last executing test programs: 10m29.845922962s ago: executing program 32 (id=214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1000000, 0x13, r1, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 9m33.064108645s ago: executing program 33 (id=1739): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpriority(0x1, 0xffffffffffffffff) 8m57.281578032s ago: executing program 34 (id=2286): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x9, 0x4) 8m56.568330338s ago: executing program 35 (id=2311): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) 8m50.986980459s ago: executing program 36 (id=2372): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8m48.412920545s ago: executing program 37 (id=2407): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 7m59.258871172s ago: executing program 38 (id=3329): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x2, 0x80000}, 0x20) 7m34.684020056s ago: executing program 39 (id=3858): setreuid(0x0, 0xee00) r0 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x1, 0x0, 0xee00, 0x0, 0x0, 0x70, 0x8001}, 0x1, 0x2, 0x4, 0x5, 0x0, 0x0, 0x3}) shmctl$SHM_LOCK(r0, 0xb) 6m41.398497183s ago: executing program 40 (id=5338): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000010400380205000900010000000500"], 0x88}}, 0x0) 6m14.947199078s ago: executing program 41 (id=5906): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) 5m59.062319853s ago: executing program 42 (id=6180): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x5}, 0x2010, 0x0, 0x0, 0x2, 0x4, 0x71, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 4m33.019682561s ago: executing program 43 (id=8317): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 4m10.883086492s ago: executing program 44 (id=8829): r0 = socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @empty}}}}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 4m7.483859885s ago: executing program 45 (id=8868): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x4224831, 0xffffffffffffffff, 0x42795000) 4m6.420041168s ago: executing program 46 (id=8883): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0x3}, 0x1a3bd, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r2, @ANYBLOB="000014000a000100000000000000000008000f0004"], 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x48000) 3m38.765466429s ago: executing program 47 (id=9129): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}}, 0x20050800) 3m13.85708228s ago: executing program 48 (id=9503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) 3m1.848155941s ago: executing program 49 (id=9921): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0xfffffee7}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) 3m1.515946478s ago: executing program 50 (id=9930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000feffffffffffffff0008000740"], 0xa0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000) 2m26.46777963s ago: executing program 51 (id=10521): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @v={0x3, 0x2, 0x4, 0x6, 0x5, 0x10, 0x4d, {0x4, 0x9, "1b15ed536d2c5615"}, 0x7f, 0x3, 0x7f, 0x6, 0x3e, "56a991bce982b99e2cc14b916ea97eb4bb8aab1cd0eccc1221486565f9769792ea2310ed0d4da0cd3e8818e00c53d76480c3a58b851f8c1dc711072f0018"}}, 0x57) 2m23.816937087s ago: executing program 8 (id=10581): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 2m21.658015864s ago: executing program 8 (id=10615): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.560238146s ago: executing program 8 (id=10618): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_io_uring_setup(0xd02, &(0x7f0000002900)={0x0, 0x10f24e, 0x0, 0x1, 0x290}, &(0x7f0000000440)=0x0, &(0x7f0000001080)=0x0, &(0x7f0000001040)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10021) io_uring_enter(r1, 0x1, 0x20, 0x1, 0x0, 0x0) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x3f) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000200)={0x0, r0, 0x22, {0x7f, 0x100}, 0x1c}, 0x1) 2m21.3970537s ago: executing program 8 (id=10621): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 2m21.346499211s ago: executing program 8 (id=10622): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) setrlimit(0x0, &(0x7f0000000040)={0x4, 0x7}) 2m20.868101521s ago: executing program 8 (id=10634): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002018}) shutdown(r0, 0x1) 2m20.868045921s ago: executing program 52 (id=10634): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002018}) shutdown(r0, 0x1) 1m55.818394765s ago: executing program 1 (id=11118): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f"}, 0xd) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 1m55.713820477s ago: executing program 1 (id=11121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x70}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m55.640343179s ago: executing program 1 (id=11124): syz_clone(0x200200, &(0x7f0000000240)="e0cc3ed9c7c2bd28b53d956d1574598e85a46c3593a8b13c35bd459652fe32a3ae275a9717c68fced630aa595acccb10d38431d50308bf8700626b48146b141504e618470ec97fea0299e1e860b0351d79a346f74569ff61556959ede303058e53b0465729fc7facda3de521f4b9a9bc42e2d4a0a970c8289a39b00dedbd980efa1e8c13b9", 0x85, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x6, 0x5}, 0x8) 1m55.539953781s ago: executing program 1 (id=11125): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000640)='./file0/file0\x00', 0x272) 1m55.422645214s ago: executing program 1 (id=11126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "3258ddc88142c509", "1722556ccbfd73e24fc0b2459bcefc5f6d4040efa86caa280cfb3cb50ce8fc54", "1ab24cf2", "c4c626ede676c29f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) 1m55.107162651s ago: executing program 1 (id=11133): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x5, 0x1, 0xffffff01, 0x2, 0x4}, 0x14) 1m55.051983232s ago: executing program 53 (id=11133): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x5, 0x1, 0xffffff01, 0x2, 0x4}, 0x14) 1m48.884632635s ago: executing program 0 (id=11248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000008200000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42884}, 0x0) 1m48.800002897s ago: executing program 0 (id=11263): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x60450, 0x1040}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x3}, @IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x44}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24008000) 1m47.387146348s ago: executing program 0 (id=11271): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000380)=ANY=[], 0x0) 1m47.31792566s ago: executing program 0 (id=11272): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000001740)="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", 0x74b}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 1m47.256333921s ago: executing program 0 (id=11274): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1a37c1, 0x42) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 1m47.197180482s ago: executing program 0 (id=11275): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000170a0101"], 0x14}, 0x1, 0x0, 0x0, 0x4040081}, 0x800) close(0x4) 1m32.0737981s ago: executing program 54 (id=11275): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000170a0101"], 0x14}, 0x1, 0x0, 0x0, 0x4040081}, 0x800) close(0x4) 1m21.166805537s ago: executing program 5 (id=11658): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x58, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x16}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1m20.356167915s ago: executing program 5 (id=11660): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r3, r1, 0x25, 0x2, @val=@perf_event={0x2}}, 0x18) syz_emit_ethernet(0x22, &(0x7f0000001bc0)={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x9, 0x14, 0x68, 0x0, 0x3, 0xff, 0x0, @broadcast, @remote}}}}}, 0x0) 1m20.050903382s ago: executing program 5 (id=11665): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_clone(0x808a000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2) 1m19.157323861s ago: executing program 5 (id=11670): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x110) 1m18.405971237s ago: executing program 5 (id=11677): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000280)="64e919", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 1m18.169134522s ago: executing program 5 (id=11680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0xa, 0x88ca}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @generic={0x2, 0x6, '\x00', 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@dstopts={0x2f}]}}}}}}, 0x42) 1m18.169025422s ago: executing program 55 (id=11680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0xa, 0x88ca}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @generic={0x2, 0x6, '\x00', 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@dstopts={0x2f}]}}}}}}, 0x42) 10.038598472s ago: executing program 6 (id=12858): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x92, 0x8}]}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 9.770346148s ago: executing program 6 (id=12861): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63561e438de3584eee33c9e9b986", 0x0, 0x1120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.109096562s ago: executing program 6 (id=12867): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x29, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.845056968s ago: executing program 6 (id=12872): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 8.806087428s ago: executing program 6 (id=12873): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) 8.440231277s ago: executing program 6 (id=12883): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002a00)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x65dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x0, 0x9, 0xa}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x84050) 8.389836428s ago: executing program 56 (id=12883): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002a00)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x65dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x0, 0x9, 0xa}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x84050) 2.29927401s ago: executing program 3 (id=12959): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) sendfile(r2, r2, 0x0, 0x4d9b6eaf) 2.007165206s ago: executing program 3 (id=12965): rt_sigtimedwait(&(0x7f0000000000)={[0x3ff]}, 0x0, 0x0, 0x8) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.728167593s ago: executing program 9 (id=12969): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x31a, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.571117026s ago: executing program 9 (id=12972): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 1.455340178s ago: executing program 9 (id=12975): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="332e605370f3fe4e7dcfcad59de7fea13052a54a6bed4c60ddf84540edb42abca41f85dbac793d6ceb22995e33281fd8404d1bb23c48a526e0fc0c2ce89934d6febf6b3ceca60987e4bf58c1eb5749d3dc920f4afa5d097629b552728a462941666fc33921c927b3524d59ec412351558eb730a102e3c6a926d311dceb58050dffc1b55ac1ddb0a9499ecaa01cdadc6da2d7e423b84dff7f4e029fccdb1b27961a418429778798d5ee4dc6b007df6ad62671bc0dea57cfd4", 0xb8}], 0x1, 0x0, 0x0, 0xc000}}], 0x1, 0x20080041) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 1.35345683s ago: executing program 9 (id=12976): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x80646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x8210, 0x2, 0x0, 0x42}, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 1.071172877s ago: executing program 2 (id=12979): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x20, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x9, 0x4f, &(0x7f0000000540)=""/79, 0x40f00, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x5c, r2, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0x400000000000000, 0x0, 0x90}, 0x0) 960.723239ms ago: executing program 3 (id=12981): unshare(0x62040200) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 884.12114ms ago: executing program 2 (id=12983): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0x3}, 0x1a3bd, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000884000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\''], 0x50) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 856.720072ms ago: executing program 4 (id=12985): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 794.897513ms ago: executing program 9 (id=12988): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x5828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 782.236123ms ago: executing program 4 (id=12989): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 704.552185ms ago: executing program 7 (id=12990): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0x1f00, 0x2, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000000c0), 0x0) r1 = eventfd(0xb03c) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x0, 0x0, 0x0) 704.044375ms ago: executing program 4 (id=12991): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b907ef19ed087d08a6d30704be0f", 0x0, 0x6003, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 702.221905ms ago: executing program 9 (id=12992): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6009b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x200000, 0x81}) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x3800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) 637.559796ms ago: executing program 7 (id=12993): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) lseek(r1, 0x5, 0x2) 583.902027ms ago: executing program 2 (id=12994): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x101d0) 583.709158ms ago: executing program 7 (id=12995): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_emit_ethernet(0xd82, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd4c, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) 465.02964ms ago: executing program 2 (id=12996): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x89b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x4, 0x20002f7}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 409.382591ms ago: executing program 4 (id=12997): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0x3}, 0x1a3bd, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2501000000000000000141000000180017"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 409.241722ms ago: executing program 2 (id=12998): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000480)='task\x00') syz_open_procfs$userns(r1, &(0x7f0000000100)) wait4(r1, 0x0, 0x2, 0x0) 173.077556ms ago: executing program 2 (id=12999): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x80646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x8210, 0x2, 0x0, 0x42}, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 171.452556ms ago: executing program 4 (id=13009): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000870000008500000006000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 171.111296ms ago: executing program 7 (id=13000): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r1 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9000000d}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) 139.139377ms ago: executing program 3 (id=13002): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000da000085000000860000001801"], 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xc}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) 108.118238ms ago: executing program 7 (id=13003): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r2}, 0x8) 68.202479ms ago: executing program 3 (id=13004): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 32.908679ms ago: executing program 3 (id=13005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) sendto$inet6(r0, &(0x7f0000001680)="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", 0x1000, 0x800, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000681000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/220, 0xdc, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 32.490159ms ago: executing program 4 (id=13006): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000000)) 0s ago: executing program 7 (id=13007): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaa", 0x1a}, {&(0x7f0000000840)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f800990000000000", 0xc5}, {0x0}], 0x3}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 609.103967][T31801] shmem 0 [ 609.106933][T31801] mapped_file 0 [ 609.110555][T31801] dirty 0 [ 609.113786][T31801] writeback 0 [ 609.117152][T31801] workingset_refault_anon 1680 [ 609.124135][T31801] workingset_refault_file 3 [ 609.128666][T31801] swap 479232 [ 609.132197][T31801] swapcached 13754368 [ 609.136287][T31801] pgpgin 243126 [ 609.145876][T31801] pgpgout 243125 [ 609.149665][T31801] pgfault 299701 [ 609.154048][T31801] pgmajfault 73 [ 609.157745][T31801] inactive_anon 0 [ 609.162854][ T4990] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.11672'. [ 609.185864][T31801] active_anon 4096 [ 609.189843][T31801] inactive_file 0 [ 609.193503][T31801] active_file 0 [ 609.196969][T31801] unevictable 0 [ 609.205982][T31801] hierarchical_memory_limit 314572800 [ 609.219584][T31801] hierarchical_memsw_limit 9223372036854771712 [ 609.229197][T31801] total_cache 0 [ 609.236273][T31801] total_rss 0 [ 609.250452][T31801] total_shmem 0 [ 609.253979][T31801] total_mapped_file 0 [ 609.258067][T31801] total_dirty 0 [ 609.266374][T31801] total_writeback 0 [ 609.273546][T31801] total_workingset_refault_anon 1680 [ 609.288350][T31801] total_workingset_refault_file 3 [ 609.297964][T31801] total_swap 479232 [ 609.306363][T31801] total_swapcached 13754368 [ 609.315414][T31801] total_pgpgin 243126 [ 609.323973][T31801] total_pgpgout 243125 [ 609.333063][T31801] total_pgfault 299701 [ 609.341670][T31801] total_pgmajfault 73 [ 609.349286][T31801] total_inactive_anon 0 [ 609.357382][T31801] total_active_anon 4096 [ 609.366335][T31801] total_inactive_file 0 [ 609.375187][T31801] total_active_file 0 [ 609.383743][T31801] total_unevictable 0 [ 609.392409][T31801] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11666,pid=4975,uid=0 [ 609.408118][T31801] Memory cgroup out of memory: Killed process 4975 (syz.2.11666) total-vm:96228kB, anon-rss:1240kB, file-rss:22168kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 609.893212][ T4934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.991398][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.117932][ T4986] loop6: detected capacity change from 0 to 4096 [ 610.171970][ T4986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.208710][ T5027] team0: Port device syz_tun added [ 610.216429][ T3241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.279085][ T5027] team0: Port device syz_tun removed [ 610.297928][ T5027] bridge_slave_0: left allmulticast mode [ 610.305774][ T5027] bridge_slave_0: left promiscuous mode [ 610.312161][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11688'. [ 610.323596][ T5027] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.324274][ T5035] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11688'. [ 610.342144][ T5027] bridge_slave_1: left allmulticast mode [ 610.347992][ T5027] bridge_slave_1: left promiscuous mode [ 610.357489][ T5027] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.367232][ T5027] bond0: (slave bond_slave_0): Releasing backup interface [ 610.377382][ T5027] bond0: (slave bond_slave_1): Releasing backup interface [ 610.388629][ T5027] team0: Port device team_slave_0 removed [ 610.397179][ T5027] team0: Port device team_slave_1 removed [ 610.404444][ T5027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.414091][ T5027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.423393][ T5027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.431861][ T5027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.442261][ T5027] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 610.467144][ T5035] geneve2: entered promiscuous mode [ 610.476816][ T5035] geneve2: entered allmulticast mode [ 610.690564][ T5054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11695'. [ 610.732210][ T5013] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.764281][ T5013] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.805305][ T5013] bridge_slave_0: entered allmulticast mode [ 610.827424][ T5013] bridge_slave_0: entered promiscuous mode [ 610.852151][ T5013] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.873734][ T5013] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.902477][ T5013] bridge_slave_1: entered allmulticast mode [ 610.921313][ T5013] bridge_slave_1: entered promiscuous mode [ 610.981162][ T5013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.030760][ T5013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.070940][ T5013] team0: Port device team_slave_0 added [ 611.082953][ T5013] team0: Port device team_slave_1 added [ 611.116591][ T5013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.128765][ T5013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.182624][ T5013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.218575][ T5013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.225821][ T5013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.290620][ T5013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.365917][ T5013] hsr_slave_0: entered promiscuous mode [ 611.381016][ T5013] hsr_slave_1: entered promiscuous mode [ 611.430007][ T5013] debugfs: 'hsr0' already exists in 'hsr' [ 611.453922][ T5013] Cannot create hsr debugfs directory [ 611.568107][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 611.568124][ T28] audit: type=1400 audit(1783108749.702:3476): avc: denied { connect } for pid=5081 comm="syz.2.11703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 611.664813][ T28] audit: type=1400 audit(1783108749.802:3477): avc: denied { write } for pid=5064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.720043][ T5088] bridge_slave_0: left allmulticast mode [ 611.733712][ T5088] bridge_slave_0: left promiscuous mode [ 611.739892][ T28] audit: type=1400 audit(1783108749.872:3478): avc: denied { write } for pid=5101 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.767598][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.790524][ T5088] bridge_slave_1: left allmulticast mode [ 611.819355][ T5088] bridge_slave_1: left promiscuous mode [ 611.835979][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.858882][ T5107] loop2: detected capacity change from 0 to 128 [ 611.900071][ T5088] bond0: (slave bond_slave_0): Releasing backup interface [ 611.911560][ T5088] bond0: (slave bond_slave_1): Releasing backup interface [ 611.925104][ T5088] team0: Port device team_slave_0 removed [ 611.936227][ T5088] team0: Port device team_slave_1 removed [ 611.943364][ T5088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.951257][ T5088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.970411][ T5088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.978144][ T5088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.993364][ T5088] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 612.118903][ T5125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.165627][ T5125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.188806][ T28] audit: type=1400 audit(1783108750.322:3479): avc: denied { write } for pid=5116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.204591][ T5125] sg_write: data in/out 467008/136 bytes for SCSI command 0x0-- guessing data in; [ 612.204591][ T5125] program syz.3.11716 not setting count and/or reply_len properly [ 612.243485][ T28] audit: type=1400 audit(1783108750.372:3480): avc: denied { write } for pid=5137 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.311353][ T5143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11720'. [ 612.327415][ T5143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11720'. [ 612.342886][ T5143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11720'. [ 612.358494][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11721'. [ 612.359079][ T5143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11720'. [ 612.432467][ T28] audit: type=1326 audit(1783108750.572:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.6.11722" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccdea4de59 code=0x0 [ 612.480932][ T28] audit: type=1400 audit(1783108750.602:3482): avc: denied { write } for pid=5144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.511721][ T28] audit: type=1400 audit(1783108750.622:3483): avc: denied { write } for pid=5159 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.615574][ T28] audit: type=1400 audit(1783108750.752:3484): avc: denied { write } for pid=5162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.660084][ T28] audit: type=1400 audit(1783108750.802:3485): avc: denied { write } for pid=5174 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.913108][ T5013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 612.924100][ T5195] loop3: detected capacity change from 0 to 1024 [ 612.934546][ T5013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.943920][ T5195] EXT4-fs: Ignoring removed nobh option [ 612.950242][ T5013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 612.963501][ T5195] EXT4-fs: Ignoring removed i_version option [ 612.973386][ T5013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.987312][ T5013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 613.006121][ T5013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 613.015342][ T5195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.023946][ T5013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 613.109441][ T5013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 613.246889][ T5013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.301637][ T5013] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.340609][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.347741][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.389804][T20439] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.396930][T20439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.510267][ T5188] syz.7.11723 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 613.641824][ T5188] CPU: 0 UID: 0 PID: 5188 Comm: syz.7.11723 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 613.641865][ T5188] Tainted: [W]=WARN [ 613.641918][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 613.641934][ T5188] Call Trace: [ 613.641942][ T5188] [ 613.641952][ T5188] __dump_stack+0x1d/0x30 [ 613.642016][ T5188] dump_stack_lvl+0x95/0xd0 [ 613.642050][ T5188] dump_stack+0x15/0x1b [ 613.642087][ T5188] dump_header+0x80/0x240 [ 613.642113][ T5188] oom_kill_process+0x295/0x350 [ 613.642187][ T5188] out_of_memory+0x981/0xbc0 [ 613.642362][ T5188] try_charge_memcg+0x621/0xa00 [ 613.642408][ T5188] __memcg_kmem_charge_page+0x199/0x3a0 [ 613.642441][ T5188] __alloc_frozen_pages_noprof+0x18a/0x350 [ 613.642513][ T5188] alloc_pages_mpol+0xa9/0x1d0 [ 613.642550][ T5188] alloc_pages_noprof+0x8f/0x140 [ 613.642586][ T5188] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 613.642685][ T5188] __kvmalloc_node_noprof+0x3a0/0x590 [ 613.642717][ T5188] ? futex_hash_allocate+0x192/0x920 [ 613.642840][ T5188] ? futex_hash_allocate+0x192/0x920 [ 613.642867][ T5188] ? futex_hash_allocate+0x192/0x920 [ 613.642899][ T5188] futex_hash_allocate+0x192/0x920 [ 613.642922][ T5188] ? cap_task_prctl+0x13f/0x6b0 [ 613.642965][ T5188] futex_hash_prctl+0xd8/0xf0 [ 613.643017][ T5188] __se_sys_prctl+0x4f4/0x13b0 [ 613.643053][ T5188] __x64_sys_prctl+0x67/0x80 [ 613.643085][ T5188] x64_sys_call+0x2533/0x3020 [ 613.643115][ T5188] do_syscall_64+0x136/0x3c0 [ 613.643213][ T5188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.643236][ T5188] RIP: 0033:0x7f256fd2de59 [ 613.643259][ T5188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.643353][ T5188] RSP: 002b:00007f256e766028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 613.643378][ T5188] RAX: ffffffffffffffda RBX: 00007f256ffb6090 RCX: 00007f256fd2de59 [ 613.643442][ T5188] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 613.643456][ T5188] RBP: 00007f256fdc3e6f R08: 0000000000000000 R09: 0000000000000000 [ 613.643470][ T5188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.643483][ T5188] R13: 00007f256ffb6128 R14: 00007f256ffb6090 R15: 00007ffe1c8c7a68 [ 613.643502][ T5188] [ 613.877487][ T5188] memory: usage 258840kB, limit 307200kB, failcnt 443 [ 613.935630][ T5188] memory+swap: usage 81616kB, limit 9007199254740988kB, failcnt 0 [ 613.970461][ T5188] kmem: usage 2044kB, limit 9007199254740988kB, failcnt 0 [ 613.990215][ T5188] Memory cgroup stats for /syz7: [ 613.990477][ T5188] cache 0 [ 614.000076][ T5188] rss 0 [ 614.002963][ T5188] shmem 0 [ 614.006785][ T5188] mapped_file 0 [ 614.010300][ T5188] dirty 0 [ 614.013269][ T5188] writeback 0 [ 614.016568][ T5188] workingset_refault_anon 2899 [ 614.021512][ T5188] workingset_refault_file 671 [ 614.021890][ T5231] loop2: detected capacity change from 0 to 32768 [ 614.026212][ T5188] swap 364544 [ 614.026224][ T5188] swapcached 39727104 [ 614.026234][ T5188] pgpgin 356310 [ 614.026242][ T5188] pgpgout 356309 [ 614.026250][ T5188] pgfault 434577 [ 614.052238][ T5188] pgmajfault 444 [ 614.056741][ T5188] inactive_anon 0 [ 614.060553][ T5188] active_anon 4096 [ 614.064365][ T5188] inactive_file 0 [ 614.068295][ T5188] active_file 0 [ 614.071851][ T5188] unevictable 0 [ 614.075432][ T5188] hierarchical_memory_limit 314572800 [ 614.081664][ T5188] hierarchical_memsw_limit 9223372036854771712 [ 614.088772][ T5188] total_cache 0 [ 614.092470][ T5188] total_rss 0 [ 614.098478][ T5188] total_shmem 0 [ 614.102163][ T5188] total_mapped_file 0 [ 614.107124][ T5269] loop6: detected capacity change from 0 to 512 [ 614.113598][ T5188] total_dirty 0 [ 614.117344][ T5188] total_writeback 0 [ 614.122725][ T5188] total_workingset_refault_anon 2899 [ 614.134051][ T5188] total_workingset_refault_file 671 [ 614.135370][ T5195] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 614.140323][ T5269] EXT4-fs: Ignoring removed nobh option [ 614.161943][ T5188] total_swap 364544 [ 614.163202][ T5231] loop2: p1 p3 < > [ 614.170447][ T5188] total_swapcached 39727104 [ 614.184041][ T5188] total_pgpgin 356310 [ 614.188110][ T5188] total_pgpgout 356309 [ 614.191257][ T5195] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 614.192925][ T5188] total_pgfault 434578 [ 614.216781][ T5195] EXT4-fs (loop3): This should not happen!! Data will be lost [ 614.216781][ T5195] [ 614.244867][ T5269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.258814][ T5195] EXT4-fs (loop3): Total free blocks count 0 [ 614.262821][ T5188] total_pgmajfault 444 [ 614.269391][ T5195] EXT4-fs (loop3): Free/Dirty block details [ 614.275330][ T5195] EXT4-fs (loop3): free_blocks=20480 [ 614.282277][ T5269] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 614.292716][ T5195] EXT4-fs (loop3): dirty_blocks=5648 [ 614.320201][ T5188] total_inactive_anon 0 [ 614.325961][ T5195] EXT4-fs (loop3): Block reservation details [ 614.340257][ T5188] total_active_anon 4096 [ 614.344625][ T5188] total_inactive_file 0 [ 614.348867][ T5188] total_active_file 0 [ 614.357538][ T5195] EXT4-fs (loop3): i_reserved_data_blocks=353 [ 614.359143][ T5188] total_unevictable 0 [ 614.367773][ T5188] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.11723,pid=5179,uid=0 [ 614.383345][ T5188] Memory cgroup out of memory: Killed process 5179 (syz.7.11723) total-vm:96228kB, anon-rss:1244kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 614.454161][ T5013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.476609][T20447] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 614.578496][ T4337] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 614.862159][ T5013] veth0_vlan: entered promiscuous mode [ 614.899057][ T5013] veth1_vlan: entered promiscuous mode [ 614.949523][ T5013] veth0_macvtap: entered promiscuous mode [ 614.975345][ T5013] veth1_macvtap: entered promiscuous mode [ 615.005338][ T5013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.034858][ T5013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.058425][T20447] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.078841][T20447] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.100784][T20447] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.116856][T20447] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.082515][ T3241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.148763][ T5381] loop6: detected capacity change from 0 to 512 [ 616.215737][ T5381] EXT4-fs (loop6): 1 orphan inode deleted [ 616.250366][ T5381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.272516][ T5397] loop4: detected capacity change from 0 to 512 [ 616.300903][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.308121][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.314020][ T5397] EXT4-fs: inline encryption not supported [ 616.316073][ T5401] bridge0: entered allmulticast mode [ 616.342806][ T3241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.378930][ T5401] bridge_slave_1: left allmulticast mode [ 616.385970][ T5401] bridge_slave_1: left promiscuous mode [ 616.393352][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.406496][ T5397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 616.430803][ T5397] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.11745: corrupted in-inode xattr: e_value size too large [ 616.451340][ T5397] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 616.453314][ T5397] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.11745: couldn't read orphan inode 15 (err -117) [ 616.462677][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 616.462700][ C1] EXT4-fs (loop4): initial error at time 1783108754: ext4_iget_extra_inode:5180: inode 15 [ 616.462728][ C1] EXT4-fs (loop4): last error at time 1783108754: ext4_iget_extra_inode:5180: inode 15 [ 616.514450][ T5397] loop4: lost filesystem error report for type 5 error -117 [ 616.515049][ T5397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.515292][ T5401] bridge_slave_0: left allmulticast mode [ 616.551876][ T5013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.561320][ T5401] bridge_slave_0: left promiscuous mode [ 616.571051][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.601482][ T5413] loop6: detected capacity change from 0 to 2048 [ 616.680540][ T5413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 616.800396][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 616.800433][ T28] audit: type=1400 audit(1783108754.942:3506): avc: denied { write } for pid=5418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.888311][ T28] audit: type=1400 audit(1783108755.022:3507): avc: denied { write } for pid=5444 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.257726][ T28] audit: type=1400 audit(1783108755.392:3508): avc: denied { write } for pid=5455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.316491][ T28] audit: type=1400 audit(1783108755.452:3509): avc: denied { write } for pid=5486 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.610794][ T2053] Bluetooth: hci0: Frame reassembly failed (-84) [ 617.625318][ T964] Bluetooth: hci0: unexpected event 0x02 length: 0 < 1 [ 617.685225][ T5413] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 617.740567][ T5413] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 617.770752][ T5413] EXT4-fs (loop6): This should not happen!! Data will be lost [ 617.770752][ T5413] [ 617.792290][ T5413] EXT4-fs (loop6): Total free blocks count 0 [ 617.799402][ T5413] EXT4-fs (loop6): Free/Dirty block details [ 617.807142][ T5413] EXT4-fs (loop6): free_blocks=2415919104 [ 617.813272][ T5413] EXT4-fs (loop6): dirty_blocks=3920 [ 617.821582][ T5413] EXT4-fs (loop6): Block reservation details [ 617.828133][ T5413] EXT4-fs (loop6): i_reserved_data_blocks=245 [ 617.909666][T20447] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1856 with error 28 [ 617.937873][ T3241] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 618.165027][ T5526] loop4: detected capacity change from 0 to 512 [ 618.201548][ T5526] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.11785: inode has both inline data and extents flags [ 618.215388][ T5526] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 618.216478][ T5526] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.11785: couldn't read orphan inode 15 (err -117) [ 618.225691][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 618.225715][ C1] EXT4-fs (loop4): initial error at time 1783109012: ext4_orphan_get:1399: inode 15 [ 618.225742][ C1] EXT4-fs (loop4): last error at time 1783109012: ext4_orphan_get:1399: inode 15 [ 618.263059][ T5526] loop4: lost filesystem error report for type 5 error -117 [ 618.269694][ T5526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.341592][ T5535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 618.385392][ T5013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.501652][ T5547] loop6: detected capacity change from 0 to 256 [ 618.508606][ T5547] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 618.544493][ T5547] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 618.674706][ T5557] netlink: 168 bytes leftover after parsing attributes in process `syz.7.11798'. [ 619.066916][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11805'. [ 619.094311][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11805'. [ 619.112133][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11805'. [ 619.144279][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11805'. [ 619.183769][ T5583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11809'. [ 619.198617][ T5583] netlink: 'syz.6.11809': attribute type 9 has an invalid length. [ 619.211902][ T2053] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.221211][ T2053] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.251730][ T2053] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.265846][ T2053] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.297351][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11814'. [ 619.382984][ T5597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 619.464035][ T28] audit: type=1400 audit(1783109013.604:3510): avc: denied { write } for pid=5598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.510111][ T28] audit: type=1400 audit(1783109013.654:3511): avc: denied { write } for pid=5611 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.554219][ T5564] syz.4.11797 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 619.610103][ T5564] CPU: 1 UID: 0 PID: 5564 Comm: syz.4.11797 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 619.610140][ T5564] Tainted: [W]=WARN [ 619.610148][ T5564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 619.610161][ T5564] Call Trace: [ 619.610177][ T5564] [ 619.610185][ T5564] __dump_stack+0x1d/0x30 [ 619.610262][ T5564] dump_stack_lvl+0x95/0xd0 [ 619.610285][ T5564] dump_stack+0x15/0x1b [ 619.610309][ T5564] dump_header+0x80/0x240 [ 619.610333][ T5564] oom_kill_process+0x295/0x350 [ 619.610365][ T5564] out_of_memory+0x981/0xbc0 [ 619.610466][ T5564] try_charge_memcg+0x621/0xa00 [ 619.610563][ T5564] ? __rcu_read_unlock+0x4e/0x70 [ 619.610595][ T5564] __memcg_kmem_charge_page+0x199/0x3a0 [ 619.610626][ T5564] __alloc_frozen_pages_noprof+0x18a/0x350 [ 619.610663][ T5564] alloc_pages_mpol+0xa9/0x1d0 [ 619.610733][ T5564] alloc_pages_noprof+0x8f/0x140 [ 619.610762][ T5564] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 619.610798][ T5564] __kvmalloc_node_noprof+0x3a0/0x590 [ 619.610824][ T5564] ? futex_hash_allocate+0x192/0x920 [ 619.610918][ T5564] ? futex_hash_allocate+0x192/0x920 [ 619.611020][ T5564] ? futex_hash_allocate+0x192/0x920 [ 619.611043][ T5564] futex_hash_allocate+0x192/0x920 [ 619.611069][ T5564] ? cap_task_prctl+0x13f/0x6b0 [ 619.611182][ T5564] futex_hash_prctl+0xd8/0xf0 [ 619.611203][ T5564] __se_sys_prctl+0x4f4/0x13b0 [ 619.611231][ T5564] __x64_sys_prctl+0x67/0x80 [ 619.611259][ T5564] x64_sys_call+0x2533/0x3020 [ 619.611290][ T5564] do_syscall_64+0x136/0x3c0 [ 619.611338][ T5564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.611366][ T5564] RIP: 0033:0x7f129c66de59 [ 619.611388][ T5564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.611412][ T5564] RSP: 002b:00007f129b0a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 619.611517][ T5564] RAX: ffffffffffffffda RBX: 00007f129c8f6090 RCX: 00007f129c66de59 [ 619.611535][ T5564] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 619.611552][ T5564] RBP: 00007f129c703e6f R08: 0000000000000000 R09: 0000000000000000 [ 619.611566][ T5564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.611587][ T5564] R13: 00007f129c8f6128 R14: 00007f129c8f6090 R15: 00007fffcfc29938 [ 619.611667][ T5564] [ 619.669133][ T5564] memory: usage 213080kB, limit 307200kB, failcnt 199 [ 619.679737][ T3608] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 619.685624][ T5564] memory+swap: usage 213252kB, limit 9007199254740988kB, failcnt 0 [ 619.687371][ T964] Bluetooth: hci0: command 0x1003 tx timeout [ 619.700538][ T5564] kmem: usage 192756kB, limit 9007199254740988kB, failcnt 0 [ 619.830533][ T28] audit: type=1400 audit(1783109013.964:3512): avc: denied { write } for pid=5615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.871560][ T5564] Memory cgroup stats for [ 619.890022][ T28] audit: type=1400 audit(1783109014.034:3513): avc: denied { write } for pid=5628 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.941882][ T5564] /syz4: [ 619.942142][ T5564] cache 0 [ 619.953023][ T5564] rss 106496 [ 619.956283][ T5564] shmem 0 [ 619.959564][ T5564] mapped_file 0 [ 619.963306][ T5564] dirty 0 [ 619.966266][ T5564] writeback 0 [ 619.970603][ T5564] workingset_refault_anon 74 [ 619.982614][ T5564] workingset_refault_file 1 [ 619.991286][ T5564] swap 73728 [ 619.994613][ T5564] swapcached 35336192 [ 620.005717][ T5564] pgpgin 338197 [ 620.009269][ T5564] pgpgout 338169 [ 620.012982][ T5564] pgfault 285557 [ 620.017229][ T5564] pgmajfault 40 [ 620.021246][ T5564] inactive_anon 0 [ 620.025055][ T5564] active_anon 114688 [ 620.029167][ T5564] inactive_file 0 [ 620.033005][ T5564] active_file 0 [ 620.036729][ T5564] unevictable 0 [ 620.040381][ T5564] hierarchical_memory_limit 314572800 [ 620.048173][ T5564] hierarchical_memsw_limit 9223372036854771712 [ 620.055089][ T5564] total_cache 0 [ 620.058705][ T5564] total_rss 106496 [ 620.062665][ T5564] total_shmem 0 [ 620.066179][ T5564] total_mapped_file 0 [ 620.070321][ T5564] total_dirty 0 [ 620.073825][ T5564] total_writeback 0 [ 620.077791][ T5564] total_workingset_refault_anon 74 [ 620.083326][ T5564] total_workingset_refault_file 1 [ 620.088414][ T5564] total_swap 73728 [ 620.092298][ T5564] total_swapcached 35336192 [ 620.097289][ T5564] total_pgpgin 338197 [ 620.101490][ T5564] total_pgpgout 338169 [ 620.105617][ T5564] total_pgfault 285557 [ 620.109798][ T5564] total_pgmajfault 40 [ 620.113810][ T5564] total_inactive_anon 0 [ 620.118082][ T5564] total_active_anon 114688 [ 620.122565][ T5564] total_inactive_file 0 [ 620.126880][ T5564] total_active_file 0 [ 620.132334][ T5564] total_unevictable 0 [ 620.136520][ T5564] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.11797,pid=5554,uid=0 [ 620.151687][ T5564] Memory cgroup out of memory: Killed process 5564 (syz.4.11797) total-vm:96228kB, anon-rss:1356kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 620.369364][ T5653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 620.549967][ T5669] loop3: detected capacity change from 0 to 512 [ 620.579991][ T5669] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11833: bg 0: block 127: padding at end of block bitmap is not set [ 620.602327][ T5669] loop3: lost filesystem error report for type 5 error -117 [ 620.607545][ T5669] EXT4-fs (loop3): Remounting filesystem read-only [ 620.614944][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 620.614983][ C1] EXT4-fs (loop3): initial error at time 1783109014: ext4_validate_block_bitmap:441 [ 620.615011][ C1] EXT4-fs (loop3): last error at time 1783109014: ext4_validate_block_bitmap:441 [ 620.647163][ T5669] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.3.11833: cleanup dec ref error -117 [ 620.661256][ T5669] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 620.664472][ T28] audit: type=1400 audit(1783109014.794:3514): avc: denied { write } for pid=5662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.671423][ T5669] EXT4-fs (loop3): 1 orphan inode deleted [ 620.671840][ T5669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.752657][ T28] audit: type=1400 audit(1783109014.884:3515): avc: denied { write } for pid=5683 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.907534][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.961617][ T5700] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11838'. [ 621.030106][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811d212600: rx timeout, send abort [ 621.038888][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811d212600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 621.715278][ T5763] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11864'. [ 622.002400][ T5747] loop3: detected capacity change from 0 to 4096 [ 622.061611][ T5747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.126648][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11873'. [ 622.160838][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.434254][ T5802] netlink: 'syz.6.11882': attribute type 3 has an invalid length. [ 622.465062][ T5802] netlink: 'syz.6.11882': attribute type 4 has an invalid length. [ 622.627707][ T5810] loop6: detected capacity change from 0 to 512 [ 622.676948][ T5810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 622.707988][ T5810] EXT4-fs (loop6): shut down requested (0) [ 622.766940][ T5810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.141712][ T5808] loop4: detected capacity change from 0 to 4096 [ 623.175726][ T5808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.226657][ T5013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.353404][ T5859] loop4: detected capacity change from 0 to 512 [ 623.376417][ T5857] loop3: detected capacity change from 0 to 2048 [ 623.399673][ T5857] EXT4-fs: Ignoring removed i_version option [ 623.425205][ T5859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.425248][ T5857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.472363][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 623.472381][ T28] audit: type=1400 audit(1783109017.604:3519): avc: denied { write } for pid=5858 comm="syz.4.11904" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 623.535111][ T5013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.557245][ T5857] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.688920][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.780571][ T5883] netlink: 'syz.7.11913': attribute type 4 has an invalid length. [ 623.854115][ T5886] netlink: 'syz.7.11913': attribute type 4 has an invalid length. [ 624.094275][ T5894] sg_write: data in/out 491520/136 bytes for SCSI command 0x0-- guessing data in; [ 624.094275][ T5894] program syz.4.11917 not setting count and/or reply_len properly [ 624.448112][ T5878] loop2: detected capacity change from 0 to 4096 [ 624.528127][ T5878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.625014][T31801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.636664][ T5914] lo speed is unknown, defaulting to 1000 [ 624.655186][ T5914] lo speed is unknown, defaulting to 1000 [ 624.690131][ T5914] lo speed is unknown, defaulting to 1000 [ 624.938177][ T5914] infiniband sz1: set active [ 624.943309][ T3390] lo speed is unknown, defaulting to 1000 [ 624.950524][ T5914] infiniband sz1: added lo [ 624.986130][ T5923] loop2: detected capacity change from 0 to 256 [ 624.992804][ T5914] RDS/IB: sz1: added [ 624.992904][ T5914] smc: adding ib device sz1 with port count 1 [ 624.992937][ T5914] smc: ib device sz1 port 1 has no pnetid [ 624.994089][ T4747] lo speed is unknown, defaulting to 1000 [ 624.996023][ T5914] lo speed is unknown, defaulting to 1000 [ 625.079829][ T5866] loop6: detected capacity change from 0 to 512 [ 625.131685][ T5928] syzkaller1: entered promiscuous mode [ 625.151250][ T5928] syzkaller1: entered allmulticast mode [ 625.226688][ T5931] A link change request failed with some changes committed already. Interface sit3 may have been left with an inconsistent configuration, please check. [ 625.611608][ T5866] EXT4-fs: Ignoring removed nobh option [ 625.618405][ T5914] lo speed is unknown, defaulting to 1000 [ 625.704801][ T5914] lo speed is unknown, defaulting to 1000 [ 625.794771][ T5914] lo speed is unknown, defaulting to 1000 [ 625.881040][ T5866] EXT4-fs (loop6): orphan cleanup on readonly fs [ 625.890313][ T5866] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 625.912388][ T5914] lo speed is unknown, defaulting to 1000 [ 625.945820][ T5866] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.11906: attempt to clear invalid blocks 2 len 1 [ 625.966686][ T5914] lo speed is unknown, defaulting to 1000 [ 625.972555][ T5866] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 625.979415][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 626.000723][ C1] EXT4-fs (loop6): initial error at time 1783109020: ext4_clear_blocks:876: inode 13 [ 626.011509][ C1] EXT4-fs (loop6): last error at time 1783109020: ext4_clear_blocks:876: inode 13 [ 626.053594][ T5914] lo speed is unknown, defaulting to 1000 [ 626.093437][ T5914] lo speed is unknown, defaulting to 1000 [ 626.118135][ T5866] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 626.168572][ T5914] lo speed is unknown, defaulting to 1000 [ 626.227692][ T5866] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.11906: invalid indirect mapped block 1819239214 (level 0) [ 626.300048][ T5914] lo speed is unknown, defaulting to 1000 [ 626.322519][ T5866] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 626.429096][ T5866] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.11906: invalid indirect mapped block 1819239214 (level 1) [ 626.460837][ T5866] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 626.602598][ T5866] EXT4-fs (loop6): 1 truncate cleaned up [ 626.694126][ T5866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 626.714584][ T3241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.380919][ T6015] loop4: detected capacity change from 0 to 128 [ 627.397231][ T6015] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 627.443081][ T6015] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 627.525105][ T3494] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 627.623668][ T6032] veth0: entered promiscuous mode [ 627.638978][ T6032] veth0: left promiscuous mode [ 627.797599][ T6042] loop3: detected capacity change from 0 to 512 [ 627.819410][ T6042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 627.861465][ T6046] __nla_validate_parse: 1 callbacks suppressed [ 627.861507][ T6046] netlink: 27 bytes leftover after parsing attributes in process `syz.6.11982'. [ 627.881034][ T6042] EXT4-fs (loop3): 1 truncate cleaned up [ 627.898885][ T6042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.969064][ T28] audit: type=1400 audit(1783109022.104:3520): avc: denied { read write } for pid=6041 comm="syz.3.11981" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 628.024771][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.061713][ T28] audit: type=1400 audit(1783109022.104:3521): avc: denied { open } for pid=6041 comm="syz.3.11981" path="/77/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 628.127632][ T6064] xt_hashlimit: size too large, truncated to 1048576 [ 628.223998][ T6066] loop3: detected capacity change from 0 to 8192 [ 628.258084][ T6066] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 628.391043][ T28] audit: type=1400 audit(1783109022.524:3522): avc: denied { write } for pid=4747 comm="kworker/1:7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=114395 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 628.440748][ T6078] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.11995'. [ 628.675836][ T28] audit: type=1400 audit(1783109022.814:3523): avc: denied { recv } for pid=5989 comm="syz.2.11958" saddr=10.128.0.163 src=38598 daddr=10.128.0.17 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 628.794882][ T6092] loop3: detected capacity change from 0 to 512 [ 628.863444][ T6092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 628.893654][ T6092] EXT4-fs (loop3): shut down requested (0) [ 628.974924][ T6092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.054848][ T6110] loop3: detected capacity change from 0 to 1024 [ 629.133772][ T6110] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.12008: bad orphan inode 131072 [ 629.145244][ T6110] loop3: lost filesystem error report for type 5 error -117 [ 629.145925][ T6110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.195537][ T6110] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.12008: bg 0: block 489: padding at end of block bitmap is not set [ 629.253913][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.707298][ T6124] SELinux: failed to load policy [ 629.717845][ T6128] loop6: detected capacity change from 0 to 1024 [ 629.791888][ T6128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 629.815427][ T6128] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.839412][ T6128] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.12015: lblock 3 mapped to illegal pblock 3 (length 3) [ 629.870327][ T6128] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 629.886873][ T6128] EXT4-fs (loop6): This should not happen!! Data will be lost [ 629.886873][ T6128] [ 629.901155][ T6139] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.12015: bg 0: block 112: padding at end of block bitmap is not set [ 629.922684][ T6139] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 8 with error 28 [ 629.935238][ T6139] EXT4-fs (loop6): This should not happen!! Data will be lost [ 629.935238][ T6139] [ 629.946876][ T6139] EXT4-fs (loop6): Total free blocks count 0 [ 629.953561][ T6139] EXT4-fs (loop6): Free/Dirty block details [ 629.961433][ T6139] EXT4-fs (loop6): free_blocks=0 [ 629.966463][ T6139] EXT4-fs (loop6): dirty_blocks=64 [ 629.973705][ T6139] EXT4-fs (loop6): Block reservation details [ 629.980010][ T6128] EXT4-fs error (device loop6): ext4_ext_remove_space:2969: inode #15: comm syz.6.12015: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 629.998384][ T6128] EXT4-fs error (device loop6) in ext4_setattr:6172: Corrupt filesystem [ 630.069359][ T6152] loop6: detected capacity change from 0 to 256 [ 630.202569][ T6168] loop3: detected capacity change from 0 to 512 [ 630.260282][ T6168] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.12033: iget: bad i_size value: 38620345925642 [ 630.276521][ T6168] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 630.276715][ T6168] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.12033: couldn't read orphan inode 15 (err -117) [ 630.286036][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 630.286055][ C1] EXT4-fs (loop3): initial error at time 1783109024: ext4_orphan_get:1399: inode 15 [ 630.286093][ C1] EXT4-fs (loop3): last error at time 1783109024: ext4_orphan_get:1399: inode 15 [ 630.347650][ T6168] loop3: lost filesystem error report for type 5 error -117 [ 630.348281][ T6168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.373774][ T6168] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.12033: bg 0: block 5: invalid block bitmap [ 630.388527][ T6168] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 630.401438][ T6168] EXT4-fs (loop3): This should not happen!! Data will be lost [ 630.401438][ T6168] [ 630.411407][ T6168] EXT4-fs (loop3): Total free blocks count 0 [ 630.417546][ T6168] EXT4-fs (loop3): Free/Dirty block details [ 630.423900][ T6168] EXT4-fs (loop3): free_blocks=0 [ 630.431611][ T6168] EXT4-fs (loop3): dirty_blocks=1 [ 630.436804][ T6168] EXT4-fs (loop3): Block reservation details [ 630.443208][ T6168] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 630.544148][ T4337] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 630.560516][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.612290][ T6182] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12035'. [ 630.773269][ T6206] loop3: detected capacity change from 0 to 512 [ 630.815396][ T6206] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 630.851896][ T6206] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.12047: bad orphan inode 131083 [ 630.867360][ T6206] loop3: lost filesystem error report for type 5 error -117 [ 630.869045][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 630.882865][ C1] EXT4-fs (loop3): initial error at time 1783109025: ext4_orphan_get:1425 [ 630.891533][ C1] EXT4-fs (loop3): last error at time 1783109025: ext4_orphan_get:1425 [ 630.900300][ T6206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.948330][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.012271][ T28] audit: type=1326 audit(1783109025.154:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.3.12059" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f823b3cde59 code=0x0 [ 631.152452][ T6242] loop2: detected capacity change from 0 to 1024 [ 631.177240][ T6242] EXT4-fs: Ignoring removed mblk_io_submit option [ 631.193770][ T6242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 631.203935][ T6242] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 631.218497][ T6242] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.12063: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 631.251873][ T6242] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 631.252084][ T6242] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.12063: couldn't read orphan inode 11 (err -117) [ 631.261297][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 631.261318][ C0] EXT4-fs (loop2): initial error at time 1783109025: ext4_ext_check_inode:521: inode 11 [ 631.261361][ C0] EXT4-fs (loop2): last error at time 1783109025: ext4_ext_check_inode:521: inode 11 [ 631.307415][ T6242] loop2: lost filesystem error report for type 5 error -117 [ 631.307987][ T6242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.415753][T31801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.594269][ T6259] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 631.603639][ T6259] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 631.612808][ T6259] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 631.622061][ T6259] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 631.631319][ T6259] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 631.640481][ T6259] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 631.649780][ T6259] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 631.652873][ T6239] syz.6.12062 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 631.658920][ T6259] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 631.670908][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: syz.6.12062 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 631.670999][ T6239] Tainted: [W]=WARN [ 631.671007][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 631.671021][ T6239] Call Trace: [ 631.671108][ T6239] [ 631.671117][ T6239] __dump_stack+0x1d/0x30 [ 631.671143][ T6239] dump_stack_lvl+0x95/0xd0 [ 631.671165][ T6239] dump_stack+0x15/0x1b [ 631.671202][ T6239] dump_header+0x80/0x240 [ 631.671226][ T6239] oom_kill_process+0x295/0x350 [ 631.671260][ T6239] out_of_memory+0x981/0xbc0 [ 631.671342][ T6239] try_charge_memcg+0x621/0xa00 [ 631.671422][ T6239] charge_memcg+0x6d/0x120 [ 631.671551][ T6239] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 631.671645][ T6239] swap_cache_alloc_folio+0x47b/0x5e0 [ 631.671699][ T6239] swap_cluster_readahead+0x2b1/0x460 [ 631.671735][ T6239] swapin_readahead+0xd8/0x8a0 [ 631.671868][ T6239] ? _raw_spin_unlock+0x9/0x30 [ 631.671890][ T6239] ? swap_put_entries_cluster+0x49c/0x4c0 [ 631.671925][ T6239] ? wake_page_function+0x11a/0x1f0 [ 631.671957][ T6239] ? __wake_up_locked_key+0x3d/0x60 [ 631.671981][ T6239] ? __rcu_read_unlock+0x4e/0x70 [ 631.672079][ T6239] ? swap_cache_get_folio+0x1f7/0x200 [ 631.672110][ T6239] do_swap_page+0x2a2/0x1ec0 [ 631.672186][ T6239] ? __css_rstat_updated+0xbb/0x280 [ 631.672215][ T6239] ? __rcu_read_lock+0x36/0x50 [ 631.672277][ T6239] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 631.672306][ T6239] handle_mm_fault+0xb3c/0x2da0 [ 631.672418][ T6239] do_user_addr_fault+0x634/0x1060 [ 631.672450][ T6239] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 631.672477][ T6239] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 631.672522][ T6239] ? trace_page_fault_user+0x1f/0xa0 [ 631.672553][ T6239] exc_page_fault+0x62/0xa0 [ 631.672587][ T6239] asm_exc_page_fault+0x26/0x30 [ 631.672609][ T6239] RIP: 0033:0x7fccdea08fb8 [ 631.672628][ T6239] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 631.672716][ T6239] RSP: 002b:00007ffd797ecbb0 EFLAGS: 00010246 [ 631.672753][ T6239] RAX: 0000000000000000 RBX: 000055558ff2a500 RCX: 00007fccdea0e68e [ 631.672792][ T6239] RDX: 00007ffd797ecc00 RSI: 0000000000000000 RDI: 0000000000000000 [ 631.672807][ T6239] RBP: 00007fccdecd7da0 R08: 0000000000000000 R09: 0000000000000000 [ 631.672821][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000009a470 [ 631.672836][ T6239] R13: 00007fccdecd5fac R14: 000000000009a166 R15: 00007ffd797ecd30 [ 631.672856][ T6239] [ 631.672898][ T6239] memory: usage 307200kB, limit 307200kB, failcnt 289 [ 631.679439][ T6259] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 631.692567][ T6239] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 631.694379][ T6259] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 631.704903][ T6239] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 631.980557][ T6239] Memory cgroup stats for /syz6: [ 631.980927][ T6239] cache 0 [ 632.000293][ T6239] rss 4096 [ 632.003427][ T6239] shmem 0 [ 632.006498][ T6239] mapped_file 0 [ 632.010645][ T6239] dirty 0 [ 632.015995][ T6239] writeback 0 [ 632.019345][ T6239] workingset_refault_anon 1695 [ 632.024291][ T6239] workingset_refault_file 7 [ 632.028839][ T6239] swap 184320 [ 632.032359][ T6239] swapcached 27410432 [ 632.036398][ T6239] pgpgin 220993 [ 632.040120][ T6239] pgpgout 220992 [ 632.043714][ T6239] pgfault 243642 [ 632.047309][ T6239] pgmajfault 196 [ 632.051414][ T6239] inactive_anon 0 [ 632.055228][ T6239] active_anon 4096 [ 632.058976][ T6239] inactive_file 0 [ 632.063019][ T6239] active_file 0 [ 632.066585][ T6239] unevictable 0 [ 632.070458][ T6239] hierarchical_memory_limit 314572800 [ 632.076149][ T6239] hierarchical_memsw_limit 9223372036854771712 [ 632.083256][ T6239] total_cache 0 [ 632.086887][ T6239] total_rss 4096 [ 632.090848][ T6239] total_shmem 0 [ 632.094501][ T6239] total_mapped_file 0 [ 632.098606][ T6239] total_dirty 0 [ 632.107205][ T6239] total_writeback 0 [ 632.111425][ T6239] total_workingset_refault_anon 1695 [ 632.116774][ T6239] total_workingset_refault_file 7 [ 632.125162][ T6239] total_swap 184320 [ 632.133714][ T6239] total_swapcached 27410432 [ 632.143106][ T6239] total_pgpgin 220993 [ 632.151720][ T6239] total_pgpgout 220992 [ 632.163149][ T6239] total_pgfault 243642 [ 632.170396][ T6239] total_pgmajfault 196 [ 632.179189][ T6239] total_inactive_anon 0 [ 632.187868][ T6239] total_active_anon 4096 [ 632.196999][ T6239] total_inactive_file 0 [ 632.206137][ T6239] total_active_file 0 [ 632.217678][ T6239] total_unevictable 0 [ 632.226440][ T6239] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.12062,pid=6239,uid=0 [ 632.249762][ T6239] Memory cgroup out of memory: Killed process 6239 (syz.6.12062) total-vm:94048kB, anon-rss:1240kB, file-rss:22160kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 632.311521][ T6269] rdma_rxe: rxe_newlink: failed to add lo [ 632.389382][ T6278] loop3: detected capacity change from 0 to 512 [ 632.432549][ T6278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.327314][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.525208][ T6307] rdma_rxe: rxe_newlink: failed to add lo [ 633.553513][ T6309] loop2: detected capacity change from 0 to 2048 [ 633.570412][ T6314] netlink: 'syz.4.12095': attribute type 12 has an invalid length. [ 633.584275][ T6309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.671063][T31801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.772606][ T6333] loop2: detected capacity change from 0 to 256 [ 633.784144][ T6327] SELinux: failed to load policy [ 633.792368][ T6333] msdos: Bad value for 'dmask' [ 634.040535][ T6346] rdma_rxe: rxe_newlink: failed to add lo [ 634.078918][ T6350] syzkaller1: entered promiscuous mode [ 634.095394][ T6350] syzkaller1: entered allmulticast mode [ 634.933491][ T6415] loop4: detected capacity change from 0 to 512 [ 634.955372][ T6415] EXT4-fs: Ignoring removed oldalloc option [ 634.993511][ T6415] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 635.004782][ T6415] EXT4-fs (loop4): orphan cleanup on readonly fs [ 635.024470][ T6415] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 635.045924][ T6415] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 635.061141][ T6415] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.12135: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 635.088930][ T6415] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 635.089043][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 635.104679][ C1] EXT4-fs (loop4): last error at time 1783109029: ext4_ext_check_inode:521: inode 13 [ 635.119934][ T6415] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.12135: couldn't read orphan inode 13 (err -117) [ 635.142786][ T6415] loop4: lost filesystem error report for type 5 error -117 [ 635.144865][ T6415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 635.185181][ T6415] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 635.197312][ T6415] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 635.222623][ T6415] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 635.260019][ T5013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.560416][ T6424] SELinux: failed to load policy [ 635.622100][ T6436] loop2: detected capacity change from 0 to 512 [ 635.635966][ T6432] rdma_rxe: rxe_newlink: failed to add lo [ 635.674452][ T6436] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 635.694283][ T6436] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.12143: corrupted in-inode xattr: e_value size too large [ 635.708798][ T6436] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 635.709051][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 635.724352][ T28] audit: type=1326 audit(1783109029.854:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.6.12147" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccdea4de59 code=0x0 [ 635.724631][ C1] EXT4-fs (loop2): initial error at time 1783109029: ext4_iget_extra_inode:5180: inode 15 [ 635.759136][ T6436] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.12143: couldn't read orphan inode 15 (err -117) [ 635.759558][ C1] EXT4-fs (loop2): last error at time 1783109029: ext4_iget_extra_inode:5180: inode 15 [ 635.787154][ T6436] loop2: lost filesystem error report for type 5 error -117 [ 635.787759][ T6436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.867509][T31801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.921115][ T6452] lo speed is unknown, defaulting to 1000 [ 636.181836][ T6465] SELinux: failed to load policy [ 636.310415][ T6472] rdma_rxe: rxe_newlink: failed to add lo [ 636.550837][ T6496] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12169'. [ 636.656554][ T6502] rdma_rxe: rxe_newlink: failed to add lo [ 636.837584][ T6500] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12171'. [ 636.874674][ T6511] gretap1: entered promiscuous mode [ 637.143287][ T6528] rdma_rxe: rxe_newlink: failed to add lo [ 637.256745][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12186'. [ 637.280713][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12186'. [ 637.303203][ T6537] SELinux: invalid class [ 637.308984][ T6537] SELinux: failed to load policy [ 637.314488][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12186'. [ 637.316588][T20443] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.332761][T20443] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.343052][T20443] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.349211][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12186'. [ 637.352042][T20443] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.570722][ T6556] rdma_rxe: rxe_newlink: failed to add lo [ 637.692688][ T6570] 9pnet_fd: p9_fd_create_tcp (6570): problem binding to privport [ 637.743686][ T6576] netlink: 'syz.7.12204': attribute type 15 has an invalid length. [ 637.932430][ T6583] rdma_rxe: rxe_newlink: failed to add lo [ 638.314714][ T6597] loop6: detected capacity change from 0 to 128 [ 638.340121][ T6597] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 638.428323][ T6597] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 638.495615][ T28] audit: type=1400 audit(1783109032.634:3526): avc: denied { rename } for pid=6596 comm="syz.6.12213" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 638.634910][ T3241] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 639.104271][ T6633] loop6: detected capacity change from 0 to 1024 [ 639.113249][ T6633] EXT4-fs: Ignoring removed mblk_io_submit option [ 639.146631][ T6633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 639.158355][ T6633] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 639.196547][ T6639] loop2: detected capacity change from 0 to 512 [ 639.205057][ T6633] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.12227: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 639.224951][ T6633] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 639.226229][ T6633] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.12227: couldn't read orphan inode 11 (err -117) [ 639.235441][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 639.235463][ C1] EXT4-fs (loop6): initial error at time 1783109033: ext4_ext_check_inode:521: inode 11 [ 639.235508][ C1] EXT4-fs (loop6): last error at time 1783109033: ext4_ext_check_inode:521: inode 11 [ 639.264098][ T6639] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 639.274891][ T6633] loop6: lost filesystem error report for type 5 error -117 [ 639.285194][ T6639] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.12229: bg 0: block 255: padding at end of block bitmap is not set [ 639.292916][ T6633] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.308570][ T6639] loop2: lost filesystem error report for type 5 error -117 [ 639.322567][ T6639] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 639.329936][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 639.329978][ C1] EXT4-fs (loop2): initial error at time 1783109033: ext4_validate_block_bitmap:441 [ 639.330007][ C1] EXT4-fs (loop2): last error at time 1783109033: ext4_validate_block_bitmap:441 [ 639.364501][ T6639] loop2: lost filesystem error report for type 5 error -117 [ 639.364784][ T6639] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.12229: invalid indirect mapped block 1 (level 1) [ 639.385508][ T6639] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 639.386696][ T6639] EXT4-fs (loop2): 1 truncate cleaned up [ 639.402263][ T6639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.471010][T31801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.571804][ T6654] netlink: 'syz.3.12234': attribute type 21 has an invalid length. [ 639.654471][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.684001][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.742240][ T3241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.790456][ T28] audit: type=1326 audit(1783109033.934:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.3.12241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823b3cde59 code=0x7ffc0000 [ 639.883855][ T28] audit: type=1326 audit(1783109033.934:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.3.12241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823b3cde59 code=0x7ffc0000 [ 639.929802][ T28] audit: type=1326 audit(1783109033.934:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.3.12241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823b3cde59 code=0x7ffc0000 [ 639.976648][ T28] audit: type=1326 audit(1783109033.934:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.3.12241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823b3cde59 code=0x7ffc0000 [ 640.044619][ T28] audit: type=1326 audit(1783109033.964:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.3.12241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f823b3cde59 code=0x7ffc0000 [ 640.094412][ T28] audit: type=1326 audit(1783109033.964:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.3.12241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823b3cde59 code=0x7ffc0000 [ 640.133436][ T28] audit: type=1326 audit(1783109033.964:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.3.12241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823b3cde59 code=0x7ffc0000 [ 640.185542][ T28] audit: type=1326 audit(1783109033.964:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.3.12241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823b3cde59 code=0x7ffc0000 [ 640.461693][ T6703] netlink: 'syz.7.12252': attribute type 21 has an invalid length. [ 640.587565][ T6706] netlink: 364 bytes leftover after parsing attributes in process `syz.7.12253'. [ 640.613907][ T6706] netlink: 364 bytes leftover after parsing attributes in process `syz.7.12253'. [ 641.774075][ T6739] loop4: detected capacity change from 0 to 128 [ 642.121820][ T6746] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12270'. [ 642.203107][ T6749] loop3: detected capacity change from 0 to 1024 [ 642.223092][ T6749] EXT4-fs: Ignoring removed mblk_io_submit option [ 642.244127][ T6749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 642.280589][ T6749] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 642.323380][ T6749] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.12269: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 642.366837][ T6749] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 642.366992][ T6749] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.12269: couldn't read orphan inode 11 (err -117) [ 642.376259][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 642.376302][ C0] EXT4-fs (loop3): initial error at time 1783109036: ext4_ext_check_inode:521: inode 11 [ 642.376334][ C0] EXT4-fs (loop3): last error at time 1783109036: ext4_ext_check_inode:521: inode 11 [ 642.415143][ T6749] loop3: lost filesystem error report for type 5 error -117 [ 642.417116][ T6749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.503599][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8881451fac00: rx timeout, send abort [ 642.672650][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.726074][ T6740] syz.4.12267 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 642.751095][ T6740] CPU: 0 UID: 0 PID: 6740 Comm: syz.4.12267 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 642.751135][ T6740] Tainted: [W]=WARN [ 642.751144][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 642.751158][ T6740] Call Trace: [ 642.751168][ T6740] [ 642.751177][ T6740] __dump_stack+0x1d/0x30 [ 642.751239][ T6740] dump_stack_lvl+0x95/0xd0 [ 642.751263][ T6740] dump_stack+0x15/0x1b [ 642.751284][ T6740] dump_header+0x80/0x240 [ 642.751308][ T6740] oom_kill_process+0x295/0x350 [ 642.751397][ T6740] out_of_memory+0x981/0xbc0 [ 642.751432][ T6740] try_charge_memcg+0x621/0xa00 [ 642.751539][ T6740] charge_memcg+0x6d/0x120 [ 642.751574][ T6740] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 642.751635][ T6740] swap_cache_alloc_folio+0x47b/0x5e0 [ 642.751675][ T6740] swap_cluster_readahead+0x2b1/0x460 [ 642.751713][ T6740] swapin_readahead+0xd8/0x8a0 [ 642.751740][ T6740] ? _raw_spin_unlock+0x9/0x30 [ 642.751808][ T6740] ? swap_put_entries_cluster+0x49c/0x4c0 [ 642.751853][ T6740] ? __rcu_read_unlock+0x4e/0x70 [ 642.751882][ T6740] ? swap_cache_get_folio+0x1f7/0x200 [ 642.751974][ T6740] do_swap_page+0x2a2/0x1ec0 [ 642.752006][ T6740] ? __css_rstat_updated+0xbb/0x280 [ 642.752155][ T6740] ? __rcu_read_lock+0x36/0x50 [ 642.752194][ T6740] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 642.752288][ T6740] handle_mm_fault+0xb3c/0x2da0 [ 642.752419][ T6740] do_user_addr_fault+0x634/0x1060 [ 642.752456][ T6740] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 642.752490][ T6740] ? trace_page_fault_user+0x1f/0xa0 [ 642.752579][ T6740] exc_page_fault+0x62/0xa0 [ 642.752608][ T6740] asm_exc_page_fault+0x26/0x30 [ 642.752632][ T6740] RIP: 0033:0x7f129c628fb8 [ 642.752649][ T6740] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 642.752668][ T6740] RSP: 002b:00007fffcfc29a20 EFLAGS: 00010246 [ 642.752687][ T6740] RAX: 0000000000000000 RBX: 000055558b7b7500 RCX: 00007f129c62e68e [ 642.752725][ T6740] RDX: 00007fffcfc29a70 RSI: 0000000000000000 RDI: 0000000000000000 [ 642.752741][ T6740] RBP: 00007f129c8f7da0 R08: 0000000000000000 R09: 0000000000000000 [ 642.752758][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000009ce5b [ 642.752774][ T6740] R13: 00007f129c8f5fac R14: 000000000009cb5f R15: 00007fffcfc29ba0 [ 642.752797][ T6740] [ 642.755687][ T6740] memory: usage 307200kB, limit 307200kB, failcnt 300 [ 642.998489][ T6740] memory+swap: usage 11880kB, limit 9007199254740988kB, failcnt 0 [ 643.003650][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88810e4d9800: rx timeout, send abort [ 643.006386][ T6740] kmem: usage 12328kB, limit 9007199254740988kB, failcnt 0 [ 643.006409][ T6740] Memory cgroup stats for /syz4: [ 643.006622][ T6740] cache 0 [ 643.014946][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8881451fac00: abort rx timeout. Force session deactivation [ 643.021972][ T6740] rss 0 [ 643.075265][ T6740] shmem 0 [ 643.078675][ T6740] mapped_file 0 [ 643.084873][ T6740] dirty 0 [ 643.088968][ T6740] writeback 0 [ 643.099410][ T6740] workingset_refault_anon 105 [ 643.104332][ T6776] loop3: detected capacity change from 0 to 512 [ 643.104333][ T6740] workingset_refault_file 1 [ 643.111101][ T6740] swap 454656 [ 643.132387][ T6740] swapcached 35758080 [ 643.144640][ T6776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.154839][ T6740] pgpgin 343903 [ 643.162964][ T6740] pgpgout 343902 [ 643.166897][ T6740] pgfault 297517 [ 643.184569][ T6740] pgmajfault 53 [ 643.188146][ T6740] inactive_anon 0 [ 643.192227][ T6740] active_anon 4096 [ 643.196159][ T6740] inactive_file 0 [ 643.200087][ T6740] active_file 0 [ 643.203620][ T6740] unevictable 0 [ 643.207187][ T6740] hierarchical_memory_limit 314572800 [ 643.213157][ T6740] hierarchical_memsw_limit 9223372036854771712 [ 643.219276][ T6776] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.219740][ T6740] total_cache 0 [ 643.233585][ T6740] total_rss 0 [ 643.236934][ T6740] total_shmem 0 [ 643.240716][ T6740] total_mapped_file 0 [ 643.244801][ T6740] total_dirty 0 [ 643.248406][ T6740] total_writeback 0 [ 643.252512][ T6740] total_workingset_refault_anon 105 [ 643.257827][ T6740] total_workingset_refault_file 1 [ 643.263077][ T6740] total_swap 454656 [ 643.266907][ T6740] total_swapcached 35758080 [ 643.271622][ T6740] total_pgpgin 343903 [ 643.275636][ T6740] total_pgpgout 343902 [ 643.280005][ T6740] total_pgfault 297517 [ 643.284151][ T6740] total_pgmajfault 53 [ 643.288209][ T6740] total_inactive_anon 0 [ 643.295589][ T6790] netlink: 'syz.6.12286': attribute type 1 has an invalid length. [ 643.303881][ T6740] total_active_anon 4096 [ 643.308279][ T6740] total_inactive_file 0 [ 643.312510][ T6740] total_active_file 0 [ 643.316511][ T6740] total_unevictable 0 [ 643.323377][ T6740] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.12267,pid=6740,uid=0 [ 643.353742][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.363105][ T6740] Memory cgroup out of memory: Killed process 6740 (syz.4.12267) total-vm:96096kB, anon-rss:1244kB, file-rss:22164kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 643.380936][ T6790] bond1: (slave geneve3): making interface the new active one [ 643.392131][ T6790] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 643.411742][ T6788] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12285'. [ 643.441744][ T2053] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 643.464497][ T2053] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 643.502481][ T2053] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 643.505711][ T6798] loop4: detected capacity change from 0 to 1024 [ 643.514775][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88810e4d9800: abort rx timeout. Force session deactivation [ 643.527685][ T6798] EXT4-fs: Ignoring removed mblk_io_submit option [ 643.546402][ T2053] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 643.570805][ T6798] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 643.588304][ T6798] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 643.616734][ T6798] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.12287: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 643.637183][ T6808] loop3: detected capacity change from 0 to 4096 [ 643.648665][ T6798] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 643.651210][ T6798] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.12287: couldn't read orphan inode 11 (err -117) [ 643.660588][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 643.660614][ C0] EXT4-fs (loop4): initial error at time 1783109037: ext4_ext_check_inode:521: inode 11 [ 643.660660][ C0] EXT4-fs (loop4): last error at time 1783109037: ext4_ext_check_inode:521: inode 11 [ 643.700351][ T6798] loop4: lost filesystem error report for type 5 error -117 [ 643.832788][ T6798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.874936][ T6808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.975700][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.135133][ T6831] loop2: detected capacity change from 0 to 128 [ 644.170270][ T6831] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 644.194868][ T6831] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.299192][ T5013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.621298][T31801] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 644.845664][ T6839] loop4: detected capacity change from 0 to 512 [ 644.965628][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12309'. [ 645.146825][ T6864] loop6: detected capacity change from 0 to 512 [ 645.181025][ T6864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 645.220813][ T6864] System zones: 1-12 [ 645.256973][ T6864] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.12312: error while reading EA inode 32 err=-116 [ 645.284519][ T6858] loop2: detected capacity change from 0 to 32768 [ 645.336309][ T6864] loop6: lost filesystem error report for type 5 error -117 [ 645.339044][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 645.352852][ C1] EXT4-fs (loop6): initial error at time 1783109039: ext4_xattr_inode_iget:446 [ 645.361839][ C1] EXT4-fs (loop6): last error at time 1783109039: ext4_xattr_inode_iget:446 [ 645.410410][ T6864] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.12312: error while reading EA inode 32 err=-116 [ 645.423032][ T6864] loop6: lost filesystem error report for type 5 error -117 [ 645.424167][ T6864] EXT4-fs (loop6): 1 orphan inode deleted [ 645.481967][ T6864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.538974][ T6864] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12312'. [ 645.539332][ T6858] loop2: p1 p3 < > [ 645.582777][ T2981] loop2: p1 p3 < > [ 645.671211][ T3241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.761336][ T6897] loop6: detected capacity change from 0 to 512 [ 645.789766][T20443] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.799153][T20443] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.818977][T20443] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.895458][ T6897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.910802][ T6897] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.986022][T20443] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.083666][ T4736] udevd[4736]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 646.084272][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 646.245222][ T3241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.465308][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12327'. [ 646.546225][ T6839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.646753][ T6839] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.315608][ T5013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.569124][ T7016] loop6: detected capacity change from 0 to 927 [ 647.583650][ T7016] iso9660: Unknown parameter '.' [ 648.415946][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 648.415965][ T28] audit: type=1400 audit(1783109042.554:3541): avc: denied { read } for pid=7041 comm="syz.2.12356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 648.484945][ T40] Bluetooth: hci0: Frame reassembly failed (-84) [ 648.794268][ T7059] loop3: detected capacity change from 0 to 512 [ 648.848775][ T7059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 648.897362][ T7059] EXT4-fs (loop3): shut down requested (0) [ 648.955735][ T7059] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.467119][ T7086] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 649.480523][ T7086] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 650.559309][ T3608] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 650.560758][ T964] Bluetooth: hci0: command 0x1003 tx timeout [ 650.825729][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12395'. [ 650.840901][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12395'. [ 650.850780][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12395'. [ 650.861407][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12395'. [ 650.871045][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12395'. [ 650.881768][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12395'. [ 650.894162][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12395'. [ 650.904171][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12395'. [ 650.917997][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12395'. [ 650.928394][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12395'. [ 651.314991][ T7173] xt_hashlimit: size too large, truncated to 1048576 [ 651.337569][ T7042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 651.420666][ T7179] xt_hashlimit: size too large, truncated to 1048576 [ 652.122838][ T7199] xt_connbytes: Forcing CT accounting to be enabled [ 653.023245][ T7242] loop6: detected capacity change from 0 to 512 [ 653.068089][ T7242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.083433][ T7242] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.116713][ T3241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.200495][ T7249] loop4: detected capacity change from 0 to 764 [ 653.521943][ T7249] iso9660: Unknown parameter '.' [ 653.602791][ T28] audit: type=1326 audit(1783109047.744:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.3.12445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f823b3cde59 code=0x0 [ 654.783114][ T7353] netlink: 'syz.3.12468': attribute type 1 has an invalid length. [ 654.836941][ T7353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 654.865116][ T7352] bond1: entered promiscuous mode [ 654.907561][ T7352] bond1: entered allmulticast mode [ 655.183918][ T28] audit: type=1400 audit(1783109049.324:3543): avc: denied { cmd } for pid=7392 comm="syz.7.12472" path="socket:[118357]" dev="sockfs" ino=118357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 655.244163][ T7390] netlink: 'syz.3.12473': attribute type 7 has an invalid length. [ 655.252373][ T7390] netlink: 'syz.3.12473': attribute type 8 has an invalid length. [ 655.563520][ T6931] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 655.709374][ T7297] loop6: detected capacity change from 0 to 512 [ 656.016739][ T7442] __nla_validate_parse: 50 callbacks suppressed [ 656.016815][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12492'. [ 656.040946][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12492'. [ 656.308019][ T7413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.381285][ T7297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.459066][ T7297] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.540534][ T4761] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 656.550009][ T4761] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 656.922724][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12501'. [ 656.944784][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12501'. [ 656.995087][ T3241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.016363][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12501'. [ 657.059909][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12501'. [ 658.385264][ T7551] loop2: detected capacity change from 0 to 128 [ 658.400591][ T7551] FAT-fs (loop2): bogus number of FAT structure [ 658.409968][ T7551] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 658.444721][ T7551] FAT-fs (loop2): Can't find a valid FAT filesystem [ 658.731376][ T7595] loop3: detected capacity change from 0 to 512 [ 658.842092][ T7595] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 658.877368][ T7619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12529'. [ 658.892593][ T7619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12529'. [ 658.907709][ T7595] EXT4-fs (loop3): 1 truncate cleaned up [ 658.922499][ T7619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12529'. [ 658.930993][ T7595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.967371][ T7619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12529'. [ 659.090219][ T7632] loop4: detected capacity change from 0 to 512 [ 659.149389][ T7632] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 659.189063][ T7632] EXT4-fs (loop4): 1 truncate cleaned up [ 659.196834][ T7632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.413975][ T5013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.578987][ T7634] loop2: detected capacity change from 0 to 512 [ 659.767618][ T7634] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 659.786787][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.001731][ T7634] EXT4-fs (loop2): 1 truncate cleaned up [ 660.486512][ T7634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.622900][ T7658] xt_TCPMSS: Only works on TCP SYN packets [ 660.900014][ T7671] netlink: 'syz.7.12544': attribute type 1 has an invalid length. [ 660.940319][ T7634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.958896][ T7664] loop6: detected capacity change from 0 to 512 [ 660.977161][ T7670] loop4: detected capacity change from 0 to 512 [ 660.989810][ T7664] EXT4-fs: Ignoring removed oldalloc option [ 661.013099][ T7671] bond1: entered promiscuous mode [ 661.034493][ T7671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 661.057203][ T7670] EXT4-fs: Invalid want_extra_isize 1969 [ 661.085496][ T7664] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 661.155103][ T7677] loop3: detected capacity change from 0 to 128 [ 661.329585][ T7677] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 661.353566][ T7664] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #4: comm syz.6.12543: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 661.354888][ T7677] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 661.433430][ T7664] loop6: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 661.434810][ T7664] EXT4-fs error (device loop6): ext4_quota_enable:7235: comm syz.6.12543: Bad quota inode: 4, type: 1 [ 661.443943][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 661.443966][ C0] EXT4-fs (loop6): initial error at time 1783109055: ext4_ext_check_inode:521: inode 4 [ 661.444012][ C0] EXT4-fs (loop6): last error at time 1783109055: ext4_ext_check_inode:521: inode 4 [ 661.493444][ T7664] loop6: lost filesystem error report for type 5 error -117 [ 661.493718][ T7664] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 661.524234][ T4337] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 661.546454][ T7664] EXT4-fs (loop6): mount failed [ 661.608340][ T7699] loop4: detected capacity change from 0 to 256 [ 661.657407][ T7699] futex_wake_op: syz.4.12557 tries to shift op by 35; fix this program [ 662.149847][ T7751] xt_hashlimit: size too large, truncated to 1048576 [ 662.565300][ T7793] serio: Serial port ptm1 [ 662.611662][ T7798] loop4: detected capacity change from 0 to 1024 [ 662.621484][ T7798] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 662.645469][ T7798] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.12599: lblock 1 mapped to illegal pblock 1 (length 1) [ 662.666556][ T7798] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 662.666685][ T7798] Quota error (device loop4): write_blk: dquota write failed [ 662.675891][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 662.675915][ C0] EXT4-fs (loop4): initial error at time 1783109056: ext4_map_blocks:833: inode 3: block 1 [ 662.675959][ C0] EXT4-fs (loop4): last error at time 1783109056: ext4_map_blocks:833: inode 3: block 1 [ 662.709857][ T7798] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 662.709899][ T7798] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.12599: Failed to acquire dquot type 0 [ 662.709989][ T7798] loop4: lost filesystem error report for type 5 error -117 [ 662.711295][ T7798] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.12599: Freeing blocks not in datazone - block = 0, count = 4096 [ 662.711323][ T7798] loop4: lost filesystem error report for type 5 error -117 [ 662.711580][ T7798] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.12599: Invalid inode bitmap blk 0 in block_group 0 [ 662.711611][ T7798] loop4: lost filesystem error report for type 5 error -117 [ 662.712108][ T7798] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 662.791212][ T7798] loop4: lost filesystem error report for type 5 error -117 [ 662.791375][ T7798] EXT4-fs (loop4): 1 orphan inode deleted [ 662.792469][T20447] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 662.799136][ T7798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.807665][ T28] audit: type=1326 audit(1783109056.954:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.2.12603" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7ec82de59 code=0x0 [ 662.826813][T20447] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 662.865031][T20447] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:16: Failed to release dquot type 0 [ 662.882251][ T7798] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 662.894416][ T7811] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (18333!=0) [ 662.938319][ T5013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.149181][ T7842] __nla_validate_parse: 1 callbacks suppressed [ 664.149203][ T7842] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12614'. [ 666.024489][ T28] audit: type=1400 audit(1783109060.164:3545): avc: denied { write } for pid=7875 comm="syz.6.12628" lport=51245 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 666.217423][ T7854] kexec: Could not allocate control_code_buffer [ 666.418416][ T7889] xt_TCPMSS: Only works on TCP SYN packets [ 666.630249][ T7901] netlink: 'syz.7.12638': attribute type 39 has an invalid length. [ 667.502284][ T7915] syzkaller1: entered promiscuous mode [ 667.508413][ T7915] syzkaller1: entered allmulticast mode [ 667.532253][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.563475][ T7921] syzkaller0: entered allmulticast mode [ 667.685806][ T7936] loop2: detected capacity change from 0 to 512 [ 667.730670][ T7936] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.12649: Bad quota inum: 1, type: 2 [ 667.766036][ T7936] loop2: lost filesystem error report for type 5 error -117 [ 667.768616][ T7936] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 667.776073][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 667.776109][ C1] EXT4-fs (loop2): initial error at time 1783109061: ext4_quota_enable:7228 [ 667.776141][ C1] EXT4-fs (loop2): last error at time 1783109061: ext4_quota_enable:7228 [ 667.819202][ T7936] EXT4-fs (loop2): mount failed [ 667.862958][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12652'. [ 668.279942][ T7957] loop3: detected capacity change from 0 to 512 [ 668.388201][ T7957] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 668.419645][ T7957] EXT4-fs (loop3): orphan cleanup on readonly fs [ 668.437842][ T7957] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 668.460240][ T7957] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 668.472910][ T7957] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.12657: bad orphan inode 768 [ 668.491141][ T7957] loop3: lost filesystem error report for type 5 error -117 [ 668.509099][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 668.522975][ C0] EXT4-fs (loop3): initial error at time 1783109062: ext4_orphan_get:1425 [ 668.531758][ C0] EXT4-fs (loop3): last error at time 1783109062: ext4_orphan_get:1425 [ 668.714309][ T7976] syz_tun: entered allmulticast mode [ 668.721917][ T7976] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 668.730545][ T7976] net_ratelimit: 3319 callbacks suppressed [ 668.730561][ T7976] mroute: pending queue full, dropping entries [ 668.749206][ T7957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 668.754811][ T7975] syz_tun: left allmulticast mode [ 668.788573][ T7980] loop4: detected capacity change from 0 to 256 [ 668.803868][ T7978] netlink: 208 bytes leftover after parsing attributes in process `syz.2.12665'. [ 668.830950][ T7980] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 668.871039][ T7980] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 668.900757][ T7980] FAT-fs (loop4): Filesystem has been set read-only [ 669.020365][ T7957] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 669.149168][ T7957] EXT4-fs warning (device loop3): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop3. [ 669.457161][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.710326][ T8012] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 669.814848][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12682'. [ 669.828309][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12682'. [ 669.924189][ T8035] netlink: 'syz.3.12687': attribute type 4 has an invalid length. [ 669.959387][ T8038] loop6: detected capacity change from 0 to 128 [ 669.978131][ T8038] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 669.997375][ T8038] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 670.024076][ T3241] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 670.183991][ T8056] lo speed is unknown, defaulting to 1000 [ 670.555293][ T8069] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 670.607627][ T8080] loop6: detected capacity change from 0 to 512 [ 670.642380][ T8069] bond1 (unregistering): Released all slaves [ 670.793848][ T8080] bio_check_eod: 19 callbacks suppressed [ 670.793866][ T8080] syz.6.12708: attempt to access beyond end of device [ 670.793866][ T8080] loop6: rw=2049, sector=528, nr_sectors = 32 limit=512 [ 670.850581][ T8080] syz.6.12708: attempt to access beyond end of device [ 670.850581][ T8080] loop6: rw=2049, sector=592, nr_sectors = 32 limit=512 [ 670.879834][ T8080] syz.6.12708: attempt to access beyond end of device [ 670.879834][ T8080] loop6: rw=2049, sector=656, nr_sectors = 32 limit=512 [ 670.916763][ T8080] syz.6.12708: attempt to access beyond end of device [ 670.916763][ T8080] loop6: rw=2049, sector=720, nr_sectors = 32 limit=512 [ 670.950801][ T8080] syz.6.12708: attempt to access beyond end of device [ 670.950801][ T8080] loop6: rw=2049, sector=784, nr_sectors = 32 limit=512 [ 670.978400][ T8080] syz.6.12708: attempt to access beyond end of device [ 670.978400][ T8080] loop6: rw=2049, sector=848, nr_sectors = 32 limit=512 [ 671.017484][ T8080] syz.6.12708: attempt to access beyond end of device [ 671.017484][ T8080] loop6: rw=2049, sector=912, nr_sectors = 32 limit=512 [ 671.042913][ T8080] syz.6.12708: attempt to access beyond end of device [ 671.042913][ T8080] loop6: rw=2049, sector=976, nr_sectors = 32 limit=512 [ 671.068957][ T8080] syz.6.12708: attempt to access beyond end of device [ 671.068957][ T8080] loop6: rw=2049, sector=1040, nr_sectors = 32 limit=512 [ 671.083010][ T8080] syz.6.12708: attempt to access beyond end of device [ 671.083010][ T8080] loop6: rw=2049, sector=1104, nr_sectors = 32 limit=512 [ 671.584934][ T8133] netlink: 44 bytes leftover after parsing attributes in process `syz.7.12728'. [ 672.012941][ T8156] loop6: detected capacity change from 0 to 128 [ 672.032248][ T8156] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 672.041388][ T8156] System zones: 1-3, 19-19, 35-36 [ 672.053320][ T8156] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 672.074975][ T8156] ext4 filesystem being mounted at /326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 672.087777][ T8159] netlink: 'syz.4.12738': attribute type 4 has an invalid length. [ 672.252340][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12741'. [ 672.312124][ T3241] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 672.535274][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12746'. [ 672.540093][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12745'. [ 672.586278][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12745'. [ 672.632656][ T8178] loop4: detected capacity change from 0 to 256 [ 672.700698][ T8176] lo speed is unknown, defaulting to 1000 [ 672.742373][ T8183] loop4: detected capacity change from 0 to 1024 [ 672.762508][ T8183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 672.795626][ T8183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.822081][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12750'. [ 672.871872][ T8187] macvtap1: entered promiscuous mode [ 672.899278][ T8187] erspan0: entered promiscuous mode [ 672.910000][ T5013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.920825][ T8187] macvtap1: entered allmulticast mode [ 672.926458][ T8187] erspan0: entered allmulticast mode [ 672.969942][ T8188] macvtap1: left promiscuous mode [ 672.975111][ T8188] erspan0: left promiscuous mode [ 672.980564][ T8188] macvtap1: left allmulticast mode [ 672.985804][ T8188] erspan0: left allmulticast mode [ 674.393117][ T8254] syzkaller0: entered promiscuous mode [ 674.398648][ T8254] syzkaller0: entered allmulticast mode [ 674.620832][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12790'. [ 674.638545][ T8282] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12790'. [ 674.711792][ T8293] netlink: 'syz.7.12795': attribute type 8 has an invalid length. [ 674.723777][ T8293] veth1_to_team: entered promiscuous mode [ 674.732234][ T8293] gretap0: entered promiscuous mode [ 674.742119][ T8293] veth1_to_team: left promiscuous mode [ 674.752389][ T8293] gretap0: left promiscuous mode [ 675.217191][ T8331] loop3: detected capacity change from 0 to 128 [ 675.332069][ T8337] loop4: detected capacity change from 0 to 1024 [ 675.384024][ T8337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.566276][ T5013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.655610][ T6935] Bluetooth: hci0: Frame reassembly failed (-84) [ 675.682249][ T28] audit: type=1326 audit(1783109069.824:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.6.12815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccdea4de59 code=0x0 [ 675.735663][ T8372] loop2: detected capacity change from 0 to 8192 [ 675.758263][ T8372] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 675.776739][ T8372] FAT-fs (loop2): Filesystem has been set read-only [ 675.783527][ T8372] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 675.792760][ T8372] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 675.802626][ T8372] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 675.813274][ T8372] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 676.122431][ T8418] loop3: detected capacity change from 0 to 512 [ 676.150836][ T8418] EXT4-fs error (device loop3): __ext4_iget:5533: inode #11: block 1: comm syz.3.12819: invalid block [ 676.170583][ T8423] __nla_validate_parse: 1 callbacks suppressed [ 676.170660][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12822'. [ 676.200464][ T8418] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 676.203285][ T8418] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.12819: couldn't read orphan inode 11 (err -117) [ 676.212621][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 676.212647][ C0] EXT4-fs (loop3): initial error at time 1783109070: __ext4_iget:5533: inode 11: block 1 [ 676.212689][ C0] EXT4-fs (loop3): last error at time 1783109070: __ext4_iget:5533: inode 11: block 1 [ 676.241521][ T8427] loop2: detected capacity change from 0 to 1024 [ 676.262183][ T8427] EXT4-fs: Ignoring removed nomblk_io_submit option [ 676.270156][ T8418] loop3: lost filesystem error report for type 5 error -117 [ 676.272160][ T8418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.303719][ T8427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.307164][ T8386] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 676.326724][ T8386] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 676.332882][ T28] audit: type=1400 audit(1783109070.474:3547): avc: denied { relabelto } for pid=8382 comm="syz.3.12819" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 676.393098][ T4337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.417136][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.424490][T31801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.429590][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.607498][ T8447] lo speed is unknown, defaulting to 1000 [ 677.110270][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12833'. [ 677.207648][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.309419][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.630459][ T8487] syzkaller0: entered promiscuous mode [ 677.642157][ T8487] syzkaller0: entered allmulticast mode [ 677.656743][ T8487] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 677.679866][ T3608] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 677.680423][ T964] Bluetooth: hci0: command 0x1003 tx timeout [ 677.840571][ T8497] xt_hashlimit: size too large, truncated to 1048576 [ 677.995753][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12851'. [ 678.034795][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12851'. [ 678.709570][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12862'. [ 678.724558][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12862'. [ 678.744305][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12862'. [ 678.766105][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12862'. [ 678.790341][ T8546] lo speed is unknown, defaulting to 1000 [ 679.759433][ T6933] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.775730][ T6933] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.788658][ T6933] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 679.881578][ T6933] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.914393][ T6933] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.930301][ T6933] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 679.997989][ T6933] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.020143][ T6933] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.032283][ T6933] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 680.045451][ T8645] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12889'. [ 680.133176][ T6933] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.151011][ T6933] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.162284][ T6933] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 680.175293][ T28] audit: type=1400 audit(1783109074.314:3548): avc: denied { setcurrent } for pid=8663 comm="syz.7.12892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 680.220230][ T8647] lo speed is unknown, defaulting to 1000 [ 680.238450][ T28] audit: type=1401 audit(1783109074.314:3549): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 680.375419][ T6933] bond1 (unregistering): (slave geneve3): Releasing active interface [ 680.406142][ T6933] bond0 (unregistering): Released all slaves [ 680.420193][ T6933] bond1 (unregistering): Released all slaves [ 680.544035][ T6933] hsr_slave_0: left promiscuous mode [ 680.549961][ T6933] hsr_slave_1: left promiscuous mode [ 680.566875][ T6933] veth1_macvtap: left promiscuous mode [ 680.576535][ T6933] veth0_macvtap: left promiscuous mode [ 680.590425][ T6933] veth1_vlan: left promiscuous mode [ 680.605438][ T6933] veth0_vlan: left promiscuous mode [ 680.664106][ T28] audit: type=1400 audit(1783109074.804:3550): avc: denied { write } for pid=8670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.764624][ T28] audit: type=1400 audit(1783109074.904:3551): avc: denied { write } for pid=8681 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.890275][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 681.174286][ T8698] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 681.231526][ T8698] bond2 (unregistering): Released all slaves [ 681.365935][ T28] audit: type=1400 audit(1783109075.504:3552): avc: denied { write } for pid=8696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.494838][ T28] audit: type=1400 audit(1783109075.634:3553): avc: denied { write } for pid=8726 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.527671][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.544521][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.553332][ T8647] bridge_slave_0: entered allmulticast mode [ 681.561105][ T8647] bridge_slave_0: entered promiscuous mode [ 681.569511][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 681.589341][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.596974][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.615880][ T8647] bridge_slave_1: entered allmulticast mode [ 681.628542][ T8647] bridge_slave_1: entered promiscuous mode [ 681.677272][ T8647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.711707][ T8647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.794682][ T8647] team0: Port device team_slave_0 added [ 681.814098][ T8647] team0: Port device team_slave_1 added [ 681.823779][ T8762] loop3: detected capacity change from 0 to 128 [ 681.853661][ T8762] EXT4-fs: Ignoring removed i_version option [ 681.873938][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.893977][ T8762] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 681.905079][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.957139][ T8762] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 681.995817][ T8647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.022504][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.031688][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.086063][ T8762] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 34: comm syz.3.12907: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 682.109077][ T8647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.138099][ T8807] loop2: detected capacity change from 0 to 1024 [ 682.145432][ T8807] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 682.155870][ T8762] EXT4-fs (loop3): Remounting filesystem read-only [ 682.164258][ T8807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.264779][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12912'. [ 682.304881][ T28] audit: type=1400 audit(1783109076.444:3554): avc: denied { write } for pid=8766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.359225][ T4761] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 682.360503][T31801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.377808][ T4337] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 682.392702][ T4761] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 682.408176][ T8825] loop4: detected capacity change from 0 to 1024 [ 682.419925][ T8825] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 682.445930][ T8647] hsr_slave_0: entered promiscuous mode [ 682.455521][ T28] audit: type=1400 audit(1783109076.564:3555): avc: denied { write } for pid=8826 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.479880][ T8825] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 682.492960][ T8647] hsr_slave_1: entered promiscuous mode [ 682.524166][ T8647] debugfs: 'hsr0' already exists in 'hsr' [ 682.535348][ T8647] Cannot create hsr debugfs directory [ 682.546417][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 682.590855][ T8836] lo speed is unknown, defaulting to 1000 [ 682.695897][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12917'. [ 682.737139][ T8825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 682.801694][ T8647] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.833486][ T5013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.834295][ T8647] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.915449][ T8647] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.938059][ T28] audit: type=1400 audit(1783109077.074:3556): avc: denied { write } for pid=8843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.968354][ T8647] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.028303][ T8647] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.044850][ T28] audit: type=1400 audit(1783109077.164:3557): avc: denied { write } for pid=8865 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.073420][ T8647] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.128282][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 683.145157][ T8647] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.173509][ T8647] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.212892][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12922'. [ 683.224989][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12922'. [ 683.252363][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12922'. [ 683.281456][ T8647] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 683.288384][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12922'. [ 683.301081][ T8647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 683.309329][ T8647] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 683.319546][ T8647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.329370][ T8647] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 683.349236][ T8647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 683.365273][ T8647] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 683.390638][ T8647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.467109][ T8647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.493860][ T8647] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.511563][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.519246][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.543397][T20449] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.551019][T20449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.877137][ T28] audit: type=1400 audit(1783109078.014:3558): avc: denied { watch watch_reads } for pid=8936 comm="syz.7.12929" path="/" dev="ramfs" ino=122375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 683.953370][ T8647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.386270][ T8647] veth0_vlan: entered promiscuous mode [ 684.417571][ T8647] veth1_vlan: entered promiscuous mode [ 684.464301][ T9020] xt_hashlimit: size too large, truncated to 1048576 [ 684.470042][ T8647] veth0_macvtap: entered promiscuous mode [ 684.498352][ T8647] veth1_macvtap: entered promiscuous mode [ 684.522104][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.544101][ T8647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.584239][T20449] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.624923][T20449] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.636521][T20449] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.661982][T20449] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.189192][ T8902] Set syz1 is full, maxelem 65536 reached [ 685.255758][ T9073] SELinux: policydb version 0 does not match my version range 15-35 [ 685.268357][ T9073] SELinux: failed to load policy [ 685.568710][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12949'. [ 685.670430][ T4755] IPVS: starting estimator thread 0... [ 685.759255][ T9097] IPVS: using max 2544 ests per chain, 127200 per kthread [ 686.007346][ T9116] ªªªªªª: renamed from vlan0 (while UP) [ 686.055264][ T9119] veth0: entered promiscuous mode [ 686.079717][ T9119] bond0: entered promiscuous mode [ 686.100726][ T9118] bond0: left promiscuous mode [ 686.119263][ T9118] veth0: left promiscuous mode [ 686.325962][ T28] audit: type=1326 audit(1783109080.464:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.9.12967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02da5de59 code=0x7ffc0000 [ 686.368893][ T28] audit: type=1326 audit(1783109080.464:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.9.12967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02da5de59 code=0x7ffc0000 [ 686.462743][ T28] audit: type=1326 audit(1783109080.464:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.9.12967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02da5de59 code=0x7ffc0000 [ 686.539188][ T28] audit: type=1326 audit(1783109080.464:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.9.12967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02da5de59 code=0x7ffc0000 [ 686.616186][ T28] audit: type=1326 audit(1783109080.464:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.9.12967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02da5de59 code=0x7ffc0000 [ 686.673406][ T28] audit: type=1326 audit(1783109080.464:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.9.12967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe02da5de59 code=0x7ffc0000 [ 686.746756][ T28] audit: type=1326 audit(1783109080.464:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.9.12967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02da5de59 code=0x7ffc0000 [ 686.981478][ T28] audit: type=1326 audit(1783109080.464:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.9.12967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02da5de59 code=0x7ffc0000 [ 687.051626][ T9152] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 687.158607][ T9152] bond1 (unregistering): Released all slaves [ 687.173861][ T28] audit: type=1326 audit(1783109080.464:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.9.12967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02da5de59 code=0x7ffc0000 [ 687.265827][ T28] audit: type=1326 audit(1783109080.464:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.9.12967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fe02da5de59 code=0x7ffc0000 [ 687.400433][ T9174] lo speed is unknown, defaulting to 1000 [ 687.581883][ T9198] bridge0: port 1(syz_tun) entered blocking state [ 687.589565][ T9198] bridge0: port 1(syz_tun) entered disabled state [ 687.596292][ T9198] syz_tun: entered allmulticast mode [ 687.603496][ T9198] syz_tun: entered promiscuous mode [ 687.609241][ T9198] bridge0: port 1(syz_tun) entered blocking state [ 687.615827][ T9198] bridge0: port 1(syz_tun) entered forwarding state [ 687.676242][ T9199] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 687.806046][ T9198] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 687.977158][T20449] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.107996][ T9211] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 688.143350][ T9211] bond1 (unregistering): Released all slaves [ 688.173716][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 688.209360][ T4750] ================================================================== [ 688.217540][ T4750] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 688.224581][ T4750] [ 688.226917][ T4750] read-write to 0xffff888237c2a8e4 of 4 bytes by task 4755 on cpu 0: [ 688.235059][ T4750] wq_worker_running+0x9b/0x120 [ 688.239949][ T4750] synchronize_rcu_expedited+0x5f8/0x770 [ 688.245584][ T4750] synchronize_rcu+0x35/0x2e0 [ 688.250251][ T4750] try_check_zero+0x17a/0x260 [ 688.255017][ T4750] process_srcu+0x1ea/0xd90 [ 688.259519][ T4750] process_scheduled_works+0x4d4/0x9a0 [ 688.264983][ T4750] worker_thread+0x569/0x750 [ 688.269571][ T4750] kthread+0x221/0x270 [ 688.273631][ T4750] ret_from_fork+0x146/0x330 [ 688.278218][ T4750] ret_from_fork_asm+0x1a/0x30 [ 688.283073][ T4750] [ 688.285406][ T4750] read to 0xffff888237c2a8e4 of 4 bytes by task 4750 on cpu 1: [ 688.292937][ T4750] kick_pool+0x49/0x2d0 [ 688.297358][ T4750] __queue_work+0x8e9/0xb90 [ 688.301861][ T4750] queue_work_on+0xa9/0x140 [ 688.306362][ T4750] process_srcu+0xa39/0xd90 [ 688.310872][ T4750] process_scheduled_works+0x4d4/0x9a0 [ 688.316326][ T4750] worker_thread+0x569/0x750 [ 688.320915][ T4750] kthread+0x221/0x270 [ 688.324997][ T4750] ret_from_fork+0x146/0x330 [ 688.329675][ T4750] ret_from_fork_asm+0x1a/0x30 [ 688.334434][ T4750] [ 688.336754][ T4750] value changed: 0x00000000 -> 0x00000001 [ 688.342553][ T4750] [ 688.344883][ T4750] Reported by Kernel Concurrency Sanitizer on: [ 688.351025][ T4750] CPU: 1 UID: 0 PID: 4750 Comm: kworker/1:10 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 688.362062][ T4750] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 688.365862][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 688.375911][ T4750] Workqueue: rcu_gp process_srcu [ 688.380943][ T4750] ================================================================== [ 688.550457][T20449] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.642647][T20449] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.706366][T20449] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.848411][T20449] bridge_slave_1: left allmulticast mode [ 688.854539][T20449] bridge_slave_1: left promiscuous mode [ 688.867537][T20449] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.893179][T20449] bridge_slave_0: left allmulticast mode [ 688.900430][T20449] bridge_slave_0: left promiscuous mode [ 688.917764][T20449] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.071823][T20449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.083871][T20449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.096363][T20449] bond0 (unregistering): Released all slaves [ 689.109417][ T874] bridge0: port 1(syz_tun) entered disabled state [ 689.125237][ T874] syz_tun (unregistering): left allmulticast mode [ 689.131822][ T874] syz_tun (unregistering): left promiscuous mode [ 689.138542][ T874] bridge0: port 1(syz_tun) entered disabled state [ 689.157545][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 689.218056][T20449] hsr_slave_0: left promiscuous mode [ 689.226592][T20449] hsr_slave_1: left promiscuous mode [ 689.240608][T20449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.248548][T20449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.257608][T20449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.266759][T20449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.281886][T20449] veth1_macvtap: left promiscuous mode [ 689.287797][T20449] veth0_macvtap: left promiscuous mode [ 689.294439][T20449] veth1_vlan: left promiscuous mode [ 689.301034][T20449] veth0_vlan: left promiscuous mode [ 689.410873][T20449] team0 (unregistering): Port device team_slave_1 removed [ 689.426723][T20449] team0 (unregistering): Port device team_slave_0 removed [ 689.466077][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 689.602738][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 689.732855][T20449] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 689.743549][T20449] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 689.754409][T20449] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.770572][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 689.802234][T20449] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 689.812603][T20449] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 689.823206][T20449] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.873588][T20449] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 689.884036][T20449] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 689.895034][T20449] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.954614][T20449] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 689.964869][T20449] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 689.975189][T20449] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.167679][T20449]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.177343][T20449]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.186974][T20449]  (unregistering): Released all slaves [ 690.194860][T20449] bond0 (unregistering): Released all slaves [ 690.203996][T20449] bond1 (unregistering): Released all slaves [ 690.239074][ T3608] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 690.239086][ T964] Bluetooth: hci0: command 0x1003 tx timeout [ 690.354164][T20449] hsr_slave_0: left promiscuous mode [ 690.364704][T20449] hsr_slave_1: left promiscuous mode [ 690.380807][T20449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.391087][T20449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.414079][T20449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.423107][T20449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.446304][T20449] veth1_macvtap: left promiscuous mode [ 690.455748][T20449] veth0_macvtap: left promiscuous mode [ 690.461978][T20449] veth1_vlan: left promiscuous mode [ 690.467598][T20449] veth0_vlan: left promiscuous mode [ 690.561256][T20449] team0 (unregistering): Port device team_slave_1 removed [ 690.572476][T20449] team0 (unregistering): Port device team_slave_0 removed [ 690.611811][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 690.773464][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 690.908401][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 690.930512][T20449] IPVS: stop unused estimator thread 0... [ 691.036171][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 693.804608][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 693.804696][ T28] audit: type=1400 audit(1783109087.944:3609): avc: denied { write } for pid=9368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.836914][ T28] audit: type=1400 audit(1783109087.964:3610): avc: denied { write } for pid=9379 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.388198][ T28] audit: type=1400 audit(1783109088.524:3611): avc: denied { write } for pid=9382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.417345][ T28] audit: type=1400 audit(1783109088.554:3612): avc: denied { write } for pid=9393 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.541545][ T28] audit: type=1400 audit(1783109088.684:3613): avc: denied { write } for pid=9396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.586988][ T28] audit: type=1400 audit(1783109088.724:3614): avc: denied { write } for pid=9407 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.754086][ T28] audit: type=1400 audit(1783109088.894:3615): avc: denied { write } for pid=9410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.785312][ T28] audit: type=1400 audit(1783109088.924:3616): avc: denied { write } for pid=9421 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1