last executing test programs: 3m47.426652773s ago: executing program 32 (id=61): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800002, 0x25dfdbff, {0x2, 0x20, 0x51, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3m39.044411507s ago: executing program 33 (id=244): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x34, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 3m36.275483768s ago: executing program 34 (id=285): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x7}, {0x20, 0x1}}, 0x24, 0x1) write$binfmt_elf32(r0, &(0x7f0000002600)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x4, 0x2, 0x8d, 0x4, 0x2, 0x6, 0x4, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x2, 0x5, 0x3ff, 0x200}, [{0x6474e551, 0x9, 0x1, 0x80200000, 0x7, 0x40, 0x0, 0x101}, {0x70000000, 0x40, 0x108fedca, 0x7fff, 0x3, 0x8, 0x1, 0xfffffffc}]}, 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3m0.838016799s ago: executing program 35 (id=847): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003100)=[{{&(0x7f0000000200)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000f00)="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", 0x5c1}], 0x1}}], 0x2, 0xc044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x40810, 0x3}, [@IFLA_MTU={0x8, 0x4, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) write$binfmt_misc(r0, 0x0, 0x0) 2m21.368903721s ago: executing program 6 (id=1509): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000140)='FREEZING\x00', 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) 2m20.426189792s ago: executing program 6 (id=1524): openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x1096, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m19.971436897s ago: executing program 6 (id=1530): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000001180)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0) 2m19.87853401s ago: executing program 6 (id=1532): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x840, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,dots,nodots,nodots,quiet,dots,dots,nocase,dots,dots,dots,check=relaxed,nocase,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d6e6f726d616c2c6e6f646f74732c6e66732c6e6f646f74732c0085631469e4e3ebe0f848a069f81e50c93409023d7e4dba3e8c4d8a10a9d296b30d58f9509e00bb34b7828749c7d8f731945afa8a19f315a9bc5e8f36d11609786bb0568a5cdc4806eb6c9bdf47e7ec9616ee240aa0913c1ae2a4a2b172982688119c245062290e392d538e2a7f7d101281cb737e2777fe36c8fdb305fb2b9240a5fe96a39cbb1c9d13c41da60f15645c2e7f2708730b7b91c4d29a0b64caab07109beb5dec6f777effe7c525c26748f8627760b7c6c13e3947e6cf6c2300"/261], 0xfd, 0x1bf, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x2]}) rmdir(&(0x7f0000000100)='./control\x00') 2m19.189467292s ago: executing program 6 (id=1542): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_io_uring_setup(0x109, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48) 2m18.305024871s ago: executing program 6 (id=1556): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000400)="02", 0x1, 0x801, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2m18.288312842s ago: executing program 36 (id=1556): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000400)="02", 0x1, 0x801, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2m15.499595533s ago: executing program 8 (id=1599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xfffffffffffffefd}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x0, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x10000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0xa80a}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0xb}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x20000000) 2m15.237088821s ago: executing program 8 (id=1604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x8084) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) recvmmsg(r1, &(0x7f00000085c0)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x100, 0x0) 2m15.111934136s ago: executing program 8 (id=1608): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x937}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040844) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m14.97329329s ago: executing program 8 (id=1613): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 2m14.857471284s ago: executing program 8 (id=1616): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 2m14.127888218s ago: executing program 8 (id=1621): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 2m14.017551542s ago: executing program 37 (id=1621): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1m53.89697811s ago: executing program 1 (id=1899): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000001d40), 0x2c, 0x516, &(0x7f0000000740)="$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") syz_open_procfs$pagemap(0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x400007e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r1, 0x100, 0x0) getdents(r1, 0x0, 0x0) 1m53.875200731s ago: executing program 1 (id=1900): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r0, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r0, &(0x7f0000002600)="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", 0xfec) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 1m53.817171153s ago: executing program 1 (id=1901): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x7}, {0x6, 0x2}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 1m52.961391231s ago: executing program 1 (id=1917): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@errors_remount}, {@nomblk_io_submit}]}, 0xfe, 0x483, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000180)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[], 0x3c, 0x2e4, &(0x7f0000000c40)="$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") 1m52.882004823s ago: executing program 1 (id=1921): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) fcntl$setpipe(r1, 0x407, 0xb) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 1m52.112520829s ago: executing program 1 (id=1929): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m52.07693534s ago: executing program 38 (id=1929): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 44.2730672s ago: executing program 7 (id=3070): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x1f7, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 44.233032782s ago: executing program 7 (id=3072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x6, 0xfff3}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 44.148309565s ago: executing program 7 (id=3074): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="15000000652e"], 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0) 44.112458255s ago: executing program 7 (id=3076): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200c080, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 44.052977808s ago: executing program 7 (id=3077): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 43.201244086s ago: executing program 7 (id=3083): syz_io_uring_setup(0x73cd, &(0x7f0000000280)={0x0, 0x792f, 0x3180, 0x4000001, 0x400251}, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x103840000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 43.154294677s ago: executing program 39 (id=3083): syz_io_uring_setup(0x73cd, &(0x7f0000000280)={0x0, 0x792f, 0x3180, 0x4000001, 0x400251}, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x103840000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 35.817973467s ago: executing program 4 (id=3216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xc}, {0xfffe, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 35.729316861s ago: executing program 4 (id=3220): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x2f32, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xffff8001, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 35.703061671s ago: executing program 4 (id=3221): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 35.657602343s ago: executing program 4 (id=3223): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') 35.540763056s ago: executing program 4 (id=3226): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0xb7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 35.520202887s ago: executing program 4 (id=3228): socketpair$unix(0x1, 0x2, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0) open(0x0, 0x14927e, 0x9) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0xff3c, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x9, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) 20.498857319s ago: executing program 40 (id=3228): socketpair$unix(0x1, 0x2, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0) open(0x0, 0x14927e, 0x9) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0xff3c, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x9, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) 2.44070019s ago: executing program 3 (id=3745): ioperm(0x7, 0x81, 0xfffffffffffffffe) r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) 1.54050899s ago: executing program 3 (id=3761): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0xf2c, 0xaeb, 0xe57, 0x6, 0xf4, "1c00", 0x5, 0x1}) ioctl$TCXONC(r1, 0x540a, 0x2) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.54007722s ago: executing program 3 (id=3762): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x5, 0x400) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 1.501981971s ago: executing program 3 (id=3764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.203236461s ago: executing program 0 (id=3769): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1.188788371s ago: executing program 2 (id=3770): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x6014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb47, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x50}}, 0x20040054) 1.120299223s ago: executing program 0 (id=3771): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x200800, 0x17, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0xfffe, 0x5, 0xd476, 0x7, 0x1e, '\a\x00'}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0xd) 1.119868364s ago: executing program 9 (id=3772): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204004, &(0x7f0000000440)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000002dc0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) pipe(0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) 1.114379633s ago: executing program 0 (id=3773): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xb, 0x8, 0x1, 0x85}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.083902875s ago: executing program 2 (id=3774): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x82, 0x5}, 0x102013, 0x0, 0x7, 0x5, 0x2, 0x8d5e, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace$setregs(0xf, r0, 0x6, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 1.038165306s ago: executing program 2 (id=3775): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x11}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0xf, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 1.037588366s ago: executing program 0 (id=3776): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x800000000000005, 0x4}, 0x4, 0x0, 0xe723, 0x4, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfcd5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 1.030268447s ago: executing program 9 (id=3777): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.000856897s ago: executing program 9 (id=3778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 964.456279ms ago: executing program 9 (id=3780): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) close(0x3) socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 889.024811ms ago: executing program 5 (id=3782): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) fcntl$setsig(r2, 0xa, 0x1c) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 888.847861ms ago: executing program 9 (id=3783): r0 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000001c0)={0x77359400}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x7a}, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 863.584632ms ago: executing program 5 (id=3784): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x1}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x90000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000001}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) shutdown(r0, 0x2) 841.648563ms ago: executing program 5 (id=3785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 762.058295ms ago: executing program 5 (id=3786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'gretap0\x00', 0x400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f00000000c0)=0xa7, 0x12) 761.924265ms ago: executing program 9 (id=3787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) accept(r0, 0x0, 0x0) 436.578126ms ago: executing program 5 (id=3788): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) unshare(0x22020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r2, 0x5973a3c4219537e5, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044841}, 0x8000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 368.972828ms ago: executing program 3 (id=3789): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20085e, &(0x7f0000000100)={[{@user_xattr}, {@errors_remount}]}, 0x1, 0x53a, &(0x7f0000010280)="$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") creat(0x0, 0x182) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x64, 0x0, &(0x7f0000000040)) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000010300)={@desc={0x1, 0x0, @desc2}}) 368.801388ms ago: executing program 5 (id=3790): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000040)='./file0\x00') 320.60203ms ago: executing program 3 (id=3791): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="f79ce93a8be24e0b732cf10fca", 0xd}], 0x1) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) 199.740804ms ago: executing program 2 (id=3792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 95.957307ms ago: executing program 2 (id=3793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delchain={0x34, 0x2e, 0x1, 0x70bd2f, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffe9, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x44080) 61.141829ms ago: executing program 0 (id=3794): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0x1) 222.05µs ago: executing program 2 (id=3795): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r0, 0x2) flock(r0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=3796): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb6010203010902", @ANYRESHEX], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x39a5d7d5eeff2fb5}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1014002, &(0x7f0000001900)={[{@max_batch_time}, {@noload}, {@norecovery}]}, 0xff, 0x630, &(0x7f0000000100)="$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") kernel console output (not intermixed with test programs): 00000000-0000-0000-0000-000000000000. [ 173.003831][T10972] loop4: detected capacity change from 0 to 128 [ 173.032691][T10972] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.053588][T10972] ext4 filesystem being mounted at /492/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.098935][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.222852][T10989] netlink: 830 bytes leftover after parsing attributes in process `syz.9.2294'. [ 173.464572][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2300'. [ 173.535229][T11006] syzkaller1: entered promiscuous mode [ 173.540887][T11006] syzkaller1: entered allmulticast mode [ 173.706392][T11012] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2313'. [ 173.725895][T11012] ip6gre1: entered promiscuous mode [ 173.731337][T11012] ip6gre1: entered allmulticast mode [ 173.755932][T11014] loop0: detected capacity change from 0 to 512 [ 173.764418][T11014] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 173.775488][T11014] EXT4-fs (loop0): 1 truncate cleaned up [ 173.781902][T11014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.858770][ T9438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.467359][T11047] loop7: detected capacity change from 0 to 512 [ 174.477196][T11047] EXT4-fs (loop7): blocks per group (255) and clusters per group (8192) inconsistent [ 174.994123][T11070] loop0: detected capacity change from 0 to 512 [ 175.013643][T11070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.030607][T11070] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.049861][T11064] SELinux: failed to load policy [ 175.106397][ T9438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.106584][T11079] sctp: [Deprecated]: syz.4.2331 (pid 11079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.106584][T11079] Use struct sctp_sack_info instead [ 175.443995][T11096] loop0: detected capacity change from 0 to 512 [ 176.499427][T11128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.550119][T11128] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 176.669634][T11128] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 176.710864][T11128] EXT4-fs (loop7): This should not happen!! Data will be lost [ 176.710864][T11128] [ 176.741197][T11128] EXT4-fs (loop7): Total free blocks count 0 [ 176.757916][T11128] EXT4-fs (loop7): Free/Dirty block details [ 176.764050][T11128] EXT4-fs (loop7): free_blocks=66060288 [ 176.793463][T11128] EXT4-fs (loop7): dirty_blocks=48 [ 176.812330][T11128] EXT4-fs (loop7): Block reservation details [ 176.826340][T11128] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 176.862415][ T28] kauditd_printk_skb: 451 callbacks suppressed [ 176.862433][ T28] audit: type=1326 audit(2000000004.370:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11125 comm="syz.7.2352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2736f3c819 code=0x0 [ 176.935076][T11146] set_capacity_and_notify: 1 callbacks suppressed [ 176.935096][T11146] loop4: detected capacity change from 0 to 256 [ 176.962408][T11146] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.108549][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2374'. [ 177.163832][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2374'. [ 177.172937][ T5826] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.182434][ T5826] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.201459][ T5826] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.255802][T11161] xt_hashlimit: size too large, truncated to 1048576 [ 177.996464][ T82] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 178.012470][ T4338] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 178.037546][ T5826] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.115734][T11167] bridge_slave_0: left allmulticast mode [ 178.131596][T11167] bridge_slave_0: left promiscuous mode [ 178.140452][T11167] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.186145][ T28] audit: type=1400 audit(2000000005.690:1366): avc: denied { name_bind } for pid=11175 comm="syz.9.2371" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 178.240032][T11167] bridge_slave_1: left allmulticast mode [ 178.248286][T11167] bridge_slave_1: left promiscuous mode [ 178.254348][T11167] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.281464][T11167] bond0: (slave bond_slave_0): Releasing backup interface [ 178.298131][T11167] bond0: (slave bond_slave_1): Releasing backup interface [ 178.306348][T11182] SELinux: policydb magic number 0x24 does not match expected magic number 0xf97cff8c [ 178.316992][T11182] SELinux: failed to load policy [ 178.322228][T11167] team0: Port device team_slave_0 removed [ 178.323011][T11182] SELinux: failed to load policy [ 178.337957][T11167] team0: Port device team_slave_1 removed [ 178.353780][T11167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.366012][T11167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.374588][T11167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.382733][T11167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.393002][T11167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.409847][T11168] team0: Mode changed to "activebackup" [ 178.475047][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2376'. [ 178.593192][T11205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2382'. [ 178.604939][T11205] geneve2: entered promiscuous mode [ 178.979152][T11238] geneve2: entered promiscuous mode [ 178.979240][T11238] geneve2: entered allmulticast mode [ 178.983008][ T38] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.983100][ T38] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.983136][ T38] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.983231][ T38] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 179.646281][T11277] loop4: detected capacity change from 0 to 2048 [ 179.705161][T11277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.813408][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.251125][T11345] netlink: 'syz.4.2411': attribute type 3 has an invalid length. [ 180.253031][T11347] geneve3: entered promiscuous mode [ 180.339433][T11353] netlink: 'syz.4.2412': attribute type 8 has an invalid length. [ 180.446713][ T28] audit: type=1400 audit(2000000007.940:1367): avc: denied { cmd } for pid=11356 comm="syz.3.2413" path="socket:[32261]" dev="sockfs" ino=32261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 180.577673][T11361] loop4: detected capacity change from 0 to 512 [ 180.601922][T11361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.626734][T11361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.642535][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 180.649584][T11361] ext4 filesystem being mounted at /516/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.731306][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.151113][T11381] netlink: 'syz.3.2423': attribute type 3 has an invalid length. [ 181.308311][T11387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2426'. [ 181.974543][T11425] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2441'. [ 182.127640][T11432] netlink: 'syz.0.2443': attribute type 6 has an invalid length. [ 182.407487][T11446] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 182.454202][T11446] SELinux: failed to load policy [ 182.760644][T11455] netlink: 'syz.9.2450': attribute type 8 has an invalid length. [ 182.905937][T11463] loop0: detected capacity change from 0 to 1024 [ 182.908205][T11452] loop4: detected capacity change from 0 to 8192 [ 182.913164][T11463] EXT4-fs: Ignoring removed orlov option [ 183.013405][T11463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.218120][ T9438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.519619][T11491] netlink: 'syz.3.2468': attribute type 8 has an invalid length. [ 184.028854][T11509] loop3: detected capacity change from 0 to 164 [ 184.040718][T11509] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2476'. [ 184.405222][T11513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2478'. [ 184.575204][T11523] loop3: detected capacity change from 0 to 512 [ 184.640691][T11523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.852473][T11540] loop7: detected capacity change from 0 to 512 [ 184.860900][T11538] tipc: Enabling of bearer rejected, failed to enable media [ 184.879119][T11540] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.2488: corrupted in-inode xattr: invalid ea_ino [ 184.937698][T11545] loop4: detected capacity change from 0 to 256 [ 184.945270][T11540] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 184.945523][T11540] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2488: couldn't read orphan inode 15 (err -117) [ 184.954694][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 184.954713][ C1] EXT4-fs (loop7): initial error at time 2000000012: ext4_iget_extra_inode:5040: inode 15 [ 184.954749][ C1] EXT4-fs (loop7): last error at time 2000000012: ext4_iget_extra_inode:5040: inode 15 [ 185.021204][T11545] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.031147][T11540] loop7: lost filesystem error report for type 5 error -117 [ 185.042520][T11540] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.129581][ T4338] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.154933][T11554] loop0: detected capacity change from 0 to 512 [ 185.194216][T11554] EXT4-fs: Ignoring removed bh option [ 185.205157][T11554] EXT4-fs: inline encryption not supported [ 185.224741][T11554] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.242986][T11554] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 185.270236][ T9796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.291090][T11554] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2493: bg 0: block 248: padding at end of block bitmap is not set [ 185.305548][T11554] loop0: lost filesystem error report for type 5 error -117 [ 185.305829][T11554] Quota error (device loop0): write_blk: dquota write failed [ 185.313247][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 185.313270][ C0] EXT4-fs (loop0): last error at time 2000000012: ext4_validate_block_bitmap:441 [ 185.337453][T11554] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 185.354680][T11554] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.2493: Failed to acquire dquot type 1 [ 185.386319][T11554] loop0: lost filesystem error report for type 5 error -28 [ 185.392288][T11567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.417056][T11554] EXT4-fs (loop0): 1 truncate cleaned up [ 185.419092][T11567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.430882][T11567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.438558][T11567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.441831][T11554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 185.859230][T11582] loop7: detected capacity change from 0 to 512 [ 185.875865][T11582] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.919181][T11582] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.2504: iget: bad i_size value: 38620345925642 [ 186.006236][T11582] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.006441][T11582] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2504: couldn't read orphan inode 15 (err -117) [ 186.015641][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 186.015662][ C1] EXT4-fs (loop7): initial error at time 2000000013: ext4_orphan_get:1397: inode 15 [ 186.015696][ C1] EXT4-fs (loop7): last error at time 2000000013: ext4_orphan_get:1397: inode 15 [ 186.060699][T11590] netlink: 'syz.9.2507': attribute type 7 has an invalid length. [ 186.096476][ T9438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 186.110685][T11590] netlink: 'syz.9.2507': attribute type 8 has an invalid length. [ 186.138094][T11582] loop7: lost filesystem error report for type 5 error -117 [ 186.138774][T11582] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.242336][T11598] loop0: detected capacity change from 0 to 512 [ 186.286293][T11599] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2504: bg 0: block 5: invalid block bitmap [ 186.301602][T11599] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 468 with error 28 [ 186.315154][T11599] EXT4-fs (loop7): This should not happen!! Data will be lost [ 186.315154][T11599] [ 186.330207][T11601] netlink: 'syz.4.2514': attribute type 1 has an invalid length. [ 186.331626][T11599] EXT4-fs (loop7): Total free blocks count 0 [ 186.344350][T11601] bond3: entered promiscuous mode [ 186.344780][T11601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.368981][T11599] EXT4-fs (loop7): Free/Dirty block details [ 186.375922][T11599] EXT4-fs (loop7): free_blocks=0 [ 186.375940][T11599] EXT4-fs (loop7): dirty_blocks=468 [ 186.375973][T11599] EXT4-fs (loop7): Block reservation details [ 186.375984][T11599] EXT4-fs (loop7): i_reserved_data_blocks=468 [ 186.382330][T11601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.409165][T11601] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 186.419802][T11601] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 186.431846][T11601] bond3: (slave ip6gre2): making interface the new active one [ 186.433454][ T4338] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 186.439387][T11601] ip6gre2: entered promiscuous mode [ 186.457595][T11601] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 186.469061][ T4338] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.524049][T11606] loop7: detected capacity change from 0 to 1024 [ 186.555737][T11606] EXT4-fs: Ignoring removed i_version option [ 186.567781][T11606] EXT4-fs: Ignoring removed bh option [ 186.592772][T11606] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.609080][T11606] EXT4-fs (loop7): shut down requested (2) [ 186.621402][T11606] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 186.641043][T11606] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 186.660276][T11606] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 186.670593][T11606] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 186.679729][T11606] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 186.689074][T11606] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 186.699021][T11606] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=13 [ 186.708176][T11606] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 186.717000][T11606] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 186.726551][T11606] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 186.735436][T11606] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=13 [ 186.744335][T11606] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 186.754424][ T28] audit: type=1400 audit(2000000014.260:1368): avc: denied { remove_name } for pid=11605 comm="syz.7.2516" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.800666][ T28] audit: type=1400 audit(2000000014.260:1369): avc: denied { rename } for pid=11605 comm="syz.7.2516" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.824149][ T28] audit: type=1400 audit(2000000014.260:1370): avc: denied { add_name } for pid=11605 comm="syz.7.2516" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.854466][ T4338] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.046188][ T28] audit: type=1400 audit(2000000014.550:1371): avc: denied { cpu } for pid=11627 comm="syz.7.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 187.374359][ T28] audit: type=1400 audit(2000000014.880:1372): avc: denied { read } for pid=11645 comm="syz.3.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 187.380342][T11654] netlink: 'syz.7.2531': attribute type 8 has an invalid length. [ 187.433648][ T28] audit: type=1326 audit(2000000014.940:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.9.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 187.462806][ T28] audit: type=1326 audit(2000000014.960:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.9.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 187.503194][ T28] audit: type=1326 audit(2000000014.960:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.9.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 187.691597][T11666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.711815][T11664] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 187.726788][T11666] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2540: iget: bad i_size value: 38620345925642 [ 187.758613][T11666] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.758878][T11666] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2540: couldn't read orphan inode 15 (err -117) [ 187.768176][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 187.768199][ C0] EXT4-fs (loop4): initial error at time 2000000015: ext4_orphan_get:1397: inode 15 [ 187.768232][ C0] EXT4-fs (loop4): last error at time 2000000015: ext4_orphan_get:1397: inode 15 [ 187.813927][T11666] loop4: lost filesystem error report for type 5 error -117 [ 187.830852][T11666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.947193][T11666] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2540: bg 0: block 5: invalid block bitmap [ 187.960189][T11666] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1276 with error 28 [ 187.973637][T11677] pimreg: entered allmulticast mode [ 187.978902][T11666] EXT4-fs (loop4): This should not happen!! Data will be lost [ 187.978902][T11666] [ 187.979497][T11677] pimreg: left allmulticast mode [ 187.992066][T11666] EXT4-fs (loop4): Total free blocks count 0 [ 188.015126][T11666] EXT4-fs (loop4): Free/Dirty block details [ 188.030441][T11666] EXT4-fs (loop4): free_blocks=0 [ 188.036189][T11666] EXT4-fs (loop4): dirty_blocks=1276 [ 188.042127][T11666] EXT4-fs (loop4): Block reservation details [ 188.048174][T11666] EXT4-fs (loop4): i_reserved_data_blocks=1276 [ 188.126878][ T3321] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 188.145909][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.480353][ C1] sd 0:0:1:0: [sda] tag#8199 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 188.490879][ C1] sd 0:0:1:0: [sda] tag#8199 CDB: Read(6) 08 00 00 00 81 23 00 00 00 04 00 00 [ 188.765531][T11715] set_capacity_and_notify: 1 callbacks suppressed [ 188.765786][T11715] loop4: detected capacity change from 0 to 128 [ 189.062863][T11746] netlink: 'syz.4.2574': attribute type 10 has an invalid length. [ 190.600413][ T3405] IPVS: starting estimator thread 0... [ 190.608860][T11851] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 190.703105][T11853] IPVS: using max 2448 ests per chain, 122400 per kthread [ 191.059180][T11859] syz.9.2590 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 191.120809][T11859] CPU: 1 UID: 0 PID: 11859 Comm: syz.9.2590 Tainted: G W syzkaller #0 PREEMPT(full) [ 191.120850][T11859] Tainted: [W]=WARN [ 191.120892][T11859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.120905][T11859] Call Trace: [ 191.120947][T11859] [ 191.120955][T11859] __dump_stack+0x1d/0x30 [ 191.120985][T11859] dump_stack_lvl+0x95/0xd0 [ 191.121026][T11859] dump_stack+0x15/0x1b [ 191.121045][T11859] dump_header+0x80/0x240 [ 191.121065][T11859] oom_kill_process+0x295/0x350 [ 191.121147][T11859] out_of_memory+0x97d/0xb80 [ 191.121169][T11859] try_charge_memcg+0x62e/0xa10 [ 191.121266][T11859] obj_cgroup_charge_pages+0x23/0xc0 [ 191.121297][T11859] __memcg_kmem_charge_page+0x9e/0x170 [ 191.121368][T11859] __alloc_frozen_pages_noprof+0x18a/0x360 [ 191.121406][T11859] alloc_pages_mpol+0xb3/0x260 [ 191.121489][T11859] alloc_pages_noprof+0x8f/0x140 [ 191.121515][T11859] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 191.121550][T11859] __kvmalloc_node_noprof+0x3d4/0x650 [ 191.121658][T11859] ? futex_hash_allocate+0x190/0x9d0 [ 191.121711][T11859] ? futex_hash_allocate+0x190/0x9d0 [ 191.121801][T11859] futex_hash_allocate+0x190/0x9d0 [ 191.121837][T11859] ? cap_task_prctl+0x13f/0x6e0 [ 191.121869][T11859] futex_hash_prctl+0xd8/0xf0 [ 191.121972][T11859] __se_sys_prctl+0xa3d/0x13f0 [ 191.122002][T11859] __x64_sys_prctl+0x67/0x80 [ 191.122031][T11859] x64_sys_call+0x2533/0x3020 [ 191.122066][T11859] do_syscall_64+0x12c/0x370 [ 191.122094][T11859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.122119][T11859] RIP: 0033:0x7f2d53f7c819 [ 191.122136][T11859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.122156][T11859] RSP: 002b:00007f2d529d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 191.122215][T11859] RAX: ffffffffffffffda RBX: 00007f2d541f5fa0 RCX: 00007f2d53f7c819 [ 191.122262][T11859] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 191.122277][T11859] RBP: 00007f2d54012c91 R08: 0000000000000000 R09: 0000000000000000 [ 191.122291][T11859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.122367][T11859] R13: 00007f2d541f6038 R14: 00007f2d541f5fa0 R15: 00007ffeeb58a698 [ 191.122386][T11859] [ 191.458424][T11859] memory: usage 164720kB, limit 307200kB, failcnt 430 [ 191.495624][T11859] memory+swap: usage 155100kB, limit 9007199254740988kB, failcnt 0 [ 191.534954][T11859] kmem: usage 130556kB, limit 9007199254740988kB, failcnt 0 [ 191.586272][T11859] Memory cgroup stats for /syz9: [ 191.586481][T11859] cache 65536 [ 191.604876][T11859] rss 356352 [ 191.618794][T11859] shmem 65536 [ 191.641099][T11859] mapped_file 0 [ 191.645052][T11859] dirty 0 [ 191.648049][T11859] writeback 0 [ 191.654464][T11859] workingset_refault_anon 83 [ 191.659175][T11859] workingset_refault_file 0 [ 191.673362][T11859] swap 0 [ 191.676530][T11859] swapcached 733184 [ 191.680393][T11859] pgpgin 73647 [ 191.684586][T11859] pgpgout 73544 [ 191.688383][T11859] pgfault 53322 [ 191.692245][T11859] pgmajfault 32 [ 191.727990][T11859] inactive_anon 413696 [ 191.737379][T11859] active_anon 8192 [ 191.743344][T11859] inactive_file 0 [ 191.748916][T11867] chnl_net:caif_netlink_parms(): no params data found [ 191.749378][T11859] active_file 0 [ 191.762052][T11859] unevictable 0 [ 191.765609][T11859] hierarchical_memory_limit 314572800 [ 191.773901][T11859] hierarchical_memsw_limit 9223372036854771712 [ 191.780347][T11859] total_cache 65536 [ 191.789504][T11859] total_rss 356352 [ 191.806381][T11859] total_shmem 65536 [ 191.830553][T11867] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.850029][T11859] total_mapped_file 0 [ 191.854865][T11867] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.863912][T11859] total_dirty 0 [ 191.868654][T11867] bridge_slave_0: entered allmulticast mode [ 191.879333][T11859] total_writeback 0 [ 191.884210][T11867] bridge_slave_0: entered promiscuous mode [ 191.900476][T11867] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.907811][T11859] total_workingset_refault_anon 83 [ 191.915707][T11867] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.942471][T11867] bridge_slave_1: entered allmulticast mode [ 191.949174][T11867] bridge_slave_1: entered promiscuous mode [ 191.962733][T11859] total_workingset_refault_file 0 [ 191.968121][T11859] total_swap 0 [ 191.971639][T11859] total_swapcached 733184 [ 191.979468][T11859] total_pgpgin 73647 [ 191.989711][T11859] total_pgpgout 73544 [ 191.998263][T11859] total_pgfault 53322 [ 192.002808][T11859] total_pgmajfault 32 [ 192.007238][T11859] total_inactive_anon 413696 [ 192.012113][T11859] total_active_anon 8192 [ 192.015429][T11867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.016396][T11859] total_inactive_file 0 [ 192.030024][T11859] total_active_file 0 [ 192.032208][T11867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.034412][T11859] total_unevictable 0 [ 192.049034][T11859] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2590,pid=11858,uid=0 [ 192.065321][T11859] Memory cgroup out of memory: Killed process 11859 (syz.9.2590) total-vm:96080kB, anon-rss:1400kB, file-rss:22244kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 192.081696][T11867] team0: Port device team_slave_0 added [ 192.094333][T11867] team0: Port device team_slave_1 added [ 192.125923][T11867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.133591][T11867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.160299][T11867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.172934][T11867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.180040][T11867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.206646][T11867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.236840][T11867] hsr_slave_0: entered promiscuous mode [ 192.243203][T11867] hsr_slave_1: entered promiscuous mode [ 192.249304][T11867] debugfs: 'hsr0' already exists in 'hsr' [ 192.255301][T11867] Cannot create hsr debugfs directory [ 192.467376][T11867] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.478331][T11867] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.538763][T11867] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.557483][T11867] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.630122][T11867] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.652911][T11867] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.725272][T11867] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.747090][T11867] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.875383][T11867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.884795][T11867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.906871][T11867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.926513][T11915] loop7: detected capacity change from 0 to 512 [ 192.937544][T11867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.982763][T11915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.059157][T11915] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.112555][T11867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.159069][T11867] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.170632][ T4338] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.187443][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.194563][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.219787][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.226917][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.268527][T11930] netlink: 'syz.3.2612': attribute type 10 has an invalid length. [ 193.310860][T11867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.471494][T11930] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.478876][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.529322][T11930] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.536547][T11930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.544125][T11930] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.551300][T11930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.565344][T11930] team0: Port device bridge0 added [ 193.625084][T11867] veth0_vlan: entered promiscuous mode [ 193.638447][T11867] veth1_vlan: entered promiscuous mode [ 193.678526][T11867] veth0_macvtap: entered promiscuous mode [ 193.687795][T11867] veth1_macvtap: entered promiscuous mode [ 193.705049][T11867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.723963][T11867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.742202][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.761414][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.797086][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.818207][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.925757][T10260] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 193.935628][T10260] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.041905][T11974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2621'. [ 194.081864][T11974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2621'. [ 194.613906][T11991] loop0: detected capacity change from 0 to 128 [ 194.646307][T11991] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 194.704190][T11991] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 194.814428][T11991] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 195.011467][ T9438] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.133195][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 195.133214][ T28] audit: type=1400 audit(2000000022.640:1406): avc: denied { mounton } for pid=12022 comm="syz.0.2634" path="/file0" dev="ramfs" ino=34443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 195.271769][ T28] audit: type=1326 audit(2000000022.770:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.2630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2736f3c819 code=0x0 [ 195.698894][T12071] can0: slcan on ptm0. [ 195.741921][T12071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.761204][T12071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.981397][T12071] can0 (unregistered): slcan off ptm0. [ 195.994653][ T28] audit: type=1400 audit(2000000023.500:1408): avc: denied { getopt } for pid=12118 comm="syz.9.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.085906][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2647'. [ 196.105095][T12132] netlink: 'syz.9.2647': attribute type 11 has an invalid length. [ 196.136849][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2647'. [ 196.141559][ T28] audit: type=1400 audit(2000000023.650:1409): avc: denied { listen } for pid=12138 comm="syz.7.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.155192][T12132] netlink: 'syz.9.2647': attribute type 11 has an invalid length. [ 196.229607][ T28] audit: type=1400 audit(2000000023.650:1410): avc: denied { accept } for pid=12138 comm="syz.7.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.313777][ T28] audit: type=1400 audit(2000000024.820:1411): avc: denied { mounton } for pid=12196 comm="syz.3.2669" path="/file0" dev="bpf" ino=34683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 197.407136][T12181] syz.4.2662 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 197.421930][T12181] CPU: 0 UID: 0 PID: 12181 Comm: syz.4.2662 Tainted: G W syzkaller #0 PREEMPT(full) [ 197.422022][T12181] Tainted: [W]=WARN [ 197.422030][T12181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.422042][T12181] Call Trace: [ 197.422048][T12181] [ 197.422057][T12181] __dump_stack+0x1d/0x30 [ 197.422096][T12181] dump_stack_lvl+0x95/0xd0 [ 197.422170][T12181] dump_stack+0x15/0x1b [ 197.422195][T12181] dump_header+0x80/0x240 [ 197.422220][T12181] oom_kill_process+0x295/0x350 [ 197.422255][T12181] out_of_memory+0x97d/0xb80 [ 197.422282][T12181] try_charge_memcg+0x62e/0xa10 [ 197.422326][T12181] obj_cgroup_charge_pages+0x23/0xc0 [ 197.422358][T12181] __memcg_kmem_charge_page+0x9e/0x170 [ 197.422437][T12181] __alloc_frozen_pages_noprof+0x18a/0x360 [ 197.422476][T12181] alloc_pages_mpol+0xb3/0x260 [ 197.422548][T12181] alloc_pages_noprof+0x8f/0x140 [ 197.422628][T12181] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 197.422696][T12181] __kvmalloc_node_noprof+0x3d4/0x650 [ 197.422770][T12181] ? futex_hash_allocate+0x190/0x9d0 [ 197.422801][T12181] ? futex_hash_allocate+0x190/0x9d0 [ 197.422884][T12181] futex_hash_allocate+0x190/0x9d0 [ 197.422924][T12181] ? cap_task_prctl+0x13f/0x6e0 [ 197.422999][T12181] futex_hash_prctl+0xd8/0xf0 [ 197.423028][T12181] __se_sys_prctl+0xa3d/0x13f0 [ 197.423061][T12181] __x64_sys_prctl+0x67/0x80 [ 197.423106][T12181] x64_sys_call+0x2533/0x3020 [ 197.423133][T12181] do_syscall_64+0x12c/0x370 [ 197.423166][T12181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.423234][T12181] RIP: 0033:0x7f1baecec819 [ 197.423250][T12181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.423337][T12181] RSP: 002b:00007f1bad747028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 197.423363][T12181] RAX: ffffffffffffffda RBX: 00007f1baef65fa0 RCX: 00007f1baecec819 [ 197.423379][T12181] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 197.423394][T12181] RBP: 00007f1baed82c91 R08: 0000000000000000 R09: 0000000000000000 [ 197.423407][T12181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.423421][T12181] R13: 00007f1baef66038 R14: 00007f1baef65fa0 R15: 00007ffd41fe9b58 [ 197.423526][T12181] [ 197.423563][T12181] memory: usage 307200kB, limit 307200kB, failcnt 473 [ 197.685121][T12181] memory+swap: usage 243760kB, limit 9007199254740988kB, failcnt 0 [ 197.710986][T12181] kmem: usage 206120kB, limit 9007199254740988kB, failcnt 0 [ 197.718315][T12181] Memory cgroup stats for /syz4: [ 197.718562][T12181] cache 176128 [ 197.750524][T12181] rss 167936 [ 197.760335][T12181] shmem 0 [ 197.767120][T12181] mapped_file 176128 [ 197.771727][T12208] netlink: 'syz.9.2674': attribute type 3 has an invalid length. [ 197.797451][T12181] dirty 102400 [ 197.813554][T12181] writeback 0 [ 197.816928][T12181] workingset_refault_anon 1548 [ 197.821814][T12208] netlink: 'syz.9.2674': attribute type 1 has an invalid length. [ 197.830008][T12181] workingset_refault_file 5092 [ 197.838181][T12208] netlink: 198116 bytes leftover after parsing attributes in process `syz.9.2674'. [ 197.862739][T12181] swap 0 [ 197.875056][T12181] swapcached 34205696 [ 197.908279][T12181] pgpgin 203471 [ 197.916767][T12181] pgpgout 203387 [ 197.955935][T12181] pgfault 153579 [ 197.959855][T12181] pgmajfault 132 [ 197.965202][T12181] inactive_anon 167936 [ 197.969351][T12181] active_anon 0 [ 197.973945][T12181] inactive_file 0 [ 197.977637][T12181] active_file 176128 [ 198.008553][T12181] unevictable 0 [ 198.012929][T12181] hierarchical_memory_limit 314572800 [ 198.019119][T12181] hierarchical_memsw_limit 9223372036854771712 [ 198.029753][T12227] sock: sock_timestamping_bind_phc: sock not bind to device [ 198.051968][T12181] total_cache 176128 [ 198.055903][T12181] total_rss 167936 [ 198.059630][T12181] total_shmem 0 [ 198.063345][T12181] total_mapped_file 176128 [ 198.067771][T12181] total_dirty 102400 [ 198.071800][T12181] total_writeback 0 [ 198.075690][T12181] total_workingset_refault_anon 1548 [ 198.088283][T12181] total_workingset_refault_file 5092 [ 198.101014][T12181] total_swap 0 [ 198.104430][T12181] total_swapcached 34205696 [ 198.117348][T12181] total_pgpgin 203471 [ 198.141029][T12181] total_pgpgout 203387 [ 198.147484][T12181] total_pgfault 153579 [ 198.168042][T12181] total_pgmajfault 132 [ 198.178169][T12181] total_inactive_anon 167936 [ 198.192040][T12181] total_active_anon 0 [ 198.200441][T12181] total_inactive_file 0 [ 198.204830][T12181] total_active_file 176128 [ 198.209434][T12181] total_unevictable 0 [ 198.231205][T12181] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2662,pid=12180,uid=0 [ 198.318736][T12181] Memory cgroup out of memory: Killed process 12181 (syz.4.2662) total-vm:96008kB, anon-rss:1392kB, file-rss:22240kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 198.434775][T12265] loop4: detected capacity change from 0 to 512 [ 198.474618][T12265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.491134][T12265] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.702391][T11867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.824232][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2707'. [ 198.840550][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2707'. [ 198.863087][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2707'. [ 199.229385][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2718'. [ 199.279431][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2718'. [ 199.576223][T12300] syz.7.2711 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 199.591135][T12300] CPU: 0 UID: 0 PID: 12300 Comm: syz.7.2711 Tainted: G W syzkaller #0 PREEMPT(full) [ 199.591171][T12300] Tainted: [W]=WARN [ 199.591178][T12300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.591251][T12300] Call Trace: [ 199.591259][T12300] [ 199.591267][T12300] __dump_stack+0x1d/0x30 [ 199.591298][T12300] dump_stack_lvl+0x95/0xd0 [ 199.591394][T12300] dump_stack+0x15/0x1b [ 199.591408][T12300] dump_header+0x80/0x240 [ 199.591423][T12300] oom_kill_process+0x295/0x350 [ 199.591439][T12300] out_of_memory+0x97d/0xb80 [ 199.591473][T12300] try_charge_memcg+0x62e/0xa10 [ 199.591499][T12300] obj_cgroup_charge_pages+0x23/0xc0 [ 199.591518][T12300] __memcg_kmem_charge_page+0x9e/0x170 [ 199.591579][T12300] __alloc_frozen_pages_noprof+0x18a/0x360 [ 199.591600][T12300] alloc_pages_mpol+0xb3/0x260 [ 199.591757][T12300] alloc_pages_noprof+0x8f/0x140 [ 199.591776][T12300] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 199.591801][T12300] __kvmalloc_node_noprof+0x3d4/0x650 [ 199.591864][T12300] ? futex_hash_allocate+0x190/0x9d0 [ 199.591882][T12300] ? futex_hash_allocate+0x190/0x9d0 [ 199.591961][T12300] futex_hash_allocate+0x190/0x9d0 [ 199.591979][T12300] ? cap_task_prctl+0x13f/0x6e0 [ 199.591997][T12300] futex_hash_prctl+0xd8/0xf0 [ 199.592015][T12300] __se_sys_prctl+0xa3d/0x13f0 [ 199.592075][T12300] __x64_sys_prctl+0x67/0x80 [ 199.592107][T12300] x64_sys_call+0x2533/0x3020 [ 199.592161][T12300] do_syscall_64+0x12c/0x370 [ 199.592239][T12300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.592257][T12300] RIP: 0033:0x7f2736f3c819 [ 199.592277][T12300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.592298][T12300] RSP: 002b:00007f2735997028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 199.592316][T12300] RAX: ffffffffffffffda RBX: 00007f27371b5fa0 RCX: 00007f2736f3c819 [ 199.592413][T12300] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 199.592422][T12300] RBP: 00007f2736fd2c91 R08: 0000000000000000 R09: 0000000000000000 [ 199.592431][T12300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.592476][T12300] R13: 00007f27371b6038 R14: 00007f27371b5fa0 R15: 00007fff7f70fda8 [ 199.592499][T12300] [ 199.592519][T12300] memory: usage 307200kB, limit 307200kB, failcnt 162 [ 199.828353][T12300] memory+swap: usage 331304kB, limit 9007199254740988kB, failcnt 0 [ 199.836293][T12300] kmem: usage 264632kB, limit 9007199254740988kB, failcnt 0 [ 199.843700][T12300] Memory cgroup stats for /syz7: [ 199.844005][T12300] cache 43356160 [ 199.852527][T12300] rss 192512 [ 199.855828][T12300] shmem 42917888 [ 199.859460][T12300] mapped_file 135168 [ 199.863446][T12300] dirty 77824 [ 199.866854][T12300] writeback 0 [ 199.870222][T12300] workingset_refault_anon 6001 [ 199.875052][T12300] workingset_refault_file 134 [ 199.879739][T12300] swap 24682496 [ 199.883270][T12300] swapcached 52670464 [ 199.887304][T12300] pgpgin 182157 [ 199.890752][T12300] pgpgout 171520 [ 199.897360][T12300] pgfault 154131 [ 199.901079][T12300] pgmajfault 595 [ 199.904635][T12300] inactive_anon 42926080 [ 199.908874][T12300] active_anon 200704 [ 199.912818][T12300] inactive_file 0 [ 199.916463][T12300] active_file 442368 [ 199.920360][T12300] unevictable 0 [ 199.923892][T12300] hierarchical_memory_limit 314572800 [ 199.929271][T12300] hierarchical_memsw_limit 9223372036854771712 [ 199.935575][T12300] total_cache 43356160 [ 199.939657][T12300] total_rss 192512 [ 199.943510][T12300] total_shmem 42917888 [ 199.947614][T12300] total_mapped_file 135168 [ 199.952098][T12300] total_dirty 77824 [ 199.955999][T12300] total_writeback 0 [ 199.992054][T12300] total_workingset_refault_anon 6001 [ 200.020809][T12300] total_workingset_refault_file 134 [ 200.026195][T12300] total_swap 24682496 [ 200.030216][T12300] total_swapcached 52670464 [ 200.062762][T12300] total_pgpgin 182157 [ 200.066879][T12300] total_pgpgout 171520 [ 200.081034][T12300] total_pgfault 154131 [ 200.085151][T12300] total_pgmajfault 595 [ 200.089236][T12300] total_inactive_anon 42926080 [ 200.139105][T12300] total_active_anon 200704 [ 200.156977][T12300] total_inactive_file 0 [ 200.196176][T12300] total_active_file 442368 [ 200.200744][T12300] total_unevictable 0 [ 200.221204][T12300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2711,pid=12299,uid=0 [ 200.271111][T12300] Memory cgroup out of memory: Killed process 12300 (syz.7.2711) total-vm:96080kB, anon-rss:1400kB, file-rss:22232kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 200.592717][ T28] audit: type=1400 audit(2000000028.090:1412): avc: denied { watch watch_reads } for pid=12409 comm="syz.3.2737" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 200.727531][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2740'. [ 200.847897][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2742'. [ 200.869636][T12454] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2742'. [ 200.964537][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2745'. [ 200.974947][T12454] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2742'. [ 200.991219][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2745'. [ 201.044690][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2745'. [ 201.537213][T12507] erspan0: entered promiscuous mode [ 201.550678][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2759'. [ 201.887863][ T5833] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.016002][ T28] audit: type=1400 audit(2000000029.520:1413): avc: denied { watch watch_reads } for pid=12528 comm="syz.9.2767" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 203.298472][T12625] netlink: 'syz.9.2788': attribute type 1 has an invalid length. [ 203.316968][T12625] netlink: 'syz.9.2788': attribute type 4 has an invalid length. [ 203.334484][T12625] netlink: 'syz.9.2788': attribute type 1 has an invalid length. [ 203.343444][T12625] netlink: 'syz.9.2788': attribute type 4 has an invalid length. [ 203.394537][ T28] audit: type=1400 audit(2000000030.900:1414): avc: denied { unmount } for pid=9438 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 203.891122][ T3757] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 203.920037][T12716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12716 comm=syz.4.2805 [ 204.015497][T12730] loop0: detected capacity change from 0 to 128 [ 204.070746][T12730] bio_check_eod: 37 callbacks suppressed [ 204.070765][T12730] syz.0.2810: attempt to access beyond end of device [ 204.070765][T12730] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 204.815309][T12792] tipc: Started in network mode [ 204.820328][T12792] tipc: Node identity 4, cluster identity 4711 [ 204.827182][T12792] tipc: Node number set to 4 [ 204.831588][T12794] __nla_validate_parse: 13 callbacks suppressed [ 204.831604][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2819'. [ 204.853300][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2819'. [ 204.882749][T12794] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2819'. [ 204.898894][T12799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.906684][T12799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.932438][T12799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.029430][T12799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.209382][ T28] audit: type=1326 audit(2000000032.710:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faded28c819 code=0x7ffc0000 [ 205.274208][ T28] audit: type=1326 audit(2000000032.710:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faded28c819 code=0x7ffc0000 [ 205.330729][ T28] audit: type=1326 audit(2000000032.710:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7faded28c819 code=0x7ffc0000 [ 205.379600][ T28] audit: type=1326 audit(2000000032.710:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faded28c819 code=0x7ffc0000 [ 205.413444][ T28] audit: type=1326 audit(2000000032.710:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faded24d04e code=0x7ffc0000 [ 205.451933][ T28] audit: type=1326 audit(2000000032.710:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faded24d04e code=0x7ffc0000 [ 205.485609][ T28] audit: type=1326 audit(2000000032.710:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.3.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faded28c819 code=0x7ffc0000 [ 205.757236][T12863] tipc: Started in network mode [ 205.772797][T12863] tipc: Node identity 4, cluster identity 4711 [ 205.798128][T12863] tipc: Node number set to 4 [ 206.320401][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 206.320437][ T28] audit: type=1400 audit(2000000033.820:1437): avc: denied { associate } for pid=12917 comm="syz.3.2835" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 206.430717][T12924] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.2837'. [ 206.442020][T12924] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2837'. [ 206.666921][T12931] pim6reg1: entered allmulticast mode [ 206.799690][ T28] audit: type=1400 audit(2000000034.300:1438): avc: denied { bind } for pid=12935 comm="syz.9.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 208.547361][T12999] syz.7.2869: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 208.576819][T12999] CPU: 1 UID: 0 PID: 12999 Comm: syz.7.2869 Tainted: G W syzkaller #0 PREEMPT(full) [ 208.576898][T12999] Tainted: [W]=WARN [ 208.576960][T12999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.576974][T12999] Call Trace: [ 208.576983][T12999] [ 208.576992][T12999] __dump_stack+0x1d/0x30 [ 208.577023][T12999] dump_stack_lvl+0x95/0xd0 [ 208.577102][T12999] dump_stack+0x15/0x1b [ 208.577127][T12999] warn_alloc+0x145/0x1c0 [ 208.577212][T12999] ? __schedule+0x93c/0xd40 [ 208.577312][T12999] ? __rcu_read_unlock+0x4e/0x70 [ 208.577336][T12999] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 208.577411][T12999] ? __futex_wait+0x1fd/0x260 [ 208.577448][T12999] ? __pfx_futex_wake_mark+0x10/0x10 [ 208.577499][T12999] ? __rcu_read_unlock+0x4e/0x70 [ 208.577521][T12999] ? avc_has_perm_noaudit+0xab/0x130 [ 208.577613][T12999] ? should_fail_ex+0x30/0x280 [ 208.577644][T12999] ? xskq_create+0x36/0xe0 [ 208.577671][T12999] vmalloc_user_noprof+0x7d/0xb0 [ 208.577700][T12999] ? xskq_create+0x80/0xe0 [ 208.577735][T12999] xskq_create+0x80/0xe0 [ 208.577762][T12999] xsk_init_queue+0x70/0xb0 [ 208.577789][T12999] xsk_setsockopt+0x3f5/0x640 [ 208.577815][T12999] ? __pfx_xsk_setsockopt+0x10/0x10 [ 208.577880][T12999] __sys_setsockopt+0x184/0x200 [ 208.577915][T12999] __x64_sys_setsockopt+0x64/0x80 [ 208.577950][T12999] x64_sys_call+0x2327/0x3020 [ 208.577979][T12999] do_syscall_64+0x12c/0x370 [ 208.578045][T12999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.578067][T12999] RIP: 0033:0x7f2736f3c819 [ 208.578086][T12999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.578107][T12999] RSP: 002b:00007f2735997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.578149][T12999] RAX: ffffffffffffffda RBX: 00007f27371b5fa0 RCX: 00007f2736f3c819 [ 208.578166][T12999] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 208.578179][T12999] RBP: 00007f2736fd2c91 R08: 0000000000000004 R09: 0000000000000000 [ 208.578227][T12999] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.578242][T12999] R13: 00007f27371b6038 R14: 00007f27371b5fa0 R15: 00007fff7f70fda8 [ 208.578263][T12999] [ 208.807242][T12999] Mem-Info: [ 208.810385][T12999] active_anon:42917 inactive_anon:10547 isolated_anon:0 [ 208.810385][T12999] active_file:25507 inactive_file:2408 isolated_file:0 [ 208.810385][T12999] unevictable:0 dirty:255 writeback:58 [ 208.810385][T12999] slab_reclaimable:4166 slab_unreclaimable:23669 [ 208.810385][T12999] mapped:29141 shmem:44712 pagetables:7944 [ 208.810385][T12999] sec_pagetables:0 bounce:0 [ 208.810385][T12999] kernel_misc_reclaimable:0 [ 208.810385][T12999] free:1758300 free_pcp:51967 free_cma:0 [ 208.866224][T12999] Node 0 active_anon:171600kB inactive_anon:42188kB active_file:102028kB inactive_file:9632kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116612kB dirty:1024kB writeback:232kB shmem:178800kB kernel_stack:4928kB pagetables:31308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 208.895755][T12999] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.933276][T12999] lowmem_reserve[]: 0 2879 7857 7857 [ 208.941340][T12999] Node 0 DMA32 free:2944620kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948144kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 209.004126][T12999] lowmem_reserve[]: 0 0 4978 4978 [ 209.009347][T12999] Node 0 Normal free:4081364kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:171716kB inactive_anon:42188kB active_file:102028kB inactive_file:9632kB unevictable:0kB writepending:328kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:196408kB local_pcp:163772kB free_cma:0kB [ 209.047431][T12999] lowmem_reserve[]: 0 0 0 0 [ 209.052107][T12999] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 209.082974][T12999] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 5*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944620kB [ 209.101654][T12999] Node 0 Normal: 921*4kB (UM) 158*8kB (UME) 5*16kB (UE) 306*32kB (UM) 291*64kB (UM) 205*128kB (U) 36*256kB (UM) 99*512kB (UM) 223*1024kB (UME) 159*2048kB (UME) 832*4096kB (UM) = 4081444kB [ 209.121046][T12999] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 209.173976][T12999] 72617 total pagecache pages [ 209.178989][T12999] 8 pages in swap cache [ 209.183496][T12999] Free swap = 100860kB [ 209.187763][T12999] Total swap = 124996kB [ 209.192876][T12999] 2097051 pages RAM [ 209.196765][T12999] 0 pages HighMem/MovableOnly [ 209.201906][T12999] 81615 pages reserved [ 210.182766][T13044] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2884'. [ 212.286172][T13070] loop0: detected capacity change from 0 to 2048 [ 213.508653][T13092] syzkaller0: entered promiscuous mode [ 213.514360][T13092] syzkaller0: entered allmulticast mode [ 213.572525][ T3304] loop0: p1 < > p4 [ 213.577367][ T3304] loop0: p4 size 722688 extends beyond EOD, truncated [ 213.587373][T13070] loop0: p1 < > p4 [ 213.593454][T13070] loop0: p4 size 722688 extends beyond EOD, truncated [ 213.656612][T13099] tipc: Failed to remove unknown binding: 66,1,1/4:3721363978/3721363980 [ 213.665447][T13099] tipc: Failed to remove unknown binding: 66,1,1/4:3721363978/3721363980 [ 213.684301][T13101] netlink: 'syz.0.2905': attribute type 8 has an invalid length. [ 213.718936][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2905'. [ 213.735278][T13107] netlink: 'syz.0.2905': attribute type 8 has an invalid length. [ 213.754512][T13101] bond0: entered promiscuous mode [ 213.763838][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 213.771182][T13107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2905'. [ 213.774448][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 213.795784][T13101] gretap0: entered promiscuous mode [ 213.802758][T13101] batadv0: entered promiscuous mode [ 213.808582][T13101] hsr1: entered promiscuous mode [ 213.973479][ T28] audit: type=1326 audit(2000000041.470:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 214.003011][ T28] audit: type=1326 audit(2000000041.480:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 214.028063][ T28] audit: type=1326 audit(2000000041.510:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 214.053309][ T28] audit: type=1326 audit(2000000041.510:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 214.090541][ T28] audit: type=1326 audit(2000000041.510:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 214.119458][ T28] audit: type=1326 audit(2000000041.510:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 214.146109][ T28] audit: type=1326 audit(2000000041.510:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 214.170881][ T28] audit: type=1326 audit(2000000041.510:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 214.197026][ T28] audit: type=1326 audit(2000000041.510:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 214.222935][ T28] audit: type=1326 audit(2000000041.510:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 214.225569][T13127] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.254683][T13127] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.335527][T13127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.347114][T13127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.385557][T13127] geneve2: left promiscuous mode [ 214.390901][T13127] geneve2: left allmulticast mode [ 214.399984][T13127] geneve3: left promiscuous mode [ 214.421080][T13135] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 214.437367][ T5811] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.448978][ T5811] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 214.464151][ T5811] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.482515][ T5811] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 214.498317][ T5811] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.507605][ T5811] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 214.517289][ T5811] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.537142][ T5811] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 214.537501][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2921'. [ 214.591826][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2921'. [ 214.660034][T13159] netlink: 'syz.3.2926': attribute type 27 has an invalid length. [ 214.695409][T13159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.718815][T13159] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.915469][T13159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.143740][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2936'. [ 215.171375][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2936'. [ 215.361847][T13200] netlink: 'syz.3.2941': attribute type 5 has an invalid length. [ 215.610138][T13212] netlink: 'syz.0.2948': attribute type 27 has an invalid length. [ 215.820544][T13212] erspan0: left promiscuous mode [ 215.964961][T13212] geneve2: left promiscuous mode [ 215.973535][T13212] hsr1: left promiscuous mode [ 215.989146][ T38] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.011686][ T38] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.064726][ T38] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.074022][ T38] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.129158][ T38] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.185017][ T38] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.301037][ T38] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.313417][ T38] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.828891][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2980'. [ 217.863484][T13298] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2982'. [ 217.884221][T13292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.896800][T13296] netlink: 'syz.9.2981': attribute type 8 has an invalid length. [ 217.924513][T13304] io-wq is not configured for unbound workers [ 217.972640][T13302] bond1: (slave veth3): Enslaving as an active interface with an up link [ 218.194880][T13317] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2989'. [ 218.678255][T13324] xt_hashlimit: size too large, truncated to 1048576 [ 219.004480][T13346] netlink: 'syz.9.3000': attribute type 27 has an invalid length. [ 219.153385][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 219.153404][ T28] audit: type=1400 audit(2000000046.650:1475): avc: denied { mounton } for pid=13358 comm="syz.7.3005" path="/540/file0" dev="tmpfs" ino=2832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 219.189856][T13363] netlink: 'syz.0.3004': attribute type 4 has an invalid length. [ 219.190893][T13346] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.204881][T13346] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.376448][T13346] erspan0: left allmulticast mode [ 219.385581][T13346] macvtap1: left promiscuous mode [ 219.390860][T13346] macvtap1: left allmulticast mode [ 219.431662][T13351] erspan0: left promiscuous mode [ 219.448842][T13351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.459064][T13351] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.491471][T13351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.535330][ T50] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.575037][ T50] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.602817][ T50] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.613704][ T50] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.633923][ T50] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.643101][ T50] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.652739][ T50] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.663643][ T50] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.089757][T13415] netlink: 'syz.4.3025': attribute type 27 has an invalid length. [ 220.100697][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3027'. [ 220.133362][T13423] loop0: detected capacity change from 0 to 512 [ 220.144683][T13423] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 220.156750][T13423] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 220.167526][T13423] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3028: Corrupt directory, running e2fsck is recommended [ 220.167986][T13415] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.187856][T13415] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.192539][T13423] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 220.203403][T13423] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.3028: corrupted in-inode xattr: invalid ea_ino [ 220.218826][T13423] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.219057][T13423] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3028: couldn't read orphan inode 15 (err -117) [ 220.228297][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 220.228321][ C0] EXT4-fs (loop0): initial error at time 2000000047: ext4_iget_extra_inode:5040: inode 15 [ 220.228374][ C0] EXT4-fs (loop0): last error at time 2000000047: ext4_iget_extra_inode:5040: inode 15 [ 220.268687][T13423] loop0: lost filesystem error report for type 5 error -117 [ 220.269394][T13423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.336910][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3027'. [ 220.350038][T13426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.360094][T13426] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.372146][T13426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.397422][ T5811] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.417868][ T5811] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.429317][ T9438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.439894][ T5811] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.453019][ T5811] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.552313][T13432] sch_fq: defrate 0 ignored. [ 220.903858][ T28] audit: type=1326 audit(2000000048.400:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 220.941584][ T28] audit: type=1326 audit(2000000048.400:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 220.967589][ T28] audit: type=1326 audit(2000000048.400:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 220.993260][ T28] audit: type=1326 audit(2000000048.400:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 221.017221][ T28] audit: type=1326 audit(2000000048.400:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 221.043865][ T28] audit: type=1326 audit(2000000048.400:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 221.067713][ T28] audit: type=1326 audit(2000000048.400:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 221.093539][ T28] audit: type=1326 audit(2000000048.400:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 221.130055][ T28] audit: type=1326 audit(2000000048.400:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 221.185116][T13457] netlink: 'syz.7.3043': attribute type 27 has an invalid length. [ 221.202704][T13458] netlink: 'syz.4.3045': attribute type 21 has an invalid length. [ 221.214406][T13457] team1: left promiscuous mode [ 221.219204][T13457] team1: left allmulticast mode [ 221.232857][T13457] team2: left promiscuous mode [ 221.237663][T13457] team2: left allmulticast mode [ 221.251757][T13457] ip6gre1: left promiscuous mode [ 221.257241][T13457] ip6gre1: left allmulticast mode [ 221.458887][T13465] bridge0: port 1(gretap0) entered blocking state [ 221.465504][T13465] bridge0: port 1(gretap0) entered forwarding state [ 221.513531][T13465] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.542928][T13465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.218552][T13507] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3066'. [ 222.605740][T13520] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 222.679348][T13524] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3072'. [ 224.004462][T13556] lo speed is unknown, defaulting to 1000 [ 224.018422][ T5811] gretap0: left allmulticast mode [ 224.025123][ T5811] gretap0: left promiscuous mode [ 224.037291][ T5811] bridge0: port 1(gretap0) entered disabled state [ 224.066126][ T5811] batman_adv: batadv0: Removing interface: ip6gretap1 [ 224.229620][ T5811] bond4 (unregistering): (slave geneve2): Releasing active interface [ 224.312911][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3087'. [ 224.453607][ T5811] bond1 (unregistering): Released all slaves [ 224.463926][ T5811] bond2 (unregistering): Released all slaves [ 224.483309][ T5811] bond3 (unregistering): Released all slaves [ 224.502128][ T5811] bond4 (unregistering): Released all slaves [ 224.524427][T13556] lo speed is unknown, defaulting to 1000 [ 224.530277][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3087'. [ 224.531550][ T5804] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.549030][ T5804] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.562440][ T5804] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.571358][T13556] lo speed is unknown, defaulting to 1000 [ 224.597047][ T5811] tipc: Left network mode [ 224.602226][ T5804] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.641905][ T5811] hsr_slave_0: left promiscuous mode [ 224.667363][T13556] infiniband syz2: set down [ 224.677451][T13556] infiniband syz2: added lo [ 224.707378][T13556] RDS/IB: syz2: added [ 224.711625][T13556] smc: adding ib device syz2 with port count 1 [ 224.718256][T13556] smc: ib device syz2 port 1 has no pnetid [ 224.865382][T13601] loop3: detected capacity change from 0 to 736 [ 224.901082][ T840] lo speed is unknown, defaulting to 1000 [ 224.907488][T10259] lo speed is unknown, defaulting to 1000 [ 224.914082][T13556] lo speed is unknown, defaulting to 1000 [ 225.001018][T13553] lo speed is unknown, defaulting to 1000 [ 225.070125][T13556] lo speed is unknown, defaulting to 1000 [ 225.168857][T13556] lo speed is unknown, defaulting to 1000 [ 225.200024][T13553] chnl_net:caif_netlink_parms(): no params data found [ 225.247817][ T5811] IPVS: stop unused estimator thread 0... [ 225.276428][T13556] lo speed is unknown, defaulting to 1000 [ 225.410723][T13553] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.422859][T13553] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.440370][T13553] bridge_slave_0: entered allmulticast mode [ 225.466157][T13553] bridge_slave_0: entered promiscuous mode [ 225.493488][T13553] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.509123][T13553] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.533113][T13553] bridge_slave_1: entered allmulticast mode [ 225.540015][T13553] bridge_slave_1: entered promiscuous mode [ 225.547910][T13556] lo speed is unknown, defaulting to 1000 [ 225.622082][T13553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.659422][T13553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.679632][T13556] lo speed is unknown, defaulting to 1000 [ 225.731597][T13553] team0: Port device team_slave_0 added [ 225.750365][T13553] team0: Port device team_slave_1 added [ 225.796319][T13553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.810714][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.842744][T13553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.862121][T13556] lo speed is unknown, defaulting to 1000 [ 225.869185][T13553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.887932][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.944578][T13553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.046481][T13553] hsr_slave_0: entered promiscuous mode [ 226.072268][T13553] hsr_slave_1: entered promiscuous mode [ 226.090164][T13553] debugfs: 'hsr0' already exists in 'hsr' [ 226.097542][T13553] Cannot create hsr debugfs directory [ 226.106779][T13709] netlink: 'syz.0.3106': attribute type 3 has an invalid length. [ 226.116947][T13709] netlink: 'syz.0.3106': attribute type 3 has an invalid length. [ 226.176619][T13727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3108'. [ 226.208720][T13731] loop0: detected capacity change from 0 to 736 [ 226.344618][T13755] dvmrp1: entered allmulticast mode [ 226.582176][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3116'. [ 226.647461][T13553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 226.664297][T13553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 226.684717][T13553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 226.703643][T13553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 226.771936][T13553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.787031][T13553] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.804654][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.811851][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.830085][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.837540][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.958891][T13553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.978779][T13845] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 227.213301][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 227.213320][ T28] audit: type=1400 audit(2000000054.720:1593): avc: denied { shutdown } for pid=13885 comm="syz.0.3129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.230991][T13553] veth0_vlan: entered promiscuous mode [ 227.259496][T13553] veth1_vlan: entered promiscuous mode [ 227.302084][T13553] veth0_macvtap: entered promiscuous mode [ 227.320188][T13553] veth1_macvtap: entered promiscuous mode [ 227.371741][T13553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.402210][T13553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.423244][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'. [ 227.432595][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.454174][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.476666][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.487369][T13923] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 227.500046][ T28] audit: type=1400 audit(2000000054.990:1594): avc: denied { read } for pid=13921 comm="syz.0.3138" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 227.526211][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.806905][T13969] loop5: detected capacity change from 0 to 512 [ 227.863308][T13969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.881082][T13969] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.915845][T13969] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.3149: corrupted inode contents [ 227.958242][T13969] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #2: comm syz.5.3149: mark_inode_dirty error [ 228.026412][T13969] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.3149: corrupted inode contents [ 228.064516][T13969] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.3149: mark_inode_dirty error [ 228.083667][T13992] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.3149: corrupted inode contents [ 228.120822][T13996] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #2: comm syz.5.3149: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 228.120822][T13996] [ 228.153767][T13996] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.3149: corrupted inode contents [ 228.234320][T13996] EXT4-fs error (device loop5): ext4_append:88: inode #2: comm syz.5.3149: mark_inode_dirty error [ 228.253351][T13996] EXT4-fs error (device loop5) in ext4_append:100: Corrupt filesystem [ 228.283558][T13969] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.3149: corrupted inode contents [ 228.284616][T14007] loop0: detected capacity change from 0 to 1024 [ 228.319810][T14007] EXT4-fs: inline encryption not supported [ 228.339155][T13969] EXT4-fs error (device loop5): add_dirent_to_buf:2151: inode #2: comm syz.5.3149: mark_inode_dirty error [ 228.354821][T14007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 228.368256][T14007] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.401623][T14022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=14022 comm=syz.9.3158 [ 228.401663][ T9438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 228.425152][T14022] netlink: 1195 bytes leftover after parsing attributes in process `syz.9.3158'. [ 228.441890][T13553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.444390][ T28] audit: type=1400 audit(2000000055.950:1595): avc: denied { unmount } for pid=9796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 228.451414][T14021] loop4: detected capacity change from 0 to 512 [ 228.515075][T14021] EXT4-fs (loop4): 1 truncate cleaned up [ 228.526774][T14021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.625949][T14021] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 228.727252][T11867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.776749][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3170'. [ 228.908430][ T28] audit: type=1400 audit(2000000056.410:1596): avc: denied { name_bind } for pid=14088 comm="syz.4.3174" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 229.049446][ T28] audit: type=1400 audit(2000000056.550:1597): avc: denied { append } for pid=14069 comm="syz.5.3172" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 229.186666][ T28] audit: type=1326 audit(2000000056.690:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14103 comm="syz.4.3177" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1baecec819 code=0x0 [ 229.234525][ T28] audit: type=1400 audit(2000000056.720:1599): avc: denied { getopt } for pid=14112 comm="syz.5.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.564548][ T28] audit: type=1400 audit(2000000057.070:1600): avc: denied { lock } for pid=14131 comm="syz.0.3182" path="socket:[44508]" dev="sockfs" ino=44508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.746013][T14137] loop0: detected capacity change from 0 to 1024 [ 229.754192][T14130] loop3: detected capacity change from 0 to 2048 [ 229.776473][T14137] EXT4-fs: Ignoring removed bh option [ 229.806878][T14137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.849980][ T9438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.049872][T14130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.156178][T14130] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.306851][T14160] loop5: detected capacity change from 0 to 1024 [ 230.333411][T14160] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 230.347583][T14160] EXT4-fs warning (device loop5): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 230.372457][T14160] EXT4-fs (loop5): mount failed [ 230.418255][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3192'. [ 230.453107][T14165] netlink: 'syz.9.3194': attribute type 4 has an invalid length. [ 230.477808][T14165] netlink: 'syz.9.3194': attribute type 4 has an invalid length. [ 230.509454][ T70] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 230.554076][ T70] EXT4-fs (loop3): Remounting filesystem read-only [ 230.565877][T14171] netlink: 'syz.9.3198': attribute type 12 has an invalid length. [ 230.575148][ T9796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.585034][T14171] netlink: 'syz.9.3198': attribute type 29 has an invalid length. [ 230.595511][T14171] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3198'. [ 230.609923][T14171] netlink: 'syz.9.3198': attribute type 2 has an invalid length. [ 230.619764][T14171] netlink: 'syz.9.3198': attribute type 3 has an invalid length. [ 230.679975][T14177] loop3: detected capacity change from 0 to 4096 [ 230.716590][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3201'. [ 230.736587][T14177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.801106][ T9796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.884607][T14188] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3204'. [ 230.931411][T14195] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.3207'. [ 230.945820][ T28] audit: type=1400 audit(2000000058.450:1601): avc: denied { unmount } for pid=11867 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 230.966364][T14195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3207'. [ 231.053646][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3214'. [ 231.064031][T14212] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 231.073966][T14212] SELinux: failed to load policy [ 231.112551][T14214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3216'. [ 231.257858][T14231] loop4: detected capacity change from 0 to 1024 [ 231.268706][T14231] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 231.277551][T14231] System zones: 0-1, 3-36 [ 231.283579][T14231] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.3223: bad orphan inode 134217728 [ 231.294433][T14231] loop4: lost filesystem error report for type 5 error -117 [ 231.294849][T14231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.343816][T11867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.281532][T10256] IPVS: starting estimator thread 0... [ 233.374688][T14323] loop5: detected capacity change from 0 to 512 [ 233.390993][T14315] IPVS: using max 2640 ests per chain, 132000 per kthread [ 233.409474][T14323] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.532683][T14323] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 233.567745][T14323] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 233.578549][T14323] System zones: 0-2, 18-18, 34-34 [ 233.659070][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 233.659090][ T28] audit: type=1326 audit(2000000061.110:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.9.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7fc00000 [ 233.692412][T14323] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3260: bad orphan inode 15 [ 233.702729][T14323] loop5: lost filesystem error report for type 5 error -117 [ 233.702909][T14323] ext4_test_bit(bit=14, block=18) = 1 [ 233.715650][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 233.715673][ C0] EXT4-fs (loop5): initial error at time 2000000061: ext4_orphan_get:1423 [ 233.715695][ C0] EXT4-fs (loop5): last error at time 2000000061: ext4_orphan_get:1423 [ 233.741679][T14323] is_bad_inode(inode)=0 [ 233.745848][T14323] NEXT_ORPHAN(inode)=2264924160 [ 233.755207][T14323] max_ino=32 [ 233.758619][T14323] i_nlink=0 [ 233.771576][T14323] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.3260: corrupted inode contents [ 233.784238][T14323] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 233.784576][T14323] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #15: comm syz.5.3260: mark_inode_dirty error [ 233.820977][T14323] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 233.822899][T14323] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.3260: corrupted inode contents [ 233.861494][T14323] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 233.865293][T14323] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.3260: mark_inode_dirty error [ 233.922877][T14323] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 233.923324][T14323] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.3260: mark inode dirty (error -117) [ 233.968239][T14323] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 233.968527][T14323] EXT4-fs warning (device loop5): ext4_evict_inode:285: xattr delete (err -117) [ 233.990696][T14323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.127191][T14323] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3260: bg 0: block 80: padding at end of block bitmap is not set [ 234.204029][T14323] ext4: Unknown parameter '184467440737095516150xffffffffffffffff0x00000000000000045q+-aRw ǔ&hӉ84' [ 234.255735][T14344] loop0: detected capacity change from 0 to 512 [ 234.263058][T14344] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.274395][T14344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.310523][T14323] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 3: comm syz.5.3260: bad entry in directory: directory entry overrun - offset=44, inode=262156, rec_len=4096, size=4096 fake=0 [ 234.419941][T14344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.441033][T13553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.451730][T14344] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.547365][T14356] loop3: detected capacity change from 0 to 1024 [ 234.583156][ T9438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.595236][T14356] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 234.606613][T14356] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 234.657208][T14356] EXT4-fs (loop3): mount failed [ 234.695966][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3272'. [ 234.754843][T14368] netlink: 'syz.0.3276': attribute type 4 has an invalid length. [ 234.771712][T14368] netlink: 'syz.0.3276': attribute type 4 has an invalid length. [ 234.790259][T13367] lo speed is unknown, defaulting to 1000 [ 234.797016][T13367] syz2: Port: 1 Link ACTIVE [ 234.813783][ T10] lo speed is unknown, defaulting to 1000 [ 234.931881][ T28] audit: type=1400 audit(2000000062.440:1608): avc: denied { setopt } for pid=14377 comm="syz.0.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 234.953202][T14378] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3283'. [ 235.012305][T14383] loop0: detected capacity change from 0 to 512 [ 235.034052][T14383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.080884][ T28] audit: type=1400 audit(2000000062.580:1609): avc: denied { connect } for pid=14387 comm="syz.9.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 235.102546][T14383] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.240078][ T9438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.287947][ T28] audit: type=1326 audit(2000000062.790:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14397 comm="syz.9.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 235.344026][ T28] audit: type=1326 audit(2000000062.790:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14397 comm="syz.9.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 235.368673][T14403] loop0: detected capacity change from 0 to 1024 [ 235.391037][ T28] audit: type=1326 audit(2000000062.790:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14397 comm="syz.9.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 235.442418][T14403] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 235.458892][T14409] lo speed is unknown, defaulting to 1000 [ 235.465589][T14403] EXT4-fs warning (device loop0): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 235.466205][ T28] audit: type=1326 audit(2000000062.790:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14397 comm="syz.9.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 235.497011][T14403] EXT4-fs (loop0): mount failed [ 235.571950][ T28] audit: type=1326 audit(2000000062.790:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14397 comm="syz.9.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d53f7c819 code=0x7ffc0000 [ 235.593988][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3290'. [ 236.119295][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3299'. [ 236.521724][T14428] loop0: detected capacity change from 0 to 128 [ 236.630624][T14450] kernel profiling enabled (shift: 1) [ 236.976034][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3314'. [ 238.486856][T14554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3328'. [ 238.561632][T14557] loop0: detected capacity change from 0 to 512 [ 238.598586][T14557] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 238.640126][T14557] EXT4-fs (loop0): 1 truncate cleaned up [ 238.647628][T14557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.693097][ T9438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.112960][T14578] 6: renamed from wg2 [ 239.811740][T14604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3346'. [ 239.920583][T14607] netlink: 'syz.0.3347': attribute type 13 has an invalid length. [ 239.964248][T14607] gretap0: refused to change device tx_queue_len [ 240.002145][T14607] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 240.046037][T14610] netlink: 'syz.5.3348': attribute type 1 has an invalid length. [ 240.089740][T14610] bond1: entered promiscuous mode [ 240.107249][T14610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.137861][T14610] bond1: (slave bridge1): making interface the new active one [ 240.145622][T14610] bridge1: entered promiscuous mode [ 240.157256][T14610] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 240.593387][T14633] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.3355'. [ 240.641706][T14633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3355'. [ 240.679027][T14639] xt_hashlimit: size too large, truncated to 1048576 [ 241.358807][T14658] loop5: detected capacity change from 0 to 1024 [ 241.405709][T14658] EXT4-fs: inline encryption not supported [ 241.475157][T14663] loop0: detected capacity change from 0 to 512 [ 241.489648][T14658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 241.532478][T14663] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3367: bg 0: block 5: invalid block bitmap [ 241.555527][T14658] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.591694][T14663] loop0: lost filesystem error report for type 5 error -117 [ 241.591915][T14663] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 241.608023][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 241.608080][ C0] EXT4-fs (loop0): initial error at time 2000000069: ext4_validate_block_bitmap:432 [ 241.608123][ C0] EXT4-fs (loop0): last error at time 2000000069: ext4_validate_block_bitmap:432 [ 241.656651][T14658] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3366: bg 0: block 112: padding at end of block bitmap is not set [ 241.701096][T14663] loop0: lost filesystem error report for type 5 error -117 [ 241.701834][T14663] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3367: invalid indirect mapped block 3 (level 2) [ 241.813354][T13553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 241.831591][T14663] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 241.832088][T14663] EXT4-fs (loop0): 1 orphan inode deleted [ 241.881755][T14663] EXT4-fs (loop0): 1 truncate cleaned up [ 241.892520][T14663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.976318][ T9438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.305641][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 242.305660][ T28] audit: type=1400 audit(2000000069.810:1722): avc: denied { bind } for pid=14681 comm="syz.0.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.482450][ T28] audit: type=1400 audit(2000000069.990:1723): avc: denied { execute } for pid=14678 comm="syz.3.3373" dev="hugetlbfs" ino=46250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 242.531530][ T28] audit: type=1400 audit(2000000069.990:1724): avc: denied { execute_no_trans } for pid=14678 comm="syz.3.3373" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=46250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 242.923441][T14712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3386'. [ 242.977166][T14712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3386'. [ 242.986672][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3386'. [ 243.207893][T14727] loop5: detected capacity change from 0 to 512 [ 243.222305][T14727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 243.279053][T14727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.281075][ T28] audit: type=1400 audit(2000000070.780:1725): avc: denied { add_name } for pid=14734 comm="syz.9.3395" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 243.332156][T14727] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 243.443758][ T28] audit: type=1400 audit(2000000070.820:1726): avc: denied { create } for pid=14734 comm="syz.9.3395" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 243.546438][T13553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.618608][ T28] audit: type=1400 audit(2000000071.120:1727): avc: denied { create } for pid=14744 comm="syz.0.3400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 243.838168][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 243.852206][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 244.483879][T14764] loop5: detected capacity change from 0 to 512 [ 244.542348][T14764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.555341][T14764] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.793629][T13553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.294087][T14812] netlink: 'syz.3.3423': attribute type 1 has an invalid length. [ 246.308830][ T28] audit: type=1400 audit(2000000073.810:1728): avc: denied { append } for pid=14814 comm="syz.5.3425" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 246.880342][T10261] lo speed is unknown, defaulting to 1000 [ 246.890106][T10261] syz2: Port: 1 Link DOWN [ 246.922775][ T840] lo speed is unknown, defaulting to 1000 [ 246.941607][T14825] lo speed is unknown, defaulting to 1000 [ 247.149653][T14857] lo speed is unknown, defaulting to 1000 [ 247.156539][ T840] IPVS: starting estimator thread 0... [ 247.169992][ T2296] bridge_slave_1: left allmulticast mode [ 247.176775][ T2296] bridge_slave_1: left promiscuous mode [ 247.183469][ T2296] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.194152][ T2296] bridge_slave_0: left allmulticast mode [ 247.199943][ T2296] bridge_slave_0: left promiscuous mode [ 247.206077][ T2296] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.262209][T14861] IPVS: using max 2640 ests per chain, 132000 per kthread [ 247.334692][T14871] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3444'. [ 247.383400][ T2296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.397013][ T2296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.406599][ T2296] bond0 (unregistering): Released all slaves [ 247.414589][ T2296] bond1 (unregistering): Released all slaves [ 247.506727][T14825] chnl_net:caif_netlink_parms(): no params data found [ 247.558122][T14884] loop3: detected capacity change from 0 to 128 [ 247.565099][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c07f400: rx timeout, send abort [ 247.603509][ T2296] hsr_slave_0: left promiscuous mode [ 247.618132][ T2296] hsr_slave_1: left promiscuous mode [ 247.698040][ T28] audit: type=1400 audit(2000000075.200:1729): avc: denied { shutdown } for pid=14897 comm="syz.3.3450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.719589][ T2296] team0 (unregistering): Port device team_slave_1 removed [ 247.733542][ T2296] team0 (unregistering): Port device team_slave_0 removed [ 247.783632][T14900] ip6gre1: entered promiscuous mode [ 247.789108][T14900] ip6gre1: entered allmulticast mode [ 247.827433][T14825] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.836697][T14825] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.844608][T14825] bridge_slave_0: entered allmulticast mode [ 247.851460][T14825] bridge_slave_0: entered promiscuous mode [ 247.858618][T14825] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.877085][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.885125][T14825] bridge_slave_1: entered allmulticast mode [ 247.892241][T14825] bridge_slave_1: entered promiscuous mode [ 247.922095][T14825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.938262][T14825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.988999][T14916] syzkaller1: entered promiscuous mode [ 248.005200][T14916] syzkaller1: entered allmulticast mode [ 248.013566][T14825] team0: Port device team_slave_0 added [ 248.020130][T14930] netlink: 'syz.3.3455': attribute type 4 has an invalid length. [ 248.022589][T14825] team0: Port device team_slave_1 added [ 248.062318][T14930] netlink: 'syz.3.3455': attribute type 4 has an invalid length. [ 248.065461][T14825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.070162][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c07f400: abort rx timeout. Force session deactivation [ 248.077306][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.113397][T14825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.191743][T14825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.218979][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.280971][T14825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.305868][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.321670][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.370114][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.420896][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.481153][T14825] hsr_slave_0: entered promiscuous mode [ 248.508051][T14825] hsr_slave_1: entered promiscuous mode [ 248.526906][T14825] debugfs: 'hsr0' already exists in 'hsr' [ 248.547490][T14825] Cannot create hsr debugfs directory [ 249.107520][ T28] audit: type=1400 audit(2000000076.610:1730): avc: denied { write } for pid=14980 comm="syz.0.3463" name="/" dev="configfs" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.162283][T14825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.204019][T14825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.262306][T14825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.304497][T14825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.344099][T14991] tipc: Failed to remove unknown binding: 66,1,1/0:3068866160/3068866162 [ 249.575450][T14825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.640107][T14825] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.659638][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.666774][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.714296][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.721583][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.826071][T14825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.912896][T15016] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.920247][T15016] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.002820][T15016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.024946][T15016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.096346][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.105589][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.133793][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.162342][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.249122][T14825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.263330][T14989] loop0: detected capacity change from 0 to 2048 [ 250.296592][T15031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3477'. [ 250.372826][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'. [ 250.469329][T14825] veth0_vlan: entered promiscuous mode [ 250.473351][T14989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.489438][T14825] veth1_vlan: entered promiscuous mode [ 250.502928][T14825] veth0_macvtap: entered promiscuous mode [ 250.510382][T14825] veth1_macvtap: entered promiscuous mode [ 250.525379][T14825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.529438][T14989] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.557995][T14825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.569691][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.574635][T15049] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3480'. [ 250.600457][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.620594][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.650320][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.662717][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3483'. [ 250.978932][T15072] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.986141][T15072] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.995158][ T12] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 251.030579][ T12] EXT4-fs (loop0): Remounting filesystem read-only [ 251.062002][ T9438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.143405][T15072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.153885][T15072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.566225][ T5806] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.586452][ T5806] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.638999][ T5806] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.670461][ T5806] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.068375][ T28] audit: type=1400 audit(2000000079.570:1731): avc: denied { mounton } for pid=15130 comm="syz.3.3505" path="/file0" dev="autofs" ino=48329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 253.258283][T15160] netlink: 'syz.3.3520': attribute type 1 has an invalid length. [ 253.304233][T15160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.366918][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3520'. [ 253.414962][T15168] netlink: 'syz.5.3522': attribute type 10 has an invalid length. [ 253.452291][T15164] bond2: (slave veth7): Enslaving as an active interface with a down link [ 253.474169][T15160] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 253.483213][T15160] bond2: (slave batadv1): making interface the new active one [ 253.492259][T15160] batadv1: entered promiscuous mode [ 253.501095][T15160] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 253.514644][T15168] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.530734][T15168] bond0: (slave team0): Enslaving as an active interface with an up link [ 253.720798][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3532'. [ 253.879649][ T28] audit: type=1400 audit(2000000081.380:1732): avc: denied { accept } for pid=15210 comm="syz.3.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 253.889485][T15209] lo speed is unknown, defaulting to 1000 [ 254.537108][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3552'. [ 254.852401][T15263] ref_ctr increment failed for inode: 0x633 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100069440 [ 254.868036][T15262] uprobe: syz.3.3564:15262 failed to unregister, leaking uprobe [ 254.976411][T15261] loop0: detected capacity change from 0 to 256 [ 255.462742][T15298] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3577'. [ 255.501037][T15298] netlink: 'syz.9.3577': attribute type 7 has an invalid length. [ 255.528070][T15298] netlink: 'syz.9.3577': attribute type 8 has an invalid length. [ 255.555762][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3577'. [ 255.599073][ T28] audit: type=1400 audit(2000000083.100:1733): avc: denied { accept } for pid=15304 comm="syz.0.3581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.746546][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3592'. [ 257.192411][ T28] audit: type=1400 audit(2000000084.700:1734): avc: denied { setopt } for pid=15356 comm="syz.5.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 257.306582][T15363] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3601'. [ 257.394552][T15367] lo speed is unknown, defaulting to 1000 [ 257.899812][ T28] audit: type=1400 audit(2000000085.400:1735): avc: denied { kexec_image_load } for pid=15376 comm="syz.2.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 257.973251][ T28] audit: type=1400 audit(2000000085.440:1736): avc: denied { create } for pid=15380 comm="syz.2.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 258.043054][ T28] audit: type=1400 audit(2000000085.450:1737): avc: denied { write } for pid=15380 comm="syz.2.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 258.111675][T15391] loop0: detected capacity change from 0 to 1024 [ 258.123089][T15391] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 258.133719][T15391] System zones: 0-1, 3-36 [ 258.160745][T15391] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3615: bad orphan inode 134217728 [ 258.190999][T15391] loop0: lost filesystem error report for type 5 error -117 [ 258.260193][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3617'. [ 258.283796][T15391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.302774][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3617'. [ 258.508898][ T28] audit: type=1400 audit(2000000086.010:1738): avc: denied { watch watch_reads } for pid=15414 comm="syz.5.3624" path="/" dev="configfs" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.823147][T15428] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 258.950015][ T9438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.996921][T15430] lo speed is unknown, defaulting to 1000 [ 259.035172][ T28] audit: type=1326 audit(2000000086.530:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 259.084345][ T28] audit: type=1326 audit(2000000086.530:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 259.148993][ T28] audit: type=1326 audit(2000000086.530:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 259.228108][ T28] audit: type=1326 audit(2000000086.530:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 259.267066][ T28] audit: type=1326 audit(2000000086.530:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 259.291657][ T28] audit: type=1326 audit(2000000086.530:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 259.291684][ T28] audit: type=1404 audit(2000000086.530:1745): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 259.291780][ T28] audit: type=1400 audit(2000000086.540:1746): avc: denied { read write } for pid=14825 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 259.291803][ T28] audit: type=1326 audit(2000000086.570:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 259.291830][ T28] audit: type=1326 audit(2000000086.570:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0de4c819 code=0x7ffc0000 [ 260.064308][T15509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3662'. [ 260.773599][T15524] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3677'. [ 260.845706][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 260.891401][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3674'. [ 261.474313][T15594] netlink: 'syz.2.3688': attribute type 27 has an invalid length. [ 261.533115][T15594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.546893][T15594] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.567944][T15594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.647438][T15608] lo speed is unknown, defaulting to 1000 [ 261.743718][T15611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.837552][T15611] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.855079][T15611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.891053][T13368] lo speed is unknown, defaulting to 1000 [ 261.896960][T13368] syz2: Port: 1 Link ACTIVE [ 261.904707][T15619] lo speed is unknown, defaulting to 1000 [ 261.910526][T13368] lo speed is unknown, defaulting to 1000 [ 262.657658][T15660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3716'. [ 262.687297][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3716'. [ 262.799138][T15671] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3721'. [ 262.875363][T15676] netlink: 'syz.2.3722': attribute type 5 has an invalid length. [ 262.883294][T15676] netlink: 1132 bytes leftover after parsing attributes in process `syz.2.3722'. [ 262.904074][T15676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3722'. [ 262.955734][T15680] lo speed is unknown, defaulting to 1000 [ 263.795480][T15707] lo speed is unknown, defaulting to 1000 [ 264.070049][ T28] kauditd_printk_skb: 574 callbacks suppressed [ 264.070066][ T28] audit: type=1400 audit(2000000347.567:2323): avc: denied { read write } for pid=9796 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 264.162060][ T28] audit: type=1400 audit(2000000347.667:2324): avc: denied { open } for pid=15718 comm="syz.3.3741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 264.201150][ T28] audit: type=1400 audit(2000000347.687:2325): avc: denied { read write } for pid=14825 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 264.246421][ T28] audit: type=1400 audit(2000000347.737:2326): avc: denied { read write } for pid=9438 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 264.282187][ T28] audit: type=1400 audit(2000000347.747:2327): avc: denied { create } for pid=15720 comm="syz.0.3730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=0 [ 264.308406][ T28] audit: type=1400 audit(2000000347.747:2328): avc: denied { read open } for pid=15720 comm="syz.0.3730" path="mnt:[4026533840]" dev="nsfs" ino=4026533840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 264.328876][T15725] netlink: 'syz.2.3742': attribute type 4 has an invalid length. [ 264.364803][ T28] audit: type=1400 audit(2000000347.827:2329): avc: denied { create } for pid=15722 comm="syz.2.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 264.394910][ T28] audit: type=1400 audit(2000000347.827:2330): avc: denied { create } for pid=15722 comm="syz.2.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 264.421166][T15725] netlink: 'syz.2.3742': attribute type 4 has an invalid length. [ 264.461946][ T28] audit: type=1400 audit(2000000347.827:2331): avc: denied { create } for pid=15722 comm="syz.2.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 264.651753][ T28] audit: type=1400 audit(2000000347.867:2332): avc: denied { open } for pid=15723 comm="syz.9.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 264.811012][ T50] batadv1: left promiscuous mode [ 264.902028][T15761] serio: Serial port pts0 [ 265.699983][T10261] IPVS: starting estimator thread 0... [ 265.791129][T15785] IPVS: using max 2592 ests per chain, 129600 per kthread [ 265.942168][T15816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3781'. [ 266.713667][T15843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3792'. [ 266.821897][T15845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3793'. [ 266.955162][T15841] ================================================================== [ 266.963289][T15841] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 266.970364][T15841] [ 266.972793][T15841] read-write to 0xffff888104bf0dec of 4 bytes by task 15838 on cpu 1: [ 266.980954][T15841] fifo_open+0x86/0x5d0 [ 266.985132][T15841] do_dentry_open+0x4ca/0xa90 [ 266.989833][T15841] vfs_open+0x37/0x1e0 [ 266.994015][T15841] path_openat+0x1b70/0x2050 [ 266.998632][T15841] do_file_open+0x16c/0x290 [ 267.003166][T15841] do_sys_openat2+0x94/0x130 [ 267.007866][T15841] __x64_sys_creat+0x65/0x90 [ 267.012488][T15841] x64_sys_call+0x2ea0/0x3020 [ 267.017194][T15841] do_syscall_64+0x12c/0x370 [ 267.022256][T15841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.028277][T15841] [ 267.030626][T15841] read to 0xffff888104bf0dec of 4 bytes by task 15841 on cpu 0: [ 267.038459][T15841] wait_for_partner+0x117/0x1e0 [ 267.044639][T15841] fifo_open+0x4b1/0x5d0 [ 267.048919][T15841] do_dentry_open+0x4ca/0xa90 [ 267.053629][T15841] vfs_open+0x37/0x1e0 [ 267.057729][T15841] path_openat+0x1b70/0x2050 [ 267.062365][T15841] do_file_open+0x16c/0x290 [ 267.067085][T15841] file_open_name+0xfa/0x120 [ 267.071704][T15841] __se_sys_acct+0x8c/0x500 [ 267.076240][T15841] __x64_sys_acct+0x1f/0x30 [ 267.080766][T15841] x64_sys_call+0x2e7f/0x3020 [ 267.085473][T15841] do_syscall_64+0x12c/0x370 [ 267.090086][T15841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.096085][T15841] [ 267.098419][T15841] value changed: 0x00000001 -> 0x00000002 [ 267.104154][T15841] [ 267.106570][T15841] Reported by Kernel Concurrency Sanitizer on: [ 267.112746][T15841] CPU: 0 UID: 0 PID: 15841 Comm: syz.5.3790 Tainted: G W syzkaller #0 PREEMPT(full) [ 267.123720][T15841] Tainted: [W]=WARN [ 267.127535][T15841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.137792][T15841] ==================================================================