last executing test programs: 14.202280752s ago: executing program 3 (id=1136): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x69, 0x0, 0xa, 0x0, 0x0, 0x4e, 0xa}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 14.202051192s ago: executing program 3 (id=1137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000180)=""/107, 0x6b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r3, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000240)={r3, &(0x7f0000000180), 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1, &(0x7f0000000880)}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$binfmt_aout(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="0301000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/800], 0x320) socket$inet(0x2, 0x0, 0x0) pipe(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 13.349468845s ago: executing program 3 (id=1164): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1c5002, 0x0) ftruncate(r1, 0x5d801) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x107042, 0x0) write(r3, &(0x7f0000000400)="6f88b2a60614ef91a3f8ef9e1220b2675bce0f59b2336b1e3eb222ffa77b91bd642da8472b07a5059831e5c03734ccff6480db993a9be5198f428be1838bef5847f8452dab06605676dc879a87d9c28bf128eb784296078f4a28e8a2595743bd65e4e6a9e5ced66e5524edc432ceaab8552a2c2f179d91122a961061343c8695c39084b2370dae938e8d43b6d6fbd905eff6c6360e26d2ef525c6a46357a0f26061ba8da82c8c39b6ec93cea456c8ed747b85fa822136714ad8bdb0d36d7c9c75354e5d73d216e45cb24fc975e092c08bd1bfb1102952f580acce4909b84036801c1f0b88c7508aa2bf5999b5f8b0da1b6d5a83203cf784ce1e8a562c75310eea1c28d9f650073742c8e9311718b35acee6a272bd76b7e547c06b9b9c461163e18f48033a79c7f3a6574c234d84fa9c569100e6c088070010175611c6643b7cd4eb643ab300fa1e46fb4027fe48882975fcfd5a5295ead29b97cb0e86af8a0b4beb400d3b54774eafac72f7d222a4248662afdd0072963aef817701d5fc445f61d563c3ed0992670002289a555f7bebfcc91b5c75e9222b17ed54aff16a3d6a0cfab24f8bffcaef7c61f2be13411eb800853f37dd2d0efc25abc246e833d350206539d5160991f02e4b0201f14ed8fdc814c4034ed7e438934b250352ece17f1145ba3ea72c698adfeeb89e4e1338fd7598d83f70137a83ef553d770193c4738", 0x353c00) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x2, 0x4000000}) 13.310978997s ago: executing program 3 (id=1166): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ff5000/0x3000)=nil], &(0x7f0000000080)=[0x1f], 0x0, 0x1100000000000000) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x84000, 0x0) 13.294451548s ago: executing program 3 (id=1168): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) ptrace$getenv(0x4205, r1, 0x202, &(0x7f0000000000)) 3.521391451s ago: executing program 1 (id=1380): prctl$PR_SET_SECUREBITS(0x1c, 0x1e) r0 = socket$nl_audit(0x10, 0x3, 0x9) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 3.491791003s ago: executing program 1 (id=1381): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000000d80)={[{@shortname_winnt}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@rodir}, {@fat=@check_strict}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@shortname_lower}, {@shortname_mixed}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@fat=@dmask={'dmask', 0x3d, 0x6}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlate}, {@rodir}, {@shortname_win95}, {@rodir}, {@shortname_mixed}, {@utf8}, {@shortname_win95}, {@utf8no}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}, 0x6, 0x2d1, &(0x7f0000000740)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[{'rdma'}]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8840}, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.372577288s ago: executing program 1 (id=1386): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 3.320760919s ago: executing program 1 (id=1387): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x80}}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001d0000090000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)={0xa847, "4bfc77"}, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000002c00)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x18}}], 0x1, 0x0) 3.283706481s ago: executing program 1 (id=1388): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) 3.224669504s ago: executing program 1 (id=1389): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x181302, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x10f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0) inotify_add_watch(r0, &(0x7f0000000340)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000095e009d82aeb638f000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f00004ce000/0x4000)=nil, 0x4000, 0x4, 0x40010, r5, 0x0) ftruncate(r5, 0x796c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x6, 0x0, 0x0) sendfile(r4, r4, 0x0, 0xb) sendmmsg$unix(r5, 0x0, 0x0, 0x20040000) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="1b", 0x1}, {&(0x7f0000000540)="63139fdd8f604c6c62371a5a325b564fc37a42fe1ccff6804113259453e5b1ae5b1a97cf8663a1cc3e7cbc801556c71f62e72b9dc52ca8bff4669baed06c8ebd2b3c91", 0x43}], 0x2}}], 0x1, 0x4880) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/235, 0xeb, 0x40000000, 0x0, 0x0) 1.412629835s ago: executing program 2 (id=1423): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) 1.394757685s ago: executing program 2 (id=1424): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=0x1, r0, 0x36, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 1.379778716s ago: executing program 2 (id=1425): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x7, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="8b"], 0x53) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000780), 0xe9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x50, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}}, 0x0) sendfile(r7, r6, 0x0, 0x100000001) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}, {@access_uid}], [], 0x6b}}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r10 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r10, r9, 0x0, 0x100800001) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) 1.234804312s ago: executing program 2 (id=1427): r0 = syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() setrlimit(0xf, &(0x7f0000000280)={0x89c, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) close_range(r1, r1, 0x0) syz_io_uring_setup(0x5d32, &(0x7f0000000040)={0x0, 0x0, 0x32}, &(0x7f00000000c0), &(0x7f0000ffc000)) sendmmsg$unix(r4, &(0x7f0000000d40)=[{{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000001480)="38cfa062425b2665a639bd71a9e2acd37cc7777873a5b116c65aa8435a0254996dece6de399c55c23e95a048553cea2c9c061bd5e2551e4e433fd794192fc467c76ec1f54e4d9c02af6412fc5ba007a11d1c238d2fb23b2e867f2b51810e41654cf214a6ec4f9b8f775348ef15131f4a3f59bbf59c0eefe9476f168dbfed22b1e35d1b9f66c51df3843bf7207386a37fc89ce9d4e8a0ffb8ec7a5ef27b67edc13b018707cf11cc52a23d24729a6b41e8291e1b31791a64d94bb6958a86c51f19305344c0fe2b99d95fce730fb833cbae8f3f70ffac29157b65797f67c4b063a5c07e95c556c9bb845539f8cf0352b2dbf6a76e1103c44b72cefeedd3e7add86dc16f0c80c20f81aa7a25d47ac1882d5065f5e5a1ca38132c09220423fc2d1fa58db8fb0e9ac7129dc7a84488e16a814435164446bbb435e472a9df109f3e8cd1b7feb2a29e0833e3deb6b59a6667dcdc3e0e2e6df5c3827efa190f736d7263f9eb4d8f726c4ee77116cb4f5d9119c1788c69fc3095013c233a6975626c21680e5ecd1a6be08d69ace2b0222773f627711cbb85f004e8ed7066767c3bd184787de7ccfdf47c64bd17891f1407f7c5ed475ac7b3b9d7a7d82fa1e20f9af0f3ed5907f6983b2aade55081f856e451384161977f169446445ca81dcac5a1295003a82b82365047876092be4f9b69b72ce18d62240f24f0619e105e90f5e33ec696393fbb44f82bf5026a15c41fda240e296cbdb2339319cb7c05ab8ec7fff9431a38d058a0b217a0e2c09a6a07c9de4298d0026e391e346e4817a346860099650f7c4b7b4f800cad492da6dc99474dc7cf511f9eb00521b3517534bb678c21f30e14acdf7071c81b2928b7b78bb8561a45e0c062c503181e65aeccbe0faa60e5b32f64724835ccebc37ab9dab2cb9f574d051579a2fdc1ffdbacecba443b57375deedfdeb1d33ea1eb9cd47972d7dbd825969a0a5a2ca7b8934396b4719615392a3a3a6f6ea00972365082ead224ae103d2cb2c2ec344919972cc0988615d274e924beb21e7c5a6438e0e315ea3827cdd0cb4515561ef147404c0d1d4216d1a5ee1d8fe92bdf35bcb4414d8202904e80aec0575bedbd1290cf4d20aa4ea69f442859bf017332bfb2a4dcd41e9d7f33c5f2aa7841574cdb2d1c483a19d1cb7a41e7584e983490e8f0f29e519b1589534b410624b98d5244581f182b94b081f4263591c02b1e7314a25dcb9a093628144e44730a91803ba9db47334abcda87e675bfd399bc7060ca2abb2c571146f015e22ae845a9b903ea02cf362498ea52092b280404c71b4006f4e3b963a154aaa333149bfd0e4ba697c01fe5b6e3ece04a3fd110e3297dc67a8f29a90fe61202afd7b1b6a4379f04a1459670baf84c3e45161e9bf9cd2ecdc1b3c679dde2c0f90bf9e506e043a3236548d59e576050bcbca04bb7984209d283ae5ec96b222439dbbfed49e442a302860eeb56245c1df3833bdab5b7ef96176bf8e05046778fa0dfe1a5c0d8d596ba771b5ac1a799bfc7d0366e1d2caf919fd43bbfda97d58289f85bcf497d5ebc24f28700512e477f544fea8581c168b2b94847c235dc4b6ed4901e92f243f3be383e91a8085962082f6c2f8715cbab4497dc8c9ce29d5185b8ca7f45c141d2dba5ce13425e72dd12e056255f7564952ac6b1342f7612bedf3819d87c48a3b4cd3cf3576a1775ca2d769eb148c07b6e8014c2c1e8d79c419c43fb90209273a92c95e4e03df6681e9173e863061629ec6d6cef64c04f4b6cc3ec96931c34149bcaefcc9d5fb234211e173068e8c5e49117e1c450e4aa18ca382c94e236e5c2f26eb18a17f1f57eddb83a7306f927b853e2ac75bc5f6e40f681cb03c1688d78a324e0310225a1e9cc8c6115c8066373f752f11faffc3ed692d1e794a002b33282ce82e61488cdf8d9ec532ee6795e33a93df1e0a6c84ed331d7cdd5feaadcdcae26c44a1794e3e02bf20e18b97752f3b7267eeae36e7c27f7e23cf55ed9005623f71fc4f8d5d7fb6f1c00fab1d794597663c396c1b193fa8867652c982b832ff2e76f1ed04c5b0ac23fd45f4f693d73c227e2df50230420abf342c5e3245352fba929ef0af4329377c982b8ba64b94ee409f7c09f0c9407ae0ea755124c4cc0e3ef586ebf9ae4e735becc17be9820fc30dcd0e4af56c25388ccc14b4404e5d43038afa1e3359a8e05aa836c65f21a0e3fb8e940b4c000db90df681124bc9d5f575783f10b2d19668d35c6e2225c615aa670e693f77c0284a9c5975bfbcfe6a7161ab739f44e549f274e8e87df579af53c55523144ddf4ef1c13c8121c305da1d6abc300ccfcedabf0245b09b0b461cc72c691bd2b68db5a6fcbd1efbd7950288a719d9945a41515e7beb273637c06b0e8c3cb5b84d36cad7ef9155ccafb55f2159a554b9712e0db79dcb74fb119edece1ab30b6e10629a77897d0f2f241ad3032fa667387597d6729db60714df8f0fe979385b68cec928419309301fe7ca58c298ad80a02fe7f71198e65ccb488b0e1eaa9a08c9d35ada2c76ed8a494063bd4c96ccf284ec7cc8d80ff6b7293057f545444fb7189bad2dc2a48a6138cf866c33bd59dc97daa281e6d04c7cb183be58accc347e8b15b78862979cb59fe5671fd25953d83f3a9b024a2c0f60043c1b478bff7de081d9e661ed753e270bdc41a8c64eedf6923395bd1a75686ce0c44e8b184832180603b3ce32cbc271c713d2c04f153f794e2cc51a7e7d1e19af521ed477a7b914c96847ba7e7ce53537516af897e6baae0e352cb4699d228fcd5292ffe30077bfc13e5e611b247b2b5fa8df69b12a6f5474ac5e6549987af8a6a44356457b0e549e20380744966d0be4b4d4f14f6b7587d8b63e801a1192b45d993d61cefed2099bc96f807d87fbafdf838b7a3c959c871d8f93f6fe29ccd270ed17afefcac4b204b53e87881c2c44e97e7587bfd7e340565bc4e49a5ad00607745464acd33953cd611b2d72d1459da1764fbc879243206829643ae45f6908af11e53a1d9f67aecdab5fc39f0640b3b052995e4b06f98c23db82c6bc95abf4863d8d359454d2e942a2315ecb11068ab8aaaa33f0807742cae79a1c919f39e4978d398d375d7e6ee10e450fb6d7f2cdc69dcc9036132b4859bea23a2f6765532ab100cecded09ceebdd742e85a61e5442c33ca06a9f30848f90191d7350d51626a5b596961a46320b0251f55206a766d04ba6dbfd6f44a2beef7196733fcd9333b52fe37d7c212dc51f81166fbb676f5412e85ecb74538b7ac9d7172e48fcf6c17e524994ef90faa7701a0b807b38fbf69bb02acf96220d37ac8ba1253e134124787e5ef0e8234c1f1f840677a39afffdd1dd170d4a53e983b5583cc6693e10e62c845e5721ab0d03b2f390a1d1d9b24902df31d0da91ec8b4a7437d385cd79f40847dea29ace0227c109457b36f6e4b40c99c0f2fe217ab3e534283f079db80e670346f034ff026882700cb43e54d9ca0e9d0bd69b25bd998c108f3bb637f6f9d1d5488fa403ad2240108faf6d9e613f6c59d70dabe3abf2819a9ea3ee02ff18814e44e89cb74688336e5bd935d2ac39f97604abc593846ec01cd072601046c8ef101e83b6741e1af699f0136864f4f4aeadb7ca281a2f62f1d3fab3823b24b1e702db6f332414c9d92ae24b99745c9f90d81364044415a6f5d56393fb63df9049e1f595ddeab02d7fa3c047823a08060979bdca66600c025dafae181a57f8992b339c15df43ffa2f345d5c4b2191d946196b0e3f3a8b89c97a9f1ba7ea45a9f50a2befc959c9691b9d1fc440fdaa6e8698007a685eb146deca5a3a05b4d0e59187136942c51fedbdf12a70984a53f2e4e139ae94355672bdcbd645c1d36f3fbbf48aa9b3e39f368f95faf957c79e8499330205f79302788a516cd255b52249ebca1fe3be085264e33e055afaa68cba9c2b54ec56fef823e22500feb131a7a296386ad522a348492a3dfd3a8652de6d4857f4631aefecddcbd20c96778bb8fa6057d6b94c3f7060ce7105990d1d67de7ee876d7a9fc7b3b4d2e69e4320bf9af255376e3dba464f1808fb376a3b52341b4725ef54ea80999faf16270005257dbd25ece729eb94352b93640f598f79bc0b8189ff00696aceb97a0a642eb1b8da8bf6ab3b9084ee4038b6a32a6cf36aaaf65f8b72552e92d4431d6af72a6740ff2f56c880efd9d20a33e1e32d474b4b3ad0362f7e70f805e5a4340bd91037958b5bb2ac7abc8440691a2f6d6f3635df8006caf119852d2ab53ddd31333552e66df09161d2cb1d8b57f881fa82041c301621288d94ec5d5b391b825c1f6d3d526722ad09b583c4625804ae2f043e4fece488c66f5d3887e7ce00a3230b89e06c27b8b9ce0efa355c111ded4cd026f5e9fafbffdc7b07787fe9979775b43793c0ff0f3623700a21e64ff7132ecfd425cce9946869e333c13ea51f34d96d978a821b232b65a995d9089b9039af398f64fa1a1c5adda71f441af736ff8e179184a42b930e5ce932348e2497d46c560d931e586b640a1f3fe49a85461e1a3715d0c2faf4d84511503feec043e6eda289646f56f8991482e75fe5d457d3800b47af33e46613d2455dc4e7b8d8fa09c09b294539fcf263806e654cecf0c42127ddda906ee0b989fdbf21c3bc7f1fc975330009ded780991858b621e934ae35aadd411a992ea26f11c13e5c27182e3965a4026c80b54637f2f8d92b9e24b2028b216543d8a3c1710a9b627b40c76042c88803d8b5baf8ea2d782a5ce4c624ba622b891a78a7adee085b8c9ebe1d87fd155ea06f7ab1c474f8dfe9a41472471319d2fe9ff64d1b15cc0d6845c148ff0881c2c56166a0a27197589496d558b0f306a24af4a01f99c6727b065a17ee47491ee967f29c1a2a7bc78909f833077e72af76bd3e10bda2d237c97623a28e314584727814ee321ac7aa0be0d97e7f5a1deda7aed21c7cd5804e6e7b950177cbe2d98ab15b3f65e012e2aeb8839132e36e388243f3d120982e04054cb5759393ee9e1b388586be6c3bdf1c51f606d9da06f3dc740f2935900188e23ab065db27cb7ce6288beadf5e20d019d724005b13f749ad399dc83351c0f477494245cd921138c0f0f54aa394eb0637b627b91df893781b6e71c9572ccbb53b03725576c0a6be8e5b9f4ba12542da65a6c5aa3079a75a52b1178227cb79f8cd3231a8c2914b4159bfe328bcbc784e43e53656747bfa92722efd2a207ea16bdcb4b5b4b2a5912a0c9c35e0affc04cdeaeaffe1af540b70b2ba66f1c24d9a75e96f49ef46263e46d53396c28917860609081b42d7679eed0f0493381997c46d73048c69b81e83ad52a1b8fe775a8caf827972cbf0f5e3745e3eecfe3db2d955273ced1b759f396bcba0ac6f353ab75de8afd1fb93addb046eee238a6f037d9c1efb1249fdc77c90684bdb07c24a12e8d8d80f08395b23032c2a0cf20ea1937ea4f18ffcfa64e48262e2738aba96e22f59c4363309eeb9ef13616fd6042d929a27fb6296c8e77dc688154d4949e035246b6cecb6f3ac6b840f98f4bdee00470418b1ddddc869df4b6ccf41ccd86fbe72d1f8d0666ad52c7cb69d8886ea3dc703b0bf35fdb6b73472964ae4b8130a9c299639a98bd96d17bca32704ed8e8e04605a89a91d69ac796a21123528c637467a5f9d83bc36593001356529e3ed9ed3936e5ed95441eff961b2706b33da8b3f1cf219d9d52abb2535e84741d8883dcd07a5dc9151134a04c", 0xfe8}, {&(0x7f0000000900)="2602cd9325d8c83dc65a536bd797cf87981a41bb5244f4a5847ed528881646dd976c42c34bdc4875962e2118442372892b2d0589d66d656c3a422d89af77c1f49c9d6f87cd527a8e81e32300caeec2e024c70dfeb5a4a874e72e95b79275f1bc2b7debf2951ac8b83c41c1ee060db3cc228f1cfa38c750a87751e995435cc143e9df87c1dfd6dabe82c2bc533feb9d86843f64a3f5fe108043bd4eebfd72d088f204c802b96184262b612c1686a172033d9870106dc1b38a45ce4403013bc9136565d71a", 0xc4}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="24008ec6ca2423b32acddf4151200000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r5], 0x80, 0x24000800}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000800)="f48dda298a5b5cc10b82c90e3e", 0xd}, {&(0x7f0000000c40)}], 0x2, &(0x7f0000000d00)=ANY=[@ANYBLOB="1000000000000000010004000100000009000000100000000100000001000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x810}}], 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000400)) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000380)={0x2a, 0x29, 0x2, {0xa4, [{{0x20, 0x1}, 0x100000001, 0x0, 0x7, './file0'}]}}, 0x2a) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1.145739085s ago: executing program 0 (id=1430): r0 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001600)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000080)='MS{O', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0xffffffff) 501.535921ms ago: executing program 4 (id=1442): prlimit64(0x0, 0x2, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, 0x0) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x6) 476.400101ms ago: executing program 4 (id=1443): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {}]}, @func_proto={0x0, 0x0, 0x0, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x5e, 0x0, 0x1}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x2) socket(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0xffffffff, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) iopl(0x3) tgkill(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x2, 0x4000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 240.759271ms ago: executing program 2 (id=1444): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec06000000000000002176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f3cc2b0da31fa21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bca84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e03564f7f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf05003f6cded6a2f8550b973b818184ebad0485fbaa816e3b26199d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c10a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d02000000a3ff4f8a4cf796b07a6ff61c5d52417fd703f7f14d8b78ac02ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c9ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12289ee34463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b0030000000000ea8809820000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f55e550fafa4cedd763ada3104f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ef1b71c1d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efc794874eac73381e6f523d9c8c21578fe3245097c280abe51427b9f6cd72b51b7689969c72fb632d1c072492d9da6d0252803c66730cd5eac907f09b9695906313f88735fce513974a24eee239baa91322608c6fc01e1b9e16587bb5f721303e6b89000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692baffffffff5c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b042d84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf53928867d596987024952b698d4a01c08aca45ea8727be6c8bc8fdcdff1917db98f152625b8465bc46dbe9762d1183ec79f4ab393541a6d9cabc4de71c5a65d228e4cb483cca06858dc6727c7a2322c9580d9afc33f6fcf87518ecca6dd027cb995f1eb4e98e4b500b5843d4ee1"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 220.407771ms ago: executing program 0 (id=1445): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078666666666666666666666666666636332c6e6f646f74732c666c7573682c616c6c6f775f7574696d653d30303030303030303030303030303030303030303331372c666c7573682c636865636b3d72656c617865642c71756965742c6572726f72733d72656d6f756e742d726f2c646f74732c0063e6dc1525399f5772f1e8e2a0da0c673fc0b8bef09bb7d7726d6ec52aed5822243bfa77e5ad9f9cc9f2e34b434fe5cc362772ce998c99210f6fde0dfae5"], 0x1, 0x226, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/49, 0x31) getdents(r0, 0xfffffffffffffffd, 0xbb) 149.507204ms ago: executing program 0 (id=1446): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000003c0)={0x8, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000008c0)={0x6, {{0x2, 0x0, @multicast1=0xe0000002}}, {{0x2, 0x0, @broadcast}}}, 0x108) 149.061104ms ago: executing program 4 (id=1447): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1b3f, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xe0028008}) 137.878255ms ago: executing program 4 (id=1448): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) getgroups(0x3, &(0x7f0000000040)=[0x0, 0xee01, 0xee00]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 193.82µs ago: executing program 2 (id=1449): r0 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xe0000000, 0x0, 0x1}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc5}, 0xa81e151f08c014c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000001480)=[{&(0x7f0000000100)='v', 0x1}], 0x1) splice(r6, &(0x7f00000001c0), r4, 0x0, 0x80000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/184, 0xb8}], 0x1) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r8) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f0000001340)={0x0, 0x6, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x325}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000020601000000000600000000070000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac1414bb0c00018008001ab080ffffff050014007f000000050005000200000005000100060000000700894443d2e92552c2a24eb3b617da65a136f1548fce47eedb3902160d41f334cd814090de60911ccd9c27f008cfe9ef1b53fa0e0d83452b3d78f74e5731cf82da13bfb1496014657a01b0e4067c83aff5b53aaf01fbd9e3141d998b456c98e65e80a99e0b1de2a575e3fc338f126cdd10e0dccf3a53d2dba8b4d4598c91a2f2bfcbe831a5b0956c0d4664"], 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x607, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000005c0)={0x2000a210}) 0s ago: executing program 4 (id=1450): socket$packet(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90424fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0xa2, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a010000182b0000000000000000000000000000000000fe8000000000000000000000000000aa06020201"], 0x0) kernel console output (not intermixed with test programs): 15919104 [ 34.130257][ T3487] EXT4-fs (loop4): dirty_blocks=32 [ 34.135387][ T3487] EXT4-fs (loop4): Block reservation details [ 34.141678][ T3487] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 34.262492][ T3505] loop1: detected capacity change from 0 to 512 [ 34.270145][ T3505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.279528][ T3505] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 34.288691][ T3505] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 34.299695][ T3505] EXT4-fs (loop1): 1 truncate cleaned up [ 34.305608][ T3505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.322442][ T3505] EXT4-fs error (device loop1): ext4_map_blocks:580: inode #2: block 4: comm syz.1.113: lblock 0 mapped to illegal pblock 4 (length 1) [ 34.337552][ T3505] EXT4-fs (loop1): Remounting filesystem read-only [ 34.337704][ T3090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.370919][ T3514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 34.610647][ T3536] loop2: detected capacity change from 0 to 8192 [ 34.685471][ T3549] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 34.745427][ T3549] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 34.775604][ T3536] loop2: detected capacity change from 0 to 1024 [ 34.788954][ T3536] EXT4-fs: Ignoring removed orlov option [ 34.794745][ T3536] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.813075][ T3536] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 34.856193][ T3554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3554 comm=syz.3.132 [ 35.068302][ T3556] loop3: detected capacity change from 0 to 512 [ 35.096384][ T3556] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.133: corrupted in-inode xattr: invalid ea_ino [ 35.112225][ T3556] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.133: couldn't read orphan inode 15 (err -117) [ 35.124337][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.124595][ T3556] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.162376][ T3536] loop2: detected capacity change from 0 to 2048 [ 35.185653][ T3536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.205238][ T3536] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.223587][ T3536] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 35.227410][ T3084] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 35.236025][ T3536] EXT4-fs (loop2): This should not happen!! Data will be lost [ 35.236025][ T3536] [ 35.254588][ T3536] EXT4-fs (loop2): Total free blocks count 0 [ 35.260822][ T3536] EXT4-fs (loop2): Free/Dirty block details [ 35.266889][ T3536] EXT4-fs (loop2): free_blocks=2415919104 [ 35.272634][ T3536] EXT4-fs (loop2): dirty_blocks=32 [ 35.277796][ T3536] EXT4-fs (loop2): Block reservation details [ 35.283781][ T3536] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 35.392808][ T3581] loop3: detected capacity change from 0 to 256 [ 35.400655][ T3581] FAT-fs (loop3): Unrecognized mount option "check=strr9s"ict" or missing value [ 35.438998][ T3082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.514210][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 35.514227][ T29] audit: type=1326 audit(1719787384.015:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3591 comm="syz.4.147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8620f47b99 code=0x0 [ 35.553417][ T29] audit: type=1400 audit(1719787384.055:222): avc: denied { setopt } for pid=3595 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 35.817466][ T3622] loop2: detected capacity change from 0 to 256 [ 35.825360][ T3622] FAT-fs (loop2): Unrecognized mount option "check=strr9s"ict" or missing value [ 36.116324][ T29] audit: type=1400 audit(1719787384.615:223): avc: denied { connect } for pid=3633 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.135939][ T29] audit: type=1400 audit(1719787384.615:224): avc: denied { name_connect } for pid=3633 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 36.166048][ T3635] netlink: 'syz.2.163': attribute type 10 has an invalid length. [ 36.207412][ T3635] batman_adv: batadv0: Adding interface: team0 [ 36.213607][ T3635] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.238991][ T3635] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 36.250469][ T3636] netlink: 'syz.2.163': attribute type 10 has an invalid length. [ 36.258278][ T3636] netlink: 2 bytes leftover after parsing attributes in process `syz.2.163'. [ 36.267529][ T3636] team0: entered promiscuous mode [ 36.272566][ T3636] team_slave_1: entered promiscuous mode [ 36.279193][ T3636] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.286319][ T3636] batman_adv: batadv0: Interface activated: team0 [ 36.292810][ T3636] batman_adv: batadv0: Interface deactivated: team0 [ 36.300237][ T3636] batman_adv: batadv0: Removing interface: team0 [ 36.307144][ T3636] bridge0: port 3(team0) entered blocking state [ 36.313418][ T3636] bridge0: port 3(team0) entered disabled state [ 36.319844][ T3636] team0: entered allmulticast mode [ 36.324994][ T3636] team_slave_1: entered allmulticast mode [ 36.331860][ T3636] bridge0: port 3(team0) entered blocking state [ 36.338136][ T3636] bridge0: port 3(team0) entered forwarding state [ 36.455735][ T29] audit: type=1400 audit(1719787384.955:225): avc: denied { create } for pid=3640 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 36.457275][ T3641] delete_channel: no stack [ 36.631085][ T3652] loop4: detected capacity change from 0 to 512 [ 36.643462][ T3654] loop0: detected capacity change from 0 to 256 [ 36.650445][ T3650] usb usb8: usbfs: process 3650 (syz.3.169) did not claim interface 0 before use [ 36.666293][ T3654] FAT-fs (loop0): Unrecognized mount option "check=strr9s"ict" or missing value [ 36.687032][ T3652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.697620][ T3650] netlink: 'syz.3.169': attribute type 11 has an invalid length. [ 36.707343][ T3650] netlink: 140 bytes leftover after parsing attributes in process `syz.3.169'. [ 36.723843][ T3652] ext4 filesystem being mounted at /root/syzkaller.yh79Wx/34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.729743][ T29] audit: type=1400 audit(1719787385.235:226): avc: denied { setopt } for pid=3649 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.774655][ T3090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.823766][ T3665] delete_channel: no stack [ 36.937797][ T3673] loop1: detected capacity change from 0 to 512 [ 36.966913][ T3673] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.179: corrupted in-inode xattr: invalid ea_ino [ 36.993909][ T3673] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.179: couldn't read orphan inode 15 (err -117) [ 37.036770][ T3673] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.115479][ T3086] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 37.127791][ T3685] netlink: 'syz.2.182': attribute type 6 has an invalid length. [ 37.151722][ T29] audit: type=1400 audit(1719787385.655:227): avc: denied { bind } for pid=3687 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.173636][ T29] audit: type=1400 audit(1719787385.655:228): avc: denied { name_bind } for pid=3687 comm="syz.0.184" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 37.194548][ T29] audit: type=1400 audit(1719787385.655:229): avc: denied { node_bind } for pid=3687 comm="syz.0.184" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 37.215259][ T29] audit: type=1400 audit(1719787385.655:230): avc: denied { listen } for pid=3687 comm="syz.0.184" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.248431][ T3693] loop1: detected capacity change from 0 to 256 [ 37.262531][ T3693] FAT-fs (loop1): Unrecognized mount option "check=strr9s"ict" or missing value [ 37.279149][ T3694] loop4: detected capacity change from 0 to 2048 [ 37.309821][ T3694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.332226][ T3703] delete_channel: no stack [ 37.339025][ T3090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.354741][ T3705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 37.413417][ T3709] loop2: detected capacity change from 0 to 256 [ 37.433807][ T3710] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 37.513165][ T3714] loop1: detected capacity change from 0 to 512 [ 37.534449][ T3714] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.194: corrupted in-inode xattr: invalid ea_ino [ 37.548229][ T3714] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.194: couldn't read orphan inode 15 (err -117) [ 37.560755][ T3714] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.575157][ T3725] netlink: 'syz.4.197': attribute type 6 has an invalid length. [ 37.629612][ T3727] block device autoloading is deprecated and will be removed. [ 37.637824][ T3086] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 37.637843][ T3727] syz.2.198: attempt to access beyond end of device [ 37.637843][ T3727] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 37.648232][ T3732] loop4: detected capacity change from 0 to 2048 [ 37.676972][ T3727] loop2: detected capacity change from 0 to 256 [ 37.678751][ T3732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.731225][ T3090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.811077][ T3746] loop3: detected capacity change from 0 to 256 [ 37.873640][ T3756] loop1: detected capacity change from 0 to 512 [ 37.889761][ T3759] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.212'. [ 37.911583][ T3759] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.212'. [ 37.920853][ T3759] netlink: 332 bytes leftover after parsing attributes in process `syz.4.212'. [ 37.942520][ T3756] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.211: casefold flag without casefold feature [ 37.961993][ T3764] syz.2.214: attempt to access beyond end of device [ 37.961993][ T3764] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 37.971077][ T3756] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.211: couldn't read orphan inode 15 (err -117) [ 37.977300][ T3764] loop2: detected capacity change from 0 to 256 [ 37.988984][ T3756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.055600][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.413713][ T3807] loop4: detected capacity change from 0 to 512 [ 38.457443][ T3807] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.228: casefold flag without casefold feature [ 38.568263][ T3817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.232'. [ 38.577237][ T3817] tc_dump_action: action bad kind [ 38.605101][ T3807] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.228: couldn't read orphan inode 15 (err -117) [ 38.666779][ T3807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.693966][ T3819] netlink: 'syz.3.233': attribute type 10 has an invalid length. [ 38.731060][ T3819] batman_adv: batadv0: Adding interface: team0 [ 38.737313][ T3819] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.762527][ T3819] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 38.778826][ T3822] loop2: detected capacity change from 0 to 512 [ 38.822206][ T3822] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.836116][ T3820] netlink: 'syz.3.233': attribute type 10 has an invalid length. [ 38.843888][ T3820] netlink: 2 bytes leftover after parsing attributes in process `syz.3.233'. [ 38.854220][ T3090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.876351][ T3820] team0: entered promiscuous mode [ 38.881487][ T3820] team_slave_1: entered promiscuous mode [ 38.910517][ T3822] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 38.912723][ T3820] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.925720][ T3820] batman_adv: batadv0: Interface activated: team0 [ 38.932325][ T3820] batman_adv: batadv0: Interface deactivated: team0 [ 38.938998][ T3820] batman_adv: batadv0: Removing interface: team0 [ 38.947952][ T3822] System zones: 1-12 [ 38.952201][ T3820] bridge0: port 3(team0) entered blocking state [ 38.958575][ T3820] bridge0: port 3(team0) entered disabled state [ 38.966626][ T3822] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.983028][ T3820] team0: entered allmulticast mode [ 38.988191][ T3820] team_slave_1: entered allmulticast mode [ 38.991552][ T3822] EXT4-fs (loop2): 1 truncate cleaned up [ 38.994810][ T3820] bridge0: port 3(team0) entered blocking state [ 39.005866][ T3820] bridge0: port 3(team0) entered forwarding state [ 39.012921][ T3822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.062907][ T3832] loop3: detected capacity change from 0 to 256 [ 39.069547][ T3822] loop2: detected capacity change from 512 to 64 [ 39.080000][ T3836] loop4: detected capacity change from 0 to 128 [ 39.086462][ T3822] syz.2.234: attempt to access beyond end of device [ 39.086462][ T3822] loop2: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 39.099638][ T3822] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 39.110778][ T3822] Buffer I/O error on device loop2, logical block 36 [ 39.121900][ T3832] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 39.131739][ T3822] syz.2.234: attempt to access beyond end of device [ 39.131739][ T3822] loop2: rw=2049, sector=76, nr_sectors = 2 limit=64 [ 39.144936][ T3822] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 38) [ 39.156095][ T3822] Buffer I/O error on device loop2, logical block 38 [ 39.182139][ T3822] syz.2.234: attempt to access beyond end of device [ 39.182139][ T3822] loop2: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 39.195574][ T3822] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 255) [ 39.202112][ T3844] loop1: detected capacity change from 0 to 512 [ 39.206835][ T3822] Buffer I/O error on device loop2, logical block 255 [ 39.220002][ T3822] syz.2.234: attempt to access beyond end of device [ 39.220002][ T3822] loop2: rw=2049, sector=78, nr_sectors = 4 limit=64 [ 39.224170][ T3844] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.245: casefold flag without casefold feature [ 39.233170][ T3822] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 39) [ 39.233197][ T3822] Buffer I/O error on device loop2, logical block 39 [ 39.260244][ T3844] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.245: couldn't read orphan inode 15 (err -117) [ 39.263532][ T3822] Buffer I/O error on device loop2, logical block 40 [ 39.277183][ T3844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.288065][ T3848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'. [ 39.302724][ T3848] tc_dump_action: action bad kind [ 39.317373][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.317991][ T3822] syz.2.234: attempt to access beyond end of device [ 39.317991][ T3822] loop2: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 39.339772][ T3822] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 253) [ 39.351076][ T3822] Buffer I/O error on device loop2, logical block 253 [ 39.357869][ T3822] Buffer I/O error on device loop2, logical block 254 [ 39.364781][ T3822] syz.2.234: attempt to access beyond end of device [ 39.364781][ T3822] loop2: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 39.378043][ T3822] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 249) [ 39.389297][ T3822] Buffer I/O error on device loop2, logical block 249 [ 39.396074][ T3822] Buffer I/O error on device loop2, logical block 250 [ 39.402826][ T3822] Buffer I/O error on device loop2, logical block 251 [ 39.409767][ T3822] syz.2.234: attempt to access beyond end of device [ 39.409767][ T3822] loop2: rw=2049, sector=82, nr_sectors = 2 limit=64 [ 39.423266][ T3822] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 41) [ 39.434695][ T3822] syz.2.234: attempt to access beyond end of device [ 39.434695][ T3822] loop2: rw=2049, sector=86, nr_sectors = 8 limit=64 [ 39.447966][ T3822] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 43) [ 39.461078][ T3822] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 209) [ 39.472623][ T3822] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 65) [ 39.537923][ T3722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.602799][ T3858] netlink: 'syz.4.250': attribute type 10 has an invalid length. [ 39.616824][ T3858] batman_adv: batadv0: Adding interface: team0 [ 39.623030][ T3858] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.648221][ T3858] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 39.665798][ T3858] netlink: 'syz.4.250': attribute type 10 has an invalid length. [ 39.673704][ T3858] netlink: 2 bytes leftover after parsing attributes in process `syz.4.250'. [ 39.682701][ T3858] team0: entered promiscuous mode [ 39.687990][ T3858] team_slave_1: entered promiscuous mode [ 39.694834][ T3858] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.702095][ T3858] batman_adv: batadv0: Interface activated: team0 [ 39.708610][ T3858] batman_adv: batadv0: Interface deactivated: team0 [ 39.715200][ T3858] batman_adv: batadv0: Removing interface: team0 [ 39.722489][ T3858] bridge0: port 3(team0) entered blocking state [ 39.728814][ T3858] bridge0: port 3(team0) entered disabled state [ 39.735311][ T3858] team0: entered allmulticast mode [ 39.740560][ T3858] team_slave_1: entered allmulticast mode [ 39.747574][ T3858] bridge0: port 3(team0) entered blocking state [ 39.753968][ T3858] bridge0: port 3(team0) entered forwarding state [ 39.779606][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.807750][ T3864] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 39.862123][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.870454][ T3870] loop1: detected capacity change from 0 to 512 [ 39.885095][ T3870] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.256: casefold flag without casefold feature [ 39.899052][ T3870] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.256: couldn't read orphan inode 15 (err -117) [ 39.913983][ T3870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.936689][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.948596][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.000310][ T3882] tc_dump_action: action bad kind [ 40.018865][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.114683][ T50] team0: left allmulticast mode [ 40.119638][ T50] team_slave_1: left allmulticast mode [ 40.125325][ T50] bridge0: port 3(team0) entered disabled state [ 40.133280][ T50] bridge_slave_1: left allmulticast mode [ 40.139020][ T50] bridge_slave_1: left promiscuous mode [ 40.144676][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.153119][ T50] bridge_slave_0: left allmulticast mode [ 40.158816][ T50] bridge_slave_0: left promiscuous mode [ 40.164432][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.269440][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.279893][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.290538][ T50] bond0 (unregistering): Released all slaves [ 40.326240][ T3871] chnl_net:caif_netlink_parms(): no params data found [ 40.388101][ T3871] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.395249][ T3871] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.418092][ T3871] bridge_slave_0: entered allmulticast mode [ 40.424725][ T3871] bridge_slave_0: entered promiscuous mode [ 40.433852][ T50] hsr_slave_0: left promiscuous mode [ 40.441052][ T50] hsr_slave_1: left promiscuous mode [ 40.449653][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.457120][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.472111][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.479561][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.497753][ T50] veth1_macvtap: left promiscuous mode [ 40.503283][ T50] veth0_macvtap: left promiscuous mode [ 40.508996][ T50] veth1_vlan: left promiscuous mode [ 40.514569][ T50] veth0_vlan: left promiscuous mode [ 40.532363][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 40.532392][ T29] audit: type=1400 audit(1719787389.035:269): avc: denied { remove_name } for pid=3927 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1794 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.561893][ T29] audit: type=1400 audit(1719787389.035:270): avc: denied { unlink } for pid=3927 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1794 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.638299][ T50] team_slave_1 (unregistering): left promiscuous mode [ 40.645536][ T50] team0 (unregistering): Port device team_slave_1 removed [ 40.655021][ T29] audit: type=1400 audit(1719787389.155:271): avc: denied { setopt } for pid=3928 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.675360][ T29] audit: type=1400 audit(1719787389.175:272): avc: denied { connect } for pid=3928 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.695755][ T3871] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.702876][ T3871] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.710298][ T3871] bridge_slave_1: entered allmulticast mode [ 40.716769][ T3871] bridge_slave_1: entered promiscuous mode [ 40.763578][ T3871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.775811][ T3871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.800921][ T3941] veth0_vlan: entered allmulticast mode [ 40.853862][ T3871] team0: Port device team_slave_0 added [ 40.872116][ T3871] team0: Port device team_slave_1 added [ 40.927450][ T3871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.934904][ T3871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.960829][ T3871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.993868][ T3871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.000980][ T3871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.026906][ T3871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.060386][ T3871] hsr_slave_0: entered promiscuous mode [ 41.072920][ T3871] hsr_slave_1: entered promiscuous mode [ 41.088624][ T3963] loop4: detected capacity change from 0 to 256 [ 41.174156][ T29] audit: type=1400 audit(1719787389.675:273): avc: denied { ioctl } for pid=3962 comm="syz.4.275" path="socket:[6148]" dev="sockfs" ino=6148 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 41.292526][ C0] hrtimer: interrupt took 47965 ns [ 41.314287][ T29] audit: type=1400 audit(1719787389.815:274): avc: denied { create } for pid=3981 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 41.577249][ T3871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.586352][ T29] audit: type=1400 audit(1719787390.085:275): avc: denied { ioctl } for pid=3999 comm="syz.0.282" path="socket:[6185]" dev="sockfs" ino=6185 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.621998][ T3871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.650916][ T3871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.666306][ T29] audit: type=1400 audit(1719787390.155:276): avc: denied { read } for pid=4016 comm="syz.4.289" name="event0" dev="devtmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.689439][ T29] audit: type=1400 audit(1719787390.155:277): avc: denied { open } for pid=4016 comm="syz.4.289" path="/dev/input/event0" dev="devtmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.713387][ T29] audit: type=1400 audit(1719787390.155:278): avc: denied { ioctl } for pid=4016 comm="syz.4.289" path="/dev/input/event0" dev="devtmpfs" ino=217 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.742828][ T3871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.773036][ T4020] loop1: detected capacity change from 0 to 128 [ 41.852651][ T4033] __nla_validate_parse: 1 callbacks suppressed [ 41.852670][ T4033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'. [ 41.905464][ T4033] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 41.951083][ T4039] veth0_vlan: entered allmulticast mode [ 42.026615][ T3871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.058383][ T3871] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.074252][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.081377][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.119225][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.126349][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.154370][ T4065] loop4: detected capacity change from 0 to 512 [ 42.165843][ T3871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.192886][ T4065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.206182][ T4065] ext4 filesystem being mounted at /root/syzkaller.yh79Wx/71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.253771][ T3871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.443849][ T3871] veth0_vlan: entered promiscuous mode [ 42.585553][ T3871] veth1_vlan: entered promiscuous mode [ 42.662263][ T3871] veth0_macvtap: entered promiscuous mode [ 42.734503][ T3871] veth1_macvtap: entered promiscuous mode [ 42.780675][ T3871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.791180][ T3871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.801032][ T3871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.811471][ T3871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.821313][ T3871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.831757][ T3871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.841615][ T3871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.852177][ T3871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.863378][ T3871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.901748][ T3871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.912251][ T3871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.922143][ T3871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.932758][ T3871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.942710][ T3871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.953256][ T3871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.963104][ T3871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.973574][ T3871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.990760][ T3871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.003936][ T3871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.012722][ T3871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.021552][ T3871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.030386][ T3871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.058574][ T3090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.121961][ T4123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 43.129249][ T4123] IPv6: NLM_F_CREATE should be set when creating new route [ 43.241635][ T4145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.311'. [ 43.276381][ T4145] netlink: 32 bytes leftover after parsing attributes in process `syz.4.311'. [ 43.297675][ T4150] loop1: detected capacity change from 0 to 512 [ 43.318791][ T4150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.355291][ T4150] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.365312][ T4150] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 43.378958][ T4150] EXT4-fs (loop1): 1 truncate cleaned up [ 43.385039][ T4150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.435162][ T4170] bridge0: port 2(bridge_slave_1) entered listening state [ 43.441710][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.460163][ T4170] netlink: 32 bytes leftover after parsing attributes in process `syz.2.317'. [ 43.649867][ T4200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'. [ 43.670790][ T4200] netlink: 32 bytes leftover after parsing attributes in process `syz.1.329'. [ 43.863375][ T4232] netlink: 72 bytes leftover after parsing attributes in process `syz.3.339'. [ 43.872303][ T4232] netlink: 72 bytes leftover after parsing attributes in process `syz.3.339'. [ 43.891080][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 43.901304][ T4237] loop1: detected capacity change from 0 to 512 [ 43.929982][ T4242] syz.0.343 uses obsolete (PF_INET,SOCK_PACKET) [ 43.938293][ T4237] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.962454][ T4237] EXT4-fs (loop1): 1 truncate cleaned up [ 43.962876][ T4237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.002929][ T4237] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 44.018781][ T4251] xt_cgroup: xt_cgroup: no path or classid specified [ 44.027960][ T4250] x_tables: ip_tables: ah match: only valid for protocol 51 [ 44.051067][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.207910][ T4272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'. [ 44.216796][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 44.251670][ T4272] SELinux: Context system_u: is not valid (left unmapped). [ 44.451277][ T4303] x_tables: duplicate underflow at hook 2 [ 45.050170][ T4334] Process accounting resumed [ 45.231369][ T4360] Process accounting resumed [ 45.531607][ T4396] x_tables: duplicate underflow at hook 2 [ 45.581466][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 45.581500][ T29] audit: type=1326 audit(1719787394.085:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23f6b8b99 code=0x7ffc0000 [ 45.647349][ T29] audit: type=1326 audit(1719787394.115:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23f6b8b99 code=0x7ffc0000 [ 45.670690][ T29] audit: type=1326 audit(1719787394.115:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc23f6b8b99 code=0x7ffc0000 [ 45.670731][ T29] audit: type=1326 audit(1719787394.115:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23f6b8b99 code=0x7ffc0000 [ 45.670760][ T29] audit: type=1326 audit(1719787394.115:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23f6b8b99 code=0x7ffc0000 [ 45.670785][ T29] audit: type=1326 audit(1719787394.115:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc23f6b8b99 code=0x7ffc0000 [ 45.670843][ T29] audit: type=1326 audit(1719787394.115:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23f6b8b99 code=0x7ffc0000 [ 45.670873][ T29] audit: type=1326 audit(1719787394.115:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23f6b8b99 code=0x7ffc0000 [ 45.670983][ T29] audit: type=1326 audit(1719787394.115:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc23f6b8b99 code=0x7ffc0000 [ 45.671007][ T29] audit: type=1326 audit(1719787394.115:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23f6b8b99 code=0x7ffc0000 [ 45.865856][ T4413] Zero length message leads to an empty skb [ 45.877298][ T4414] x_tables: ip_tables: ah match: only valid for protocol 51 [ 46.745413][ T4477] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 46.881304][ T4488] x_tables: duplicate underflow at hook 2 [ 47.525259][ T4497] loop4: detected capacity change from 0 to 512 [ 47.597842][ T4497] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 47.606345][ T4497] EXT4-fs (loop4): invalid journal inode [ 47.652805][ T4507] netlink: 'syz.2.456': attribute type 1 has an invalid length. [ 47.952620][ T4541] netlink: 'syz.4.468': attribute type 1 has an invalid length. [ 48.079577][ T4553] x_tables: duplicate underflow at hook 2 [ 48.742242][ T4566] loop1: detected capacity change from 0 to 512 [ 48.829096][ T4568] loop2: detected capacity change from 0 to 512 [ 48.894822][ T4568] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 48.950314][ T4568] EXT4-fs (loop2): invalid journal inode [ 48.992876][ T4566] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.011512][ T4566] ext4 filesystem being mounted at /root/syzkaller.Mdgy6e/108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.042250][ T3086] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 49.208285][ T4596] loop0: detected capacity change from 0 to 256 [ 49.246279][ T4596] FAT-fs (loop0): codepage cp1250 not found [ 49.343800][ T4614] x_tables: duplicate underflow at hook 2 [ 49.403362][ T4619] netlink: 'syz.2.496': attribute type 10 has an invalid length. [ 49.419350][ T4619] batman_adv: batadv0: Adding interface: team0 [ 49.425586][ T4619] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.450785][ T4619] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 49.536767][ T4622] netlink: 'syz.2.496': attribute type 10 has an invalid length. [ 49.544573][ T4622] __nla_validate_parse: 3 callbacks suppressed [ 49.544584][ T4622] netlink: 2 bytes leftover after parsing attributes in process `syz.2.496'. [ 49.596866][ T4622] team0: entered promiscuous mode [ 49.602053][ T4622] team_slave_0: entered promiscuous mode [ 49.607863][ T4622] team_slave_1: entered promiscuous mode [ 49.630069][ T4626] loop0: detected capacity change from 0 to 512 [ 49.640973][ T4622] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.648412][ T4622] batman_adv: batadv0: Interface activated: team0 [ 49.654944][ T4622] batman_adv: batadv0: Interface deactivated: team0 [ 49.661697][ T4622] batman_adv: batadv0: Removing interface: team0 [ 49.671393][ T4626] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.689287][ T4626] EXT4-fs (loop0): 1 truncate cleaned up [ 49.697848][ T4622] bridge0: port 3(team0) entered blocking state [ 49.704212][ T4622] bridge0: port 3(team0) entered disabled state [ 49.715462][ T4626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.731703][ T4622] team0: entered allmulticast mode [ 49.737049][ T4622] team_slave_0: entered allmulticast mode [ 49.742828][ T4622] team_slave_1: entered allmulticast mode [ 49.901131][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.917909][ T4622] bridge0: port 3(team0) entered blocking state [ 49.924263][ T4622] bridge0: port 3(team0) entered forwarding state [ 50.322609][ T4636] loop0: detected capacity change from 0 to 8192 [ 50.467741][ T4651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.495639][ T4651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.507833][ T4651] bond0 (unregistering): Released all slaves [ 50.617729][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 50.617746][ T29] audit: type=1400 audit(1719787399.125:493): avc: denied { mount } for pid=4656 comm="syz.4.510" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.647367][ T29] audit: type=1326 audit(1719787399.155:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c0b9eb99 code=0x7fc00000 [ 50.672224][ T29] audit: type=1326 audit(1719787399.175:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c0b9eb99 code=0x7fc00000 [ 50.695798][ T29] audit: type=1400 audit(1719787399.195:496): avc: denied { unmount } for pid=3090 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.754477][ T4665] x_tables: duplicate underflow at hook 2 [ 51.049921][ T29] audit: type=1326 audit(1719787399.505:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23f6b8b99 code=0x7fc00000 [ 51.374611][ T29] audit: type=1326 audit(1719787399.875:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c0b9eb99 code=0x7fc00000 [ 51.435118][ T4682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.480150][ T4682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.504469][ T4682] bond0 (unregistering): Released all slaves [ 51.646547][ T4693] loop1: detected capacity change from 0 to 8192 [ 51.678899][ T29] audit: type=1326 audit(1719787400.185:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4692 comm="syz.1.524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4c0b9eb99 code=0x0 [ 51.859915][ T29] audit: type=1400 audit(1719787400.365:500): avc: denied { create } for pid=4702 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.886485][ T29] audit: type=1400 audit(1719787400.385:501): avc: denied { connect } for pid=4702 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.906252][ T29] audit: type=1400 audit(1719787400.385:502): avc: denied { setopt } for pid=4702 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.510472][ T4711] loop3: detected capacity change from 0 to 512 [ 52.767340][ T4711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.780235][ T4711] ext4 filesystem being mounted at /root/syzkaller.nQkmqW/100/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.805800][ T4711] capability: warning: `syz.3.530' uses deprecated v2 capabilities in a way that may be insecure [ 52.992920][ T4733] loop4: detected capacity change from 0 to 1024 [ 53.017343][ T4733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.034795][ T4733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.134198][ T4741] loop1: detected capacity change from 0 to 1024 [ 53.176419][ T4741] EXT4-fs: quotafile must be on filesystem root [ 53.217946][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.408788][ T4760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.445408][ T4760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.464597][ T4760] bond0 (unregistering): Released all slaves [ 54.176693][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 54.225556][ T4786] loop3: detected capacity change from 0 to 2048 [ 54.409008][ T4786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.483413][ T4795] loop0: detected capacity change from 0 to 512 [ 54.492549][ T4795] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.501839][ T4795] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 54.846356][ T4794] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.894661][ T4781] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 54.907600][ T4781] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.907600][ T4781] [ 54.917355][ T4781] EXT4-fs (loop3): Total free blocks count 0 [ 54.923427][ T4781] EXT4-fs (loop3): Free/Dirty block details [ 54.929504][ T4781] EXT4-fs (loop3): free_blocks=2415919104 [ 54.935236][ T4781] EXT4-fs (loop3): dirty_blocks=48 [ 54.944080][ T4781] EXT4-fs (loop3): Block reservation details [ 54.950153][ T4781] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 54.965025][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.574767][ T4808] loop0: detected capacity change from 0 to 1024 [ 55.645626][ T4808] EXT4-fs: quotafile must be on filesystem root [ 56.718922][ T4836] bridge0: port 4(syz_tun) entered blocking state [ 56.725495][ T4836] bridge0: port 4(syz_tun) entered disabled state [ 56.752460][ T4836] syz_tun: entered allmulticast mode [ 56.763026][ T4836] syz_tun: entered promiscuous mode [ 56.782863][ T4836] bridge0: port 4(syz_tun) entered blocking state [ 56.782909][ T4836] bridge0: port 4(syz_tun) entered forwarding state [ 56.996709][ T4842] IPVS: persistence engine module ip_vs_pe_si not found [ 57.102851][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 57.102867][ T29] audit: type=1326 audit(1719787405.605:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7753f2bb99 code=0x7fc00000 [ 57.256414][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 57.471754][ T4868] IPVS: persistence engine module ip_vs_pe_si not found [ 57.752047][ T29] audit: type=1326 audit(1719787406.255:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.0.598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7753f2bb99 code=0x0 [ 58.388738][ T29] audit: type=1400 audit(1719787406.895:521): avc: denied { write } for pid=4898 comm="syz.3.604" laddr=::1 lport=40162 faddr=::1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 60.051419][ T29] audit: type=1326 audit(1719787408.555:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.3.616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc23f6b8b99 code=0x0 [ 60.691850][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.757166][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.857366][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.959285][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.069695][ T4938] chnl_net:caif_netlink_parms(): no params data found [ 61.195256][ T4938] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.202532][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.238765][ T4938] bridge_slave_0: entered allmulticast mode [ 61.262685][ T4938] bridge_slave_0: entered promiscuous mode [ 61.284244][ T28] team0: left allmulticast mode [ 61.289301][ T28] team_slave_0: left allmulticast mode [ 61.294807][ T28] team_slave_1: left allmulticast mode [ 61.300517][ T28] bridge0: port 3(team0) entered disabled state [ 61.327946][ T28] bridge_slave_1: left allmulticast mode [ 61.333661][ T28] bridge_slave_1: left promiscuous mode [ 61.339494][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.369711][ T28] bridge_slave_0: left allmulticast mode [ 61.375523][ T28] bridge_slave_0: left promiscuous mode [ 61.381320][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.561055][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.591828][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.618381][ T28] bond0 (unregistering): Released all slaves [ 61.642635][ T4938] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.650102][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.677542][ T4938] bridge_slave_1: entered allmulticast mode [ 61.692594][ T4938] bridge_slave_1: entered promiscuous mode [ 61.771161][ T4938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.783255][ T28] hsr_slave_0: left promiscuous mode [ 61.799929][ T28] hsr_slave_1: left promiscuous mode [ 61.815878][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.823957][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.848799][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.856464][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.876404][ T28] veth1_macvtap: left promiscuous mode [ 61.882023][ T28] veth0_macvtap: left promiscuous mode [ 61.887637][ T28] veth1_vlan: left promiscuous mode [ 61.893118][ T28] veth0_vlan: left promiscuous mode [ 62.089578][ T29] audit: type=1326 audit(1719787410.595:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc23f6b8b99 code=0x0 [ 62.141479][ T28] team_slave_1 (unregistering): left promiscuous mode [ 62.150516][ T28] team0 (unregistering): Port device team_slave_1 removed [ 62.164795][ T28] team_slave_0 (unregistering): left promiscuous mode [ 62.183079][ T28] team0 (unregistering): Port device team_slave_0 removed [ 62.284988][ T4938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.294462][ T4978] (unnamed net_device) (uninitialized): up delay (292) is not a multiple of miimon (131584), value rounded to 0 ms [ 62.346646][ T4938] team0: Port device team_slave_0 added [ 62.357332][ T4938] team0: Port device team_slave_1 added [ 62.421927][ T4938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.430097][ T4938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.459066][ T4938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.477269][ T4938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.484636][ T4938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.511491][ T4938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.565333][ T4938] hsr_slave_0: entered promiscuous mode [ 62.587725][ T4938] hsr_slave_1: entered promiscuous mode [ 62.979726][ T4938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.020728][ T4938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.037708][ T4938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.067313][ T4938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.175192][ T4938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.218127][ T5034] netlink: 2112 bytes leftover after parsing attributes in process `syz.0.635'. [ 63.231471][ T4938] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.269132][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.276566][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.317638][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.324818][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.465617][ T29] audit: type=1400 audit(1719787411.945:524): avc: denied { bind } for pid=5055 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.485446][ T29] audit: type=1400 audit(1719787411.945:525): avc: denied { connect } for pid=5055 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.498731][ T4938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.692031][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.739459][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.819635][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.838571][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 63.857548][ T4938] veth0_vlan: entered promiscuous mode [ 63.870632][ T29] audit: type=1400 audit(1719787412.375:526): avc: denied { accept } for pid=5088 comm="syz.3.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 63.914994][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.939870][ T4938] veth1_vlan: entered promiscuous mode [ 63.962352][ T5061] chnl_net:caif_netlink_parms(): no params data found [ 64.005759][ T4938] veth0_macvtap: entered promiscuous mode [ 64.019983][ T4938] veth1_macvtap: entered promiscuous mode [ 64.051553][ T29] audit: type=1326 audit(1719787412.545:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5095 comm="syz.3.646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc23f6b8b99 code=0x0 [ 64.143871][ T11] team0: left allmulticast mode [ 64.148912][ T11] team_slave_1: left allmulticast mode [ 64.154601][ T11] bridge0: port 3(team0) entered disabled state [ 64.159940][ T5103] loop3: detected capacity change from 0 to 512 [ 64.170038][ T11] bridge_slave_1: left allmulticast mode [ 64.173202][ T5103] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.646: corrupted in-inode xattr: invalid ea_ino [ 64.175814][ T11] bridge_slave_1: left promiscuous mode [ 64.194281][ T5103] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.646: couldn't read orphan inode 15 (err -117) [ 64.195198][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.209592][ T5103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.228216][ T11] bridge_slave_0: left allmulticast mode [ 64.233942][ T11] bridge_slave_0: left promiscuous mode [ 64.239972][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.266364][ T5103] support for the xor transformation has been removed. [ 64.401763][ T4938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.412489][ T4938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.422823][ T4938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.433858][ T4938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.443699][ T4938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.454238][ T4938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.464110][ T4938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.474554][ T4938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.487559][ T4938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.503501][ T5061] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.510813][ T5061] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.520355][ T5061] bridge_slave_0: entered allmulticast mode [ 64.530054][ T5061] bridge_slave_0: entered promiscuous mode [ 64.541274][ T4938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.551834][ T4938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.562129][ T4938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.573067][ T4938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.583550][ T4938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.594155][ T4938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.604168][ T4938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.614893][ T4938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.630168][ T4938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.639752][ T5061] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.647323][ T5061] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.658668][ T5061] bridge_slave_1: entered allmulticast mode [ 64.665611][ T5061] bridge_slave_1: entered promiscuous mode [ 64.675098][ T11] hsr_slave_0: left promiscuous mode [ 64.682723][ T11] hsr_slave_1: left promiscuous mode [ 64.689429][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.697293][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.705193][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.712705][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.721779][ T11] veth1_macvtap: left promiscuous mode [ 64.727590][ T11] veth0_macvtap: left promiscuous mode [ 64.733199][ T11] veth1_vlan: left promiscuous mode [ 64.733682][ T29] audit: type=1400 audit(1719787413.235:528): avc: denied { accept } for pid=5116 comm="syz.0.648" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 64.836703][ T11] team_slave_1 (unregistering): left promiscuous mode [ 64.844417][ T11] team0 (unregistering): Port device team_slave_1 removed [ 64.889161][ T4938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.889476][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.898039][ T4938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.915869][ T4938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.924633][ T4938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.954181][ T5061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.990267][ T5061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.994444][ T5134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 65.024737][ T5061] team0: Port device team_slave_0 added [ 65.042598][ T5061] team0: Port device team_slave_1 added [ 65.053636][ T5137] loop3: detected capacity change from 0 to 512 [ 65.071104][ T5137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.100969][ T5137] ext4 filesystem being mounted at /root/syzkaller.nQkmqW/155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.124519][ T5061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.131583][ T5061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.157583][ T5061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.179585][ T5061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.186798][ T5061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.212821][ T5061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.220882][ T29] audit: type=1400 audit(1719787413.695:529): avc: denied { ioctl } for pid=5135 comm="syz.3.650" path="/root/syzkaller.nQkmqW/155/file1/cpuset.effective_cpus" dev="loop3" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.254781][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.339549][ T5061] hsr_slave_0: entered promiscuous mode [ 65.350762][ T5061] hsr_slave_1: entered promiscuous mode [ 65.357826][ T5061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.365499][ T5061] Cannot create hsr debugfs directory [ 65.383042][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 65.497454][ T5188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 65.533991][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.541245][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.560057][ T5100] bridge_slave_0: entered allmulticast mode [ 65.567478][ T5100] bridge_slave_0: entered promiscuous mode [ 65.575016][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.582277][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.589588][ T5100] bridge_slave_1: entered allmulticast mode [ 65.597222][ T5100] bridge_slave_1: entered promiscuous mode [ 65.606696][ T29] audit: type=1326 audit(1719787414.105:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.2.659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9d32bcb99 code=0x0 [ 65.630762][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.677144][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.690332][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.720464][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.744778][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.774837][ T5100] team0: Port device team_slave_0 added [ 65.782475][ T5100] team0: Port device team_slave_1 added [ 65.805068][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.812397][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.838640][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.852515][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.869369][ T5205] vlan2: entered promiscuous mode [ 65.874457][ T5205] ip6gretap0: entered promiscuous mode [ 65.882042][ T5205] ip6gretap0: left promiscuous mode [ 65.891621][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.898842][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.924982][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.006519][ T11] bridge_slave_1: left allmulticast mode [ 66.012244][ T11] bridge_slave_1: left promiscuous mode [ 66.018066][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.026043][ T11] bridge_slave_0: left allmulticast mode [ 66.031856][ T11] bridge_slave_0: left promiscuous mode [ 66.037727][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.063034][ T29] audit: type=1400 audit(1719787414.565:531): avc: denied { bind } for pid=5207 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.169987][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.180416][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.191446][ T11] bond0 (unregistering): Released all slaves [ 66.218396][ T5100] hsr_slave_0: entered promiscuous mode [ 66.224695][ T5100] hsr_slave_1: entered promiscuous mode [ 66.232150][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.240126][ T5100] Cannot create hsr debugfs directory [ 66.318508][ T11] hsr_slave_0: left promiscuous mode [ 66.328445][ T11] hsr_slave_1: left promiscuous mode [ 66.342770][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.350405][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.372263][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.379827][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.389657][ T11] veth1_macvtap: left promiscuous mode [ 66.395186][ T11] veth0_macvtap: left promiscuous mode [ 66.396177][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 66.400806][ T11] veth1_vlan: left promiscuous mode [ 66.436130][ T29] audit: type=1400 audit(1719787414.935:532): avc: denied { getopt } for pid=5243 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.487113][ T5251] sctp: [Deprecated]: syz.2.667 (pid 5251) Use of int in max_burst socket option deprecated. [ 66.487113][ T5251] Use struct sctp_assoc_value instead [ 66.569384][ T11] team0 (unregistering): Port device team_slave_1 removed [ 66.581391][ T11] team0 (unregistering): Port device team_slave_0 removed [ 66.624225][ T5061] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.633326][ T5061] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.646645][ T5061] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.671686][ T5061] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.712963][ T5269] loop2: detected capacity change from 0 to 512 [ 66.747417][ T5272] loop3: detected capacity change from 0 to 512 [ 66.751080][ T5269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.768057][ T5269] ext4 filesystem being mounted at /root/syzkaller.X8Wcgu/9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.801276][ T5272] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.672: corrupted in-inode xattr: invalid ea_ino [ 66.808818][ T5061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.824836][ T5272] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.672: couldn't read orphan inode 15 (err -117) [ 66.859648][ T5061] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.861656][ T5272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.869531][ T3228] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.885994][ T3228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.907010][ T5061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.917632][ T5061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.939526][ T4938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.950117][ T3228] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.955835][ T29] audit: type=1400 audit(1719787415.435:533): avc: denied { setattr } for pid=5271 comm="syz.3.672" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.957397][ T3228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.990440][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.077625][ T5296] can0: slcan on ptm0. [ 67.106496][ T5061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.149638][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 67.162439][ T5100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.176478][ T5100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.183335][ T5295] can0 (unregistered): slcan off ptm0. [ 67.219075][ T5100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.244817][ T5100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.263883][ T5313] sctp: [Deprecated]: syz.3.677 (pid 5313) Use of int in max_burst socket option deprecated. [ 67.263883][ T5313] Use struct sctp_assoc_value instead [ 67.352888][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.380716][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.399484][ T2749] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.406653][ T2749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.435546][ T2749] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.442822][ T2749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.473789][ T5061] veth0_vlan: entered promiscuous mode [ 67.497349][ T5061] veth1_vlan: entered promiscuous mode [ 67.531676][ T5061] veth0_macvtap: entered promiscuous mode [ 67.549291][ T5061] veth1_macvtap: entered promiscuous mode [ 67.572290][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.583099][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.593040][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.603592][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.613746][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.624225][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.636766][ T5061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.649114][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.659759][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.669697][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.680290][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.690156][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.700640][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.711787][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.712931][ T5061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.735580][ T5061] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.744487][ T5061] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.753284][ T5061] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.762241][ T5061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.788959][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.887973][ T5385] can0: slcan on ptm0. [ 67.921060][ T5391] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 [ 67.946668][ T5384] can0 (unregistered): slcan off ptm0. [ 67.956456][ T5100] veth0_vlan: entered promiscuous mode [ 67.966250][ T5100] veth1_vlan: entered promiscuous mode [ 67.987889][ T5100] veth0_macvtap: entered promiscuous mode [ 67.995672][ T5100] veth1_macvtap: entered promiscuous mode [ 68.008886][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.019496][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.029348][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.039999][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.049923][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.060499][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.070459][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.081009][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.092155][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.101811][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.112388][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.122280][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.132900][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.142876][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.153760][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.163677][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.174263][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.185190][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.199479][ T5100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.208315][ T5100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.217194][ T5100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.225993][ T5100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.419391][ T5414] netlink: 72 bytes leftover after parsing attributes in process `syz.1.690'. [ 68.428724][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 68.451679][ T5420] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 68.473063][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 68.473079][ T29] audit: type=1400 audit(1719787416.975:536): avc: denied { unmount } for pid=5100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 68.476785][ T5424] loop2: detected capacity change from 0 to 256 [ 68.519393][ T5424] FAT-fs (loop2): bogus number of directory entries (4) [ 68.526502][ T5424] FAT-fs (loop2): Can't find a valid FAT filesystem [ 68.561264][ T29] audit: type=1400 audit(1719787417.065:537): avc: denied { mount } for pid=5422 comm="syz.2.694" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.564505][ T3159] kernel write not supported for file /5422/clear_refs (pid: 3159 comm: kworker/1:3) [ 68.604259][ T29] audit: type=1400 audit(1719787417.105:538): avc: denied { unmount } for pid=4938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.641317][ T29] audit: type=1400 audit(1719787417.145:539): avc: denied { read } for pid=5431 comm="syz.1.698" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.651471][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 68.796724][ T5451] cgroup: subsys name conflicts with all [ 68.879578][ T5462] loop1: detected capacity change from 0 to 512 [ 68.892874][ T5466] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 68.912872][ T5462] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 68.927705][ T5462] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.712: invalid indirect mapped block 1 (level 1) [ 68.944137][ T5462] EXT4-fs (loop1): 1 truncate cleaned up [ 68.958629][ T5462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.972946][ T5462] EXT4-fs error (device loop1): ext4_lookup:1846: inode #2: comm syz.1.712: bad inode number: 1 [ 68.973838][ T5473] ip6erspan0: entered allmulticast mode [ 68.995061][ T5100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.007256][ T5475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.713'. [ 69.022175][ T5475] loop2: detected capacity change from 0 to 256 [ 69.100193][ T29] audit: type=1400 audit(1719787417.605:540): avc: denied { getattr } for pid=5480 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 69.123510][ T5481] loop0: detected capacity change from 0 to 512 [ 69.133026][ T5481] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.151844][ T5481] EXT4-fs (loop0): 1 truncate cleaned up [ 69.155424][ T5485] cgroup: subsys name conflicts with all [ 69.161443][ T5481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.186768][ T29] audit: type=1400 audit(1719787417.695:541): avc: denied { create } for pid=5480 comm="syz.0.720" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.245288][ T29] audit: type=1400 audit(1719787417.745:542): avc: denied { write } for pid=5480 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.281425][ T5495] netlink: 3 bytes leftover after parsing attributes in process `syz.1.725'. [ 69.307947][ T5481] netlink: 'syz.0.720': attribute type 3 has an invalid length. [ 69.333135][ T5498] sctp: [Deprecated]: syz.4.726 (pid 5498) Use of int in max_burst socket option deprecated. [ 69.333135][ T5498] Use struct sctp_assoc_value instead [ 69.396025][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.402801][ T5505] block device autoloading is deprecated and will be removed. [ 69.405076][ T29] audit: type=1400 audit(1719787417.895:543): avc: denied { create } for pid=5504 comm="syz.4.730" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 69.405102][ T29] audit: type=1400 audit(1719787417.905:544): avc: denied { read } for pid=5504 comm="syz.4.730" name="file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 69.455609][ T29] audit: type=1400 audit(1719787417.905:545): avc: denied { open } for pid=5504 comm="syz.4.730" path="/root/syzkaller.FedHi7/4/file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 69.481448][ T5507] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 [ 69.552121][ T5518] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 69.587292][ T5520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.732'. [ 69.612696][ T5526] netlink: 3 bytes leftover after parsing attributes in process `syz.1.738'. [ 69.737544][ T5543] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 [ 69.839396][ T5548] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 69.925231][ T5558] netlink: 3 bytes leftover after parsing attributes in process `syz.4.753'. [ 70.009127][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.755'. [ 70.038527][ T5565] vlan2: entered promiscuous mode [ 70.043630][ T5565] bond0: entered promiscuous mode [ 70.048756][ T5565] bond_slave_0: entered promiscuous mode [ 70.054570][ T5565] bond_slave_1: entered promiscuous mode [ 70.075165][ T5565] bond0: left promiscuous mode [ 70.080142][ T5565] bond_slave_0: left promiscuous mode [ 70.085673][ T5565] bond_slave_1: left promiscuous mode [ 70.420660][ T5599] netlink: 'syz.1.770': attribute type 15 has an invalid length. [ 70.428501][ T5599] netlink: 723 bytes leftover after parsing attributes in process `syz.1.770'. [ 70.589691][ T5612] loop1: detected capacity change from 0 to 2048 [ 70.677701][ T5612] Alternate GPT is invalid, using primary GPT. [ 70.684078][ T5612] loop1: p2 p3 p7 [ 70.769127][ T5619] loop0: detected capacity change from 0 to 512 [ 70.785560][ T5619] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.812242][ T5619] EXT4-fs (loop0): 1 truncate cleaned up [ 70.823082][ T5619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.875377][ T5619] netlink: 'syz.0.778': attribute type 3 has an invalid length. [ 70.886795][ T5624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 70.947523][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.998783][ T5626] netlink: 'syz.1.782': attribute type 15 has an invalid length. [ 71.061770][ T5631] sctp: [Deprecated]: syz.1.783 (pid 5631) Use of int in max_burst socket option deprecated. [ 71.061770][ T5631] Use struct sctp_assoc_value instead [ 71.085712][ T5629] loop0: detected capacity change from 0 to 128 [ 71.107647][ T5629] FAT-fs (loop0): Unrecognized mount option "0x00000000000000000x00000000000000047?IlNs^sfdZ=Vx.ȓU͏|-" or missing value [ 71.144006][ T5636] program syz.4.785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.197874][ T5642] block device autoloading is deprecated and will be removed. [ 71.224400][ T5643] loop0: detected capacity change from 0 to 128 [ 71.445787][ T5664] netlink: 'syz.0.793': attribute type 15 has an invalid length. [ 71.719991][ T5685] loop0: detected capacity change from 0 to 256 [ 71.776591][ T5687] loop2: detected capacity change from 0 to 128 [ 71.792024][ T5687] FAT-fs (loop2): Unrecognized mount option "0x00000000000000000x00000000000000047?IlNs^sfdZ=Vx.ȓU͏|-" or missing value [ 71.953595][ T5687] loop2: detected capacity change from 0 to 128 [ 72.217719][ T5704] loop2: detected capacity change from 0 to 512 [ 72.249912][ T5704] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.271156][ T5704] EXT4-fs (loop2): orphan cleanup on readonly fs [ 72.279194][ T5704] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.806: bg 0: block 248: padding at end of block bitmap is not set [ 72.301481][ T5704] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.806: Failed to acquire dquot type 1 [ 72.324399][ T5704] EXT4-fs (loop2): 1 truncate cleaned up [ 72.333345][ T5704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.363454][ T5704] syz.2.806 (5704) used greatest stack depth: 9640 bytes left [ 72.385465][ T4938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.392850][ T5719] loop0: detected capacity change from 0 to 256 [ 72.472340][ T5726] loop1: detected capacity change from 0 to 128 [ 72.487645][ T5726] FAT-fs (loop1): Unrecognized mount option "0x00000000000000000x00000000000000047?IlNs^sfdZ=Vx.ȓU͏|-" or missing value [ 72.637701][ T3158] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 72.733003][ T5738] loop1: detected capacity change from 0 to 128 [ 72.799883][ T5745] Illegal XDP return value 4294967274 on prog (id 205) dev syz_tun, expect packet loss! [ 73.284698][ T5775] loop4: detected capacity change from 0 to 128 [ 73.308587][ T5775] FAT-fs (loop4): Unrecognized mount option "0x00000000000000000x00000000000000047?IlNs^sfdZ=Vx.ȓU͏|-" or missing value [ 73.484207][ T5775] loop4: detected capacity change from 0 to 128 [ 73.712186][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 73.712203][ T29] audit: type=1400 audit(1719787422.215:562): avc: denied { ioctl } for pid=5794 comm="syz.3.844" path="socket:[13627]" dev="sockfs" ino=13627 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.837611][ T5804] loop0: detected capacity change from 0 to 256 [ 73.862020][ T5804] __nla_validate_parse: 8 callbacks suppressed [ 73.862040][ T5804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.845'. [ 73.892473][ T29] audit: type=1400 audit(1719787422.395:563): avc: denied { write } for pid=5806 comm="syz.3.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.084799][ T29] audit: type=1400 audit(1719787422.585:564): avc: denied { mounton } for pid=5817 comm="syz.3.852" path="/root/syzkaller.nQkmqW/192/file0" dev="sda1" ino=1976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=fifo_file permissive=1 [ 74.476917][ T5853] tmpfs: Unsupported parameter 'huge' [ 75.062108][ T29] audit: type=1400 audit(1719787423.565:565): avc: denied { read } for pid=5890 comm="syz.0.882" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 75.104658][ T29] audit: type=1400 audit(1719787423.565:566): avc: denied { open } for pid=5890 comm="syz.0.882" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 75.129560][ T29] audit: type=1400 audit(1719787423.605:567): avc: denied { ioctl } for pid=5890 comm="syz.0.882" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 75.398239][ T5912] loop1: detected capacity change from 0 to 256 [ 75.417047][ T5912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.891'. [ 75.581395][ T5929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.897'. [ 75.639879][ T29] audit: type=1400 audit(1719787424.145:568): avc: denied { sqpoll } for pid=5927 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.671254][ T5929] tipc: Started in network mode [ 75.676164][ T5929] tipc: Node identity ac1414aa, cluster identity 4711 [ 75.689579][ T5929] tipc: New replicast peer: 100.1.1.1 [ 75.695058][ T5929] tipc: Enabled bearer , priority 10 [ 75.763349][ T5929] loop3: detected capacity change from 0 to 512 [ 75.780923][ T5929] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.897: invalid block [ 75.842085][ T5929] EXT4-fs (loop3): Remounting filesystem read-only [ 75.871834][ T5929] EXT4-fs (loop3): 2 truncates cleaned up [ 75.905487][ T5929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.969601][ T5929] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 75.988467][ T5958] tmpfs: Unsupported parameter 'huge' [ 76.004046][ T5929] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.250624][ T5974] netlink: 2 bytes leftover after parsing attributes in process `syz.2.913'. [ 76.349813][ T29] audit: type=1400 audit(1719787424.855:569): avc: denied { bind } for pid=5971 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.743258][ T6005] (unnamed net_device) (uninitialized): up delay (292) is not a multiple of miimon (131584), value rounded to 0 ms [ 76.806254][ T3160] tipc: Node number set to 2886997162 [ 76.983011][ T29] audit: type=1400 audit(1719787425.485:570): avc: denied { execute } for pid=6022 comm="syz.2.933" path=2F6D656D66643A73797374656D2E736B636B707202136F746F6E616D202864656C6574656429 dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.034019][ T6025] tmpfs: Unsupported parameter 'huge' [ 77.444037][ T6038] netlink: 2 bytes leftover after parsing attributes in process `syz.4.940'. [ 77.713326][ T29] audit: type=1400 audit(1719787426.185:571): avc: denied { write } for pid=6043 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 80.038955][ T6098] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6098 comm=syz.2.965 [ 80.057465][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 80.057479][ T29] audit: type=1326 audit(1719787428.565:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6095 comm="syz.4.967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a9af49b99 code=0x0 [ 80.064946][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.963'. [ 80.096007][ T29] audit: type=1400 audit(1719787428.595:576): avc: denied { read } for pid=6093 comm="syz.2.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 80.122347][ T29] audit: type=1400 audit(1719787428.625:577): avc: denied { create } for pid=6103 comm="syz.1.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 80.152220][ T29] audit: type=1400 audit(1719787428.625:578): avc: denied { write } for pid=6103 comm="syz.1.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 80.214687][ T6101] tipc: Started in network mode [ 80.219672][ T6101] tipc: Node identity ac1414aa, cluster identity 4711 [ 80.227316][ T6101] tipc: New replicast peer: 100.1.1.1 [ 80.232797][ T6101] tipc: Enabled bearer , priority 10 [ 80.301581][ T29] audit: type=1326 audit(1719787428.805:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.2.978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9d32bcb99 code=0x0 [ 80.501144][ T29] audit: type=1400 audit(1719787429.005:580): avc: denied { read } for pid=6170 comm="syz.0.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.534883][ T6176] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 80.597837][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'. [ 80.667822][ T29] audit: type=1400 audit(1719787429.175:581): avc: denied { connect } for pid=6196 comm="syz.0.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.709803][ T6202] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 80.786699][ T6215] netlink: 'syz.0.1018': attribute type 10 has an invalid length. [ 80.895188][ T29] audit: type=1400 audit(1719787429.395:582): avc: denied { mount } for pid=6214 comm="syz.0.1018" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 80.905449][ T6229] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 80.917971][ T29] audit: type=1400 audit(1719787429.395:583): avc: denied { unmount } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 80.949749][ T29] audit: type=1400 audit(1719787429.435:584): avc: denied { create } for pid=6232 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.246224][ T972] tipc: Node number set to 2886997162 [ 81.264858][ T6288] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 81.469147][ T6303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.546105][ T6317] program syz.4.1066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.803823][ T6342] program syz.4.1077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.893289][ T6352] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6352 comm=syz.4.1082 [ 82.018620][ T6364] program syz.0.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.165160][ T6382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1092'. [ 82.439041][ T6410] netlink: 'syz.3.1109': attribute type 4 has an invalid length. [ 82.550969][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 82.984075][ T6434] netlink: 'syz.4.1120': attribute type 4 has an invalid length. [ 83.018187][ T6435] dvmrp0: entered allmulticast mode [ 83.123326][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'. [ 83.866550][ T6490] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (254) [ 84.312773][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.417607][ T6534] syz_tun: entered promiscuous mode [ 84.424263][ T6534] syz_tun: left promiscuous mode [ 84.552394][ T6549] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1167'. [ 84.561561][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1167'. [ 84.572970][ T6549] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1167'. [ 84.605221][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.697182][ T6563] syz_tun: entered promiscuous mode [ 84.704153][ T6563] syz_tun: left promiscuous mode [ 84.904676][ T6578] block device autoloading is deprecated and will be removed. [ 85.049300][ T6588] netlink: 'syz.0.1182': attribute type 1 has an invalid length. [ 85.521449][ T6616] netlink: 'syz.2.1193': attribute type 1 has an invalid length. [ 85.699352][ T6641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1203'. [ 85.708522][ T6641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1203'. [ 85.718769][ T6641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1203'. [ 85.759721][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 85.759768][ T29] audit: type=1326 audit(1719787434.266:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.2.1206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9d32bcb99 code=0x0 [ 85.861221][ T6651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1206'. [ 86.101858][ T29] audit: type=1400 audit(1719787434.606:604): avc: denied { name_bind } for pid=6670 comm="syz.4.1215" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 86.221032][ T6676] dvmrp0: entered allmulticast mode [ 86.620896][ T6679] netlink: 'syz.2.1218': attribute type 1 has an invalid length. [ 86.919032][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1223'. [ 87.000757][ T6703] nfs4: Unknown parameter 'mblk_io_submit' [ 87.010351][ T29] audit: type=1400 audit(1719787435.516:605): avc: denied { ioctl } for pid=6704 comm="syz.4.1228" path="socket:[16179]" dev="sockfs" ino=16179 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 87.051058][ T6709] syz.2.1230 (6709): attempted to duplicate a private mapping with mremap. This is not supported. [ 87.092321][ T6713] syz_tun: entered promiscuous mode [ 87.099341][ T6713] syz_tun: left promiscuous mode [ 87.198137][ T6725] program syz.2.1236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.296806][ T6730] dvmrp0: entered allmulticast mode [ 87.814737][ T29] audit: type=1400 audit(1719787436.316:606): avc: denied { execute } for pid=6737 comm="syz.0.1241" path="/root/syzkaller.LUrUBF/262/file0/bus" dev="ramfs" ino=16525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 87.875630][ T6742] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1243'. [ 87.912088][ T6746] syz_tun: entered promiscuous mode [ 87.919163][ T6746] syz_tun: left promiscuous mode [ 87.971572][ T6750] program syz.4.1247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.062122][ T6763] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 88.070168][ T6763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.077400][ T6763] IPv6: NLM_F_CREATE should be set when creating new route [ 88.084600][ T6763] IPv6: NLM_F_CREATE should be set when creating new route [ 88.198185][ T29] audit: type=1400 audit(1719787436.706:607): avc: denied { connect } for pid=6770 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.270464][ T29] audit: type=1400 audit(1719787436.776:608): avc: denied { write } for pid=6770 comm="syz.2.1253" path="socket:[16295]" dev="sockfs" ino=16295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.388673][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1257'. [ 88.531433][ T6788] syz_tun: entered promiscuous mode [ 88.549620][ T6788] syz_tun: left promiscuous mode [ 88.849714][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1268'. [ 88.945509][ T6817] netlink: 'syz.4.1270': attribute type 1 has an invalid length. [ 88.955905][ T6817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.963165][ T6817] IPv6: NLM_F_CREATE should be set when creating new route [ 88.970503][ T6817] IPv6: NLM_F_CREATE should be set when creating new route [ 89.087819][ T6825] program syz.2.1274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.314489][ T29] audit: type=1400 audit(1719787437.816:609): avc: denied { override_creds } for pid=6848 comm="syz.4.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.445549][ T29] audit: type=1400 audit(1719787437.946:610): avc: denied { ioctl } for pid=6858 comm="syz.4.1287" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.503165][ T29] audit: type=1326 audit(1719787438.006:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.0.1291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7753f2bb99 code=0x0 [ 89.558700][ T6872] mmap: syz.2.1293 (6872) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.745282][ T6882] TCP: Unexpected MD5 Hash found for 10.1.1.2.0->255.255.255.255.20002 [] [ 89.755148][ T6882] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.825545][ T29] audit: type=1400 audit(1719787438.326:612): avc: denied { map } for pid=6881 comm="syz.2.1297" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.226669][ T6900] usb usb8: usbfs: process 6900 (syz.2.1305) did not claim interface 0 before use [ 90.461999][ T6914] 9pnet_fd: Insufficient options for proto=fd [ 90.604359][ T6927] TCP: Unexpected MD5 Hash found for 10.1.1.2.0->255.255.255.255.20002 [] [ 90.613973][ T6927] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.763376][ T6941] 9pnet_fd: Insufficient options for proto=fd [ 90.938097][ T29] audit: type=1400 audit(1719787439.446:613): avc: denied { remount } for pid=6950 comm="syz.4.1329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.519577][ T29] audit: type=1400 audit(1719787440.026:614): avc: denied { write } for pid=6973 comm="syz.0.1335" path="socket:[17043]" dev="sockfs" ino=17043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 91.588892][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.614578][ T6977] x_tables: unsorted underflow at hook 2 [ 91.633230][ T6959] chnl_net:caif_netlink_parms(): no params data found [ 91.653603][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.714237][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.744628][ T6979] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 6979 comm: syz.4.1330) [ 91.760008][ T29] audit: type=1400 audit(1719787440.246:615): avc: denied { module_load } for pid=6953 comm="syz.4.1330" path=2F2173656C696E7578776B311FD06DC37F39C99E2A0D5493FDE291EFAA16236A978FBCDE590FCCC56D56CB15766D2870C92D515A23D27B84BF06 dev="mqueue" ino=16980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 91.818934][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.837878][ T6988] TCP: Unexpected MD5 Hash found for 10.1.1.2.0->255.255.255.255.20002 [] [ 91.847414][ T6988] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 91.863059][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.870321][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.881370][ T6959] bridge_slave_0: entered allmulticast mode [ 91.888381][ T6959] bridge_slave_0: entered promiscuous mode [ 91.895649][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.902757][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.911464][ T6959] bridge_slave_1: entered allmulticast mode [ 91.917980][ T6959] bridge_slave_1: entered promiscuous mode [ 91.937682][ T6959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.950709][ T6959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.001601][ T11] bridge_slave_1: left allmulticast mode [ 92.007308][ T11] bridge_slave_1: left promiscuous mode [ 92.013001][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.028847][ T11] bridge_slave_0: left allmulticast mode [ 92.034518][ T11] bridge_slave_0: left promiscuous mode [ 92.040218][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.097918][ T29] audit: type=1400 audit(1719787440.606:616): avc: denied { read } for pid=6998 comm="syz.0.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.143970][ T7006] x_tables: unsorted underflow at hook 2 [ 92.188604][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.201172][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.211759][ T11] bond0 (unregistering): Released all slaves [ 92.221065][ T11] bond1 (unregistering): Released all slaves [ 92.230213][ T6959] team0: Port device team_slave_0 added [ 92.251205][ T6959] team0: Port device team_slave_1 added [ 92.277659][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'. [ 92.291425][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.298508][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.324485][ T6959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.341918][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.348968][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.374987][ T6959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.396762][ T11] IPVS: stopping master sync thread 6202 ... [ 92.406400][ T11] IPVS: stopping backup sync thread 5420 ... [ 92.433167][ T11] hsr_slave_0: left promiscuous mode [ 92.441774][ T11] hsr_slave_1: left promiscuous mode [ 92.452309][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.460658][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.481383][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.488906][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.497896][ T7024] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 92.507893][ T29] audit: type=1400 audit(1719787441.016:617): avc: denied { relabelto } for pid=7023 comm="syz.0.1352" name="file0" dev="sda1" ino=1997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 92.544268][ T11] veth1_macvtap: left promiscuous mode [ 92.549785][ T11] veth0_macvtap: left promiscuous mode [ 92.555359][ T11] veth1_vlan: left promiscuous mode [ 92.560678][ T11] veth0_vlan: left promiscuous mode [ 92.573716][ T29] audit: type=1400 audit(1719787441.036:618): avc: denied { setattr } for pid=7023 comm="syz.0.1352" name="file0" dev="sda1" ino=1997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 92.600052][ T29] audit: type=1400 audit(1719787441.076:619): avc: denied { unlink } for pid=3083 comm="syz-executor" name="file0" dev="sda1" ino=1997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 92.738831][ T11] team0 (unregistering): Port device team_slave_1 removed [ 92.750770][ T11] team0 (unregistering): Port device team_slave_0 removed [ 92.808946][ T6959] hsr_slave_0: entered promiscuous mode [ 92.815159][ T6959] hsr_slave_1: entered promiscuous mode [ 92.828960][ T6959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.845345][ T6959] Cannot create hsr debugfs directory [ 93.066909][ T7037] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 7037 comm: syz.0.1353) [ 93.214318][ T6959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.216395][ T6959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.218605][ T6959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.220743][ T6959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.305839][ T6959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.322275][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 93.338055][ T6959] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.349090][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.356296][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.397152][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.404270][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.455185][ T6959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.465667][ T6959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.635726][ T6959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.648715][ T7105] syzkaller0: entered promiscuous mode [ 93.654211][ T7105] syzkaller0: entered allmulticast mode [ 93.665404][ T7105] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 93.696804][ T29] audit: type=1400 audit(1719787442.196:620): avc: denied { getopt } for pid=7100 comm="syz.0.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.765580][ T29] audit: type=1400 audit(1719787442.266:621): avc: denied { unlink } for pid=2767 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.844369][ T6959] veth0_vlan: entered promiscuous mode [ 93.858789][ T6959] veth1_vlan: entered promiscuous mode [ 93.894358][ T6959] veth0_macvtap: entered promiscuous mode [ 93.913929][ T6959] veth1_macvtap: entered promiscuous mode [ 93.925778][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.936232][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.946232][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.952845][ T7137] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1374'. [ 93.956745][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.975471][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.985977][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.995806][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.006354][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.017424][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.031779][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.042317][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.052290][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.062832][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.072831][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.083664][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.093559][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.104079][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.116727][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.128419][ T6959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.137221][ T6959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.145969][ T6959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.154765][ T6959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.232614][ T7145] syzkaller0: entered promiscuous mode [ 94.238262][ T7145] syzkaller0: entered allmulticast mode [ 94.248780][ T7148] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 7148 comm: syz.2.1372) [ 94.362681][ T7156] loop1: detected capacity change from 0 to 256 [ 94.388138][ T7156] FAT-fs (loop1): codepage cp866 not found [ 94.484925][ T29] audit: type=1326 audit(1719787442.986:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm="syz.4.1385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a9af49b99 code=0x0 [ 94.568320][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1388'. [ 94.578212][ T7174] bridge_slave_1: left allmulticast mode [ 94.583876][ T7174] bridge_slave_1: left promiscuous mode [ 94.589635][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.633679][ T7177] syzkaller0: entered promiscuous mode [ 94.639208][ T7177] syzkaller0: entered allmulticast mode [ 94.947629][ T3084] bridge0: port 4(syz_tun) entered disabled state [ 94.989778][ T3084] syz_tun (unregistering): left allmulticast mode [ 94.996306][ T3084] syz_tun (unregistering): left promiscuous mode [ 95.002777][ T3084] bridge0: port 4(syz_tun) entered disabled state [ 95.185790][ T7183] chnl_net:caif_netlink_parms(): no params data found [ 95.233929][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.251545][ T7215] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1400'. [ 95.276123][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.289773][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.296906][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.303044][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 95.304759][ T7183] bridge_slave_0: entered allmulticast mode [ 95.323028][ T7183] bridge_slave_0: entered promiscuous mode [ 95.424826][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.432255][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.439964][ T7183] bridge_slave_1: entered allmulticast mode [ 95.447137][ T7183] bridge_slave_1: entered promiscuous mode [ 95.461814][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.520343][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.539380][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.559436][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.697034][ T7183] team0: Port device team_slave_0 added [ 95.805874][ T7183] team0: Port device team_slave_1 added [ 95.847922][ T11] team0: left allmulticast mode [ 95.852845][ T11] team_slave_1: left allmulticast mode [ 95.858455][ T11] bridge0: port 3(team0) entered disabled state [ 95.878178][ T11] bridge_slave_1: left allmulticast mode [ 95.883832][ T11] bridge_slave_1: left promiscuous mode [ 95.889532][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.921721][ T11] bridge_slave_0: left allmulticast mode [ 95.927484][ T11] bridge_slave_0: left promiscuous mode [ 95.933219][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.061716][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.068741][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.094753][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.113519][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.120536][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.146673][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.163590][ T11] tipc: Disabling bearer [ 96.168628][ T11] tipc: Left network mode [ 96.246130][ T29] audit: type=1400 audit(1719787444.746:623): avc: denied { bind } for pid=7280 comm="syz.0.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.278879][ T7183] hsr_slave_0: entered promiscuous mode [ 96.295505][ T7183] hsr_slave_1: entered promiscuous mode [ 96.314109][ T7183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.322033][ T7183] Cannot create hsr debugfs directory [ 96.329495][ T11] hsr_slave_0: left promiscuous mode [ 96.335212][ T11] hsr_slave_1: left promiscuous mode [ 96.342437][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.350007][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.359024][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.366627][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.376717][ T11] veth1_macvtap: left promiscuous mode [ 96.382308][ T11] veth0_macvtap: left promiscuous mode [ 96.387878][ T11] veth1_vlan: left promiscuous mode [ 96.393221][ T11] veth0_vlan: left promiscuous mode [ 96.485461][ T11] team_slave_1 (unregistering): left promiscuous mode [ 96.493003][ T11] team0 (unregistering): Port device team_slave_1 removed [ 96.500441][ T29] audit: type=1400 audit(1719787445.006:624): avc: denied { mount } for pid=7302 comm="syz.2.1425" name="/" dev="9p" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 96.544361][ T7292] netlink: 'syz.0.1421': attribute type 4 has an invalid length. [ 96.576264][ T29] audit: type=1400 audit(1719787445.076:625): avc: denied { unmount } for pid=4938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 96.611579][ T29] audit: type=1400 audit(1719787445.116:626): avc: denied { execmem } for pid=7307 comm="syz.2.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 97.080861][ T7183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.127775][ T7183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.136693][ T7183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.145514][ T7183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.183045][ T29] audit: type=1400 audit(1719787445.686:627): avc: denied { setopt } for pid=7330 comm="syz.4.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.206308][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.220097][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.229846][ T3228] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.236959][ T3228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.254278][ T3228] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.261403][ T3228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.279559][ T7183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.289976][ T7183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.351351][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.374142][ T29] audit: type=1326 audit(1719787445.876:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9af49b99 code=0x7ffc0000 [ 97.397767][ T29] audit: type=1326 audit(1719787445.876:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9af49b99 code=0x7ffc0000 [ 97.421412][ T29] audit: type=1326 audit(1719787445.876:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a9af49b99 code=0x7ffc0000 [ 97.444816][ T29] audit: type=1326 audit(1719787445.876:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9af49b99 code=0x7ffc0000 [ 97.460776][ T7183] veth0_vlan: entered promiscuous mode [ 97.468189][ T29] audit: type=1326 audit(1719787445.876:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.4.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9af49b99 code=0x7ffc0000 [ 97.478652][ T7183] veth1_vlan: entered promiscuous mode [ 97.517535][ T7183] veth0_macvtap: entered promiscuous mode [ 97.525003][ T7183] veth1_macvtap: entered promiscuous mode [ 97.538013][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.548604][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.558506][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.568932][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.579078][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.589777][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.599631][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.610162][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.621026][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.646358][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.656936][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.666781][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.677214][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.687100][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.697825][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.707800][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.718355][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.729482][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.739541][ T7183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.748521][ T7183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.757247][ T7183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.765936][ T7183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.797972][ T3479] ================================================================== [ 97.806086][ T3479] BUG: KCSAN: data-race in wg_packet_send_staged_packets / wg_packet_send_staged_packets [ 97.815930][ T3479] [ 97.818268][ T3479] read to 0xffff888112226b28 of 4 bytes by task 3228 on cpu 1: [ 97.824326][ T7367] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1450'. [ 97.825810][ T3479] wg_packet_send_staged_packets+0x60e/0xac0 [ 97.825849][ T3479] wg_packet_send_keepalive+0xe2/0x100 [ 97.825879][ T3479] wg_packet_handshake_receive_worker+0x449/0x5f0 [ 97.852980][ T3479] process_scheduled_works+0x483/0x9a0 [ 97.858446][ T3479] worker_thread+0x526/0x720 [ 97.863043][ T3479] kthread+0x1d1/0x210 [ 97.867123][ T3479] ret_from_fork+0x4b/0x60 [ 97.871545][ T3479] ret_from_fork_asm+0x1a/0x30 [ 97.876320][ T3479] [ 97.878642][ T3479] write to 0xffff888112226b28 of 4 bytes by task 3479 on cpu 0: [ 97.886265][ T3479] wg_packet_send_staged_packets+0x6e5/0xac0 [ 97.892279][ T3479] wg_packet_send_keepalive+0xe2/0x100 [ 97.897767][ T3479] wg_packet_handshake_receive_worker+0x449/0x5f0 [ 97.904190][ T3479] process_scheduled_works+0x483/0x9a0 [ 97.909648][ T3479] worker_thread+0x526/0x720 [ 97.914239][ T3479] kthread+0x1d1/0x210 [ 97.918383][ T3479] ret_from_fork+0x4b/0x60 [ 97.922814][ T3479] ret_from_fork_asm+0x1a/0x30 [ 97.927586][ T3479] [ 97.929912][ T3479] value changed: 0xffffffff -> 0x00000000 [ 97.935621][ T3479] [ 97.937929][ T3479] Reported by Kernel Concurrency Sanitizer on: [ 97.944071][ T3479] CPU: 0 PID: 3479 Comm: kworker/0:7 Not tainted 6.10.0-rc6-syzkaller #0 [ 97.952496][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 97.962545][ T3479] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 97.969757][ T3479] ==================================================================