last executing test programs: 7m26.857718036s ago: executing program 32 (id=872): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="7a48306d5fa3e5a9f6beef774190e7a0d06242a12cf322b03f5f1bdfeea3e472a38953b204ffdf68697d880d6ce274dfaf", 0x31}], 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r0, &(0x7f0000000000), 0x10) 7m11.12821006s ago: executing program 33 (id=1285): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x6) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) 6m51.977803395s ago: executing program 34 (id=1770): unshare(0x60000600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0xd6}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 6m36.949577174s ago: executing program 35 (id=1984): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x26, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe1b9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) 6m27.686835541s ago: executing program 36 (id=2186): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000780)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) 6m10.749969558s ago: executing program 37 (id=2896): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffeb2, 0x2}]}}}]}, 0x9c}}, 0x0) 6m9.344559377s ago: executing program 38 (id=2924): socket$inet6(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0xfffffffffffffffd, 0x9, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x56d92c8a, 0x0, 0xfffffffffffffffc, 0x10000, 0x10}, 0x0, 0x0) 6m8.802391006s ago: executing program 39 (id=2939): r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 5m12.369467025s ago: executing program 40 (id=4173): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 5m2.509705022s ago: executing program 41 (id=4553): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8000008}, 0x0, {}, 0x67, 0x2, 0x2}) 4m32.820088638s ago: executing program 42 (id=4903): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) 4m10.608182901s ago: executing program 43 (id=5521): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x4, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x0, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 3m38.337784858s ago: executing program 44 (id=6322): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x56f, &(0x7f0000000140)="$eJzs3c9rG8ceAPDv6kd+58WBEN57PB4uPTQljRzb/ZFCD+m5DQ2091TYigmWo2DJIXYDTQ7NuYReSgOl99Jzj6H/QA/9GwJtIJRg2kMvLiuvFDmWbDlRbKX6fGDNzO5Ks6PZ73hGI6EARtZ4+icX8Z+I+DKJOBYRSXasENnB8fXzVh/fnEm3JNbWPv49aZ6X5lvP1Xrc4Szz74j46YuI07nN5daXV+bL1WplMctPNBauTdSXV85cWSjPVeYqV6emp8+9NT317jtvD6yur1/88+uP7uez3PG7SZyPI1musx7P4VZnZjzGs9ekGOefOnFyAIUNk6Tr3h92/TrYmXwW58VI+4Bjkc+iHvjn+zwi1oARlew4/n8pvpgrAXZXaxzQmtsPaB780nj0/voEaHP9C+vvjcSB5tzo0GqyYWaUznfHBlB+WsaPv927m24xuPchALZ163ZEnC0UNvd/Sdb/PbNXjvZx0tNl6P9g99xPxz9vtMY/hY74z7XHP9Fl/HO4S+w+i+3jP/dwAMX0lI7/3us6/m0vWo3ls9zR5pivmFy+Uq2cjYh/RcSpKO5P81ut55xbfbDW61jn+C/d0vJbY8HsOh4W9m98zGy5UX6eOnd6dDviv13Hv0m7/ZMu7Z++Hhf7LONk5d7/ex3bvv4v1tp3Ea91bf8nK1rJ1uuTE837YaJ1V2z2x52TP/cqf6/rn7b/oa3rP5Z0rtfWd17Gtwf+qkR7PXmjDfWP/u//fcknzfS+bN+NcqOxOBmxL/mwvT/X2j/15LGtfOv8tP6nXu0e/1vd/wcj4tM+63/nxPf/63VsGNp/tmv7t2e3T7X/zhMPPvjsm17l99f/vdlMncr29NP/9XuBz/PaAQAAAAAAwLDJRcSRSHKldjqXK5XWP99xIg7lqrV64/Tl2tLV2Wh+V3YsirnWSvexjs9DTGYrhq38VDOdb+enI+J4RHyVP9jMl2Zq1dm9rjwAAAAAAAAAAAAAAAAAAAAMicM9vv+f+jW/11cHvHB+8htG17bxP4hfegKGkv//MLrEP4wu8Q+jS/zD6BL/MLrEP4wu8Q+jS/wDAAAAAAAAAAAAAAAAAAAAAAAAAADAQF28cCHd1lYf35xJ87PXl5fma9fPzFbq86WFpZnSTG3xWmmuVpurVkoztYXtnq9aq12bnIqlGxONSr0xUV9eubRQW7rauHRloTxXuVQp7kqtAAAAAAAAAAAAAAAAAAAA4OVSX16ZL1erlUWJamWxOByX8VIlCsNxGRIDTux1zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT/wdAAD//4a/Mhw=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 3m37.281654945s ago: executing program 45 (id=6333): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x37, 0x15, 0x66, 0x80, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3m7.32985543s ago: executing program 46 (id=7102): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sync() mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0) 2m51.16596618s ago: executing program 47 (id=7638): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1m41.537389483s ago: executing program 48 (id=9760): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500005c000040020511"], 0x0) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x20, 0x0, 0xe01c, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x24, 0x0, @void}}}}}}}, 0x0) 1m28.307451109s ago: executing program 4 (id=10069): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m28.075343337s ago: executing program 4 (id=10075): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT], 0x25, 0x363, &(0x7f0000000340)="$eJzs3T1onHUYAPDn+l5ySbAmg1B0Ot0EKU3EQaeEUqGYQSuHX4uHTf3InYUcHjRDLrcoxUlxEXRy66BjZ3EQcXNwtYJUxcVuhQZfubv3vu9MOlxs6e83lIfn/3/u/7wf9H0Tkn/ebMT2xbm4dOvWzVhYyEV+/ex63M7FSpyIJDr2Y6KP5yfnAYB73O00jb/TjsNnf7rUjTz7AeD+1X7+v32ynyiMz8lPK7760KzaAgBm6Ihf/784MXt5Zm0BADM09vx/Ymh45Nv8+d7PBAAA96+XX3v9hY3NiAvF4kJE9aN6qV6K5/rjG5fi3ajEVpyJ5TiI6LwodN4WWv8+f37z3Jliy+8rUWpV1EsR1Ua91HlT2Eja9YVYjeVYyerTXn3Sql9t1xcjYr/RXj+quXppLpay9X9Ziq1Yi+V4ZKw+4vzmubVi9gGlare+EdGMhe5BtPo/Hcvx01txOSpxMVq1/f73VovFs+nmUH39WqE9DwAAAAAAAAAAAAAAAAAAAAAAZuF0sWelt/9NWm3UP7wwOqE3Xmjv79MZzvYHanb2B0oL3d15riaj+wMN789TL+XjxP965AAAAAAAAAAAAAAAAAAAAHDvSGI+ypXK1k7tyu72YNAYyLz/w9ffLUZ3KJ+Vvpf0qyJLDn1Od+LAJyfRWyLtlafJ0JwsSCKiUslFLnb3y9eu9zoenFPIcqPNZ0FhbCiX9VSuVE4+/tsXu9v5GK36pxXstzNJjJ2W4SCXrT8wVH24lViIiINpVdODtUPm3EjTdFr53ufdzHq3rVrkIvJx120cIfj+5juPPl079Uw782226cOTTy2/cuOzr/7cLlei2WmhUpnfqR2k065Odi1amVav42slA/dPLjvPuQl3wuSg2c80d2pXysnPf7362Cc/jkxOJt8/6WDmg+lrfTOame8EuYiV7kn4r1bnJtz8k4M37gydscOqFocyp75cL1/f+/WPo17lgf8kbNQBAAAAAAAAAAAAAAAAAADHov9Lv3dT9exLs+sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI5f/+//DwTNscxRgjuNGB8qbO3Upi6+eKyHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAA+zfAAAA//+oN2gs") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1m28.01017296s ago: executing program 4 (id=10076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x33, 0x0, @rand_addr=0x64010102, @broadcast, {[@generic={0x0, 0x2}]}}, "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"}}, 0xfce) 1m26.373853237s ago: executing program 4 (id=10101): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 1m26.367139278s ago: executing program 4 (id=10102): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000000000202020730af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1m25.792197208s ago: executing program 4 (id=10115): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) 1m25.73942093s ago: executing program 49 (id=10115): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) 1m25.038134264s ago: executing program 7 (id=10133): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 1m24.178040005s ago: executing program 7 (id=10151): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1}) 1m24.073694518s ago: executing program 7 (id=10158): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000fd03"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x18, 0x0, 0x0) 1m24.016484721s ago: executing program 7 (id=10163): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1m23.912004714s ago: executing program 7 (id=10165): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m23.911686214s ago: executing program 7 (id=10166): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfe, 0x3}, 0x106200, 0x10004, 0x81, 0x5, 0xa, 0x20003, 0xc, 0x0, 0x0, 0x0, 0xca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) 1m22.197660974s ago: executing program 3 (id=10201): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) 1m22.105969668s ago: executing program 3 (id=10204): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000a00)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m22.056604459s ago: executing program 3 (id=10207): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 1m22.013554461s ago: executing program 3 (id=10209): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noload}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x457, &(0x7f0000000dc0)="$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") open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8000000000000003, 0x8005, 0x0, 0x0, 0x12, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a391ef54ec32d71e14ef3dc177e9b48b00", "e28359738e229a4c668000eac575fc00000100", [0x204]}) 1m21.712413901s ago: executing program 3 (id=10217): r0 = inotify_init() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.838170843s ago: executing program 3 (id=10231): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x4, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(r0, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x40002002, 0x0) 1m20.808735544s ago: executing program 50 (id=10231): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x4, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(r0, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x40002002, 0x0) 1m8.897601543s ago: executing program 51 (id=10166): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfe, 0x3}, 0x106200, 0x10004, 0x81, 0x5, 0xa, 0x20003, 0xc, 0x0, 0x0, 0x0, 0xca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) 1m3.266179061s ago: executing program 5 (id=10601): openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x8) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) fcntl$setstatus(r1, 0x4, 0x400) 1m3.262152601s ago: executing program 5 (id=10604): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) 1m3.208312183s ago: executing program 5 (id=10605): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000759, &(0x7f0000000340)={[{@dioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@usrquota}, {@errors_remount}, {@i_version, 0x0}, {@nomblk_io_submit}, {@nombcache}, {@quota}, {@mblk_io_submit}, {@lazytime}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x720}}, {@norecovery}, {@jqfmt_vfsold}, {@journal_checksum}, {@init_itable}], [{@appraise}, {@obj_type={'obj_type', 0x3d, '+\':*'}}], 0x2c}, 0x2, 0x4fc, &(0x7f0000000700)="$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") sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="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", 0xbba}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x5, 0xa, 0xa, 0x209, 0x40, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r0}, 0x38) 1m2.677266202s ago: executing program 5 (id=10611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa5688a828006558200086dd6d00200000081100"/45], 0x46) 1m2.361369253s ago: executing program 5 (id=10619): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m2.325816764s ago: executing program 5 (id=10621): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x106200, 0x10004, 0x30da, 0x5, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r1, 0x301, 0x800000, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 59.456785676s ago: executing program 2 (id=10675): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) 58.742167951s ago: executing program 2 (id=10680): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 47.055787213s ago: executing program 52 (id=10621): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x106200, 0x10004, 0x30da, 0x5, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r1, 0x301, 0x800000, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 47.014127994s ago: executing program 2 (id=10683): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x400, @private1, 0x400009}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0xffffffff, @remote, 0x6}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 46.980316275s ago: executing program 2 (id=10685): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 46.945881546s ago: executing program 2 (id=10686): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x14848, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 46.598732539s ago: executing program 2 (id=10701): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000500)=0x0) ioprio_set$pid(0x1, 0x0, 0x6000) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) 46.598643529s ago: executing program 53 (id=10701): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000500)=0x0) ioprio_set$pid(0x1, 0x0, 0x6000) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) 2.386367886s ago: executing program 0 (id=11554): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x420006f1) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x78) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r2, &(0x7f0000000280)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 2.331535728s ago: executing program 0 (id=11555): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42404}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @random}, 0x0, {0x2, 0x0, @rand_addr=0x64010101}}) 2.27325438s ago: executing program 0 (id=11558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e4099107323f5", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x304}, "7ca14e0bb42b00ca", "e393a639e1714663d647b57d50144087", "d5825cc3", "e35bb6550c4661d5"}, 0x28) 2.233596312s ago: executing program 0 (id=11560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a0088a8ffffffffffffaaaaaaaaaabb86dd694f9206002832"], 0x62) 2.129103425s ago: executing program 0 (id=11563): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14, 0x3ed, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}}], {0x14, 0x3f7, 0x1, 0x0, 0x0, {0x7}}}, 0x50}}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 2.021226599s ago: executing program 0 (id=11566): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x123, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40) read$nci(r0, 0x0, 0xffffffb3) 1.767530508s ago: executing program 8 (id=11575): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) poll(&(0x7f0000000080)=[{r0, 0x8000}], 0x1, 0xf) 1.591456995s ago: executing program 8 (id=11583): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) 1.590821744s ago: executing program 9 (id=11584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.510536248s ago: executing program 9 (id=11585): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x2, 0x349}, &(0x7f0000000500), &(0x7f0000000600), 0x0) 1.324722224s ago: executing program 9 (id=11589): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.274089196s ago: executing program 8 (id=11590): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62000000) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'filter\x00', 0x0, [0x3fd, 0x9, 0xfffffff9, 0x400009, 0x6]}, &(0x7f0000000000)=0x54) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 1.273786496s ago: executing program 9 (id=11592): syz_io_uring_setup(0x6a29, &(0x7f0000000200)={0x0, 0x3, 0x800, 0x1, 0x171}, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}}, 0x0) 1.252959547s ago: executing program 9 (id=11593): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.247430777s ago: executing program 6 (id=11594): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.174217689s ago: executing program 8 (id=11595): unshare(0x42000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.014216735s ago: executing program 1 (id=11599): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x2e}, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) 437.039345ms ago: executing program 8 (id=11600): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x2, 0x349}, &(0x7f0000000500), &(0x7f0000000600), 0x0) 435.818515ms ago: executing program 6 (id=11610): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) 435.556205ms ago: executing program 9 (id=11601): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}}, 0x0) 372.611947ms ago: executing program 6 (id=11602): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x3, 0x3}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 330.512059ms ago: executing program 6 (id=11603): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) close(0x3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) 330.062839ms ago: executing program 8 (id=11604): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) 206.089823ms ago: executing program 6 (id=11605): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r2, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 183.771304ms ago: executing program 1 (id=11606): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000340)=0x9, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x0) 180.697174ms ago: executing program 6 (id=11607): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pL/kNxyX8oLvkPxSX/objkPxSX/Ifikv9QXK35L/2hmAZHXt1MImL9PXfVH6ne7FzOr+0B7iDb24n/5A8F5bM/FFdPtzsAdI3v+MDevzk74li7E4sH3xfgcJS63QGga0aP2/+DorL+D8Vl/R+Ky2d8wPo/FI/1fyiu/jb3/3pby727JiLinoj4UfnI0ea9voD/X/0Rr7949VvPRJR+n2Sf/0cHTvVPv/Ha91rb9SZ/rW8R9EbEJ1986gvPTa+sLD2a1v/5Rv3KF7P6x7o1GqATzTxt5jFQXMura3PTtVp1SUFBoXCF5jxwubIx23wc1tzzwsMRb76/cRFCGvdK9mic7cnWJo/V9yj7tpJbrlVIDmDv8jOnI9afj4j788afZPc7b+x89G2Vd8V/e/acPo5n6ydpm+EO45fv2V/8B1rij7TEf0eH8Tc/0mHD22Tw692N//Ivs9d/oqcn7/Xf77UxQ//m/BNf3WeAffrNr7sb/9RId+N/fiHi1XT+mcjLv1Kaljd2PnfOP/0t10n/tz41enP+u7Jr/ivdmP/Kbea/Ex3G+eHT1Y/l1Zd/HPHm8xEP5MZvxjtWj9W3VdoV/2TL/PPgHvH/8OGfzuXVn30tYvtyxGjkx2+NNb4yvzi+vLp2+uL89Ex1pnqpUnl8anJy6szkxHh9jXq8uVK925PXhz+QV3/yy43x97WJ3xx/u9d/e48xt1r70sf735lT/5PjjfgPnsx//4ey+I3Xv2dX/Hdlz+m/k39k1/Kmba5FxNGs/qGI+M4rgw/n9etD1xvxz7cZf+mW+LvH/0iH4//sr/75bF79cx/s8C8AAA5U+6WBbvcMAAA4aIex09jtMQL5+rZ6o3UbOFlv2VdYv7mvkNZfy/YXyusRf8v2GNL6h7JdsrScu9EA/M8ZXnv3z7vdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICiW15dm5uu1apLy93uCXDY/hUAAP//T2kBHQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 50.220059ms ago: executing program 1 (id=11608): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x95, &(0x7f00000001c0)=ANY=[], 0x0) 50.066129ms ago: executing program 1 (id=11609): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) close(0x3) 30.006229ms ago: executing program 1 (id=11611): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x5, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x401, 0x6}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @random="af40245bac34", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x24, 0x0, 0x0, 0x100, {[@timestamp={0x8, 0xa, 0xffffa888, 0x5}]}}}}}}}, 0x0) 0s ago: executing program 1 (id=11612): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) exit(0x2000000fffb) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0x40) kernel console output (not intermixed with test programs): erface not active [ 439.301408][ T309] bridge_slave_1: left allmulticast mode [ 439.307072][ T309] bridge_slave_1: left promiscuous mode [ 439.314171][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.336433][ T309] bridge_slave_0: left allmulticast mode [ 439.349098][ T309] bridge_slave_0: left promiscuous mode [ 439.354805][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.495114][ T309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.512491][ T309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.522960][ T309] bond0 (unregistering): Released all slaves [ 439.570762][T31950] hsr_slave_0: entered promiscuous mode [ 439.584136][T31950] hsr_slave_1: entered promiscuous mode [ 439.599004][T31950] debugfs: 'hsr0' already exists in 'hsr' [ 439.605456][T31950] Cannot create hsr debugfs directory [ 439.615122][ T309] hsr_slave_0: left promiscuous mode [ 439.630337][ T309] hsr_slave_1: left promiscuous mode [ 439.639557][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.646952][ T309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.659851][T31915] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 439.675047][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.683638][ T309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.708614][ T309] veth1_macvtap: left promiscuous mode [ 439.717471][ T309] veth0_macvtap: left promiscuous mode [ 439.723312][ T309] veth1_vlan: left promiscuous mode [ 439.728729][ T309] veth0_vlan: left promiscuous mode [ 439.863871][ T309] team0 (unregistering): Port device team_slave_1 removed [ 439.899422][ T309] team0 (unregistering): Port device team_slave_0 removed [ 439.944051][ T28] audit: type=1400 audit(1775042566.934:27216): avc: denied { recv } for pid=23392 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.91 dest=55196 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 439.972786][ T28] audit: type=1400 audit(1775042566.934:27217): avc: denied { read write } for pid=23392 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.004052][ T28] audit: type=1400 audit(1775042566.934:27218): avc: denied { open } for pid=23392 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.064476][ T28] audit: type=1400 audit(1775042566.934:27219): avc: denied { ioctl } for pid=23392 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.095367][ T28] audit: type=1326 audit(1775042566.964:27220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32032 comm="syz.5.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec552ec819 code=0x7ffc0000 [ 440.179081][ T28] audit: type=1326 audit(1775042566.964:27221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32032 comm="syz.5.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fec552ec819 code=0x7ffc0000 [ 440.204868][ T28] audit: type=1326 audit(1775042566.964:27222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32032 comm="syz.5.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec552ec819 code=0x7ffc0000 [ 440.349105][T31950] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.406549][T31950] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.570161][T31950] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.728060][T31950] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.859632][T32087] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 440.870024][T32089] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32089 comm=syz.5.10260 [ 440.895036][T31950] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 440.945252][T32092] all (unregistering): Released all slaves [ 440.979104][T31950] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 440.999103][T31950] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 441.021370][T31950] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 441.181836][T31950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.205365][T31950] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.234131][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.241205][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.289392][ T545] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.296585][ T545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.462267][T31950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.589795][T32158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10276'. [ 441.644037][T32158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10276'. [ 441.720865][T32173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10277'. [ 441.722848][T31950] veth0_vlan: entered promiscuous mode [ 441.738344][T31950] veth1_vlan: entered promiscuous mode [ 441.768042][T31950] veth0_macvtap: entered promiscuous mode [ 441.769572][T32173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10277'. [ 441.807257][T31950] veth1_macvtap: entered promiscuous mode [ 441.840498][T31950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.865114][T31950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.902864][ T40] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.921680][ T40] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.949694][ T40] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.006262][ T40] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.293853][T32204] loop8: detected capacity change from 0 to 128 [ 442.378222][T32210] syzkaller1: entered promiscuous mode [ 442.394461][T32210] syzkaller1: entered allmulticast mode [ 442.411299][T32212] netlink: 104 bytes leftover after parsing attributes in process `syz.8.10293'. [ 442.527906][T32222] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.10300'. [ 442.648980][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 442.655354][ T28] audit: type=1400 audit(1775042569.634:27336): avc: denied { bind } for pid=32238 comm="syz.8.10307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 442.679760][ T28] audit: type=1400 audit(1775042569.674:27337): avc: denied { setopt } for pid=32238 comm="syz.8.10307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 442.686158][T32233] loop9: detected capacity change from 0 to 1024 [ 442.703726][ T28] audit: type=1400 audit(1775042569.674:27338): avc: denied { read write } for pid=32238 comm="syz.8.10307" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 442.734087][ T28] audit: type=1400 audit(1775042569.674:27339): avc: denied { open } for pid=32238 comm="syz.8.10307" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 442.765540][T32233] EXT4-fs (loop9): bad geometry: bigalloc file system with non-zero first_data_block [ 442.765540][T32233] [ 442.792100][ T28] audit: type=1400 audit(1775042569.784:27340): avc: denied { create } for pid=32246 comm="syz.5.10308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 442.815467][ T28] audit: type=1400 audit(1775042569.804:27341): avc: denied { setopt } for pid=32246 comm="syz.5.10308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 442.840288][ T28] audit: type=1400 audit(1775042569.834:27342): avc: denied { read } for pid=32248 comm="syz.6.10309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 442.925451][ T28] audit: type=1400 audit(1775042569.914:27343): avc: denied { read } for pid=32257 comm="syz.5.10312" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 442.951509][ T28] audit: type=1400 audit(1775042569.914:27344): avc: denied { open } for pid=32257 comm="syz.5.10312" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 442.984359][ T28] audit: type=1400 audit(1775042569.974:27345): avc: denied { execmod } for pid=32265 comm="syz.6.10313" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=97616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 443.173062][T32284] SET target dimension over the limit! [ 443.371752][T32306] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10329'. [ 443.772362][T32332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.782575][T32332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.512405][T32369] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=32369 comm=syz.5.10358 [ 444.904312][T32405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10374'. [ 445.643119][T32458] netlink: 204 bytes leftover after parsing attributes in process `syz.9.10397'. [ 445.677623][T32458] netlink: 84 bytes leftover after parsing attributes in process `syz.9.10397'. [ 446.490341][T32479] loop5: detected capacity change from 0 to 164 [ 446.520418][T32479] rock: directory entry would overflow storage [ 446.526589][T32479] rock: sig=0x66, size=4, remaining=3 [ 446.532768][ T5974] Bluetooth: hci0: command 0x1003 tx timeout [ 446.538817][ T3895] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 446.777036][T32495] loop5: detected capacity change from 0 to 512 [ 447.449872][T32525] __nla_validate_parse: 1 callbacks suppressed [ 447.449913][T32525] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10417'. [ 447.507576][T32531] loop8: detected capacity change from 0 to 1024 [ 447.530515][T32535] loop9: detected capacity change from 0 to 512 [ 447.558415][T32535] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.10423: inode has both inline data and extents flags [ 447.580035][T32535] fserror_report: 4 callbacks suppressed [ 447.580049][T32535] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 447.593503][T32535] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.10423: couldn't read orphan inode 15 (err -117) [ 447.602685][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 447.602710][ C0] EXT4-fs (loop9): initial error at time 1775042574: ext4_orphan_get:1397: inode 15 [ 447.602734][ C0] EXT4-fs (loop9): last error at time 1775042574: ext4_orphan_get:1397: inode 15 [ 447.642607][T32531] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.643040][T32535] loop9: lost filesystem error report for type 5 error -117 [ 447.660386][T32535] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.705053][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 447.705069][ T28] audit: type=1400 audit(1775042574.694:27436): avc: denied { mount } for pid=32529 comm="syz.8.10421" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 447.740939][T32535] EXT4-fs error (device loop9): ext4_check_dx_root:2201: inode #2: comm syz.9.10423: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 447.756713][T32531] IPVS: persistence engine module ip_vs_pe_€ not found [ 447.795494][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.810130][ T28] audit: type=1400 audit(1775042574.724:27437): avc: denied { add_name } for pid=32534 comm="syz.9.10423" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.854864][ T28] audit: type=1400 audit(1775042574.724:27438): avc: denied { create } for pid=32534 comm="syz.9.10423" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 447.903446][T20989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.993028][ T28] audit: type=1400 audit(1775042574.734:27439): avc: denied { create } for pid=32534 comm="syz.9.10423" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 448.046704][T32560] loop9: detected capacity change from 0 to 1024 [ 448.057348][T32560] EXT4-fs: Ignoring removed orlov option [ 448.076112][ T28] audit: type=1400 audit(1775042574.734:27440): avc: denied { write open } for pid=32534 comm="syz.9.10423" path="/772/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 448.134503][ T28] audit: type=1400 audit(1775042575.034:27441): avc: denied { read write } for pid=32562 comm="syz.5.10431" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 448.161431][ T28] audit: type=1400 audit(1775042575.034:27442): avc: denied { open } for pid=32562 comm="syz.5.10431" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 448.187641][T32560] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.241539][T20989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.250901][ T28] audit: type=1400 audit(1775042575.204:27443): avc: denied { read write } for pid=32559 comm="syz.9.10433" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 448.296307][ T28] audit: type=1400 audit(1775042575.204:27444): avc: denied { open } for pid=32559 comm="syz.9.10433" path="/774/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 448.396366][T32581] bridge1: entered promiscuous mode [ 448.402695][ T28] audit: type=1400 audit(1775042575.394:27445): avc: denied { write } for pid=32578 comm="syz.6.10440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 448.422619][T32581] bridge1: entered allmulticast mode [ 448.439220][T32581] team0: Port device bridge1 added [ 448.457649][T32586] loop5: detected capacity change from 0 to 512 [ 448.464828][T32584] bridge0: port 3(team0) entered blocking state [ 448.472106][T32584] bridge0: port 3(team0) entered disabled state [ 448.488548][T32584] team0: entered allmulticast mode [ 448.495362][T32584] team_slave_0: entered allmulticast mode [ 448.501867][T32584] team_slave_1: entered allmulticast mode [ 448.507756][T32586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.519611][T32584] team0: left allmulticast mode [ 448.521744][T32586] ext4 filesystem being mounted at /696/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.525025][T32584] team_slave_0: left allmulticast mode [ 448.549300][T32584] team_slave_1: left allmulticast mode [ 448.568512][T23392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.667002][T32597] loop9: detected capacity change from 0 to 512 [ 448.693090][T32597] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.10446: invalid indirect mapped block 256 (level 2) [ 448.736553][T32597] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 448.736866][T32597] EXT4-fs (loop9): 2 truncates cleaned up [ 448.746031][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 448.746049][ C0] EXT4-fs (loop9): initial error at time 1775042575: ext4_free_branches:1023: inode 11 [ 448.746086][ C0] EXT4-fs (loop9): last error at time 1775042575: ext4_free_branches:1023: inode 11 [ 448.746683][T32604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=32604 comm=syz.5.10447 [ 448.774482][T32597] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.839387][T32604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=32604 comm=syz.5.10447 [ 448.854325][T32604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=32604 comm=syz.5.10447 [ 448.859260][T20989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.906073][T32604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=32604 comm=syz.5.10447 [ 448.923263][T32604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=32604 comm=syz.5.10447 [ 448.948938][T32604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=32604 comm=syz.5.10447 [ 448.963408][T32604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=32604 comm=syz.5.10447 [ 448.963521][T32614] loop9: detected capacity change from 0 to 512 [ 448.976166][T32604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=32604 comm=syz.5.10447 [ 449.039678][T32604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=32604 comm=syz.5.10447 [ 449.052738][T32604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=32604 comm=syz.5.10447 [ 449.052815][T32614] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.159538][T20989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.386687][T32663] 9p: Bad value for 'rfdno' [ 449.451752][T18244] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 449.470751][T18244] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 449.499352][T18248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.794431][T32688] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10475'. [ 449.809214][T32688] netlink: 'syz.5.10475': attribute type 7 has an invalid length. [ 449.836178][T32688] netlink: 'syz.5.10475': attribute type 8 has an invalid length. [ 449.844246][T32688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10475'. [ 449.866011][T32688] erspan0: entered promiscuous mode [ 449.885156][T32688] gretap0: entered promiscuous mode [ 449.903438][T32693] loop8: detected capacity change from 0 to 512 [ 449.912325][T32688] erspan0: left promiscuous mode [ 449.920276][T32688] gretap0: left promiscuous mode [ 449.926282][T32693] FAT-fs (loop8): Directory bread(block 199916) failed [ 449.933772][T32693] FAT-fs (loop8): Directory bread(block 199917) failed [ 449.950926][T32693] FAT-fs (loop8): Directory bread(block 199918) failed [ 449.958528][T32693] FAT-fs (loop8): Directory bread(block 199919) failed [ 449.966530][T32693] FAT-fs (loop8): Directory bread(block 199920) failed [ 449.973572][T32693] FAT-fs (loop8): Directory bread(block 199921) failed [ 449.981462][T32693] FAT-fs (loop8): Directory bread(block 199922) failed [ 449.989542][T32693] FAT-fs (loop8): Directory bread(block 199923) failed [ 450.043432][T32693] FAT-fs (loop8): FAT read failed (blocknr 128) [ 450.092425][T32712] loop8: detected capacity change from 0 to 256 [ 450.175061][ T309] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.245337][ T309] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.349281][T32736] geneve2: entered promiscuous mode [ 450.380568][ T309] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.399857][T32746] loop5: detected capacity change from 0 to 512 [ 450.431420][T32748] netlink: 88 bytes leftover after parsing attributes in process `syz.9.10492'. [ 450.490913][T32751] xt_hashlimit: size too large, truncated to 1048576 [ 450.505651][ T309] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.530185][T18240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.567835][T32694] chnl_net:caif_netlink_parms(): no params data found [ 450.761354][ T309] bridge_slave_1: left allmulticast mode [ 450.767136][ T309] bridge_slave_1: left promiscuous mode [ 450.805534][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.821176][ T332] loop9: detected capacity change from 0 to 512 [ 450.827930][ T332] ext4: Unknown parameter 'uid<00000000000000060929' [ 450.840124][ T309] bridge_slave_0: left allmulticast mode [ 450.845815][ T309] bridge_slave_0: left promiscuous mode [ 450.852296][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.962219][ T309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.972328][ T309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.982582][ T309] bond0 (unregistering): Released all slaves [ 450.986547][ T307] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 450.996208][ T307] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 450.996447][T32694] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.011251][T32694] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.018511][T32694] bridge_slave_0: entered allmulticast mode [ 451.025288][T32694] bridge_slave_0: entered promiscuous mode [ 451.034842][ T332] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10502'. [ 451.074094][ T309] hsr_slave_0: left promiscuous mode [ 451.093557][ T309] hsr_slave_1: left promiscuous mode [ 451.110906][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.118314][ T309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.234818][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.249632][ T309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.270676][ T309] veth1_macvtap: left promiscuous mode [ 451.280546][ T309] veth0_macvtap: left promiscuous mode [ 451.291449][ T309] veth1_vlan: left promiscuous mode [ 451.302536][ T309] veth0_vlan: left promiscuous mode [ 451.434811][ T309] team0 (unregistering): Port device team_slave_1 removed [ 451.444670][ T309] team0 (unregistering): Port device team_slave_0 removed [ 451.486194][T32694] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.494501][T32694] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.504717][T32694] bridge_slave_1: entered allmulticast mode [ 451.511448][T32694] bridge_slave_1: entered promiscuous mode [ 451.517790][ T338] netlink: 'syz.5.10506': attribute type 41 has an invalid length. [ 451.526233][ T345] tipc: Started in network mode [ 451.532186][ T345] tipc: Node identity ac14142f, cluster identity 4711 [ 451.542366][ T345] tipc: New replicast peer: 0.0.0.0 [ 451.559564][ T345] tipc: Enabled bearer , priority 10 [ 451.569273][ T348] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 451.579601][T18239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.623136][ T367] RDS: rds_bind could not find a transport for ::3:0:20:0, load rds_tcp or rds_rdma? [ 451.638274][T32694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.682446][T32694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.723929][T32694] team0: Port device team_slave_0 added [ 451.761800][T32694] team0: Port device team_slave_1 added [ 451.851486][T32694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.861999][T32694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.905039][T32694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.916563][T32694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.929085][T32694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.959942][T32694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.982018][ T407] xt_hashlimit: size too large, truncated to 1048576 [ 452.050802][T32694] hsr_slave_0: entered promiscuous mode [ 452.060311][T32694] hsr_slave_1: entered promiscuous mode [ 452.066313][T32694] debugfs: 'hsr0' already exists in 'hsr' [ 452.079915][T32694] Cannot create hsr debugfs directory [ 452.289267][T18225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.441539][T32694] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 452.457239][T32694] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 452.466624][T32694] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.476815][T32694] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.553129][T32694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.577857][T32694] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.592052][T21160] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.599155][T21160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.609422][T18234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.632701][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.639806][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.669135][T18225] tipc: Node number set to 2886997039 [ 452.738928][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 452.738945][ T28] audit: type=1400 audit(1775042579.724:27516): avc: denied { read write } for pid=493 comm="syz.8.10540" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 452.782756][ T28] audit: type=1400 audit(1775042579.724:27517): avc: denied { open } for pid=493 comm="syz.8.10540" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 452.818757][ T28] audit: type=1400 audit(1775042579.804:27518): avc: denied { ioctl } for pid=493 comm="syz.8.10540" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 452.880111][T32694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.923878][ T508] xt_hashlimit: size too large, truncated to 1048576 [ 453.045119][T32694] veth0_vlan: entered promiscuous mode [ 453.067655][T32694] veth1_vlan: entered promiscuous mode [ 453.079808][ T534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.102804][ T534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.114721][ T534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.123935][T32694] veth0_macvtap: entered promiscuous mode [ 453.134148][T32694] veth1_macvtap: entered promiscuous mode [ 453.141309][ T534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.169834][ T534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.179494][T32694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.210283][T32694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.265628][T21173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.299879][T21173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.314703][ T564] loop9: detected capacity change from 0 to 512 [ 453.325001][T21173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.344254][T21173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.372828][ T564] FAT-fs (loop9): Directory bread(block 199916) failed [ 453.381353][ T564] FAT-fs (loop9): Directory bread(block 199917) failed [ 453.396571][ T564] FAT-fs (loop9): Directory bread(block 199918) failed [ 453.417980][ T564] FAT-fs (loop9): Directory bread(block 199919) failed [ 453.439899][ T564] FAT-fs (loop9): Directory bread(block 199920) failed [ 453.470585][ T564] FAT-fs (loop9): Directory bread(block 199921) failed [ 453.506429][ T564] FAT-fs (loop9): Directory bread(block 199922) failed [ 453.520072][ T564] FAT-fs (loop9): Directory bread(block 199923) failed [ 453.617535][ T600] loop8: detected capacity change from 0 to 512 [ 453.656774][ T564] FAT-fs (loop9): FAT read failed (blocknr 128) [ 453.680348][ T600] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.722332][ T600] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 453.749529][ T28] audit: type=1400 audit(1775042580.724:27519): avc: denied { map } for pid=609 comm="syz.2.10562" path="socket:[100676]" dev="sockfs" ino=100676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 453.786530][ T28] audit: type=1400 audit(1775042580.724:27520): avc: denied { read } for pid=609 comm="syz.2.10562" path="socket:[100676]" dev="sockfs" ino=100676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 453.827590][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.882837][ T631] loop5: detected capacity change from 0 to 512 [ 453.899248][ T629] loop8: detected capacity change from 0 to 512 [ 453.913269][ T631] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.10569: inode has both inline data and extents flags [ 453.927239][ T629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 453.936465][ T629] EXT4-fs: Ignoring removed oldalloc option [ 453.955924][ T631] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 453.959064][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 453.961239][ T631] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.10569: couldn't read orphan inode 15 (err -117) [ 453.968242][ C1] EXT4-fs (loop5): initial error at time 1775042580: ext4_orphan_get:1397: inode 15 [ 453.995951][ C1] EXT4-fs (loop5): last error at time 1775042580: ext4_orphan_get:1397: inode 15 [ 454.005574][ T629] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 454.013971][ T631] loop5: lost filesystem error report for type 5 error -117 [ 454.014779][ T631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.036781][ T629] System zones: 0-2, 18-18, 34-34 [ 454.055225][ T629] EXT4-fs (loop8): orphan cleanup on readonly fs [ 454.079668][ T629] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 454.094889][ T629] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 454.096252][ T631] EXT4-fs error (device loop5): ext4_check_dx_root:2201: inode #2: comm syz.5.10569: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 454.117558][ T629] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.10566: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 454.136116][ T629] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 454.137570][ T629] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.10566: couldn't read orphan inode 13 (err -117) [ 454.146814][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 454.146838][ C0] EXT4-fs (loop8): last error at time 1775042581: ext4_ext_check_inode:521: inode 13 [ 454.177941][T23392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.187777][ T629] loop8: lost filesystem error report for type 5 error -117 [ 454.217555][ T629] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 454.245934][ T666] loop5: detected capacity change from 0 to 512 [ 454.254524][ T666] ext4: Unknown parameter 'uid<00000000000000060929' [ 454.262147][ T629] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.284715][ T666] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10586'. [ 454.505343][ T697] netlink: 'syz.5.10591': attribute type 15 has an invalid length. [ 454.615387][ T28] audit: type=1400 audit(1775042581.604:27521): avc: denied { create } for pid=716 comm="syz.6.10593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 454.657181][ T718] loop5: detected capacity change from 0 to 4096 [ 454.676771][ T28] audit: type=1400 audit(1775042581.604:27522): avc: denied { setopt } for pid=716 comm="syz.6.10593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 454.698611][ T9916] net_ratelimit: 7 callbacks suppressed [ 454.698625][ T9916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.712256][T18242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.725085][ T28] audit: type=1400 audit(1775042581.604:27523): avc: denied { bind } for pid=716 comm="syz.6.10593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 454.727354][ T718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.744854][ T28] audit: type=1400 audit(1775042581.604:27524): avc: denied { node_bind } for pid=716 comm="syz.6.10593" saddr=100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 454.778894][ T28] audit: type=1400 audit(1775042581.604:27525): avc: denied { write } for pid=716 comm="syz.6.10593" laddr=100.1.1.0 lport=11433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 454.853892][T23392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.979012][ T738] xt_hashlimit: size too large, truncated to 1048576 [ 454.979188][ T748] program syz.5.10592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.020835][ T752] loop2: detected capacity change from 0 to 1024 [ 455.091158][ T752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.168705][ T774] netlink: 'syz.9.10598': attribute type 21 has an invalid length. [ 455.215911][T32694] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.273678][ T783] loop2: detected capacity change from 0 to 4096 [ 455.297940][ T783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.330995][ T769] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10596'. [ 455.367368][T32694] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.478523][ T800] loop2: detected capacity change from 0 to 1024 [ 455.488294][ T800] EXT4-fs: inline encryption not supported [ 455.527111][ T800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 455.557665][ T811] loop5: detected capacity change from 0 to 512 [ 455.576323][ T800] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.598860][ T811] EXT4-fs: Ignoring removed i_version option [ 455.631644][ T811] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 455.665059][ T811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 455.674685][ T800] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: block 3: comm syz.2.10602: lblock 3 mapped to illegal pblock 3 (length 3) [ 455.700017][ T811] System zones: 1-12 [ 455.704055][ T811] EXT4-fs (loop5): orphan cleanup on readonly fs [ 455.719260][ T811] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 33619980: comm syz.5.10605: invalid block [ 455.731575][ T800] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 455.737360][ T811] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 455.744041][T18242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.757134][ T827] EXT4-fs: Ignoring removed oldalloc option [ 455.767337][ T800] EXT4-fs (loop2): This should not happen!! Data will be lost [ 455.767337][ T800] [ 455.777017][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 455.777055][ C0] EXT4-fs (loop5): initial error at time 1775042582: ext4_get_branch:178: inode 11: block 33619980 [ 455.777106][ C0] EXT4-fs (loop5): last error at time 1775042582: ext4_get_branch:178: inode 11: block 33619980 [ 455.779147][ T811] EXT4-fs (loop5): Remounting filesystem read-only [ 455.812898][ T826] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: block 8: comm syz.2.10602: lblock 8 mapped to illegal pblock 8 (length 4) [ 455.825284][ T811] EXT4-fs (loop5): 1 truncate cleaned up [ 455.834928][ T827] EXT4-fs error (device loop8): ext4_iget_extra_inode:5040: inode #15: comm syz.8.10607: corrupted in-inode xattr: invalid ea_ino [ 455.848633][ T826] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 455.863615][ T826] EXT4-fs (loop2): This should not happen!! Data will be lost [ 455.863615][ T826] [ 455.869866][ T811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 455.877824][ T826] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: comm syz.2.10602: lblock 0 mapped to illegal pblock 0 (length 3) [ 455.900005][ T826] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 455.912548][ T826] EXT4-fs (loop2): This should not happen!! Data will be lost [ 455.912548][ T826] [ 455.912935][ T827] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 455.944113][ T827] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.10607: couldn't read orphan inode 15 (err -117) [ 455.953292][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 455.953314][ C0] EXT4-fs (loop8): initial error at time 1775042582: ext4_iget_extra_inode:5040: inode 15 [ 455.953378][ C0] EXT4-fs (loop8): last error at time 1775042582: ext4_iget_extra_inode:5040: inode 15 [ 455.999057][ T40] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: block 7: comm kworker/u8:2: lblock 7 mapped to illegal pblock 7 (length 1) [ 456.014095][ T827] loop8: lost filesystem error report for type 5 error -117 [ 456.014166][ T40] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 456.019558][ T827] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.021896][ T40] EXT4-fs (loop2): This should not happen!! Data will be lost [ 456.021896][ T40] [ 456.057596][T23392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 456.068068][ T40] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 456.071653][ T839] bridge1: entered promiscuous mode [ 456.088042][ T839] bridge1: entered allmulticast mode [ 456.103134][ T839] team0: Port device bridge1 added [ 456.122565][ T40] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 456.138287][ T847] bridge0: port 4(team0) entered blocking state [ 456.144867][ T847] bridge0: port 4(team0) entered disabled state [ 456.152030][T32694] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 456.164589][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.176023][ T847] team0: entered allmulticast mode [ 456.199172][ T847] team_slave_0: entered allmulticast mode [ 456.212647][ T847] team_slave_1: entered allmulticast mode [ 456.222024][ T847] team0: entered promiscuous mode [ 456.227324][ T847] team_slave_0: entered promiscuous mode [ 456.269211][ T847] team_slave_1: entered promiscuous mode [ 456.619167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.731688][ T919] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10638'. [ 456.771585][T18242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.844790][ T936] bridge1: entered promiscuous mode [ 456.850874][ T936] bridge1: entered allmulticast mode [ 456.860677][ T936] team0: Port device bridge1 added [ 456.877204][ T936] bridge0: port 3(team0) entered blocking state [ 456.891275][ T936] bridge0: port 3(team0) entered disabled state [ 456.900901][ T936] team0: entered allmulticast mode [ 456.906078][ T936] team_slave_0: entered allmulticast mode [ 456.912194][ T936] team_slave_1: entered allmulticast mode [ 456.919429][ T936] team0: entered promiscuous mode [ 456.924655][ T936] team_slave_0: entered promiscuous mode [ 456.930715][ T936] team_slave_1: entered promiscuous mode [ 456.937156][ T936] bridge0: port 3(team0) entered blocking state [ 456.943507][ T936] bridge0: port 3(team0) entered forwarding state [ 457.004901][ T952] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 457.004901][ T952] [ 457.089184][ T9916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.107184][ T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.146984][ T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.174757][ T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.193401][ T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.273124][ T9916] kernel write not supported for file /sg0 (pid: 9916 comm: kworker/1:8) [ 457.370097][ T990] 9pnet: p9_errstr2errno: server reported unknown error  [ 457.892150][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 457.892166][ T28] audit: type=1400 audit(1775042584.884:27567): avc: denied { map } for pid=1007 comm="syz.2.10651" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 458.174811][ T1031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 458.199112][ T1031] EXT4-fs: Ignoring removed oldalloc option [ 458.211981][ T1031] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 458.225898][ T1031] System zones: 0-2, 18-18, 34-34 [ 458.239518][ T1031] EXT4-fs (loop2): orphan cleanup on readonly fs [ 458.248139][ T1031] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 458.272447][ T1022] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10657'. [ 458.282700][ T1031] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 458.299322][ T1031] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.10660: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 458.399693][ T1031] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 458.399929][ T1031] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.10660: couldn't read orphan inode 13 (err -117) [ 458.409097][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 458.409118][ C0] EXT4-fs (loop2): last error at time 1775042585: ext4_ext_check_inode:521: inode 13 [ 458.437066][ T1031] loop2: lost filesystem error report for type 5 error -117 [ 458.437819][ T1031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 458.461146][ T1031] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.647328][ T1041] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10672'. [ 458.662076][ T1044] set_capacity_and_notify: 4 callbacks suppressed [ 458.662094][ T1044] loop8: detected capacity change from 0 to 512 [ 458.675103][ T1041] netlink: 'syz.6.10672': attribute type 7 has an invalid length. [ 458.683609][ T1044] EXT4-fs: Ignoring removed i_version option [ 458.695077][ T1041] netlink: 'syz.6.10672': attribute type 8 has an invalid length. [ 458.726841][ T1044] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 458.736743][ T1041] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10672'. [ 458.746552][ T1044] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 458.754541][ T1044] System zones: 1-12 [ 458.758562][ T1044] EXT4-fs (loop8): orphan cleanup on readonly fs [ 458.765997][ T1044] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 33619980: comm syz.8.10663: invalid block [ 458.770985][ T1041] erspan0: entered promiscuous mode [ 458.780910][ T1044] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 458.783321][ T1044] EXT4-fs (loop8): Remounting filesystem read-only [ 458.792480][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 458.792496][ C1] EXT4-fs (loop8): initial error at time 1775042585: ext4_get_branch:178: inode 11: block 33619980 [ 458.792542][ C1] EXT4-fs (loop8): last error at time 1775042585: ext4_get_branch:178: inode 11: block 33619980 [ 458.824210][ T1041] gretap0: entered promiscuous mode [ 458.826779][ T1044] EXT4-fs (loop8): 1 truncate cleaned up [ 458.837830][ T1044] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 458.870141][ T1041] erspan0: left promiscuous mode [ 458.891364][ T1041] gretap0: left promiscuous mode [ 458.912964][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 458.923987][ T1050] netlink: 61211 bytes leftover after parsing attributes in process `syz.9.10665'. [ 459.049623][ T1063] bridge1: entered promiscuous mode [ 459.062629][ T1063] bridge1: entered allmulticast mode [ 459.070943][ T1063] team0: Port device bridge1 added [ 459.083781][ T1063] bridge0: port 3(team0) entered blocking state [ 459.095253][ T1063] bridge0: port 3(team0) entered disabled state [ 459.109243][ T1063] team0: entered allmulticast mode [ 459.114935][ T1063] team_slave_0: entered allmulticast mode [ 459.121633][ T1063] team_slave_1: entered allmulticast mode [ 459.150042][ T1063] team0: entered promiscuous mode [ 459.155093][ T1063] team_slave_0: entered promiscuous mode [ 459.169418][ T1063] team_slave_1: entered promiscuous mode [ 459.176968][ T1063] bridge0: port 3(team0) entered blocking state [ 459.183320][ T1063] bridge0: port 3(team0) entered forwarding state [ 459.296791][ T1076] loop2: detected capacity change from 0 to 1024 [ 459.305579][ T1075] loop9: detected capacity change from 0 to 512 [ 459.319878][ T1076] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 459.331987][ T1075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 459.357257][ T1076] EXT4-fs error (device loop2): ext4_map_blocks:786: inode #3: block 2: comm syz.2.10675: lblock 2 mapped to illegal pblock 2 (length 1) [ 459.376869][ T1075] EXT4-fs: Ignoring removed oldalloc option [ 459.389105][ T1076] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 459.389334][ T1076] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 459.406596][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 459.406613][ C1] EXT4-fs (loop2): initial error at time 1775042586: ext4_map_blocks:786: inode 3: block 2 [ 459.406649][ C1] EXT4-fs (loop2): last error at time 1775042586: ext4_map_blocks:786: inode 3: block 2 [ 459.456432][ T1075] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 459.466320][ T1075] System zones: 0-2, 18-18, 34-34 [ 459.476477][ T1075] EXT4-fs (loop9): orphan cleanup on readonly fs [ 459.491670][ T1075] EXT4-fs warning (device loop9): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 459.516624][ T1076] EXT4-fs error (device loop2): ext4_map_blocks:786: inode #3: block 48: comm syz.2.10675: lblock 0 mapped to illegal pblock 48 (length 1) [ 459.542030][ T1075] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 459.548887][ T1075] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #13: comm syz.9.10674: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 459.569259][ T1076] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 459.569427][ T1076] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 459.601961][ T1075] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 459.602164][ T1075] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.10674: couldn't read orphan inode 13 (err -117) [ 459.611334][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 459.611365][ C1] EXT4-fs (loop9): last error at time 1775042586: ext4_ext_check_inode:521: inode 13 [ 459.639431][ T1076] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.10675: Failed to acquire dquot type 0 [ 459.653419][ T1076] loop2: lost filesystem error report for type 5 error -117 [ 459.653596][ T1076] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 459.680553][ T1075] loop9: lost filesystem error report for type 5 error -117 [ 459.681034][ T1075] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 459.701044][ T1076] loop2: lost filesystem error report for type 5 error -117 [ 459.701174][ T1076] EXT4-fs error (device loop2): ext4_evict_inode:265: inode #11: comm syz.2.10675: mark_inode_dirty error [ 459.719946][ T1076] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 459.720049][ T1076] EXT4-fs warning (device loop2): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 459.743829][ T1075] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.753045][ T28] audit: type=1400 audit(1775042586.734:27568): avc: denied { getopt } for pid=1080 comm="syz.6.10676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 459.778935][ T1076] EXT4-fs (loop2): 1 orphan inode deleted [ 459.789294][ T40] EXT4-fs error (device loop2): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 459.816666][ T40] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 459.816826][ T40] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 459.837635][ T1076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.879163][ T40] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 0 [ 459.896749][ T1076] EXT4-fs (loop2): shut down requested (2) [ 459.899342][T18248] net_ratelimit: 56 callbacks suppressed [ 459.899355][T18248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.919286][ T28] audit: type=1400 audit(1775042586.904:27569): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 459.969401][T32694] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.978677][ T309] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 460.013626][ T28] audit: type=1400 audit(1775042586.904:27570): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.089690][ T28] audit: type=1400 audit(1775042586.904:27571): avc: denied { append } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 460.120946][ T1092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10680'. [ 460.129220][T18230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.133576][ T1092] netlink: 'syz.2.10680': attribute type 7 has an invalid length. [ 460.156458][ T28] audit: type=1400 audit(1775042586.904:27572): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 460.168503][ T1092] netlink: 'syz.2.10680': attribute type 8 has an invalid length. [ 460.199089][ T1092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10680'. [ 460.221288][ T1092] erspan0: entered promiscuous mode [ 460.239741][ T1092] gretap0: entered promiscuous mode [ 460.259301][ T1092] erspan0: left promiscuous mode [ 460.265199][ T1092] gretap0: left promiscuous mode [ 460.607936][T31950] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 460.629133][T31950] CPU: 1 UID: 0 PID: 31950 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 460.629160][T31950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 460.629174][T31950] Call Trace: [ 460.629182][T31950] [ 460.629191][T31950] __dump_stack+0x1d/0x30 [ 460.629296][T31950] dump_stack_lvl+0x95/0xd0 [ 460.629321][T31950] dump_stack+0x15/0x1b [ 460.629342][T31950] dump_header+0x80/0x240 [ 460.629368][T31950] oom_kill_process+0x295/0x350 [ 460.629393][T31950] out_of_memory+0x97d/0xb80 [ 460.629413][T31950] try_charge_memcg+0x62e/0xa10 [ 460.629477][T31950] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 460.629555][T31950] __swap_cache_prepare_and_add+0x67/0x460 [ 460.629618][T31950] ? alloc_pages_mpol+0x217/0x260 [ 460.629651][T31950] swap_cache_alloc_folio+0xa2/0x120 [ 460.629681][T31950] swap_cluster_readahead+0x26e/0x3d0 [ 460.629710][T31950] swapin_readahead+0xde/0x840 [ 460.629810][T31950] ? __rcu_read_unlock+0x4e/0x70 [ 460.629843][T31950] ? __perf_event_task_sched_in+0xa65/0xad0 [ 460.629905][T31950] ? __list_add_valid_or_report+0x38/0xe0 [ 460.629927][T31950] ? xfd_validate_state+0x45/0xf0 [ 460.629952][T31950] ? __rcu_read_unlock+0x4e/0x70 [ 460.630030][T31950] ? swap_cache_get_folio+0x26f/0x280 [ 460.630055][T31950] do_swap_page+0x2fe/0x21e0 [ 460.630154][T31950] ? __schedule+0x93c/0xd40 [ 460.630178][T31950] ? __rcu_read_lock+0x36/0x50 [ 460.630259][T31950] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 460.630320][T31950] handle_mm_fault+0xb46/0x3020 [ 460.630405][T31950] ? vma_start_read+0x1c7/0x2c0 [ 460.630461][T31950] do_user_addr_fault+0x62f/0x1050 [ 460.630494][T31950] ? trace_page_fault_user+0x1f/0xe0 [ 460.630523][T31950] exc_page_fault+0x62/0xa0 [ 460.630541][T31950] asm_exc_page_fault+0x26/0x30 [ 460.630611][T31950] RIP: 0033:0x7ff421357997 [ 460.630628][T31950] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 460.630644][T31950] RSP: 002b:00007ffc659ca500 EFLAGS: 00010202 [ 460.630660][T31950] RAX: 0000000000000000 RBX: 00005555851e5500 RCX: 00007ff421357997 [ 460.630675][T31950] RDX: 00007ffc659ca540 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.630688][T31950] RBP: 00007ffc659ca5ac R08: 0000000000000000 R09: 0000000000000000 [ 460.630741][T31950] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 460.630752][T31950] R13: 00000000000927c0 R14: 0000000000070518 R15: 00007ffc659ca600 [ 460.630772][T31950] [ 460.630780][T31950] memory: usage 307200kB, limit 307200kB, failcnt 107 [ 460.885043][T31950] memory+swap: usage 307680kB, limit 9007199254740988kB, failcnt 0 [ 460.892978][T31950] kmem: usage 299000kB, limit 9007199254740988kB, failcnt 0 [ 460.900409][T31950] Memory cgroup stats for /syz8: [ 460.900699][T31950] cache 0 [ 460.908534][T31950] rss 8388608 [ 460.911907][T31950] shmem 0 [ 460.914834][T31950] mapped_file 0 [ 460.918273][T31950] dirty 0 [ 460.921249][T31950] writeback 0 [ 460.924608][T31950] workingset_refault_anon 536 [ 460.929357][T31950] workingset_refault_file 0 [ 460.933914][T31950] swap 491520 [ 460.937185][T31950] swapcached 6787072 [ 460.939791][T18248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.941106][T31950] pgpgin 97190 [ 460.952592][T31950] pgpgout 95140 [ 460.956110][T31950] pgfault 101262 [ 460.959697][T31950] pgmajfault 69 [ 460.963160][T31950] inactive_anon 0 [ 460.966801][T31950] active_anon 0 [ 460.970279][T31950] inactive_file 0 [ 460.973894][T31950] active_file 8192 [ 460.977609][T31950] unevictable 8388608 [ 460.981623][T31950] hierarchical_memory_limit 314572800 [ 460.986986][T31950] hierarchical_memsw_limit 9223372036854771712 [ 460.993315][T31950] total_cache 0 [ 460.996766][T31950] total_rss 8388608 [ 461.000672][T31950] total_shmem 0 [ 461.004182][T31950] total_mapped_file 0 [ 461.008148][T31950] total_dirty 0 [ 461.011656][T31950] total_writeback 0 [ 461.015446][T31950] total_workingset_refault_anon 536 [ 461.020752][T31950] total_workingset_refault_file 0 [ 461.025873][T31950] total_swap 491520 [ 461.029711][T31950] total_swapcached 6787072 [ 461.034109][T31950] total_pgpgin 97190 [ 461.037986][T31950] total_pgpgout 95140 [ 461.042045][T31950] total_pgfault 101262 [ 461.046166][T31950] total_pgmajfault 69 [ 461.050309][T31950] total_inactive_anon 0 [ 461.054477][T31950] total_active_anon 0 [ 461.058470][T31950] total_inactive_file 0 [ 461.062692][T31950] total_active_file 8192 [ 461.066922][T31950] total_unevictable 8388608 [ 461.071458][T31950] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.10678,pid=1085,uid=0 [ 461.086279][T31950] Memory cgroup out of memory: Killed process 1085 (syz.8.10678) total-vm:96212kB, anon-rss:9416kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 461.969297][T18248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.009255][T18240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.169218][T18230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.050942][T18240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.289769][T18240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.297914][T18227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.099194][T18240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.139188][T18248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.170309][T18248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.329294][T18227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.219214][T18248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.259218][T18240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.419880][T18225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.299221][T18248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.690152][T18230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.329536][T18242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.786815][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 471.786851][ T28] audit: type=1400 audit(1775042598.764:27574): avc: denied { mounton } for pid=1166 comm="syz.2.10685" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 471.818841][ T28] audit: type=1400 audit(1775042598.774:27575): avc: denied { unmount } for pid=32694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 471.866874][ T1168] IPVS: persistence engine module ip_vs_pe_€ not found [ 471.874818][ T1175] loop8: detected capacity change from 0 to 128 [ 471.888125][ T28] audit: type=1400 audit(1775042598.774:27576): avc: denied { unmount } for pid=32694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 471.909230][ T1175] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 471.942279][ T1175] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 471.969781][T18225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.006178][T21160] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 472.037541][ T28] audit: type=1326 audit(1775042599.024:27577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1194 comm="syz.8.10696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff42139c819 code=0x0 [ 472.113506][ T1159] chnl_net:caif_netlink_parms(): no params data found [ 472.128233][ T1204] program syz.9.10700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.157723][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.175799][ T28] audit: type=1326 audit(1775042599.164:27578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1207 comm="syz.6.10703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b10c9c819 code=0x7ffc0000 [ 472.201075][ T28] audit: type=1326 audit(1775042599.164:27579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1207 comm="syz.6.10703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f1b10c9c819 code=0x7ffc0000 [ 472.227615][ T28] audit: type=1326 audit(1775042599.164:27580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1207 comm="syz.6.10703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b10c9c819 code=0x7ffc0000 [ 472.251883][ T28] audit: type=1326 audit(1775042599.164:27581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1207 comm="syz.6.10703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b10c9c819 code=0x7ffc0000 [ 472.272293][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.285908][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.293375][ T1159] bridge_slave_0: entered allmulticast mode [ 472.300171][ T1159] bridge_slave_0: entered promiscuous mode [ 472.310177][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.331331][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.338535][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.351456][ T1159] bridge_slave_1: entered allmulticast mode [ 472.364841][ T1159] bridge_slave_1: entered promiscuous mode [ 472.379323][T18240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.398322][ T1229] random: crng reseeded on system resumption [ 472.404424][ T28] audit: type=1400 audit(1775042599.384:27582): avc: denied { write } for pid=1228 comm="syz.9.10708" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 472.427997][ T28] audit: type=1400 audit(1775042599.384:27583): avc: denied { open } for pid=1228 comm="syz.9.10708" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 472.451786][T18225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.464169][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.512207][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.526222][ T1159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.537502][ T1159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.557777][ T1235] loop9: detected capacity change from 0 to 256 [ 472.568870][ T1235] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 472.589887][ T1159] team0: Port device team_slave_0 added [ 472.597443][ T1159] team0: Port device team_slave_1 added [ 472.633866][ T1241] loop9: detected capacity change from 0 to 512 [ 472.645193][ T1241] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 472.661810][ T1159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.669191][ T1159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.696157][ T1159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.726918][ T1159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.741641][ T1159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.770889][ T1159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.882147][ T1159] hsr_slave_0: entered promiscuous mode [ 472.891355][ T1159] hsr_slave_1: entered promiscuous mode [ 472.897343][ T1159] debugfs: 'hsr0' already exists in 'hsr' [ 472.903797][ T1159] Cannot create hsr debugfs directory [ 472.914036][ T30] team0: left allmulticast mode [ 472.919148][ T30] team_slave_0: left allmulticast mode [ 472.924611][ T30] team_slave_1: left allmulticast mode [ 472.938201][ T1264] netlink: 'syz.8.10721': attribute type 1 has an invalid length. [ 472.940234][ T30] team0: left promiscuous mode [ 472.951069][ T30] team_slave_0: left promiscuous mode [ 472.956567][ T30] team_slave_1: left promiscuous mode [ 472.962236][ T30] bridge0: port 3(team0) entered disabled state [ 472.969307][ T30] bridge_slave_1: left allmulticast mode [ 472.974931][ T30] bridge_slave_1: left promiscuous mode [ 472.980652][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.988306][ T30] bridge_slave_0: left allmulticast mode [ 472.994249][ T30] bridge_slave_0: left promiscuous mode [ 473.000004][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.041147][T18225] SELinux: failure in sel_netif_sid_slow(), invalid network interface (70) [ 473.090889][ T30] team0: Port device bridge1 removed [ 473.140854][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.150914][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.160523][ T30] bond0 (unregistering): Released all slaves [ 473.167920][ T1209] chnl_net:caif_netlink_parms(): no params data found [ 473.192722][ T1264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.206368][ T1266] bond1: (slave geneve2): making interface the new active one [ 473.215292][ T1266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.223763][ T1266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.232135][ T1266] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 473.288454][ T1277] loop8: detected capacity change from 0 to 512 [ 473.289793][T18225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.333528][ T30] hsr_slave_0: left promiscuous mode [ 473.333743][ T1277] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.351665][ T1277] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.362757][ T30] hsr_slave_1: left promiscuous mode [ 473.371537][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.388712][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.401547][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.411610][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.419226][T18248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.431200][ T30] veth1_macvtap: left promiscuous mode [ 473.436989][ T30] veth0_macvtap: left promiscuous mode [ 473.442679][ T30] veth1_vlan: left promiscuous mode [ 473.448025][ T30] veth0_vlan: left promiscuous mode [ 473.536776][ T30] team0 (unregistering): Port device team_slave_1 removed [ 473.552664][ T30] team0 (unregistering): Port device team_slave_0 removed [ 473.652295][ T1209] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.659758][ T1209] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.667001][ T1209] bridge_slave_0: entered allmulticast mode [ 473.674469][ T1209] bridge_slave_0: entered promiscuous mode [ 473.698326][ T1209] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.705896][ T1209] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.713188][ T1209] bridge_slave_1: entered allmulticast mode [ 473.719744][ T1209] bridge_slave_1: entered promiscuous mode [ 473.754170][ T1209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.772827][ T1209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.830118][ T1209] team0: Port device team_slave_0 added [ 473.837686][ T1209] team0: Port device team_slave_1 added [ 473.868382][ T1209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.875579][ T1209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.902628][ T1209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.942516][ T1209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.971895][ T1209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.998068][ T1209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.065809][ T1209] hsr_slave_0: entered promiscuous mode [ 474.073520][ T1209] hsr_slave_1: entered promiscuous mode [ 474.081182][ T1209] debugfs: 'hsr0' already exists in 'hsr' [ 474.086912][ T1209] Cannot create hsr debugfs directory [ 474.325502][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.364807][ T1337] loop8: detected capacity change from 0 to 512 [ 474.396627][ T1337] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.420005][ T1159] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 474.437221][ T1337] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 474.454341][ T1159] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 474.472223][ T1337] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.473664][ T1159] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 474.495114][ T1337] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 474.509096][ T1159] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 474.571384][ T1159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.571491][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.596808][ T1159] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.627100][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.634216][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.656646][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.663806][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.708779][ T1209] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 474.748411][ T1209] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 474.774633][ T1209] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 474.797733][ T1209] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 474.849295][ T5974] Bluetooth: hci0: command 0x1003 tx timeout [ 474.853246][ T1159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.862430][ T3895] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 474.928367][ T1209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.957028][ T1209] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.991295][ T545] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.998378][ T545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.022379][ T1159] veth0_vlan: entered promiscuous mode [ 475.033314][ T545] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.040406][ T545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.060997][ T1159] veth1_vlan: entered promiscuous mode [ 475.073955][ T1209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 475.098367][ T1209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.136935][ T1159] veth0_macvtap: entered promiscuous mode [ 475.167457][ T1159] veth1_macvtap: entered promiscuous mode [ 475.194131][ T1159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.226774][ T1159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.246422][ T1209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.258102][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.268818][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.286343][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.296208][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.378898][ T1455] netlink: 'syz.8.10735': attribute type 21 has an invalid length. [ 475.419628][ T309] net_ratelimit: 8 callbacks suppressed [ 475.419645][ T309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.489503][T18242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.497642][T18230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.500781][ T1209] veth0_vlan: entered promiscuous mode [ 475.514632][ T1482] netlink: 64859 bytes leftover after parsing attributes in process `syz.9.10740'. [ 475.542599][ T1209] veth1_vlan: entered promiscuous mode [ 475.601315][ T1209] veth0_macvtap: entered promiscuous mode [ 475.610494][ T1209] veth1_macvtap: entered promiscuous mode [ 475.624048][ T1209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.634160][ T1209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.649802][T18242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.672838][ T545] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.690558][ T545] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.699486][ T545] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.714812][ T545] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.754295][ T1511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.769366][T18230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.806245][T21173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.833595][ T1528] loop8: detected capacity change from 0 to 1024 [ 475.859505][ T1528] EXT4-fs: Ignoring removed orlov option [ 475.913783][ T1528] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.973585][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.020125][ T1559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.029687][ T1559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.529305][T18242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.585925][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.687390][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 476.718429][ T1678] sctp: [Deprecated]: syz.1.10772 (pid 1678) Use of int in max_burst socket option. [ 476.718429][ T1678] Use struct sctp_assoc_value instead [ 476.769123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.817664][ T1698] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10778'. [ 476.870359][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 476.870384][ T28] audit: type=1400 audit(1775042603.864:27655): avc: denied { connect } for pid=1709 comm="syz.6.10780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 476.943008][ T28] audit: type=1326 audit(1775042603.934:27656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.8.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42139c819 code=0x7ffc0000 [ 476.968178][ T28] audit: type=1326 audit(1775042603.934:27657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.8.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42139c819 code=0x7ffc0000 [ 476.994475][ T28] audit: type=1326 audit(1775042603.934:27658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.8.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42139c819 code=0x7ffc0000 [ 477.020460][ T28] audit: type=1326 audit(1775042603.934:27659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.8.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42139c819 code=0x7ffc0000 [ 477.079226][ T28] audit: type=1326 audit(1775042603.934:27660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.8.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff42139c819 code=0x7ffc0000 [ 477.140324][ T28] audit: type=1326 audit(1775042603.934:27661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.8.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42139c819 code=0x7ffc0000 [ 477.165175][ T28] audit: type=1326 audit(1775042603.934:27662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.8.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42139c819 code=0x7ffc0000 [ 477.189387][ T28] audit: type=1326 audit(1775042603.934:27663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.8.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42139c819 code=0x7ffc0000 [ 477.224432][ T28] audit: type=1326 audit(1775042603.934:27664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.8.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff42139c819 code=0x7ffc0000 [ 477.297348][ T1758] loop8: detected capacity change from 0 to 256 [ 477.341717][ T1758] FAT-fs (loop8): Directory bread(block 64) failed [ 477.348287][ T1758] FAT-fs (loop8): Directory bread(block 65) failed [ 477.362816][ T1758] FAT-fs (loop8): Directory bread(block 66) failed [ 477.371291][ T1758] FAT-fs (loop8): Directory bread(block 67) failed [ 477.378302][ T1758] FAT-fs (loop8): Directory bread(block 68) failed [ 477.385652][ T1758] FAT-fs (loop8): Directory bread(block 69) failed [ 477.392649][ T1758] FAT-fs (loop8): Directory bread(block 70) failed [ 477.408205][ T1758] FAT-fs (loop8): Directory bread(block 71) failed [ 477.423164][ T1758] FAT-fs (loop8): Directory bread(block 72) failed [ 477.432793][ T1758] FAT-fs (loop8): Directory bread(block 73) failed [ 477.477518][ T1758] syz.8.10791: attempt to access beyond end of device [ 477.477518][ T1758] loop8: rw=8912896, sector=1160, nr_sectors = 4 limit=256 [ 477.512125][ T1758] syz.8.10791: attempt to access beyond end of device [ 477.512125][ T1758] loop8: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 477.554165][ T1758] syz.8.10791: attempt to access beyond end of device [ 477.554165][ T1758] loop8: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 477.648824][ T1797] loop8: detected capacity change from 0 to 736 [ 478.003884][ T1848] loop9: detected capacity change from 0 to 512 [ 478.023046][ T1848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 478.041694][ T1848] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.10807: invalid indirect mapped block 4294967295 (level 1) [ 478.064206][ T1848] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 478.064456][ T1848] EXT4-fs (loop9): Remounting filesystem read-only [ 478.073662][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 478.073684][ C0] EXT4-fs (loop9): initial error at time 1775042605: ext4_free_branches:1023: inode 11 [ 478.073714][ C0] EXT4-fs (loop9): last error at time 1775042605: ext4_free_branches:1023: inode 11 [ 478.105855][ T1848] EXT4-fs (loop9): 2 truncates cleaned up [ 478.112249][ T1848] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.140205][T20989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.243069][ T1805] loop8: detected capacity change from 0 to 1024 [ 478.274464][ T1805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 478.285644][ T1877] loop9: detected capacity change from 0 to 128 [ 478.286243][ T1805] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 478.314251][ T1805] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 478.329884][ T1805] System zones: 0-1, 3-36 [ 478.350931][ T1805] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.412938][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.689108][ T5974] Bluetooth: hci0: command 0x1003 tx timeout [ 478.689456][ T3895] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 478.956292][ T1963] syzkaller1: entered promiscuous mode [ 478.971439][ T1963] syzkaller1: entered allmulticast mode [ 479.019899][ T1977] hsr0: entered promiscuous mode [ 479.026482][ T1977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10831'. [ 479.039362][ T1977] hsr_slave_0: left promiscuous mode [ 479.047341][ T1977] hsr_slave_1: left promiscuous mode [ 479.059893][ T1977] hsr0 (unregistering): left promiscuous mode [ 479.971561][ T2036] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10850'. [ 480.055888][ T2038] loop8: detected capacity change from 0 to 2048 [ 480.105963][ T2038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.195815][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.382066][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 480.690353][T18242] net_ratelimit: 15 callbacks suppressed [ 480.690370][T18242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.771337][ T2086] ip6erspan0: left allmulticast mode [ 480.829188][ T2086] bridge1: left promiscuous mode [ 480.834155][ T2086] bridge1: left allmulticast mode [ 480.874630][ T30] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.886531][ T30] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.895231][ T30] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.916816][ T30] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.929266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.069124][ T2109] netlink: 236 bytes leftover after parsing attributes in process `syz.1.10882'. [ 481.088512][ T2109] netlink: 236 bytes leftover after parsing attributes in process `syz.1.10882'. [ 481.098890][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.368052][ T30] Bluetooth: hci1: Frame reassembly failed (-84) [ 481.570279][T18227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.729236][T18248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.239267][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.243093][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 482.243107][ T28] audit: type=1400 audit(1775042609.234:27714): avc: denied { ioctl } for pid=2157 comm="syz.1.10903" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 482.449166][T24487] Bluetooth: hci0: command 0x1003 tx timeout [ 482.449252][ T3895] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 482.544479][ T28] audit: type=1400 audit(1775042609.534:27715): avc: denied { view } for pid=2186 comm="syz.8.10916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 482.611449][ T2195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.619849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.691412][T18227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.779412][T18240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.829366][ T28] audit: type=1400 audit(1775042609.814:27716): avc: denied { ioctl } for pid=2215 comm="syz.8.10929" path="socket:[104405]" dev="sockfs" ino=104405 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 482.860649][ T2218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10930'. [ 482.873279][ T2218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10930'. [ 482.885347][ T2218] netlink: 4676 bytes leftover after parsing attributes in process `syz.0.10930'. [ 482.903698][ T28] audit: type=1400 audit(1775042609.894:27717): avc: denied { connect } for pid=2221 comm="syz.8.10932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 483.094243][ T2240] loop8: detected capacity change from 0 to 1024 [ 483.113873][ T2240] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.159478][T18227] IPVS: starting estimator thread 0... [ 483.255724][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.266122][ T2252] IPVS: using max 2736 ests per chain, 136800 per kthread [ 483.301632][ T2265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10947'. [ 483.315706][ T2265] geneve0: entered promiscuous mode [ 483.321328][ T2265] macsec1: entered promiscuous mode [ 483.326561][ T2265] macsec1: entered allmulticast mode [ 483.332274][ T2265] geneve0: entered allmulticast mode [ 483.339166][ T2265] geneve0: left allmulticast mode [ 483.344366][ T2265] geneve0: left promiscuous mode [ 483.409169][ T5974] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 483.409254][ T3895] Bluetooth: hci1: command 0x1003 tx timeout [ 483.556984][ T2296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10963'. [ 483.833171][ T2314] loop8: detected capacity change from 0 to 2048 [ 483.889960][ T1248] loop8: p2 < > p4 [ 483.895099][ T1248] loop8: p4 size 262144 extends beyond EOD, truncated [ 483.919464][ T2314] loop8: p2 < > p4 [ 483.924602][ T2314] loop8: p4 size 262144 extends beyond EOD, truncated [ 484.103074][ T28] audit: type=1400 audit(1775042611.094:27718): avc: denied { mount } for pid=2329 comm="syz.8.10977" name="/" dev="autofs" ino=105018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 484.254772][ T2338] loop8: detected capacity change from 0 to 512 [ 484.297488][ T2338] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.328982][ T2338] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 484.381073][ T28] audit: type=1400 audit(1775042611.364:27719): avc: denied { ioctl } for pid=2341 comm="syz.1.10980" path="socket:[105032]" dev="sockfs" ino=105032 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 484.475352][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.538905][ T2350] loop8: detected capacity change from 0 to 512 [ 484.581840][ T2350] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.634773][ T2350] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.659655][ T2362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.669684][ T2362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.703294][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.747691][ T2366] loop8: detected capacity change from 0 to 128 [ 484.764860][ T2366] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 484.782515][ T2366] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8) [ 484.790847][ T2366] FAT-fs (loop8): Filesystem has been set read-only [ 484.797545][ T2366] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522) [ 484.819741][ T2366] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522) [ 484.877066][ T2370] loop8: detected capacity change from 0 to 164 [ 484.897891][ T2370] rock: directory entry would overflow storage [ 484.911908][ T2370] rock: sig=0x4f50, size=4, remaining=3 [ 484.926537][ T2370] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 484.980546][ T2373] loop8: detected capacity change from 0 to 128 [ 485.005790][ T28] audit: type=1400 audit(1775042611.994:27720): avc: denied { append } for pid=2372 comm="syz.8.10992" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.059438][ T28] audit: type=1400 audit(1775042612.044:27721): avc: denied { unmount } for pid=31950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 485.545934][T18227] IPVS: starting estimator thread 0... [ 485.636743][ T2422] ip6gre1: entered allmulticast mode [ 485.649863][ T2411] IPVS: using max 2544 ests per chain, 127200 per kthread [ 485.715901][ T2429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11010'. [ 485.729137][T18227] net_ratelimit: 10 callbacks suppressed [ 485.729153][T18227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.899779][T18240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.929435][ T2441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.970217][ T2453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11020'. [ 485.974833][ T2441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.988212][ T2453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11020'. [ 486.009900][ T2441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.015230][ T2453] netlink: 'syz.0.11020': attribute type 6 has an invalid length. [ 486.035966][ T2453] netlink: 'syz.0.11020': attribute type 6 has an invalid length. [ 486.046884][ T2441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.055237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.086387][ T2441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.103568][ T2449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.119505][ T2449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.375707][ T28] audit: type=1400 audit(1775042613.364:27722): avc: denied { watch_reads } for pid=2472 comm="syz.8.11029" path="/159" dev="tmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 486.535743][ T28] audit: type=1400 audit(1775042613.524:27723): avc: denied { firmware_load } for pid=2488 comm="syz.0.11036" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 486.764897][ T2520] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.772098][ T2520] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.838536][ T2520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.865764][ T2520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.929720][ T2520] ip6gre1: left allmulticast mode [ 486.940608][ T2522] pimreg: entered allmulticast mode [ 486.946367][ T2526] pimreg: left allmulticast mode [ 486.961166][ T40] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.977897][ T40] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.993751][ T40] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.009277][ T40] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.082738][ T2542] netlink: 'syz.0.11060': attribute type 29 has an invalid length. [ 487.092283][ T2542] netlink: 'syz.0.11060': attribute type 29 has an invalid length. [ 487.100889][ T2542] netlink: 'syz.0.11060': attribute type 32 has an invalid length. [ 487.108854][ T2542] __nla_validate_parse: 2 callbacks suppressed [ 487.108934][ T2542] netlink: 500 bytes leftover after parsing attributes in process `syz.0.11060'. [ 487.160476][ T2549] netlink: 'syz.1.11063': attribute type 7 has an invalid length. [ 487.169890][ T2549] netlink: 'syz.1.11063': attribute type 7 has an invalid length. [ 487.212050][ T2554] ieee802154 phy0 wpan0: encryption failed: -22 [ 487.326508][ T2569] netlink: 'syz.0.11073': attribute type 1 has an invalid length. [ 487.341516][ T2569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.355672][ T2569] bond1: (slave geneve2): making interface the new active one [ 487.364401][ T2569] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 487.373317][T21163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.382749][T21163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.393548][T21163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.405094][T21163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.453606][ T2584] netlink: 'syz.1.11079': attribute type 1 has an invalid length. [ 487.561192][ T2595] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11084'. [ 487.827292][ T2626] netlink: 'syz.0.11099': attribute type 4 has an invalid length. [ 487.943028][ T2647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11107'. [ 488.017066][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 488.017082][ T28] audit: type=1400 audit(1775042615.004:27726): avc: denied { create } for pid=2651 comm="syz.1.11109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 488.079081][ T28] audit: type=1400 audit(1775042615.044:27727): avc: denied { ioctl } for pid=2651 comm="syz.1.11109" path="socket:[106539]" dev="sockfs" ino=106539 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 488.250541][ T28] audit: type=1400 audit(1775042615.244:27728): avc: denied { listen } for pid=2667 comm="syz.8.11117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 489.071535][ T2676] bridge0: port 3(team0) entered disabled state [ 489.077972][ T2676] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.085153][ T2676] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.109565][ T2755] netlink: 25 bytes leftover after parsing attributes in process `syz.6.11130'. [ 489.118808][ T2755] netlink: 140 bytes leftover after parsing attributes in process `syz.6.11130'. [ 489.167647][ T2676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.180736][ T2676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.483259][ T2755] netlink: 25 bytes leftover after parsing attributes in process `syz.6.11130'. [ 489.508538][ T1432] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.563710][ T1432] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.651082][ T1432] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.690804][ T1432] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.820793][ T28] audit: type=1400 audit(1775042617.814:27729): avc: denied { ioctl } for pid=2885 comm="syz.9.11158" path="socket:[106729]" dev="sockfs" ino=106729 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 491.190071][ T2908] loop9: detected capacity change from 0 to 128 [ 491.485406][ T2921] validate_nla: 1 callbacks suppressed [ 491.485422][ T2921] netlink: 'syz.9.11167': attribute type 1 has an invalid length. [ 491.586442][ T2921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.700112][ T2927] bond1: (slave geneve2): making interface the new active one [ 491.709296][ T2927] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 491.718151][T21160] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.728724][T21160] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.786589][T21160] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.822351][T21160] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.833156][ T2937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.856270][ T2939] loop9: detected capacity change from 0 to 2048 [ 491.874916][ T2937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.894854][ T2939] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.372079][T20989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.316124][ T3011] loop8: detected capacity change from 0 to 2048 [ 493.340719][ T3011] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.626668][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.830380][ T3061] loop8: detected capacity change from 0 to 512 [ 493.887143][ T3061] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #3: comm syz.8.11210: corrupted inode contents [ 493.902164][ T3063] loop9: detected capacity change from 0 to 2048 [ 493.920203][ T3061] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 493.921551][ T3061] EXT4-fs error (device loop8): ext4_dirty_inode:6495: inode #3: comm syz.8.11210: mark_inode_dirty error [ 493.930718][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 493.930735][ C0] EXT4-fs (loop8): initial error at time 1775042620: ext4_do_update_inode:5602: inode 3 [ 493.930759][ C0] EXT4-fs (loop8): last error at time 1775042620: ext4_do_update_inode:5602: inode 3 [ 493.959112][ T3063] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.967930][ T3061] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 493.980669][ T3061] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #3: comm syz.8.11210: corrupted inode contents [ 494.027930][ T3063] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 494.042369][ T3063] EXT4-fs error (device loop9) in ext4_setattr:6028: error 28 [ 494.066711][ T3061] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 494.066919][ T3061] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #3: comm syz.8.11210: mark_inode_dirty error [ 494.099298][T20989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.119886][ T3061] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 494.131794][ T3061] Quota error (device loop8): write_blk: dquota write failed [ 494.154510][ T3061] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 494.172793][ T3061] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.11210: Failed to acquire dquot type 0 [ 494.193204][ T3061] loop8: lost filesystem error report for type 5 error -117 [ 494.194238][ T3061] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #16: comm syz.8.11210: corrupted inode contents [ 494.232075][ T3061] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 494.232253][ T3061] EXT4-fs error (device loop8): ext4_dirty_inode:6495: inode #16: comm syz.8.11210: mark_inode_dirty error [ 494.276277][ T3061] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 494.276507][ T3061] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #16: comm syz.8.11210: corrupted inode contents [ 494.309503][ T3061] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 494.310515][ T3061] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.11210: mark_inode_dirty error [ 494.357488][ T3061] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 494.376473][ T3061] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #16: comm syz.8.11210: corrupted inode contents [ 494.437633][ T3061] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 494.437911][ T3061] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 494.476641][ T3061] loop8: lost filesystem error report for type 5 error -117 [ 494.479084][ T3061] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #16: comm syz.8.11210: corrupted inode contents [ 494.498822][ T3061] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 494.499184][ T3061] EXT4-fs error (device loop8): ext4_truncate:4602: inode #16: comm syz.8.11210: mark_inode_dirty error [ 494.519888][ T3061] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 494.528777][ T3061] loop8: lost filesystem error report for type 5 error -117 [ 494.529449][ T3061] EXT4-fs (loop8): 1 truncate cleaned up [ 494.593288][ T3061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.633574][ T3061] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.677511][ T28] audit: type=1400 audit(1775042621.664:27730): avc: denied { create } for pid=3060 comm="syz.8.11210" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 494.677520][ T3061] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #3: comm syz.8.11210: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 494.677520][ T3061] [ 494.843017][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.849058][ T3061] syz.8.11210 (3061) used greatest stack depth: 8760 bytes left [ 494.940528][ T3089] loop8: detected capacity change from 0 to 1024 [ 494.979338][ T3089] EXT4-fs: inline encryption not supported [ 495.003574][ T3089] EXT4-fs: Ignoring removed nobh option [ 495.048806][ T3089] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 495.069059][ T3089] System zones: 0-1, 3-12 [ 495.074013][ T3089] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.030124][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.115651][ T28] audit: type=1326 audit(1775042623.104:27731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3171 comm="syz.9.11228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010400c819 code=0x7ffc0000 [ 496.179404][ T28] audit: type=1326 audit(1775042623.134:27732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3171 comm="syz.9.11228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010400c819 code=0x7ffc0000 [ 496.203628][ T28] audit: type=1326 audit(1775042623.134:27733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3171 comm="syz.9.11228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f010400c819 code=0x7ffc0000 [ 496.256653][ T28] audit: type=1326 audit(1775042623.134:27734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3171 comm="syz.9.11228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010400c819 code=0x7ffc0000 [ 496.324546][ T28] audit: type=1326 audit(1775042623.134:27735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3171 comm="syz.9.11228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010400c819 code=0x7ffc0000 [ 496.376308][ T28] audit: type=1326 audit(1775042623.134:27736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3171 comm="syz.9.11228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f010400c819 code=0x7ffc0000 [ 496.407896][ T3187] net_ratelimit: 359 callbacks suppressed [ 496.407912][ T3187] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 496.470364][ T28] audit: type=1326 audit(1775042623.134:27737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3171 comm="syz.9.11228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010400c819 code=0x7ffc0000 [ 497.125122][ T3211] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 497.377616][ T3214] loop9: detected capacity change from 0 to 512 [ 497.408296][ T3214] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 497.428561][ T3214] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 497.717382][ T3230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.726985][ T3230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.082558][ T3234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.091177][ T3234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.702817][ T3261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.947693][ T3284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.958286][ T3284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.233899][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 499.233916][ T28] audit: type=1400 audit(1775042626.224:27741): avc: denied { bind } for pid=3309 comm="syz.0.11283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 499.283149][ T28] audit: type=1400 audit(1775042626.274:27742): avc: denied { connect } for pid=3313 comm="syz.6.11285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 499.323895][ T28] audit: type=1400 audit(1775042626.294:27743): avc: denied { write } for pid=3309 comm="syz.0.11283" path="socket:[107907]" dev="sockfs" ino=107907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 500.561657][ T3381] xt_hashlimit: size too large, truncated to 1048576 [ 500.583743][ T3383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11312'. [ 500.595879][ T3383] geneve0: entered promiscuous mode [ 500.601230][ T3383] macsec1: entered promiscuous mode [ 500.606703][ T3383] macsec1: entered allmulticast mode [ 500.612277][ T3383] geneve0: entered allmulticast mode [ 500.619453][ T3383] geneve0: left allmulticast mode [ 500.624538][ T3383] geneve0: left promiscuous mode [ 500.708396][ T3114] Bluetooth: hci0: Frame reassembly failed (-84) [ 500.801107][ T3398] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11317'. [ 500.847785][ T28] audit: type=1400 audit(1775042627.834:27744): avc: denied { unmount } for pid=3404 comm="syz.6.11320" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 500.870075][ T28] audit: type=1400 audit(1775042627.834:27745): avc: denied { mounton } for pid=3404 comm="syz.6.11320" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 500.942107][ T3423] loop8: detected capacity change from 0 to 2048 [ 500.964144][ T3423] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.052391][ T28] audit: type=1400 audit(1775042628.044:27746): avc: denied { map } for pid=3422 comm="syz.8.11325" path="/211/file0/hugetlb.2MB.usage_in_bytes" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 501.080387][ T3423] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.11325: bg 0: block 234: padding at end of block bitmap is not set [ 501.119729][ T3423] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 904 with error 28 [ 501.142240][ T3423] EXT4-fs (loop8): This should not happen!! Data will be lost [ 501.142240][ T3423] [ 501.162970][ T3423] EXT4-fs (loop8): Total free blocks count 0 [ 501.175771][ T3423] EXT4-fs (loop8): Free/Dirty block details [ 501.188518][ T3423] EXT4-fs (loop8): free_blocks=0 [ 501.198993][ T3423] EXT4-fs (loop8): dirty_blocks=912 [ 501.209966][ T3423] EXT4-fs (loop8): Block reservation details [ 501.222641][ T3423] EXT4-fs (loop8): i_reserved_data_blocks=57 [ 501.761171][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.826280][ T3446] loop8: detected capacity change from 0 to 1024 [ 501.839089][ T28] audit: type=1400 audit(1775042628.824:27747): avc: denied { wake_alarm } for pid=3447 comm="syz.6.11333" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 501.871628][ T3454] bridge0: port 3(syz_tun) entered blocking state [ 501.878443][ T3454] bridge0: port 3(syz_tun) entered disabled state [ 501.887674][ T3446] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.909566][ T3454] syz_tun: entered allmulticast mode [ 501.918712][T31950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.926161][ T3454] syz_tun: entered promiscuous mode [ 502.187635][ T3484] loop9: detected capacity change from 0 to 256 [ 502.209928][ T3484] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 502.224079][ T3484] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 502.362262][ T3494] netlink: 1315 bytes leftover after parsing attributes in process `syz.0.11352'. [ 502.769065][ T5974] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 502.770264][ T3895] Bluetooth: hci0: command 0x1003 tx timeout [ 502.921935][ T28] audit: type=1400 audit(1775042885.918:27748): avc: denied { setopt } for pid=3511 comm="syz.1.11359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 503.118406][ T28] audit: type=1400 audit(1775042886.108:27749): avc: denied { ioctl } for pid=3525 comm="syz.9.11364" path="socket:[108215]" dev="sockfs" ino=108215 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 503.223543][ T3528] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 503.244833][ T28] audit: type=1400 audit(1775042886.238:27750): avc: denied { write } for pid=3530 comm="syz.9.11366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 503.375815][ T3550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11373'. [ 503.390770][ T3552] ip6gre1: entered allmulticast mode [ 503.504562][ T3563] loop9: detected capacity change from 0 to 128 [ 503.902816][ T9916] IPVS: starting estimator thread 0... [ 503.999132][ T3586] IPVS: using max 2544 ests per chain, 127200 per kthread [ 507.055057][ T3615] tipc: Started in network mode [ 507.060020][ T3615] tipc: Node identity , cluster identity 4711 [ 508.107384][ T3646] pimreg: entered allmulticast mode [ 508.123116][ T3646] pimreg: left allmulticast mode [ 508.211002][ T3653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.221341][ T3653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.229938][ T3659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11418'. [ 508.258749][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 508.258764][ T28] audit: type=1400 audit(1775042891.248:27752): avc: denied { getopt } for pid=3662 comm="syz.6.11420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 508.259106][ T3659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11418'. [ 508.347178][ T3659] netlink: 'syz.1.11418': attribute type 6 has an invalid length. [ 508.379412][ T3659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11418'. [ 508.402498][ T3659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11418'. [ 508.420926][ T3659] netlink: 'syz.1.11418': attribute type 6 has an invalid length. [ 508.487260][ T3678] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.549233][ T3688] pimreg: entered allmulticast mode [ 508.659287][ T3690] pimreg: left allmulticast mode [ 509.070670][ T28] audit: type=1400 audit(1775042892.068:27753): avc: denied { write } for pid=3694 comm="syz.8.11430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 509.132658][ T3697] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11431'. [ 509.157900][ T3697] netlink: 'syz.8.11431': attribute type 26 has an invalid length. [ 509.166147][ T3697] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11431'. [ 509.175609][ T3697] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11431'. [ 509.184901][ T3697] netlink: 'syz.8.11431': attribute type 26 has an invalid length. [ 509.193337][ T3697] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11431'. [ 510.239616][ T3730] pimreg: entered allmulticast mode [ 510.253102][ T3730] pimreg: left allmulticast mode [ 510.565987][ T3744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11451'. [ 512.277082][ T3780] pimreg: entered allmulticast mode [ 512.300932][ T3780] pimreg: left allmulticast mode [ 512.321929][ T3784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.343685][ T3784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.375028][ T3789] syz_tun: entered allmulticast mode [ 512.389310][ T3788] syz_tun: left allmulticast mode [ 512.492748][ T3802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11477'. [ 512.938458][ T3817] ref_ctr_offset mismatch. inode: 0x2747 offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 513.017575][ T3819] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 513.177432][ T28] audit: type=1326 audit(1775042896.168:27754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.11491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46632c819 code=0x7ffc0000 [ 513.210630][ T28] audit: type=1326 audit(1775042896.168:27755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.11491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46632c819 code=0x7ffc0000 [ 513.251958][ T28] audit: type=1326 audit(1775042896.168:27756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.11491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46632c819 code=0x7ffc0000 [ 513.283097][ T28] audit: type=1326 audit(1775042896.168:27757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.11491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46632c819 code=0x7ffc0000 [ 513.301546][ T3843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.307353][ T28] audit: type=1326 audit(1775042896.168:27758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.11491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46632c819 code=0x7ffc0000 [ 513.316062][ T3843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.339118][ T28] audit: type=1326 audit(1775042896.198:27759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.11491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd46632c819 code=0x7ffc0000 [ 513.370041][ T28] audit: type=1326 audit(1775042896.198:27760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.11491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46632c819 code=0x7ffc0000 [ 513.393682][ T28] audit: type=1326 audit(1775042896.198:27761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.11491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46632c819 code=0x7ffc0000 [ 513.417504][ T28] audit: type=1326 audit(1775042896.198:27762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.11491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46632c819 code=0x7ffc0000 [ 513.441104][ T28] audit: type=1326 audit(1775042896.198:27763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.11491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46632c819 code=0x7ffc0000 [ 513.464735][ T28] audit: type=1326 audit(1775042896.198:27764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.11491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd46632c819 code=0x7ffc0000 [ 513.488248][ T28] audit: type=1326 audit(1775042896.198:27765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.11491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46632c819 code=0x7ffc0000 [ 513.512471][ T28] audit: type=1326 audit(1775042896.198:27766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.11491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46632c819 code=0x7ffc0000 [ 513.949646][ T3850] loop8: detected capacity change from 0 to 128 [ 514.096984][ T3144] kworker/u8:54: attempt to access beyond end of device [ 514.096984][ T3144] loop8: rw=1, sector=145, nr_sectors = 40 limit=128 [ 514.111438][ T3144] kworker/u8:54: attempt to access beyond end of device [ 514.111438][ T3144] loop8: rw=1, sector=193, nr_sectors = 8 limit=128 [ 514.134179][ T3144] kworker/u8:54: attempt to access beyond end of device [ 514.134179][ T3144] loop8: rw=1, sector=209, nr_sectors = 8 limit=128 [ 514.150951][ T3144] kworker/u8:54: attempt to access beyond end of device [ 514.150951][ T3144] loop8: rw=1, sector=225, nr_sectors = 8 limit=128 [ 514.165398][ T3144] kworker/u8:54: attempt to access beyond end of device [ 514.165398][ T3144] loop8: rw=1, sector=241, nr_sectors = 8 limit=128 [ 514.184701][ T3144] kworker/u8:54: attempt to access beyond end of device [ 514.184701][ T3144] loop8: rw=1, sector=257, nr_sectors = 8 limit=128 [ 514.198490][ T3144] kworker/u8:54: attempt to access beyond end of device [ 514.198490][ T3144] loop8: rw=1, sector=273, nr_sectors = 8 limit=128 [ 514.212211][ T3144] kworker/u8:54: attempt to access beyond end of device [ 514.212211][ T3144] loop8: rw=1, sector=289, nr_sectors = 8 limit=128 [ 514.227153][ T3144] kworker/u8:54: attempt to access beyond end of device [ 514.227153][ T3144] loop8: rw=1, sector=305, nr_sectors = 8 limit=128 [ 514.243821][ T3144] kworker/u8:54: attempt to access beyond end of device [ 514.243821][ T3144] loop8: rw=1, sector=321, nr_sectors = 8 limit=128 [ 514.258132][ T3865] SELinux: failed to load policy [ 514.945140][ T3902] netlink: 'syz.1.11514': attribute type 1 has an invalid length. [ 514.994807][ T3902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.030456][ T3904] bond1: (slave geneve2): making interface the new active one [ 515.056248][ T3904] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 515.105736][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11515'. [ 515.139147][ T3906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11515'. [ 515.177544][ T3144] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.211221][ T3144] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.257341][ T3144] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.281387][ T3144] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.783800][ T3949] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.11537'. [ 516.245034][ T3977] xt_hashlimit: size too large, truncated to 1048576 [ 516.940704][ T4040] Process accounting resumed [ 517.115621][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11581'. [ 517.138500][ T4053] macsec1: entered promiscuous mode [ 517.146634][ T4053] geneve0: entered promiscuous mode [ 517.160410][ T4053] macsec1: entered allmulticast mode [ 517.167722][ T4053] geneve0: entered allmulticast mode [ 517.182068][ T4053] geneve0: left allmulticast mode [ 517.187339][ T4053] geneve0: left promiscuous mode [ 517.593173][ T4087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.601855][ T4087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.318729][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 518.318745][ T28] audit: type=1400 audit(1775042901.308:27776): avc: denied { mount } for pid=4100 comm="syz.6.11610" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 519.385670][ T4119] ================================================================== [ 519.393802][ T4119] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 519.402410][ T4119] [ 519.404721][ T4119] write to 0xffff8881053418e8 of 8 bytes by task 4121 on cpu 1: [ 519.412336][ T4119] shmem_file_splice_read+0x470/0x600 [ 519.417734][ T4119] splice_direct_to_actor+0x26e/0x670 [ 519.423109][ T4119] do_splice_direct+0x119/0x1a0 [ 519.427952][ T4119] do_sendfile+0x382/0x650 [ 519.432369][ T4119] __x64_sys_sendfile64+0x105/0x150 [ 519.437569][ T4119] x64_sys_call+0x2dc4/0x3020 [ 519.442249][ T4119] do_syscall_64+0x12c/0x370 [ 519.446842][ T4119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.452729][ T4119] [ 519.455046][ T4119] write to 0xffff8881053418e8 of 8 bytes by task 4119 on cpu 0: [ 519.462665][ T4119] shmem_file_splice_read+0x470/0x600 [ 519.468037][ T4119] splice_direct_to_actor+0x26e/0x670 [ 519.473409][ T4119] do_splice_direct+0x119/0x1a0 [ 519.478255][ T4119] do_sendfile+0x382/0x650 [ 519.482679][ T4119] __x64_sys_sendfile64+0x105/0x150 [ 519.487870][ T4119] x64_sys_call+0x2dc4/0x3020 [ 519.492543][ T4119] do_syscall_64+0x12c/0x370 [ 519.497132][ T4119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.503021][ T4119] [ 519.505330][ T4119] value changed: 0x000000000000ae17 -> 0x000000000000ae1b [ 519.512421][ T4119] [ 519.514728][ T4119] Reported by Kernel Concurrency Sanitizer on: [ 519.520874][ T4119] CPU: 0 UID: 0 PID: 4119 Comm: syz.6.11607 Not tainted syzkaller #0 PREEMPT(full) [ 519.530244][ T4119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.540303][ T4119] ================================================================== [ 519.711933][ T4016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512