a9a04f26403a9b99f143d2ce6ed5a82eb515f0880d049175d635f5060e99538c68fbe7c1e883738a168cb7a1d63975e5fd8339cfba10daa95dc1becad4173d8c78ec70470b501df74679d973bec49d0be291b2ce3a0a0721fbb1ea0282fed83a64725c457c60627cecb4a630ebfdd913fc2a6c1790a50dc88f5a4dea352960590d5d613a5852c3474277b4feeef891c263a55e8b5e830a94dd994d862d929242820f6587bb17feeaf341aa9b30c7cedaf1c89dfc3d702f09d7734fd45f01d6fe9bbb4ea1f1b2b862889c3512dbdbc0aacf220edf911b0daaa4d579641e74801c259e005b4127ce4a8ac698fabe38e0e70c31c39576542a54eb9b95ddb0de57fdf9dae325509bdcb528d99847f2ad9a58d4b4a55e4295805925366b92c6012fd4a667fa59d5f41a13aab9391a53cbf75d32c664835e37e102eaf7da5b3e96b113239c7a4fcba4cf01c6662fee8c51a11ce74772940663cb13c8828ba91f8edb6b7bdbba49647998da494d1a83d2d5a274f0570fdca139a497a8c59b1c324b3e1d6c9a45f83c5da0a49499010835096b1cf8ae8cb708289712253c773dd9597a3febdc82dad5b158c04cef3fba54d2a4b16925b388b38433d0ad7a855ae9502f53bdc38a91d515004d7fffa0243034e92c2ea2d0e7bb3dc43c75753bc82a36b9d8e46ec583ffc7901c8415437a6cbd448410e5254f0b3dc1eb16097b337d3d523744d4ce65ff5d39517d0ee76e8d7154c1bdc1e437a9fa1c96d92ec2b1447dbf091bb7dc1586b6fed74ffbcaa1db7c7f04812e7c562b82f0a4aacc300b68b640a1972b5c70c5f7f1483e294e8a72d478c522ff5cfcfc26f137719bb1a029c5364abd366eb3cea1fdbc579a51f97ec7bd91816c63c74ef6ee6e103e53291c26620a70d819f85f14c4ba2360667256a7303ba1a56900091606fd665263d6207396e40968f69707261fde8cfeb0360277655cd09daabce4dcd3537237f1c1b92d0c0923c66b2fe81501208454ab7057c3642b7e29db1a36e3dd8fa7cde9d54d908ef68a90dc28397f8407b32a7329c0bbf81c7d42f92407095c6db6d19b710cfe00c794756ce1660a27b52cc1a4acfb4c174400e1d00bd62f6710c5cde3476f6470ef7c0c62d6e9615da5320f419d8c05278e2b29966d309460a2adc95fe8155c99a4a38289bd7ef9cd7a6a42c7ee44489e4cd35bc1d2c5ef4cdce4d307ff69cad271a00524ac98d9dc191009e2a44dc31e0afe6394b0484efa23f3c32d17faae9c63f87bc538bb680a98284959a6f4148494d1d45b782f4117aeb2febca50807bb53d81bf434a4d818cc649541f027c1907d2b7bfcfcfbd339e86117a7d0c4dde3e0378ae60f367cb61ca08dbac4975ba1fc6132a20d698cada9e52070ddbb96e0d0c5c4221777d6887229a9d51edfb9ac86a51647e551d191aa442b684d833bfae3f9ff1cced55fcaa85cf58cef43b1af69ed48fd206699dad52fb21b8dfd2aa0d5078a72a621d67ce60f66f1147b58919f914df31e13ae9dd31b6ed76cd345dd0cfdf1ad9635c0b0e4b7f143cba65ae1a98ac9d195fa3fe5e483e676442c9680e221a1c1c02ffe41caebcb419571be8c8f32843dcda7b56fb648d2bb26210dcc39c2db781b6646264a1ebd6408947ab31e9274d2f1bbab0db4655855c15d34b51bc02d442070218955d801892f7a81ccdd533418f15b950f896715366ab55d0b4db39a2ecb9ef98f9182b2112698816e644d9b52350524ebc75bf4b6d7eaf96611d57a2a01222d47d00a4c92c685ecd281752fc42c2e7ed3eec58d80f591769db5ee9bae4f0b70b01da8f4616ac5e897cb80a3bc01aaa9b33cdf4eb6451c4fbad22f5877e63667b95e29da22735061551fffe2a4a889ff6624b3f83b3fa4094f1b2f6e762c9d98b651fd8f989828cc615a4ff715b49f912d66b6526250caa621751ef7aa379f22f412a52892719043da80", 0xb81}, {&(0x7f0000000c80)="4d731130744b6e7424737f9f884bb3c2bec2aa5c383c978799b9110b1e59de4600bdd2388639fef61925fd2057f0c90e94871aa0975e7007c0e13b1476982c08445b520bc71cc13f76c35a040bef456ac2d68e3d99298c470b07fe8c831de11d65d83c26a8b35d1662797eb2d79906a61ce74f084643a1a0cad16c2bf6f10b15050e7f200832ab27c701d8d29fa9276d9467bd9da197e07e4bd36bc45b1c7272f32dead2a6f7121bfda33bed490ee6a26f32f3d53550471be46a87f4154d769c9f3ddb08ecdb564e3db9b21ba56ea2dbbb1b12073fdb055c264d702b7c24d199b07587fadf699adabd0d19e89554b3053e2f533bc58939de31f924625346c8937bb62372921981b274902e793337fe9bce77b24d477b3d0c32f5731f5d91db795acb2fb0ca20f808f55a2b6fcba0a827029a69a9a5895ecec5466be7f082f3b1292a50c4d145e39e87d172b89c657099f8ea125d0088023ac52ceba43569b382c66a038f8f59d8fd82fef6b88f1dc7dbcdb13cde3f3bdb6cdb896e01cbd0d4a571802f03a052b8b6e3952b3a1a233c950dccc2f9713af54d64c55306c34fe4e60577a66fd20806dfe4498a3c00f4d18741e6eb3cb51155bde8c1d59a2326854b9f15855ae714e167ae93475f3dde18143a05444978fb4394e816f860e8a266dd077fb534676b7880c8aa15223d29f42b7e5762bb65ffc0965521fd40d23d85a16aaeb33891ebb9208347624359e45fb45cd491ab59f9cbb528f53e67518992df43ad2ea3ae13e30941a96d7fa428060c69a3a1ad784ac2966cf08f57048d0685696f497db0f98f01366fd4737760f0769adcef0b1244561313d23fe6dc0fe50f22449ed41cc2335e7302c4723dee7bbfa020484a904d2b1084bbfcecd1b41ae733be7a4a73c7567c0339f975c2ac0ce81c09ac3747fba5c37eff576ab0dd7d41a1fd112cbc48c833e78e529a12cb4e71692259c3d5ab442c8897a6a19f7972845fdbec91599d615e032b637565f493b04290219b5ff5940170e03f6e273fb7ebb4e42db1dedfb9e13680f777abbc0e2a3923f2282895554b26c0bd3020e065e1748d3e042a97f395cca66818c427baf54621a7c135a8fa9d8b0b3b7890d080fef138dd7e86af48096edb11e4d5f3644efb55b56e7fb36f0a56b2d5eaa475c2b781f19e811613257fa386d925acb79345b5bcaa0f06e9d7c0fa5bd127b93ff46c2dbd4e812493f7cba4424c731edaabb387d591e55059cf6554e72121041968d68ad0", 0x382}, {&(0x7f0000000840)="15", 0x1}, {&(0x7f0000000940)='d', 0x1}, {&(0x7f0000000600)='L', 0x1}, {&(0x7f0000000040)="0f", 0x1}, {&(0x7f0000000700)="d5", 0x1}, {&(0x7f0000000a40)="d5", 0x1}, {&(0x7f0000000a80)='?', 0x1}], 0xf) 25.034128232s ago: executing program 7 (id=2183): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x2, 0x8}}, 0x20) 24.981211206s ago: executing program 36 (id=2183): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x2, 0x8}}, 0x20) 1.561854634s ago: executing program 8 (id=2681): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x11}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x8, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.546555035s ago: executing program 5 (id=2682): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 1.46903037s ago: executing program 8 (id=2683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close_range(r0, 0xffffffffffffffff, 0x0) 1.312004339s ago: executing program 8 (id=2694): r0 = gettid() r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r2, 0xfffffff7}, &(0x7f0000000040)=0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.227977894s ago: executing program 5 (id=2686): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 1.227431424s ago: executing program 4 (id=2687): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xe4bd6a1de0769c90, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32=r3, @ANYBLOB="140002"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 1.215230065s ago: executing program 8 (id=2688): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.207748686s ago: executing program 5 (id=2690): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01c0c08770fd825cac0001"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.126397601s ago: executing program 8 (id=2692): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r2, r2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x150d, 0x103) 1.103459512s ago: executing program 4 (id=2693): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)='\f', 0x1}], 0x1}}], 0x1, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) 1.084144093s ago: executing program 5 (id=2695): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xfffffffb, 0x0, 0xb2, 0x10, "1ba30cb382000100000000e6ff00"}) r1 = syz_open_pts(r0, 0x20800) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) 1.075996923s ago: executing program 8 (id=2696): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003000)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/40}, {&(0x7f0000000140)=""/169}, {&(0x7f0000000200)=""/31}, {&(0x7f0000000240)=""/47}, {&(0x7f0000000340)=""/253}, {&(0x7f0000000280)=""/18}, {&(0x7f0000000440)=""/83}, {&(0x7f00000004c0)=""/118}], 0x0, &(0x7f00000002c0)=""/40}, 0x10001}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000005c0)=""/91}, {&(0x7f0000000640)=""/4096}], 0x0, &(0x7f0000001680)=""/26}, 0xe815}, {{&(0x7f00000016c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)=""/38}, {&(0x7f0000001780)=""/35}, {&(0x7f00000017c0)=""/55}, {&(0x7f0000001800)=""/4}, {&(0x7f0000001840)=""/18}, {&(0x7f0000001880)=""/251}, {&(0x7f0000001980)=""/145}, {&(0x7f0000001a40)=""/63}]}, 0x19c00}, {{&(0x7f0000001b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001b80)=""/4096}, {&(0x7f0000002b80)=""/11}]}}, {{&(0x7f0000002c00)=@nl, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002c80)=""/87}, {&(0x7f0000002d00)=""/146}, {&(0x7f0000002dc0)=""/34}, {&(0x7f0000002e00)=""/176}, {&(0x7f0000002ec0)=""/164}]}, 0xe}], 0x4000049, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.004968978s ago: executing program 4 (id=2698): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 957.108131ms ago: executing program 9 (id=2709): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 940.993182ms ago: executing program 4 (id=2700): unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x303, 0x80000001, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x20000895}, 0x40c0) 867.881007ms ago: executing program 9 (id=2702): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="05", 0x1}], 0x1, &(0x7f00000000c0)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x7, 0x2, 0xffffffff, 0x3, 0x8000}}], 0x30}, 0x0) 814.77151ms ago: executing program 9 (id=2703): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 736.402085ms ago: executing program 3 (id=2705): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r1) r2 = eventfd2(0xfffffffd, 0x80000) read(r2, &(0x7f0000002500)=""/126, 0x7e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) write$eventfd(r1, &(0x7f0000000040)=0x9, 0x8) 717.796996ms ago: executing program 9 (id=2706): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r2, r2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x150d, 0x103) 690.278458ms ago: executing program 4 (id=2707): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0xcb8, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0xf23, 0x0, 0xc, 0x0, 0x0) 678.900008ms ago: executing program 9 (id=2708): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 567.285725ms ago: executing program 9 (id=2710): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) shutdown(r0, 0x1) 567.139195ms ago: executing program 3 (id=2711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8902}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 561.664925ms ago: executing program 5 (id=2712): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 523.039518ms ago: executing program 4 (id=2713): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 513.076368ms ago: executing program 5 (id=2714): r0 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r0, 0x0, 0x9, 0x2000403) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000400)=@random={'user.', 'ext4\x00'}) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 419.972174ms ago: executing program 3 (id=2715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x2c, 0x2e, 0x827, 0x70bd29, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xffe0, 0x10}, {0x0, 0xfff1}, {0xfff1, 0x4}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x4041810) 333.733499ms ago: executing program 3 (id=2716): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="05", 0x1}], 0x1, &(0x7f00000000c0)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x7, 0x2, 0xffffffff, 0x3, 0x8000}}], 0x30}, 0x0) 288.295102ms ago: executing program 3 (id=2717): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x91c800, &(0x7f0000001d80)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="053f8dbaed5a583c8b0991e91b7b0da2d77c78980b0d40b2b56eb7fc4c44dab0069d849b049803e684b0f2b03041ce37e1e4753f715efb63b18519d55438edb7414da439e2", @ANYBLOB="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", @ANYRES64=0x0, @ANYRES64], 0x8, 0x2eb, &(0x7f0000000d80)="$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") syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3c, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9, 0x4]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 0s ago: executing program 3 (id=2718): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): 83.899622][ T10] IPVS: starting estimator thread 0... [ 83.957842][ T4493] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.966849][ T4493] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.994552][ T7102] IPVS: using max 2256 ests per chain, 112800 per kthread [ 84.137311][ T4493] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.146412][ T4493] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.282644][ T7153] loop6: detected capacity change from 0 to 4096 [ 84.297389][ T7153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.387102][ T7160] netlink: 'syz.4.1239': attribute type 39 has an invalid length. [ 84.424336][ T7160] hsr_slave_1 (unregistering): left promiscuous mode [ 84.506236][ T7165] loop3: detected capacity change from 0 to 128 [ 84.560426][ T4665] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.614138][ T7168] loop6: detected capacity change from 0 to 128 [ 84.621923][ T7168] EXT4-fs: Ignoring removed nobh option [ 84.636440][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 84.636457][ T29] audit: type=1326 audit(1770428590.681:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f872aeb9 code=0x7ffc0000 [ 84.665996][ T29] audit: type=1326 audit(1770428590.681:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f872aeb9 code=0x7ffc0000 [ 84.690729][ T7168] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.709431][ T7168] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.746996][ T4665] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.766068][ T29] audit: type=1326 audit(1770428590.681:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f872aeb9 code=0x7ffc0000 [ 84.789465][ T29] audit: type=1326 audit(1770428590.681:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f21f872aeb9 code=0x7ffc0000 [ 84.812967][ T29] audit: type=1326 audit(1770428590.711:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f872aeb9 code=0x7ffc0000 [ 84.836415][ T29] audit: type=1326 audit(1770428590.761:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f872aeb9 code=0x7ffc0000 [ 84.859839][ T29] audit: type=1326 audit(1770428590.761:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f872aeb9 code=0x7ffc0000 [ 84.883435][ T29] audit: type=1326 audit(1770428590.771:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21f872aeb9 code=0x7ffc0000 [ 84.906934][ T29] audit: type=1326 audit(1770428590.771:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f872aeb9 code=0x7ffc0000 [ 84.930549][ T29] audit: type=1326 audit(1770428590.771:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.2.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f872aeb9 code=0x7ffc0000 [ 85.392871][ T7192] loop6: detected capacity change from 0 to 512 [ 85.420413][ T7192] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 85.467155][ T7200] loop2: detected capacity change from 0 to 1024 [ 85.492815][ T7192] EXT4-fs (loop6): 1 truncate cleaned up [ 85.502646][ T7200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.517938][ T7192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.534249][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1257'. [ 85.602155][ T4665] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.633281][ T7208] loop6: detected capacity change from 0 to 512 [ 85.665034][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.678359][ T7208] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 85.690977][ T7208] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 85.712902][ T7208] System zones: 1-12 [ 85.722975][ T7208] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.1258: corrupted in-inode xattr: e_value size too large [ 85.745666][ T7208] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1258: couldn't read orphan inode 15 (err -117) [ 85.759294][ T7208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.823402][ T4665] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.883794][ T7220] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 85.891364][ T7051] IPVS: starting estimator thread 0... [ 85.984365][ T7221] IPVS: using max 2304 ests per chain, 115200 per kthread [ 86.155887][ T7230] netlink: 'syz.3.1266': attribute type 22 has an invalid length. [ 86.163865][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'. [ 86.205587][ T7230] netlink: 'syz.3.1266': attribute type 22 has an invalid length. [ 86.213578][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'. [ 87.086587][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1282'. [ 87.313543][ T7283] loop6: detected capacity change from 0 to 1024 [ 87.391505][ T7286] netlink: 'syz.5.1288': attribute type 4 has an invalid length. [ 87.399344][ T7286] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1288'. [ 87.527779][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1297'. [ 87.539285][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1297'. [ 87.549370][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1297'. [ 87.614246][ T7308] loop5: detected capacity change from 0 to 512 [ 87.631616][ T7308] EXT4-fs: Ignoring removed bh option [ 87.640315][ T7306] loop6: detected capacity change from 0 to 512 [ 87.650869][ T7308] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 87.668938][ T7308] EXT4-fs (loop5): 1 truncate cleaned up [ 87.678538][ T7308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.695490][ T7306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.728911][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1300'. [ 87.769844][ T7323] loop2: detected capacity change from 0 to 128 [ 87.820206][ T4291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.832476][ T7328] loop2: detected capacity change from 0 to 512 [ 87.854391][ T4665] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.864150][ T7328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.896596][ T7328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.924673][ T7328] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.950316][ T7337] netlink: 'syz.6.1311': attribute type 4 has an invalid length. [ 87.986617][ T3317] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 88.000070][ T3317] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 88.036959][ T7342] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 88.095839][ T7340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.378033][ T7355] chnl_net:caif_netlink_parms(): no params data found [ 88.419463][ T7380] tipc: Started in network mode [ 88.424443][ T7380] tipc: Node identity 405d, cluster identity 4711 [ 88.430898][ T7380] tipc: Enabling of bearer rejected, failed to enable media [ 88.444925][ T7355] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.452044][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.459648][ T7355] bridge_slave_0: entered allmulticast mode [ 88.466505][ T7355] bridge_slave_0: entered promiscuous mode [ 88.473337][ T7355] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.480543][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.488106][ T7355] bridge_slave_1: entered allmulticast mode [ 88.494976][ T7355] bridge_slave_1: entered promiscuous mode [ 88.513360][ T7355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.524150][ T7355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.556259][ T7355] team0: Port device team_slave_0 added [ 88.563294][ T7355] team0: Port device team_slave_1 added [ 88.582273][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.589422][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.615620][ T7355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.636226][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.643356][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.669344][ T7355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.709415][ T7355] hsr_slave_0: entered promiscuous mode [ 88.725068][ T7355] hsr_slave_1: entered promiscuous mode [ 88.731304][ T7355] debugfs: 'hsr0' already exists in 'hsr' [ 88.737144][ T7355] Cannot create hsr debugfs directory [ 88.962109][ T7355] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 88.997260][ T7355] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 89.013008][ T7355] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 89.023386][ T7355] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 89.045030][ T7388] chnl_net:caif_netlink_parms(): no params data found [ 89.126423][ T7430] loop4: detected capacity change from 0 to 8192 [ 89.260295][ T7388] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.267511][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.281910][ T7388] bridge_slave_0: entered allmulticast mode [ 89.289718][ T7388] bridge_slave_0: entered promiscuous mode [ 89.296783][ T7388] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.304023][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.311342][ T7388] bridge_slave_1: entered allmulticast mode [ 89.317965][ T7388] bridge_slave_1: entered promiscuous mode [ 89.333173][ T7442] veth1_to_bond: entered allmulticast mode [ 89.342826][ T7439] loop4: detected capacity change from 0 to 8192 [ 89.350643][ T7439] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.361801][ T7442] veth1_to_bond: left allmulticast mode [ 89.385223][ T7388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.433376][ T7388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.458353][ T7388] team0: Port device team_slave_0 added [ 89.467186][ T7449] FAT-fs (loop4): error, clusters badly computed (1660 != 1659) [ 89.467182][ T7452] FAT-fs (loop4): error, clusters badly computed (1564 != 18) [ 89.474909][ T7449] FAT-fs (loop4): Filesystem has been set read-only [ 89.490768][ T7388] team0: Port device team_slave_1 added [ 89.491701][ T7449] FAT-fs (loop4): error, clusters badly computed (1661 != 1660) [ 89.501664][ T7452] FAT-fs (loop4): error, clusters badly computed (1567 != 19) [ 89.508600][ T7449] FAT-fs (loop4): error, clusters badly computed (1663 != 1661) [ 89.522614][ T7449] FAT-fs (loop4): error, clusters badly computed (1664 != 1662) [ 89.532523][ T7449] FAT-fs (loop4): error, clusters badly computed (1665 != 1663) [ 89.542387][ T7449] FAT-fs (loop4): error, clusters badly computed (1666 != 1664) [ 89.552344][ T7449] FAT-fs (loop4): error, clusters badly computed (1667 != 1665) [ 89.562223][ T7449] FAT-fs (loop4): error, clusters badly computed (1668 != 1666) [ 89.580605][ T7388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.587681][ T7388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.613666][ T7388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.643985][ T7449] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1050) [ 89.662228][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 89.662245][ T29] audit: type=1326 audit(1770428595.701:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 89.692063][ T29] audit: type=1326 audit(1770428595.701:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 89.715471][ T29] audit: type=1326 audit(1770428595.731:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 89.739000][ T29] audit: type=1326 audit(1770428595.731:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 89.769261][ T7388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.776386][ T7388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.802550][ T7388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.870992][ T29] audit: type=1326 audit(1770428595.801:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 89.894440][ T29] audit: type=1326 audit(1770428595.801:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 89.917997][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.948988][ T7355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.982014][ T7355] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.008172][ T7388] hsr_slave_0: entered promiscuous mode [ 90.018867][ T7388] hsr_slave_1: entered promiscuous mode [ 90.025162][ T7388] debugfs: 'hsr0' already exists in 'hsr' [ 90.030939][ T7388] Cannot create hsr debugfs directory [ 90.038996][ T1757] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.046170][ T1757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.066774][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.073914][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.148317][ T7355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.158784][ T7355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.196915][ T7388] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.207339][ T7388] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.244859][ T7355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.255121][ T7388] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.265566][ T7388] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.318700][ T7388] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.329162][ T7388] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.367834][ T7388] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.378432][ T7388] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.423974][ T7355] veth0_vlan: entered promiscuous mode [ 90.432579][ T7355] veth1_vlan: entered promiscuous mode [ 90.459020][ T7388] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 90.470598][ T7388] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 90.480061][ T7388] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 90.489085][ T7388] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 90.498838][ T7355] veth0_macvtap: entered promiscuous mode [ 90.510023][ T7355] veth1_macvtap: entered promiscuous mode [ 90.526636][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.540703][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.556849][ T1757] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.568173][ T1757] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.578254][ T1757] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.591159][ T1757] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.606192][ T12] bridge_slave_1: left allmulticast mode [ 90.611891][ T12] bridge_slave_1: left promiscuous mode [ 90.617727][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.625585][ T12] bridge_slave_0: left allmulticast mode [ 90.631364][ T12] bridge_slave_0: left promiscuous mode [ 90.637068][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.717053][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.727164][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.736893][ T12] bond0 (unregistering): Released all slaves [ 90.758715][ T29] audit: type=1400 audit(1770428596.801:853): avc: denied { mounton } for pid=7355 comm="syz-executor" path="/root/syzkaller.Wj0pqy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 90.770404][ T7388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.793974][ T29] audit: type=1400 audit(1770428596.831:854): avc: denied { mount } for pid=7355 comm="syz-executor" name="/" dev="gadgetfs" ino=4856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 90.804846][ T7388] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.844760][ T12] hsr_slave_0: left promiscuous mode [ 90.850726][ T12] hsr_slave_1: left promiscuous mode [ 90.858002][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.865479][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.873423][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.880984][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.895153][ T12] veth1_macvtap: left promiscuous mode [ 90.900784][ T12] veth0_macvtap: left promiscuous mode [ 90.906620][ T12] veth1_vlan: left promiscuous mode [ 90.912010][ T12] veth0_vlan: left promiscuous mode [ 91.002270][ T12] team0 (unregistering): Port device team_slave_1 removed [ 91.013128][ T12] team0 (unregistering): Port device team_slave_0 removed [ 91.060724][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.067891][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.077761][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.084947][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.126463][ T7513] sctp: [Deprecated]: syz.7.1320 (pid 7513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.126463][ T7513] Use struct sctp_sack_info instead [ 91.202499][ T7520] loop4: detected capacity change from 0 to 512 [ 91.219181][ T7388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.231358][ T7520] EXT4-fs: Ignoring removed nobh option [ 91.242494][ T7522] netlink: 'syz.7.1365': attribute type 1 has an invalid length. [ 91.277422][ T12] IPVS: stop unused estimator thread 0... [ 91.302307][ T7520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.341336][ T7520] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.354420][ T29] audit: type=1400 audit(1770428597.391:855): avc: denied { connect } for pid=7534 comm="syz.7.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.403529][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.415414][ T1757] tipc: Subscription rejected, illegal request [ 91.477377][ T7545] loop7: detected capacity change from 0 to 512 [ 91.530803][ T7388] veth0_vlan: entered promiscuous mode [ 91.550590][ T7388] veth1_vlan: entered promiscuous mode [ 91.569060][ T7388] veth0_macvtap: entered promiscuous mode [ 91.576847][ T7388] veth1_macvtap: entered promiscuous mode [ 91.599582][ T7388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.621818][ T7388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.636971][ T4493] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.650101][ T4493] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.659211][ T4493] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.687821][ T4493] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.723683][ T7555] loop3: detected capacity change from 0 to 256 [ 91.750674][ T7555] FAT-fs (loop3): Directory bread(block 64) failed [ 91.761879][ T7555] FAT-fs (loop3): Directory bread(block 65) failed [ 91.781814][ T7555] FAT-fs (loop3): Directory bread(block 66) failed [ 91.799615][ T7555] FAT-fs (loop3): Directory bread(block 67) failed [ 91.802618][ T7551] bio_check_eod: 1 callbacks suppressed [ 91.802674][ T7551] syz.7.1368: attempt to access beyond end of device [ 91.802674][ T7551] loop7: rw=0, sector=432, nr_sectors = 128 limit=512 [ 91.807706][ T29] audit: type=1326 audit(1770428597.841:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.4.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb53aa8aeb9 code=0x7ffc0000 [ 91.848958][ T7558] netlink: 'syz.6.1370': attribute type 1 has an invalid length. [ 91.849610][ T7555] FAT-fs (loop3): Directory bread(block 68) failed [ 91.863459][ T7555] FAT-fs (loop3): Directory bread(block 69) failed [ 91.870114][ T7555] FAT-fs (loop3): Directory bread(block 70) failed [ 91.876829][ T7555] FAT-fs (loop3): Directory bread(block 71) failed [ 91.883383][ T7555] FAT-fs (loop3): Directory bread(block 72) failed [ 91.890149][ T7555] FAT-fs (loop3): Directory bread(block 73) failed [ 91.919934][ T7555] syz.3.1369: attempt to access beyond end of device [ 91.919934][ T7555] loop3: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 91.941129][ T4493] kworker/u8:12: attempt to access beyond end of device [ 91.941129][ T4493] loop7: rw=1, sector=560, nr_sectors = 2088 limit=512 [ 91.965106][ T3635] Bluetooth: hci0: command 0x1003 tx timeout [ 91.965692][ T4437] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.976339][ T4493] kworker/u8:12: attempt to access beyond end of device [ 91.976339][ T4493] loop7: rw=1, sector=2648, nr_sectors = 2048 limit=512 [ 92.003971][ T4493] kworker/u8:12: attempt to access beyond end of device [ 92.003971][ T4493] loop7: rw=1, sector=4696, nr_sectors = 2096 limit=512 [ 92.070825][ T4493] kworker/u8:12: attempt to access beyond end of device [ 92.070825][ T4493] loop7: rw=1, sector=6792, nr_sectors = 2048 limit=512 [ 92.111314][ T4493] kworker/u8:12: attempt to access beyond end of device [ 92.111314][ T4493] loop7: rw=1, sector=8840, nr_sectors = 2048 limit=512 [ 92.129201][ T4493] kworker/u8:12: attempt to access beyond end of device [ 92.129201][ T4493] loop7: rw=1, sector=10888, nr_sectors = 2080 limit=512 [ 92.171169][ T4493] kworker/u8:12: attempt to access beyond end of device [ 92.171169][ T4493] loop7: rw=1, sector=12968, nr_sectors = 2048 limit=512 [ 92.188727][ T7578] netlink: 'syz.4.1379': attribute type 1 has an invalid length. [ 92.189743][ T4493] kworker/u8:12: attempt to access beyond end of device [ 92.189743][ T4493] loop7: rw=1, sector=15016, nr_sectors = 1448 limit=512 [ 92.196657][ T7578] netlink: 'syz.4.1379': attribute type 4 has an invalid length. [ 92.218405][ T7578] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1379'. [ 92.461892][ T7599] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 92.697909][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1401'. [ 92.708479][ T7625] batadv_slave_1: entered promiscuous mode [ 92.735015][ T7622] batadv_slave_1: left promiscuous mode [ 92.927691][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1408'. [ 92.943251][ T7643] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 93.296057][ T7671] loop7: detected capacity change from 0 to 1024 [ 93.566631][ T7687] SELinux: failed to load policy [ 93.587334][ T7689] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7689 comm=syz.7.1428 [ 93.930800][ T7725] loop4: detected capacity change from 0 to 2048 [ 93.937744][ T7725] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.006958][ T7725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.076197][ T7737] netlink: 'syz.7.1449': attribute type 1 has an invalid length. [ 94.095160][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.290867][ T7744] loop7: detected capacity change from 0 to 1024 [ 94.306714][ T7744] EXT4-fs: Ignoring removed orlov option [ 94.336530][ T7744] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.443440][ T7355] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.499713][ T7751] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 94.656689][ T7763] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1460'. [ 94.761225][ T7775] loop7: detected capacity change from 0 to 256 [ 94.892158][ T7786] loop7: detected capacity change from 0 to 256 [ 94.915054][ T7786] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.947816][ T7786] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.002316][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1474'. [ 95.011320][ T7798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1474'. [ 95.239183][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.338438][ T7818] loop6: detected capacity change from 0 to 512 [ 95.355932][ T7818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.372954][ T7818] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.383279][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 95.383296][ T29] audit: type=1400 audit(1770428601.411:883): avc: denied { read write } for pid=7822 comm="syz.4.1483" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.414401][ T29] audit: type=1400 audit(1770428601.411:884): avc: denied { open } for pid=7822 comm="syz.4.1483" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.515702][ T7388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.538859][ T7829] loop6: detected capacity change from 0 to 1024 [ 95.546517][ T7829] EXT4-fs: Ignoring removed orlov option [ 95.557823][ T7829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.588509][ T7388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.611541][ T7835] loop6: detected capacity change from 0 to 128 [ 95.632216][ T7835] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.668951][ T7835] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.709168][ T7388] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.939635][ T7856] syzkaller1: entered promiscuous mode [ 95.945349][ T7856] syzkaller1: entered allmulticast mode [ 96.231444][ T29] audit: type=1400 audit(1770428602.271:885): avc: denied { append } for pid=7871 comm="syz.4.1504" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 96.338154][ T7889] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1511'. [ 96.985486][ T29] audit: type=1400 audit(1770428603.031:886): avc: denied { read } for pid=7930 comm="syz.5.1529" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.244548][ T4437] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.673689][ T29] audit: type=1400 audit(1770428603.711:887): avc: denied { read } for pid=7952 comm="syz.4.1538" lport=60322 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 97.960658][ T7968] loop4: detected capacity change from 0 to 512 [ 97.974690][ T7968] EXT4-fs: Ignoring removed bh option [ 97.988783][ T7970] loop6: detected capacity change from 0 to 1024 [ 97.995228][ T7968] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 98.002584][ T7970] EXT4-fs: Ignoring removed orlov option [ 98.010354][ T7968] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 98.022498][ T7970] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 98.033230][ T7968] EXT4-fs (loop4): failed to open journal device unknown-block(8,224) -6 [ 98.068010][ T7970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.178807][ T7388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.402044][ T8003] netlink: 182 bytes leftover after parsing attributes in process `syz.6.1561'. [ 98.455308][ T29] audit: type=1400 audit(1770428860.492:888): avc: denied { write } for pid=8007 comm="syz.6.1562" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 98.479515][ T29] audit: type=1400 audit(1770428860.492:889): avc: denied { open } for pid=8007 comm="syz.6.1562" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 98.576587][ T8018] loop6: detected capacity change from 0 to 512 [ 98.585758][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1568'. [ 98.588196][ T8018] EXT4-fs: Ignoring removed bh option [ 98.627665][ T8018] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 98.654241][ T8018] EXT4-fs (loop6): 1 truncate cleaned up [ 98.661433][ T8018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.682763][ T8022] loop5: detected capacity change from 0 to 8192 [ 98.716402][ T7388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.859338][ T12] tipc: Subscription rejected, illegal request [ 99.027824][ T8042] gretap1: entered promiscuous mode [ 99.146397][ T29] audit: type=1326 audit(1770428861.192:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 99.178234][ T29] audit: type=1326 audit(1770428861.192:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 99.201626][ T29] audit: type=1326 audit(1770428861.192:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8048 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 99.289148][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1582'. [ 99.307559][ T7884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.389962][ T8063] syzkaller1: entered promiscuous mode [ 99.395526][ T8063] syzkaller1: entered allmulticast mode [ 99.441731][ T8068] loop3: detected capacity change from 0 to 2048 [ 99.481407][ T8068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.514503][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.548357][ T8077] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1590'. [ 99.841112][ T8098] loop5: detected capacity change from 0 to 1024 [ 99.859450][ T8098] EXT4-fs: inline encryption not supported [ 99.897017][ T8098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.968807][ T8091] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1596: Allocating blocks 385-513 which overlap fs metadata [ 99.986793][ T8091] EXT4-fs (loop5): pa ffff888107e22770: logic 16, phys. 129, len 24 [ 99.994912][ T8091] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 100.005191][ T8091] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 100.017681][ T8091] EXT4-fs (loop5): This should not happen!! Data will be lost [ 100.017681][ T8091] [ 100.027384][ T8091] EXT4-fs (loop5): Total free blocks count 0 [ 100.033409][ T8091] EXT4-fs (loop5): Free/Dirty block details [ 100.039354][ T8091] EXT4-fs (loop5): free_blocks=128 [ 100.044620][ T8091] EXT4-fs (loop5): dirty_blocks=0 [ 100.049688][ T8091] EXT4-fs (loop5): Block reservation details [ 100.055878][ T8091] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 100.134809][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1604'. [ 100.144224][ T8114] netlink: 'syz.6.1605': attribute type 1 has an invalid length. [ 100.160595][ T8114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.179026][ T8114] bond1: (slave gretap1): making interface the new active one [ 100.187333][ T8114] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 100.230316][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1606'. [ 100.511540][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 100.511557][ T29] audit: type=1326 audit(1770428862.552:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 100.540988][ T29] audit: type=1326 audit(1770428862.552:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 100.564373][ T29] audit: type=1326 audit(1770428862.552:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 100.587770][ T29] audit: type=1326 audit(1770428862.552:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 100.739626][ T8142] SELinux: unknown common  [ 100.756434][ T8142] SELinux: failed to load policy [ 100.816462][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1624'. [ 100.904707][ T8159] netlink: 'syz.3.1626': attribute type 12 has an invalid length. [ 100.912624][ T8159] netlink: 'syz.3.1626': attribute type 29 has an invalid length. [ 100.920529][ T8159] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1626'. [ 101.336525][ T8186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1637'. [ 101.528409][ T8192] loop6: detected capacity change from 0 to 128 [ 101.761430][ T8212] geneve2: entered promiscuous mode [ 101.806004][ T8222] all: renamed from veth1_to_bond [ 101.834233][ T29] audit: type=1400 audit(1770428863.872:900): avc: denied { read write } for pid=8223 comm="syz.5.1655" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 101.838366][ T3424] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.857673][ T29] audit: type=1400 audit(1770428863.872:901): avc: denied { open } for pid=8223 comm="syz.5.1655" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 101.940174][ T3424] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.106569][ T8225] hid-generic 0000:0000:0000.0001: pid 8225 passed too short report [ 102.177299][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1663'. [ 102.220034][ T29] audit: type=1400 audit(1770428864.262:902): avc: denied { bind } for pid=8248 comm="syz.3.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.678658][ T8281] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 102.939737][ T8304] netlink: 'syz.7.1689': attribute type 27 has an invalid length. [ 103.012448][ T8304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.073248][ T8313] loop3: detected capacity change from 0 to 512 [ 103.133576][ T8313] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 103.141977][ T8313] System zones: 1-12 [ 103.159585][ T8313] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1692: corrupted in-inode xattr: e_value size too large [ 103.197789][ T8313] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1692: couldn't read orphan inode 15 (err -117) [ 103.225042][ T8313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.274933][ T8322] netlink: zone id is out of range [ 103.280958][ T8322] netlink: zone id is out of range [ 103.305088][ T8322] netlink: zone id is out of range [ 103.321415][ T8322] netlink: del zone limit has 8 unknown bytes [ 103.510985][ T8340] usb usb1: check_ctrlrecip: process 8340 (syz.5.1704) requesting ep 01 but needs 81 [ 103.514348][ T29] audit: type=1400 audit(1770428865.552:903): avc: denied { append } for pid=8338 comm="syz.5.1704" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.520723][ T8340] usb usb1: usbfs: process 8340 (syz.5.1704) did not claim interface 0 before use [ 103.572018][ T8343] netlink: 'syz.4.1706': attribute type 10 has an invalid length. [ 103.595087][ T8343] bond0: (slave bond_slave_0): Releasing backup interface [ 104.227226][ T8276] delete_channel: no stack [ 104.373348][ T8364] loop7: detected capacity change from 0 to 512 [ 104.421533][ T8364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.465658][ T8364] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.467360][ T8360] netlink: 'syz.6.1711': attribute type 2 has an invalid length. [ 104.564520][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.579512][ T7355] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.606475][ T8375] netlink: 'syz.7.1715': attribute type 1 has an invalid length. [ 104.626222][ T29] audit: type=1400 audit(1770428866.662:904): avc: denied { bind } for pid=8376 comm="syz.3.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 104.672461][ T8375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.701459][ T8375] bond1: (slave gretap1): making interface the new active one [ 104.709885][ T8375] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 104.850219][ T8396] loop7: detected capacity change from 0 to 1024 [ 104.877770][ T8396] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.899055][ T8396] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1724: error while reading EA inode 32 err=-116 [ 104.911770][ T8396] EXT4-fs (loop7): Remounting filesystem read-only [ 104.919873][ T8396] EXT4-fs warning (device loop7): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.7.1724: cleanup dec ref error -30 [ 104.932789][ T8396] EXT4-fs warning (device loop7): ext4_xattr_block_set:2200: inode #19: comm syz.7.1724: dec ref error=-30 [ 104.957297][ T7355] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.989899][ T29] audit: type=1400 audit(1770428867.032:905): avc: denied { listen } for pid=8406 comm="syz.3.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.014135][ T8409] loop7: detected capacity change from 0 to 1024 [ 105.036313][ T8409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.048803][ T8409] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.063642][ T8409] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.1727: lblock 3 mapped to illegal pblock 3 (length 3) [ 105.078020][ T8409] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 105.090403][ T8409] EXT4-fs (loop7): This should not happen!! Data will be lost [ 105.090403][ T8409] [ 105.103624][ T8409] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1727: lblock 3 mapped to illegal pblock 3 (length 1) [ 105.118341][ T8409] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1727: lblock 3 mapped to illegal pblock 3 (length 1) [ 105.133115][ T8409] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1727: lblock 3 mapped to illegal pblock 3 (length 1) [ 105.147731][ T8409] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1727: lblock 3 mapped to illegal pblock 3 (length 1) [ 105.163032][ T8409] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.1727: lblock 3 mapped to illegal pblock 3 (length 1) [ 105.178474][ T8413] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.1727: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 105.197409][ T8413] EXT4-fs error (device loop7) in ext4_setattr:6035: Corrupt filesystem [ 105.275384][ T7355] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.415768][ T8428] xt_hashlimit: size too large, truncated to 1048576 [ 105.561196][ T29] audit: type=1326 audit(1770428867.602:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8437 comm="syz.3.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 105.584936][ T29] audit: type=1326 audit(1770428867.602:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8437 comm="syz.3.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 105.608320][ T29] audit: type=1326 audit(1770428867.602:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8437 comm="syz.3.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 105.631798][ T29] audit: type=1326 audit(1770428867.602:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8437 comm="syz.3.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 105.655191][ T29] audit: type=1326 audit(1770428867.602:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8437 comm="syz.3.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 105.678735][ T29] audit: type=1326 audit(1770428867.602:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8437 comm="syz.3.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 105.702016][ T29] audit: type=1326 audit(1770428867.602:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8437 comm="syz.3.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 105.725475][ T29] audit: type=1326 audit(1770428867.602:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8437 comm="syz.3.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 105.770358][ T8441] loop5: detected capacity change from 0 to 8192 [ 105.779850][ T8441] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.154512][ T29] audit: type=1400 audit(1770429124.203:914): avc: denied { ioctl } for pid=8456 comm="syz.5.1745" path="socket:[21118]" dev="sockfs" ino=21118 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.271318][ T8467] loop5: detected capacity change from 0 to 512 [ 106.293567][ T8467] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.314092][ T8468] uprobe: syz.6.1751:8468 failed to unregister, leaking uprobe [ 106.509740][ T29] audit: type=1400 audit(1770429124.553:915): avc: denied { mount } for pid=8486 comm="syz.6.1759" name="/" dev="autofs" ino=21939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 106.780706][ T8358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.820891][ T8508] netlink: 'syz.6.1768': attribute type 1 has an invalid length. [ 106.873653][ T8508] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.952412][ T8508] bond2: (slave gretap2): making interface the new active one [ 107.004700][ T8508] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 107.081548][ T8520] syzkaller1: entered promiscuous mode [ 107.087609][ T8520] syzkaller1: entered allmulticast mode [ 107.319456][ T8533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.411643][ T8533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.936526][ T8548] __nla_validate_parse: 2 callbacks suppressed [ 107.936542][ T8548] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1783'. [ 108.278259][ T8571] policy can only be matched on NF_INET_PRE_ROUTING [ 108.278275][ T8571] unable to load match [ 108.306407][ T8576] netlink: 'syz.7.1795': attribute type 1 has an invalid length. [ 108.374450][ T8586] loop6: detected capacity change from 0 to 512 [ 108.389647][ T8576] bond2: entered promiscuous mode [ 108.406214][ T8586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 108.414550][ T8576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.424403][ T8586] System zones: 1-12 [ 108.434576][ T8586] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.1797: corrupted in-inode xattr: e_value size too large [ 108.449661][ T8586] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1797: couldn't read orphan inode 15 (err -117) [ 108.462392][ T8586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.475732][ T8589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.501435][ T8589] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 108.511658][ T8589] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 108.548061][ T8593] sg_write: process 844 (syz.4.1800) changed security contexts after opening file descriptor, this is not allowed. [ 108.572635][ T8589] bond2: (slave xfrm1): making interface the new active one [ 108.580044][ T8589] xfrm1: entered promiscuous mode [ 108.612830][ T8589] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 108.959553][ T8608] loop7: detected capacity change from 0 to 1024 [ 108.993212][ T8608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.036487][ T8608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.188366][ T7355] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.261198][ T8612] loop3: detected capacity change from 0 to 8192 [ 109.381711][ T8614] loop5: detected capacity change from 0 to 8192 [ 109.425463][ T8614] syz.5.1809: attempt to access beyond end of device [ 109.425463][ T8614] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 110.271759][ T8636] loop5: detected capacity change from 0 to 512 [ 110.322961][ T8636] EXT4-fs: Ignoring removed i_version option [ 110.400378][ T8636] EXT4-fs (loop5): 1 truncate cleaned up [ 110.429025][ T8636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.547812][ T4291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.869168][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 110.869186][ T29] audit: type=1326 audit(1770429128.913:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8673 comm="syz.4.1833" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb53aa8aeb9 code=0x0 [ 111.391885][ T7388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.475555][ T29] audit: type=1400 audit(1770429129.523:924): avc: denied { unmount } for pid=4291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 111.527654][ T8711] loop5: detected capacity change from 0 to 128 [ 111.551405][ T8711] FAT-fs (loop5): bogus number of reserved sectors [ 111.558123][ T8711] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 111.569164][ T8711] FAT-fs (loop5): Can't find a valid FAT filesystem [ 111.598926][ T8711] loop5: detected capacity change from 0 to 512 [ 111.624213][ T3414] kernel write not supported for file bpf-prog (pid: 3414 comm: kworker/0:4) [ 111.635559][ T8711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.707453][ T8719] loop4: detected capacity change from 0 to 256 [ 111.751683][ T8711] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.841995][ T4291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.974103][ T8728] syzkaller0: entered promiscuous mode [ 111.979671][ T8728] syzkaller0: entered allmulticast mode [ 112.015463][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 112.117648][ T8741] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 112.208800][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1867'. [ 112.217935][ T8749] netlink: 'syz.4.1867': attribute type 12 has an invalid length. [ 112.310008][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.317259][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.326190][ T8756] netlink: 'syz.3.1866': attribute type 1 has an invalid length. [ 112.334116][ T8756] netlink: 'syz.3.1866': attribute type 4 has an invalid length. [ 112.341948][ T8756] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1866'. [ 112.404983][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.545709][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1867'. [ 112.554955][ T8749] netlink: 'syz.4.1867': attribute type 12 has an invalid length. [ 112.574392][ T31] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.582823][ T31] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.712371][ T31] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.720848][ T31] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.774164][ T31] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.782701][ T31] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.821438][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'. [ 112.831137][ T29] audit: type=1400 audit(1770429130.863:925): avc: denied { setopt } for pid=8774 comm="syz.3.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.852701][ T8775] xt_hashlimit: size too large, truncated to 1048576 [ 112.861398][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'. [ 112.870471][ T31] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.878934][ T31] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.947949][ T8783] loop3: detected capacity change from 0 to 1024 [ 112.956769][ T8783] EXT4-fs: inline encryption not supported [ 112.996334][ T8787] –: renamed from veth0_to_batadv [ 113.038922][ T8783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.156764][ T29] audit: type=1400 audit(1770429131.203:926): avc: denied { setattr } for pid=8780 comm="syz.3.1879" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 113.247405][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.308478][ T8799] loop3: detected capacity change from 0 to 512 [ 113.336904][ T29] audit: type=1400 audit(1770429131.383:927): avc: denied { connect } for pid=8804 comm="syz.5.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.414947][ T8810] geneve3: entered promiscuous mode [ 113.420273][ T8810] geneve3: entered allmulticast mode [ 113.427527][ T29] audit: type=1400 audit(1770429131.383:928): avc: denied { write } for pid=8804 comm="syz.5.1887" path="socket:[22618]" dev="sockfs" ino=22618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.481647][ T4471] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.494704][ T4471] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.503639][ T4471] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.524376][ T4471] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.565793][ T8813] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1890'. [ 113.619924][ T8813] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1890'. [ 113.737180][ T8818] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1892'. [ 113.913554][ T8832] loop5: detected capacity change from 0 to 512 [ 113.930075][ T8832] EXT4-fs: Ignoring removed orlov option [ 113.935894][ T8832] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.981417][ T8830] loop6: detected capacity change from 0 to 8192 [ 114.009798][ T8832] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.1899: corrupted in-inode xattr: e_value size too large [ 114.026917][ T8832] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1899: couldn't read orphan inode 15 (err -117) [ 114.041093][ T8832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.064816][ T29] audit: type=1400 audit(1770429132.113:929): avc: denied { write } for pid=8838 comm="syz.7.1902" lport=44397 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 114.115526][ T29] audit: type=1400 audit(1770429132.153:930): avc: denied { create } for pid=8831 comm="syz.5.1899" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.184246][ T29] audit: type=1400 audit(1770429132.223:931): avc: denied { name_bind } for pid=8842 comm="syz.4.1905" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 114.233275][ T4291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.324624][ T8864] loop3: detected capacity change from 0 to 128 [ 114.357817][ T8867] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 114.370113][ T29] audit: type=1400 audit(1770429132.403:932): avc: denied { load_policy } for pid=8859 comm="syz.6.1910" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 114.390723][ T8867] SELinux: failed to load policy [ 114.396544][ T8868] syz.3.1913: attempt to access beyond end of device [ 114.396544][ T8868] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 114.440819][ T8868] syz.3.1913: attempt to access beyond end of device [ 114.440819][ T8868] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 114.459106][ T8872] ªªªªªª: renamed from vlan0 (while UP) [ 114.471797][ T8868] syz.3.1913: attempt to access beyond end of device [ 114.471797][ T8868] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 114.490373][ T8868] syz.3.1913: attempt to access beyond end of device [ 114.490373][ T8868] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 114.509062][ T8868] syz.3.1913: attempt to access beyond end of device [ 114.509062][ T8868] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 114.522924][ T8868] syz.3.1913: attempt to access beyond end of device [ 114.522924][ T8868] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 114.571983][ T8868] syz.3.1913: attempt to access beyond end of device [ 114.571983][ T8868] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 114.607236][ T8868] syz.3.1913: attempt to access beyond end of device [ 114.607236][ T8868] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 114.636989][ T8868] syz.3.1913: attempt to access beyond end of device [ 114.636989][ T8868] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 114.676127][ T8868] syz.3.1913: attempt to access beyond end of device [ 114.676127][ T8868] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 114.746678][ T8868] syz.3.1913: attempt to access beyond end of device [ 114.746678][ T8868] loop3: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 114.780500][ T8890] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1923'. [ 114.789712][ T8890] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1923'. [ 114.925636][ T8902] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1929'. [ 114.966681][ T8905] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 114.989479][ T8909] loop6: detected capacity change from 0 to 512 [ 115.028102][ T8909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.077196][ T8909] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.102897][ T8909] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.1931: corrupted inode contents [ 115.115536][ T8909] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #2: comm syz.6.1931: mark_inode_dirty error [ 115.128238][ T8909] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.1931: corrupted inode contents [ 115.142049][ T8909] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1931: mark_inode_dirty error [ 115.179381][ T8926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1941'. [ 115.192415][ T7388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.357400][ T8938] sock: sock_set_timeout: `syz.7.1944' (pid 8938) tries to set negative timeout [ 115.374354][ T8941] bridge0: port 3(vlan0) entered blocking state [ 115.380736][ T8941] bridge0: port 3(vlan0) entered disabled state [ 115.388511][ T8941] vlan0: entered allmulticast mode [ 115.393690][ T8941] bridge0: entered allmulticast mode [ 115.408944][ T8941] vlan0: left allmulticast mode [ 115.413952][ T8941] bridge0: left allmulticast mode [ 115.581563][ T8958] loop6: detected capacity change from 0 to 2048 [ 115.615778][ T8958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.657888][ T7388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.733844][ T8972] loop6: detected capacity change from 0 to 512 [ 115.776487][ T8972] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 115.805126][ T8972] EXT4-fs (loop6): 1 truncate cleaned up [ 115.813783][ T8972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.890997][ T8990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.910568][ T8990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.921102][ T8990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.946919][ T8990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.956832][ T8992] sd 0:0:1:0: device reset [ 115.963789][ T8990] netlink: 566 bytes leftover after parsing attributes in process `syz.7.1966'. [ 116.031871][ T7388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.131239][ T9005] netlink: 'syz.6.1973': attribute type 29 has an invalid length. [ 116.140876][ T9005] netlink: 'syz.6.1973': attribute type 29 has an invalid length. [ 116.153477][ T9005] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1973'. [ 116.261404][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 116.261423][ T29] audit: type=1400 audit(1770429134.303:951): avc: denied { map } for pid=9011 comm="syz.5.1975" path="socket:[22923]" dev="sockfs" ino=22923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.291774][ T29] audit: type=1400 audit(1770429134.303:952): avc: denied { accept } for pid=9011 comm="syz.5.1975" path="socket:[22923]" dev="sockfs" ino=22923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.316519][ T9013] tipc: Cannot configure node identity twice [ 116.509125][ T29] audit: type=1326 audit(1770429134.553:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.7.1977" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff7f44aeb9 code=0x0 [ 116.715002][ T9026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1982'. [ 117.127270][ T9055] loop4: detected capacity change from 0 to 4096 [ 117.137412][ T9055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.242527][ T29] audit: type=1400 audit(1770429135.283:954): avc: denied { ioctl } for pid=9058 comm="syz.5.1994" path="socket:[22978]" dev="sockfs" ino=22978 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.318980][ T29] audit: type=1400 audit(1770429135.363:955): avc: denied { shutdown } for pid=9058 comm="syz.5.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.412717][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.450159][ T9068] loop4: detected capacity change from 0 to 1024 [ 117.464950][ T9068] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 117.473297][ T9068] System zones: 0-1, 3-36 [ 117.491262][ T9068] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1997: bad orphan inode 134217728 [ 117.510649][ T9068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.779311][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.905794][ T29] audit: type=1326 audit(1770429135.953:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 117.930161][ T29] audit: type=1326 audit(1770429135.953:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 117.953713][ T29] audit: type=1326 audit(1770429135.973:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 117.977092][ T29] audit: type=1326 audit(1770429135.973:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 118.000891][ T29] audit: type=1326 audit(1770429135.973:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 118.058780][ T9109] loop6: detected capacity change from 0 to 128 [ 118.066031][ T9109] EXT4-fs: Ignoring removed orlov option [ 118.094429][ T9109] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.108035][ T9109] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.163975][ T7388] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.769992][ T9230] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 118.836418][ T9230] SELinux: failed to load policy [ 119.200126][ T9292] netlink: 'syz.5.2038': attribute type 1 has an invalid length. [ 119.241387][ T9292] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 119.260111][ T9292] bond1: (slave batadv1): making interface the new active one [ 119.269574][ T9292] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 119.296230][ T9292] __nla_validate_parse: 2 callbacks suppressed [ 119.296257][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2038'. [ 119.334933][ T9292] bond1 (unregistering): (slave batadv1): Releasing active interface [ 119.372741][ T9292] bond1 (unregistering): Released all slaves [ 119.383074][ T9299] netlink: 'syz.6.2042': attribute type 5 has an invalid length. [ 119.458530][ T9315] netlink: 'syz.6.2048': attribute type 12 has an invalid length. [ 119.466448][ T9315] netlink: 'syz.6.2048': attribute type 29 has an invalid length. [ 119.474388][ T9315] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2048'. [ 119.483477][ T9315] netlink: 'syz.6.2048': attribute type 2 has an invalid length. [ 119.491822][ T9315] netlink: 23 bytes leftover after parsing attributes in process `syz.6.2048'. [ 119.671422][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2057'. [ 119.680451][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2057'. [ 119.728564][ T4498] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.737438][ T9343] netlink: 'syz.4.2059': attribute type 5 has an invalid length. [ 119.747545][ T4498] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.774000][ T4498] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.808988][ T4498] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.959147][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2066'. [ 120.159410][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2073'. [ 120.168488][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2073'. [ 120.195467][ T4498] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.206848][ T4498] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.235828][ T4498] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.247014][ T4498] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.475823][ T9392] netlink: 'syz.3.2082': attribute type 1 has an invalid length. [ 120.503150][ T9392] smc: adding net device bond0 with user defined pnetid SYZ2 [ 120.513302][ T9395] netlink: 'syz.6.2083': attribute type 4 has an invalid length. [ 120.539428][ T9392] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 120.548377][ T9392] bond0: (slave batadv1): making interface the new active one [ 120.573147][ T9399] netlink: 'syz.6.2083': attribute type 4 has an invalid length. [ 120.581043][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2082'. [ 120.602299][ T9392] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 120.654898][ T9400] smc: removing net device bond0 with user defined pnetid SYZ2 [ 120.696405][ T9400] bond0 (unregistering): (slave batadv1): Releasing active interface [ 120.717714][ T9400] bond0 (unregistering): Released all slaves [ 120.814928][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 120.855687][ T4498] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.875339][ T9411] loop6: detected capacity change from 0 to 1024 [ 120.884365][ T4498] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.906325][ T9411] EXT4-fs: Ignoring removed bh option [ 120.918387][ T4498] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.928512][ T4504] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.964739][ T9411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.047879][ T7388] EXT4-fs error (device loop6): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 121.135393][ T7388] EXT4-fs error (device loop6): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 121.257815][ T9432] netlink: 'syz.4.2097': attribute type 1 has an invalid length. [ 121.299223][ T9438] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 121.328580][ T9432] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 121.346061][ T9432] bond3: (slave batadv1): making interface the new active one [ 121.356942][ T9432] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 121.379685][ T9440] bond3 (unregistering): (slave batadv1): Releasing active interface [ 121.395489][ T9440] bond3 (unregistering): Released all slaves [ 121.411425][ T7388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.446077][ T4504] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.456516][ T4504] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.548281][ T4504] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.558706][ T4504] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.627384][ T4504] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.637836][ T4504] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.717645][ T4504] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.728149][ T4504] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.748536][ T9439] loop7: detected capacity change from 0 to 32768 [ 121.805145][ T9469] smc: adding net device bond0 with user defined pnetid SYZ2 [ 121.813515][ T9469] bond0: entered promiscuous mode [ 121.833005][ T9469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.877455][ T9471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.896285][ T9471] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address [ 121.906550][ T9471] bond0: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 121.926306][ T9471] bond0: (slave xfrm1): making interface the new active one [ 121.933707][ T9471] xfrm1: entered promiscuous mode [ 121.941024][ T9471] bond0: (slave xfrm1): Enslaving as an active interface with an up link [ 122.052887][ T4504] bridge_slave_1: left allmulticast mode [ 122.058641][ T4504] bridge_slave_1: left promiscuous mode [ 122.064370][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.078375][ T4504] bridge_slave_0: left allmulticast mode [ 122.084172][ T4504] bridge_slave_0: left promiscuous mode [ 122.090051][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.187435][ T4504] bond1 (unregistering): (slave gretap1): Releasing active interface [ 122.206755][ T4504] bond2 (unregistering): (slave gretap2): Releasing active interface [ 122.287280][ T4504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.297775][ T4504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.307848][ T4504] bond0 (unregistering): Released all slaves [ 122.315740][ T4504] bond1 (unregistering): Released all slaves [ 122.325533][ T4504] bond2 (unregistering): Released all slaves [ 122.374902][ T9454] chnl_net:caif_netlink_parms(): no params data found [ 122.397846][ T4504] hsr_slave_0: left promiscuous mode [ 122.403551][ T4504] hsr_slave_1: left promiscuous mode [ 122.409597][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.417215][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.433018][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.440596][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.462297][ T4504] veth1_macvtap: left promiscuous mode [ 122.470104][ T4504] veth0_macvtap: left promiscuous mode [ 122.480139][ T4504] veth1_vlan: left promiscuous mode [ 122.487306][ T4504] veth0_vlan: left promiscuous mode [ 122.573078][ T4504] team0 (unregistering): Port device team_slave_1 removed [ 122.587941][ T4504] team0 (unregistering): Port device team_slave_0 removed [ 122.697120][ T9454] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.704412][ T9454] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.712009][ T9454] bridge_slave_0: entered allmulticast mode [ 122.718899][ T9454] bridge_slave_0: entered promiscuous mode [ 122.726151][ T9454] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.733236][ T9454] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.740680][ T9454] bridge_slave_1: entered allmulticast mode [ 122.758599][ T9454] bridge_slave_1: entered promiscuous mode [ 122.777403][ T9454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.788434][ T9454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.808390][ T9454] team0: Port device team_slave_0 added [ 122.815245][ T9454] team0: Port device team_slave_1 added [ 122.838622][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.845668][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.871765][ T9454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.887315][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.894368][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.920391][ T9454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.960108][ T9454] hsr_slave_0: entered promiscuous mode [ 122.966758][ T9454] hsr_slave_1: entered promiscuous mode [ 122.972764][ T9454] debugfs: 'hsr0' already exists in 'hsr' [ 122.978645][ T9454] Cannot create hsr debugfs directory [ 123.131247][ T9512] loop3: detected capacity change from 0 to 8192 [ 123.146230][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 123.146248][ T29] audit: type=1400 audit(1770429141.193:1327): avc: denied { mounton } for pid=9511 comm="syz.3.2122" path="/460/file2/bus" dev="loop3" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 123.167236][ T4498] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.194530][ T3315] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 123.202432][ T3315] FAT-fs (loop3): Filesystem has been set read-only [ 123.224417][ T4498] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.246566][ T4498] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.259013][ T4498] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.480159][ T9533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.495269][ T9533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.382695][ T9567] __nla_validate_parse: 5 callbacks suppressed [ 124.382714][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2144'. [ 124.467413][ T9564] loop3: detected capacity change from 0 to 512 [ 124.483583][ T9564] EXT4-fs: Ignoring removed i_version option [ 124.496898][ T9564] EXT4-fs (loop3): 1 truncate cleaned up [ 124.505454][ T9564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.535297][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.582239][ T9461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.592154][ T9454] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 124.609876][ T9454] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 124.621550][ T9454] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 124.645078][ T9454] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 125.031616][ T9613] loop4: detected capacity change from 0 to 128 [ 125.038826][ T9613] FAT-fs (loop4): bogus number of reserved sectors [ 125.045419][ T9613] FAT-fs (loop4): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 125.056526][ T9613] FAT-fs (loop4): Can't find a valid FAT filesystem [ 125.064387][ T29] audit: type=1326 audit(1770429143.103:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.3.2157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x0 [ 125.094750][ T9613] loop4: detected capacity change from 0 to 512 [ 125.107349][ T9613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.120055][ T9613] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.142824][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.293552][ T9636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2169'. [ 125.302857][ T9636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2169'. [ 125.424920][ T9649] validate_nla: 1 callbacks suppressed [ 125.424939][ T9649] netlink: 'syz.4.2173': attribute type 1 has an invalid length. [ 125.438279][ T9649] netlink: 'syz.4.2173': attribute type 4 has an invalid length. [ 125.446157][ T9649] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2173'. [ 125.520637][ T29] audit: type=1400 audit(1770429143.563:1329): avc: denied { unmount } for pid=7355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.866478][ T9658] loop4: detected capacity change from 0 to 512 [ 125.879949][ T9658] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2180: bad orphan inode 15 [ 125.894932][ T9658] ext4_test_bit(bit=14, block=18) = 1 [ 125.900352][ T9658] is_bad_inode(inode)=0 [ 125.904565][ T9658] NEXT_ORPHAN(inode)=1023 [ 125.908921][ T9658] max_ino=32 [ 125.912232][ T9658] i_nlink=0 [ 125.944598][ T9658] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.2180: corrupted xattr block 19: invalid header [ 125.966201][ T9658] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 125.976802][ T9658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 125.991474][ T9658] ext4 filesystem being mounted at /445/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 126.009566][ T9658] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2180: bg 0: block 449: padding at end of block bitmap is not set [ 126.055263][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 126.148158][ T4497] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.164499][ T4497] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.173616][ T4497] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.204532][ T4497] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.328069][ T9670] chnl_net:caif_netlink_parms(): no params data found [ 126.367406][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.374662][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.381939][ T9670] bridge_slave_0: entered allmulticast mode [ 126.388438][ T9670] bridge_slave_0: entered promiscuous mode [ 126.395418][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.402476][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.409803][ T9670] bridge_slave_1: entered allmulticast mode [ 126.416561][ T9670] bridge_slave_1: entered promiscuous mode [ 126.433959][ T9670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.444852][ T9670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.469124][ T9670] team0: Port device team_slave_0 added [ 126.478848][ T9670] team0: Port device team_slave_1 added [ 126.494008][ T9697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2193'. [ 126.503169][ T9697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2193'. [ 126.513031][ T9670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.520128][ T9670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.546109][ T9670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.560609][ T9670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.567664][ T9670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.593703][ T9670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.621954][ T9670] hsr_slave_0: entered promiscuous mode [ 126.628202][ T9670] hsr_slave_1: entered promiscuous mode [ 126.634136][ T9670] debugfs: 'hsr0' already exists in 'hsr' [ 126.639924][ T9670] Cannot create hsr debugfs directory [ 127.108015][ T9703] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2195'. [ 127.179388][ T9707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.200782][ T9707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2197'. [ 127.413839][ T9713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.423743][ T9713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.555056][ T9583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.569861][ T9670] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 127.593343][ T9670] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 127.607975][ T9670] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 127.631446][ T9670] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 127.670242][ T9454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.703449][ T9454] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.727902][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.735048][ T4488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.752105][ T4488] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.759289][ T4488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.781970][ T9670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.799824][ T9454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.810384][ T9454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.841790][ T9670] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.853710][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.860897][ T4497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.878431][ T4498] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.885604][ T4498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.937991][ T9670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.993997][ T9454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.107106][ T9670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.195505][ T4499] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.222390][ T4499] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.266528][ T4499] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.286728][ T7053] IPVS: starting estimator thread 0... [ 128.309503][ T4499] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.327899][ T9782] loop5: detected capacity change from 0 to 8192 [ 128.340835][ T9807] xt_hashlimit: size too large, truncated to 1048576 [ 128.351224][ T9454] veth0_vlan: entered promiscuous mode [ 128.372505][ T9454] veth1_vlan: entered promiscuous mode [ 128.378239][ T9800] IPVS: using max 2256 ests per chain, 112800 per kthread [ 128.439815][ T9454] veth0_macvtap: entered promiscuous mode [ 128.457930][ T9454] veth1_macvtap: entered promiscuous mode [ 128.470717][ T9454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.483275][ T9454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.527171][ T4291] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 128.535156][ T4291] FAT-fs (loop5): Filesystem has been set read-only [ 128.545446][ T9810] –: renamed from veth0_to_batadv [ 128.590363][ T3434] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.635021][ T29] audit: type=1400 audit(1770429146.673:1330): avc: denied { mount } for pid=9454 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.672241][ T3434] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.681270][ T9825] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2211'. [ 128.695201][ T9825] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2211'. [ 128.713174][ T3434] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.730251][ T9670] veth0_vlan: entered promiscuous mode [ 128.759610][ T9670] veth1_vlan: entered promiscuous mode [ 128.774784][ T9670] veth0_macvtap: entered promiscuous mode [ 128.790228][ T9832] SELinux: failed to load policy [ 128.798377][ T3434] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.813002][ T9670] veth1_macvtap: entered promiscuous mode [ 128.861029][ T9670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.886280][ T29] audit: type=1400 audit(1770429146.933:1331): avc: denied { setopt } for pid=9841 comm="syz.3.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.894831][ T9670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.953104][ T4488] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.962062][ T4488] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.987512][ T4488] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.023124][ T4488] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.197943][ T9866] loop8: detected capacity change from 0 to 764 [ 129.222041][ T9865] loop4: detected capacity change from 0 to 1024 [ 129.265914][ T9865] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 129.274141][ T9865] System zones: 0-1, 3-36 [ 129.288518][ T9865] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2224: bad orphan inode 134217728 [ 129.310425][ T9865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.549666][ T9897] loop3: detected capacity change from 0 to 764 [ 130.017274][ T9938] loop5: detected capacity change from 0 to 764 [ 130.103455][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.154925][ T9945] loop4: detected capacity change from 0 to 512 [ 130.192120][ T9945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.224574][ T9945] ext4 filesystem being mounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.281367][ T9945] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.2257: corrupted inode contents [ 130.328547][ T9945] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.2257: mark_inode_dirty error [ 130.341032][ T9945] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.2257: corrupted inode contents [ 130.353789][ T9945] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2257: mark_inode_dirty error [ 130.401281][ T29] audit: type=1400 audit(1770429148.443:1332): avc: denied { shutdown } for pid=9956 comm="syz.5.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.467468][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.510424][ T9968] loop9: detected capacity change from 0 to 1024 [ 130.536149][ T9975] loop4: detected capacity change from 0 to 128 [ 130.558242][ T9975] bio_check_eod: 100 callbacks suppressed [ 130.558259][ T9975] syz.4.2270: attempt to access beyond end of device [ 130.558259][ T9975] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 130.585675][ T9968] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 130.595032][ T9968] System zones: 0-1, 3-36 [ 130.598813][ T29] audit: type=1326 audit(1770429148.643:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.5.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 130.611943][ T9968] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2269: bad orphan inode 134217728 [ 130.623307][ T29] audit: type=1326 audit(1770429148.643:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.5.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 130.657026][ T29] audit: type=1326 audit(1770429148.643:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.5.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 130.671378][ T9975] syz.4.2270: attempt to access beyond end of device [ 130.671378][ T9975] loop4: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 130.680951][ T29] audit: type=1326 audit(1770429148.643:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.5.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 130.694409][ T9975] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 130.717782][ T29] audit: type=1326 audit(1770429148.643:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.5.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 130.749764][ T29] audit: type=1326 audit(1770429148.643:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.5.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 130.773276][ T29] audit: type=1326 audit(1770429148.643:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.5.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a7bfaeb9 code=0x7ffc0000 [ 130.797226][ T9979] loop8: detected capacity change from 0 to 2048 [ 130.810657][ T9968] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.849638][ T9979] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.883228][ T9988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26091 sclass=netlink_route_socket pid=9988 comm=syz.5.2276 [ 131.044109][ T9454] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.144414][T10004] SELinux: failed to load policy [ 131.333427][ T9670] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.372520][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.400336][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.419607][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.429116][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.439644][T10018] __nla_validate_parse: 1 callbacks suppressed [ 131.439659][T10018] netlink: 566 bytes leftover after parsing attributes in process `syz.8.2290'. [ 131.640506][T10027] loop9: detected capacity change from 0 to 128 [ 131.723533][T10028] syz.9.2293: attempt to access beyond end of device [ 131.723533][T10028] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 131.738722][T10028] syz.9.2293: attempt to access beyond end of device [ 131.738722][T10028] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 131.753941][T10028] syz.9.2293: attempt to access beyond end of device [ 131.753941][T10028] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 131.769063][T10028] syz.9.2293: attempt to access beyond end of device [ 131.769063][T10028] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 131.784517][T10028] syz.9.2293: attempt to access beyond end of device [ 131.784517][T10028] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 131.798551][T10028] syz.9.2293: attempt to access beyond end of device [ 131.798551][T10028] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 131.812157][T10028] syz.9.2293: attempt to access beyond end of device [ 131.812157][T10028] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 131.826270][T10028] syz.9.2293: attempt to access beyond end of device [ 131.826270][T10028] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 131.965945][T10033] program syz.5.2295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.996401][T10035] netlink: 'syz.8.2297': attribute type 29 has an invalid length. [ 132.006625][T10035] netlink: 'syz.8.2297': attribute type 29 has an invalid length. [ 132.018068][T10035] netlink: 500 bytes leftover after parsing attributes in process `syz.8.2297'. [ 132.027328][T10035] unsupported nla_type 66 [ 132.165611][T10048] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 132.173803][T10048] System zones: 0-1, 3-36 [ 132.237710][T10048] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2300: bad orphan inode 134217728 [ 132.283581][T10048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.327282][T10058] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.399205][T10063] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2308'. [ 132.436954][T10058] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.552484][T10058] EXT4-fs error (device loop9): dx_make_map:1296: inode #2: block 20: comm syz.9.2305: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 132.617745][T10058] EXT4-fs error (device loop9) in do_split:2027: Corrupt filesystem [ 132.806184][ T9670] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.825948][ T4291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.970270][T10075] SELinux: failed to load policy [ 133.762062][T10105] set_capacity_and_notify: 2 callbacks suppressed [ 133.762084][T10105] loop3: detected capacity change from 0 to 4096 [ 133.796072][T10105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.188260][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2327'. [ 134.214369][T10117] team1: entered promiscuous mode [ 134.219500][T10117] team1: entered allmulticast mode [ 134.227552][T10117] 8021q: adding VLAN 0 to HW filter on device team1 [ 134.325008][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 134.325027][ T29] audit: type=1400 audit(1770429152.373:1343): avc: denied { unmount } for pid=10132 comm="syz.8.2333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 134.475571][ T29] audit: type=1400 audit(1770429152.523:1344): avc: denied { name_bind } for pid=10148 comm="syz.8.2335" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 134.573456][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.731084][T10170] loop3: detected capacity change from 0 to 1024 [ 134.754310][T10170] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 134.762592][T10170] System zones: 0-1, 3-36 [ 134.773116][T10170] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2337: bad orphan inode 134217728 [ 134.847672][T10170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.247884][ T4497] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.259746][ T29] audit: type=1400 audit(1770429153.293:1345): avc: denied { create } for pid=10237 comm="syz.4.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.280008][ T29] audit: type=1400 audit(1770429153.303:1346): avc: denied { ioctl } for pid=10237 comm="syz.4.2347" path="socket:[28629]" dev="sockfs" ino=28629 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.327742][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2350'. [ 135.359984][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2350'. [ 135.475522][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.578885][T10261] vhci_hcd vhci_hcd.0: invalid port number 97 [ 135.587593][T10261] vhci_hcd vhci_hcd.0: invalid port number 97 [ 135.715503][T10269] loop5: detected capacity change from 0 to 128 [ 135.838612][T10276] sctp: [Deprecated]: syz.5.2361 (pid 10276) Use of int in max_burst socket option. [ 135.838612][T10276] Use struct sctp_assoc_value instead [ 135.864390][ T29] audit: type=1400 audit(1770429153.903:1347): avc: denied { create } for pid=10277 comm="syz.9.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.906719][ T29] audit: type=1400 audit(1770429153.933:1348): avc: denied { bind } for pid=10277 comm="syz.9.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.926116][ T29] audit: type=1400 audit(1770429153.933:1349): avc: denied { listen } for pid=10277 comm="syz.9.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.945786][ T29] audit: type=1400 audit(1770429153.933:1350): avc: denied { accept } for pid=10277 comm="syz.9.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.185010][ T29] audit: type=1400 audit(1770429155.233:1351): avc: denied { ioctl } for pid=10304 comm="syz.9.2372" path="socket:[29545]" dev="sockfs" ino=29545 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.247812][ T29] audit: type=1400 audit(1770429155.253:1352): avc: denied { bind } for pid=10304 comm="syz.9.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.324686][ T3635] Bluetooth: hci0: command 0x1003 tx timeout [ 137.329528][ T4437] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.484131][T10319] loop9: detected capacity change from 0 to 512 [ 137.521528][T10319] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.544520][T10319] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.585705][T10319] EXT4-fs (loop9): shut down requested (0) [ 137.631979][ T9670] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.641506][ T4494] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 137.652263][ T4494] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 137.664086][ T4494] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 137.947262][T10364] loop3: detected capacity change from 0 to 128 [ 138.020572][T10369] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 138.285718][T10405] loop3: detected capacity change from 0 to 128 [ 138.292630][T10405] EXT4-fs: Ignoring removed nobh option [ 138.336751][T10405] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.351489][T10405] ext4 filesystem being mounted at /541/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.417866][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.517027][T10432] loop4: detected capacity change from 0 to 128 [ 138.611275][T10445] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 138.742115][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2414'. [ 138.772345][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2414'. [ 139.101859][T10513] loop4: detected capacity change from 0 to 2048 [ 139.113185][T10513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.119930][T10513] EXT4-fs: Ignoring removed nobh option [ 139.164692][T10513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.235733][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.398474][T10560] loop3: detected capacity change from 0 to 164 [ 139.473803][T10563] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2429'. [ 139.482873][T10563] netlink: 'syz.8.2429': attribute type 11 has an invalid length. [ 139.528768][T10563] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2429'. [ 139.528840][ T1716] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.537875][T10563] netlink: 'syz.8.2429': attribute type 11 has an invalid length. [ 139.569733][ T1716] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.602900][ T1716] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.616952][ T1716] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.738872][T10598] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 139.768724][T10598] syzkaller0: entered promiscuous mode [ 139.774302][T10598] syzkaller0: entered allmulticast mode [ 139.985286][T10632] loop9: detected capacity change from 0 to 164 [ 140.115625][T10641] SELinux: failed to load policy [ 140.237419][T10681] loop9: detected capacity change from 0 to 128 [ 140.257088][T10681] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.317250][T10689] loop5: detected capacity change from 0 to 164 [ 140.424641][T10681] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.515719][ T9670] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.602880][T10739] SELinux: failed to load policy [ 140.643390][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 140.643406][ T29] audit: type=1326 audit(1770429158.683:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.9.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87bdcaeb9 code=0x7ffc0000 [ 140.694989][ T29] audit: type=1326 audit(1770429158.683:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.9.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87bdcaeb9 code=0x7ffc0000 [ 140.718573][ T29] audit: type=1326 audit(1770429158.683:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.9.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb87bdcaeb9 code=0x7ffc0000 [ 140.742172][ T29] audit: type=1326 audit(1770429158.683:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.9.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87bdcaeb9 code=0x7ffc0000 [ 140.765758][ T29] audit: type=1326 audit(1770429158.683:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.9.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb87bdcaeb9 code=0x7ffc0000 [ 140.789326][ T29] audit: type=1326 audit(1770429158.683:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.9.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87bdcaeb9 code=0x7ffc0000 [ 140.812937][ T29] audit: type=1326 audit(1770429158.683:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.9.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87bdcaeb9 code=0x7ffc0000 [ 140.836488][ T29] audit: type=1326 audit(1770429158.693:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.9.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fb87bdcaeb9 code=0x7ffc0000 [ 140.860056][ T29] audit: type=1326 audit(1770429158.693:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.9.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87bdcaeb9 code=0x7ffc0000 [ 140.883698][ T29] audit: type=1326 audit(1770429158.693:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.9.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87bdcaeb9 code=0x7ffc0000 [ 140.991529][T10753] loop5: detected capacity change from 0 to 128 [ 141.029603][T10757] loop3: detected capacity change from 0 to 2048 [ 141.048163][T10760] tipc: Failed to remove unknown binding: 66,1,1/0:3815821218/3815821220 [ 141.056710][T10760] tipc: Failed to remove unknown binding: 66,1,1/0:3815821218/3815821220 [ 141.095449][T10757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.113202][T10757] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.551927][T10801] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2485'. [ 141.571695][ T1757] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 141.587941][ T1757] EXT4-fs (loop3): Remounting filesystem read-only [ 141.684085][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.817967][T10819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10819 comm=syz.3.2495 [ 141.841881][T10823] loop9: detected capacity change from 0 to 2048 [ 141.868916][T10828] netlink: 'syz.3.2495': attribute type 1 has an invalid length. [ 141.877847][T10823] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.908776][T10823] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.942396][T10819] bond1: (slave bridge1): making interface the new active one [ 141.984732][T10819] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 142.424575][ T1757] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 142.456761][ T1757] EXT4-fs (loop9): Remounting filesystem read-only [ 142.520265][ T9670] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.922234][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2518'. [ 142.931325][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2518'. [ 142.946160][ T4501] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.955294][ T4501] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.964089][ T4501] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.973373][ T4501] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.025534][T10886] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2521'. [ 143.034827][T10886] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2521'. [ 143.087366][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2523'. [ 143.947735][T10941] loop4: detected capacity change from 0 to 128 [ 143.975003][T10941] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.004750][T10941] ext4 filesystem being mounted at /497/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.169566][T10950] __nla_validate_parse: 3 callbacks suppressed [ 144.169584][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2548'. [ 144.298133][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.681410][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2567'. [ 144.690447][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2567'. [ 144.713647][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2567'. [ 144.722612][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2567'. [ 144.855639][T11018] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.905011][ T7057] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.912817][ T7057] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.920700][ T7057] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.928564][ T7057] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.936178][ T7057] rtc rtc0: __rtc_set_alarm: err=-22 [ 145.131246][T11057] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2578'. [ 145.232849][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2580'. [ 145.241908][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2580'. [ 145.263125][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2580'. [ 145.272205][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2580'. [ 145.586493][T11130] loop3: detected capacity change from 0 to 128 [ 145.624155][T11130] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.693626][T11130] ext4 filesystem being mounted at /568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.744340][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 145.744357][ T29] audit: type=1326 audit(1770429163.783:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.3.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf56b8b78e code=0x7ffc0000 [ 145.836710][ T29] audit: type=1326 audit(1770429163.843:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.3.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbf56bc9367 code=0x7ffc0000 [ 145.860214][ T29] audit: type=1326 audit(1770429163.843:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.3.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf56b8b78e code=0x7ffc0000 [ 145.883758][ T29] audit: type=1326 audit(1770429163.843:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.3.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 145.907294][ T29] audit: type=1326 audit(1770429163.853:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.3.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 145.930794][ T29] audit: type=1326 audit(1770429163.863:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.3.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 145.954303][ T29] audit: type=1326 audit(1770429163.863:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.3.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 145.977977][ T29] audit: type=1326 audit(1770429163.863:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.3.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 146.001589][ T29] audit: type=1326 audit(1770429163.863:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.3.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 146.025198][ T29] audit: type=1326 audit(1770429163.863:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.3.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56bcaeb9 code=0x7ffc0000 [ 146.130533][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.350315][T11138] loop9: detected capacity change from 0 to 32768 [ 146.415503][T11138] loop9: p1 p2 p3 < p5 > [ 146.420363][T11138] loop9: p1 size 242222080 extends beyond EOD, truncated [ 146.439071][T11138] loop9: p2 start 16777215 is beyond EOD, truncated [ 146.586582][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 146.593617][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 146.599670][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 146.898741][T11161] loop5: detected capacity change from 0 to 32768 [ 146.975861][T11161] loop5: p1 p3 < p5 p6 > [ 146.980281][T11161] loop5: partition table partially beyond EOD, truncated [ 147.100343][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 147.100947][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 147.113688][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 147.123191][ T4315] udevd[4315]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 147.422864][T11178] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 147.502663][T11203] loop9: detected capacity change from 0 to 1024 [ 147.574748][T11203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.599852][T11216] macvlan0: entered promiscuous mode [ 147.612638][T11216] dummy0: entered promiscuous mode [ 147.630299][T11216] debugfs: 'hsr1' already exists in 'hsr' [ 147.636250][T11216] Cannot create hsr debugfs directory [ 147.651030][T11216] hsr1: entered promiscuous mode [ 147.656087][T11216] hsr1: entered allmulticast mode [ 147.661155][T11216] macvlan0: entered allmulticast mode [ 147.666650][T11216] veth1_vlan: entered allmulticast mode [ 147.672317][T11216] dummy0: entered allmulticast mode [ 147.674911][ T9670] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.691288][T11218] geneve2: entered promiscuous mode [ 147.697476][ T4499] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.706555][ T4499] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.752465][ T4499] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.777661][ T4499] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.964065][T11242] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 147.982339][T11250] geneve2: entered promiscuous mode [ 148.984546][T11402] tipc: Started in network mode [ 148.989556][T11402] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 148.996938][T11402] tipc: Enabled bearer , priority 18 [ 149.388329][T11425] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 149.408148][T11427] __nla_validate_parse: 6 callbacks suppressed [ 149.408168][T11427] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2679'. [ 149.553208][T11433] loop5: detected capacity change from 0 to 8192 [ 149.576527][T11433] bio_check_eod: 103 callbacks suppressed [ 149.576547][T11433] syz.5.2682: attempt to access beyond end of device [ 149.576547][T11433] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 149.715714][T11440] tipc: Started in network mode [ 149.720712][T11440] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 149.728119][T11440] tipc: Enabled bearer , priority 18 [ 149.809293][T11447] netlink: 'syz.4.2687': attribute type 2 has an invalid length. [ 149.817195][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2687'. [ 149.834098][T11447] netlink: 'syz.4.2687': attribute type 2 has an invalid length. [ 149.842018][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2687'. [ 149.887786][T11453] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2690'. [ 150.114317][ T7057] tipc: Node number set to 10463914 [ 150.741955][T11517] loop3: detected capacity change from 0 to 128 [ 150.775907][T11517] loop3: detected capacity change from 0 to 512 [ 150.821066][T11517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.844729][ T7050] tipc: Node number set to 10463914 [ 150.850280][T11517] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.979022][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.029645][T11523] ================================================================== [ 151.037889][T11523] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 151.045834][T11523] [ 151.048198][T11523] write to 0xffff88811c3dbb48 of 8 bytes by task 11524 on cpu 0: [ 151.055943][T11523] cpu_map_kthread_run+0x4e7/0x1650 [ 151.061524][T11523] kthread+0x488/0x510 [ 151.065652][T11523] ret_from_fork+0x148/0x280 [ 151.070274][T11523] ret_from_fork_asm+0x1a/0x30 [ 151.075078][T11523] [ 151.077436][T11523] read to 0xffff88811c3dbb48 of 8 bytes by task 11523 on cpu 1: [ 151.085099][T11523] bq_flush_to_queue+0x124/0x350 [ 151.090079][T11523] cpu_map_enqueue+0x1a5/0x1c0 [ 151.094868][T11523] xdp_do_redirect_frame+0x27b/0x560 [ 151.100187][T11523] bpf_test_run_xdp_live+0xac3/0x1360 [ 151.105606][T11523] bpf_prog_test_run_xdp+0x57b/0xa10 [ 151.110932][T11523] bpf_prog_test_run+0x204/0x340 [ 151.115912][T11523] __sys_bpf+0x4c0/0x7b0 [ 151.120191][T11523] __x64_sys_bpf+0x41/0x50 [ 151.124654][T11523] x64_sys_call+0x28e1/0x3000 [ 151.129391][T11523] do_syscall_64+0xc0/0x2a0 [ 151.133926][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.139857][T11523] [ 151.142195][T11523] value changed: 0xffff888115876070 -> 0x0000000000000000 [ 151.149316][T11523] [ 151.151674][T11523] Reported by Kernel Concurrency Sanitizer on: [ 151.157868][T11523] CPU: 1 UID: 0 PID: 11523 Comm: syz.3.2718 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.167722][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 151.177808][T11523] ==================================================================