last executing test programs: 9m51.398687233s ago: executing program 3 (id=5175): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040)={0x1d, r1}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x74, r1, {0x10}, {0x5, 0xffe0}, {0x8, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4008010) sendmsg$can_bcm(r2, 0x0, 0x40000) 9m51.18263925s ago: executing program 3 (id=5179): close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x7}, 0xc5, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000070000007f"], 0x50) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m49.860737872s ago: executing program 3 (id=5191): socket(0x1e, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x12a4079, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) 9m49.788127754s ago: executing program 3 (id=5192): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000040)={[{@inlinecrypt}, {@stripe={'stripe', 0x3d, 0xa7}}]}, 0x3, 0x453, &(0x7f00000004c0)="$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") r0 = fsopen(&(0x7f00000005c0)='sysfs\x00', 0x1) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000100)={[{@name={'name', 0x3d, '.~)%\xd0\x01\x8c*\x04\xadG\xdbm\x178\x12h\x1d\xfaz\xfd}\x82\xe0\xe4\x9b\x80G\xa6(\xdf\x9d\x97_\x13\xc3\xc96\x1d./\x85\xb5^\xc4N\x9f\x83\xe5\xbdx\xfb\xbe\x9e\xd8\xad\x8d\x1a\xac\xa9&\x82\xe9pw\xb9\xec\a\xc2\xf1\x93 y\x8d\xc2\xdf\fu63\\rXR\xb4v\xfa\x85_\v P^\xa5\x13\t\xd7s\xf9\xdcC\x99bi\x91T;\xc8\x05\x0e\x9a\x95\x7f\x87/A\xa9^*NZ\x18\xa6\xc1P@o>bS \x06\x00h\x96\x89_|Xl0\xa4\x95\xc1\xeaHz\xcc;\xa6\xdaE\x10<6\xc5 \\\xf2\xcaD\f/\xa3\x17\xb6\xd0P\xba\xc8\x16Q\xbd\x83l\x87\xfb\xf1X\xa3\x16\xce-8\xfb\x82:\xe9\xfe\x91$\xc0\x14\x93\xa0\xb5\xc2\x05U\x18\x12>\xab\"P\x92\x14\x19\xf0S\n\xdf\x10\x03\x94\xbf\xdc|\xce\x1c\xc9\x00\x96\x9f\xc6e\xa6\xe8,\xba\x81\x80\x00\x00\x00z\xa5=\x00'}}]}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 9m49.509595722s ago: executing program 3 (id=5196): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r0}, 0xc) 9m45.669523334s ago: executing program 3 (id=5213): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xcae, 0xfffff800}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f00000000c0)='C', 0x1, 0x30048841, &(0x7f00000002c0)={0x11, 0x88a8, r2, 0x1, 0xe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) 9m45.47871509s ago: executing program 32 (id=5213): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xcae, 0xfffff800}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f00000000c0)='C', 0x1, 0x30048841, &(0x7f00000002c0)={0x11, 0x88a8, r2, 0x1, 0xe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) 8.495461372s ago: executing program 5 (id=8666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0x30000004}) close_range(r0, 0xffffffffffffffff, 0x0) 7.504472294s ago: executing program 5 (id=8674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000500)=@generic={0x29, "695448035658d1c45eff50a7c12f7e3a9edbdf4b1a42028808437877801de851ef8fb9ea4f82c2355c2b219b34cf633fde0139126dab1cfea17d61c1c0a33716e7602b637671c11ff3e5850d3e66df4d4763a9b26ebd3e23b1a8c3073db884b16bbec29839da3b6602544613eed5464b75c58850f3ac5c67bca0d74cf745"}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 6.276013262s ago: executing program 5 (id=8678): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.269257432s ago: executing program 0 (id=8680): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000000c0)) 6.237099603s ago: executing program 0 (id=8681): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x368, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(0x0, 0x0) unlink(&(0x7f0000000200)='./cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rds(0x15, 0x5, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x12120) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000)=r4, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) sendmsg$kcm(r3, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xc, r2, 0xd) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r5, 0x0, 0xfdef) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x3d, 0x8, 0x1, 0x20}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff00000000000000000000181100", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000004000b70000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.224321414s ago: executing program 5 (id=8682): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000002100)=0x18c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="460609000000000014003500627269646765300000000000000000000c0016800400ee7f040001800500110008000000"], 0x48}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00"/11], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f00000001c0)={0x9, {0x6, 0xe, 0xfffffffffffffe01, 0xf}}) 5.177811097s ago: executing program 0 (id=8684): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) inotify_add_watch(r0, 0x0, 0x80000000) epoll_create1(0x80000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) syz_io_uring_setup(0x7664, 0x0, 0x0, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) openat$rtc(0xffffff9c, 0x0, 0xa200, 0x0) socket(0x28, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 4.973555353s ago: executing program 2 (id=8685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4.650268063s ago: executing program 4 (id=8687): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb9", 0x0, 0x8000}, 0x50) 3.585310257s ago: executing program 1 (id=8689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000500)=@generic={0x29, "695448035658d1c45eff50a7c12f7e3a9edbdf4b1a42028808437877801de851ef8fb9ea4f82c2355c2b219b34cf633fde0139126dab1cfea17d61c1c0a33716e7602b637671c11ff3e5850d3e66df4d4763a9b26ebd3e23b1a8c3073db884b16bbec29839da3b6602544613eed5464b75c58850f3ac5c67bca0d74cf745"}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3.584867057s ago: executing program 2 (id=8690): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 3.582846337s ago: executing program 4 (id=8691): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYBLOB="a1"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.921208548s ago: executing program 2 (id=8692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x90, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_NAT_SRC={0x4}]}, 0x90}}, 0x0) 2.920469788s ago: executing program 4 (id=8693): r0 = geteuid() quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x58a, &(0x7f0000000680)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001"], 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000030400000000fedbdf2500007400", @ANYRES32=r6], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000680)={0x7, 0x5c, 0x1, 0x6, 0x10, "91396855d35693fb"}) 2.811050261s ago: executing program 5 (id=8694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000340)={0x9, 0x9}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40489}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0xe403, r7, 0x0, 0x2}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x6c040000) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r8, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) getpgid(r9) 2.779794862s ago: executing program 2 (id=8695): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x100000001) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x10140) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010000000"], 0x28}, 0xfc40) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, 0x0, 0xfc40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r8, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) recvmsg$kcm(r8, &(0x7f0000002e80)={0x0, 0x0, 0x0}, 0x20) 2.466804412s ago: executing program 1 (id=8696): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c0008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 2.397966594s ago: executing program 0 (id=8697): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400), 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0xa6, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{0x2, 0x5, 0xe, 0x5}, {0x2, 0x1, 0x8, 0xa}, {0x0, 0x5, 0x4, 0x1}, {0x1, 0x4, 0xd, 0xb}], 0x10, 0x7}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b", 0x20}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000018c0)={0x8}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 2.21492428s ago: executing program 1 (id=8698): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000280)=0x52, 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) 1.869200151s ago: executing program 0 (id=8699): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x2, 0x548, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) inotify_init() write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.832296232s ago: executing program 4 (id=8700): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x1f0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000008400000084000000080000000b0000000000000c020000000a000000000000010000000046000b040400000000000007000000000f0000000000001008000000000000000400000d000000000500000002000000070000000000000000000000000000000300000005000000020000000000000b000000000f00000001000084b80000000900007b44197c58000004000000ef0d00000000"], &(0x7f0000000340)=""/225, 0xa4, 0xe1, 0x0, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x400000, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = socket(0x2c, 0x3, 0x0) socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000580), &(0x7f0000000080)=@tcp=r3, 0x1}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) 1.640903308s ago: executing program 2 (id=8701): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x2, 0x548, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) inotify_init() write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 964.26099ms ago: executing program 4 (id=8702): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r1) 909.190561ms ago: executing program 4 (id=8703): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0xc0105500, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 556.383143ms ago: executing program 2 (id=8705): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 450.377656ms ago: executing program 0 (id=8706): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000280)=0x52, 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) 357.132399ms ago: executing program 1 (id=8707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000500)=@generic={0x29, "695448035658d1c45eff50a7c12f7e3a9edbdf4b1a42028808437877801de851ef8fb9ea4f82c2355c2b219b34cf633fde0139126dab1cfea17d61c1c0a33716e7602b637671c11ff3e5850d3e66df4d4763a9b26ebd3e23b1a8c3073db884b16bbec29839da3b6602544613eed5464b75c58850f3ac5c67bca0d74cf745"}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 247.694782ms ago: executing program 1 (id=8708): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}], [{@hash}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x417f) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x2fffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000200)="af6e", 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpgrp(r5) setpgid(r5, r6) r7 = openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) 178.993454ms ago: executing program 5 (id=8709): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0x30000004}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=8710): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) kernel console output (not intermixed with test programs): denied { write } for pid=26016 comm="syz.2.6768" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1141.935400][T26034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6771'. [ 1141.947211][T26034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6771'. [ 1142.726507][T26036] loop1: detected capacity change from 0 to 8192 [ 1142.821354][T26041] loop4: detected capacity change from 0 to 8192 [ 1142.849301][T26045] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6775'. [ 1142.858399][T26045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6775'. [ 1142.859817][T26036] loop1: detected capacity change from 0 to 512 [ 1142.879456][T26041] loop4: detected capacity change from 0 to 512 [ 1142.888843][T22684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.940418][T26041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1143.004268][T26036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1143.029319][T26041] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.066643][T26036] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.169976][ T28] audit: type=1400 audit(1779244075.800:1329): avc: denied { write } for pid=26040 comm="syz.4.6774" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1143.193504][ T28] audit: type=1400 audit(1779244075.800:1330): avc: denied { write } for pid=26035 comm="syz.1.6772" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1143.721810][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.805238][T22220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.079957][T26073] 9p: Bad value for 'rfdno' [ 1144.333248][T26067] loop1: detected capacity change from 0 to 512 [ 1144.379045][T26067] EXT4-fs (loop1): 1 orphan inode deleted [ 1144.397910][ T3433] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1144.411722][T26067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.445072][ T3433] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 1144.480918][T26067] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.702676][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.852605][T26083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6784'. [ 1144.863239][T26083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6784'. [ 1145.372443][T26079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6783'. [ 1145.418933][T26047] loop5: detected capacity change from 0 to 4096 [ 1145.430514][T26047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1145.450454][T26047] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1145.501231][T26047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.518485][T26069] loop4: detected capacity change from 0 to 4096 [ 1145.541728][T26069] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1145.622538][T26069] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1145.670127][ T28] audit: type=1400 audit(1779244078.230:1331): avc: denied { write } for pid=26046 comm="syz.5.6776" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1145.715591][T26069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.060658][T26097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6788'. [ 1146.105828][ T28] audit: type=1400 audit(1779244078.700:1332): avc: denied { write } for pid=26068 comm="syz.4.6780" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1146.134498][T26094] loop1: detected capacity change from 0 to 8192 [ 1146.147413][T26097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6788'. [ 1146.156763][T26097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6788'. [ 1146.297243][T20116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.312856][T22220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.343276][ T28] audit: type=1326 audit(1779244078.970:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.0.6789" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1146.369520][ T28] audit: type=1326 audit(1779244078.970:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.0.6789" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1146.395439][ T28] audit: type=1326 audit(1779244079.000:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.0.6789" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1146.423519][ T28] audit: type=1326 audit(1779244079.000:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.0.6789" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1146.617289][T26112] 9p: Bad value for 'rfdno' [ 1146.924507][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1146.924524][ T28] audit: type=1326 audit(1779244079.550:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.0.6789" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1146.957570][ T28] audit: type=1326 audit(1779244079.580:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.0.6789" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1147.233544][T26118] loop2: detected capacity change from 0 to 8192 [ 1148.746937][T26131] loop1: detected capacity change from 0 to 1764 [ 1148.918038][T26136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6798'. [ 1148.939481][T26136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6798'. [ 1149.208576][T26139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6799'. [ 1149.264636][T26139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6799'. [ 1149.314681][T26124] loop5: detected capacity change from 0 to 4096 [ 1149.325039][T26139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6799'. [ 1149.402045][T26124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1149.472947][T26124] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1149.521267][T26124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1149.554091][ T28] audit: type=1400 audit(1779244082.180:1351): avc: denied { write } for pid=26123 comm="syz.5.6795" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1149.597046][T26141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.608195][T26141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.773236][T26154] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1150.464486][T26157] loop1: detected capacity change from 0 to 8192 [ 1150.479430][T20116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.988931][T26157] loop1: detected capacity change from 0 to 512 [ 1151.074368][T26157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.088668][T26157] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1151.109129][T26168] loop5: detected capacity change from 0 to 8192 [ 1151.206949][T26168] loop5: detected capacity change from 0 to 512 [ 1151.230311][T26168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.244562][T26168] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1151.276725][ T28] audit: type=1400 audit(1779244083.900:1352): avc: denied { write } for pid=26167 comm="syz.5.6806" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1151.312188][T26177] loop2: detected capacity change from 0 to 1024 [ 1151.338984][T26177] EXT4-fs: test_dummy_encryption option not supported [ 1151.417066][T26183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6810'. [ 1151.446322][T26183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6810'. [ 1151.492777][T26183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6810'. [ 1151.583513][T26186] loop2: detected capacity change from 0 to 512 [ 1151.590818][T26186] EXT4-fs: Ignoring removed orlov option [ 1151.672618][T26186] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1151.702196][T20116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.750382][T26186] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.6809: invalid indirect mapped block 32768 (level 2) [ 1151.764098][T26186] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1151.765539][T26186] EXT4-fs (loop2): 1 orphan inode deleted [ 1151.780420][T26186] EXT4-fs (loop2): 1 truncate cleaned up [ 1151.787103][T26186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1152.055589][T26189] loop4: detected capacity change from 0 to 8192 [ 1152.380503][T26189] loop4: detected capacity change from 0 to 512 [ 1152.413811][T26189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1152.444042][T26189] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.474966][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.677292][T26189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6812'. [ 1153.480071][T26199] loop5: detected capacity change from 0 to 1764 [ 1153.516208][T22684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.613192][T26202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6814'. [ 1153.690176][ T28] audit: type=1400 audit(1779244086.310:1353): avc: denied { write } for pid=26188 comm="syz.4.6812" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1153.949717][T26197] loop1: detected capacity change from 0 to 8192 [ 1153.988463][T22220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.596730][T26206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.605769][T26197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.560208][T26197] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.576213][T26206] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.603000][ T28] audit: type=1400 audit(1779244088.230:1354): avc: denied { write } for pid=26205 comm="syz.2.6815" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1155.893506][T26219] EXT4-fs (loop4): 1 orphan inode deleted [ 1155.913185][T26219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.931514][T26219] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.178542][T24056] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1156.190737][T24056] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 1156.203153][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.401010][T26227] 9p: Bad value for 'rfdno' [ 1156.734614][T22220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.835526][T22684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.945182][T26232] 9p: Bad value for 'rfdno' [ 1157.817525][T26230] syz.4.6821 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1157.873467][T26230] CPU: 0 UID: 0 PID: 26230 Comm: syz.4.6821 Tainted: G W syzkaller #0 PREEMPT(full) [ 1157.873508][T26230] Tainted: [W]=WARN [ 1157.873517][T26230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1157.873531][T26230] Call Trace: [ 1157.873539][T26230] [ 1157.873612][T26230] __dump_stack+0x1d/0x30 [ 1157.873670][T26230] dump_stack_lvl+0x95/0xd0 [ 1157.873694][T26230] dump_stack+0x15/0x1b [ 1157.873716][T26230] dump_header+0x80/0x240 [ 1157.873807][T26230] oom_kill_process+0x295/0x350 [ 1157.873844][T26230] out_of_memory+0x97d/0xb80 [ 1157.873951][T26230] try_charge_memcg+0x62f/0xa10 [ 1157.873990][T26230] charge_memcg+0x6d/0x120 [ 1157.874019][T26230] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1157.874107][T26230] __swap_cache_prepare_and_add+0x69/0x4a0 [ 1157.874134][T26230] ? alloc_pages_mpol+0x217/0x260 [ 1157.874169][T26230] swap_cache_alloc_folio+0xa2/0x120 [ 1157.874202][T26230] swap_cluster_readahead+0x25f/0x3c0 [ 1157.874270][T26230] swapin_readahead+0xde/0x840 [ 1157.874297][T26230] ? tick_program_event+0x79/0xc0 [ 1157.874377][T26230] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 1157.874407][T26230] ? __rcu_read_unlock+0x4e/0x70 [ 1157.874432][T26230] ? swap_cache_get_folio+0x1e0/0x1f0 [ 1157.874522][T26230] do_swap_page+0x31e/0x2180 [ 1157.874547][T26230] ? __schedule+0x951/0xd40 [ 1157.874615][T26230] ? __rcu_read_lock+0x36/0x50 [ 1157.874695][T26230] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1157.874721][T26230] handle_mm_fault+0xb30/0x2e70 [ 1157.874752][T26230] ? vma_start_read+0x1c7/0x2c0 [ 1157.874800][T26230] do_user_addr_fault+0x62f/0x1050 [ 1157.874874][T26230] ? trace_page_fault_user+0x1f/0xa0 [ 1157.874909][T26230] exc_page_fault+0x62/0xa0 [ 1157.874935][T26230] asm_exc_page_fault+0x26/0x30 [ 1157.874960][T26230] RIP: 0033:0x7f9d853d559e [ 1157.874980][T26230] Code: e9 27 6a 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 5b ca 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 [ 1157.875120][T26230] RSP: 002b:00007ffffcf80d00 EFLAGS: 00010206 [ 1157.875142][T26230] RAX: 00007f9d85785fa0 RBX: 00007f9d85785fa0 RCX: 0000000000000026 [ 1157.875158][T26230] RDX: 0000000000000001 RSI: 00007f9d85786038 RDI: 0000000000000001 [ 1157.875174][T26230] RBP: 00007f9d85787da0 R08: 0000000000000001 R09: 0000000000000001 [ 1157.875189][T26230] R10: 0000000000000026 R11: 0000000000000246 R12: 000000000011aa33 [ 1157.875253][T26230] R13: 00007f9d8578609c R14: 000000000011a776 R15: 00007f9d85786090 [ 1157.875275][T26230] [ 1158.312393][T26230] memory: usage 191944kB, limit 307200kB, failcnt 641 [ 1158.334132][T26230] memory+swap: usage 192108kB, limit 9007199254740988kB, failcnt 0 [ 1158.369955][T26230] kmem: usage 162508kB, limit 9007199254740988kB, failcnt 0 [ 1158.435037][T26230] Memory cgroup stats for /syz4: [ 1158.435357][T26230] cache 0 [ 1158.473779][T26230] rss 0 [ 1158.486871][T26230] shmem 0 [ 1158.500126][T26230] mapped_file 0 [ 1158.513735][T26230] dirty 0 [ 1158.547349][T26230] writeback 24576 [ 1158.551203][T26230] workingset_refault_anon 194 [ 1158.560587][T26230] workingset_refault_file 1665 [ 1158.597877][T26230] swap 167936 [ 1158.602698][T26230] swapcached 22700032 [ 1158.614283][T26230] pgpgin 1014666 [ 1158.627120][T26230] pgpgout 1014658 [ 1158.643029][T26230] pgfault 1224071 [ 1158.657821][T26230] pgmajfault 93 [ 1158.672812][T26230] inactive_anon 24576 [ 1158.691711][T26230] active_anon 8192 [ 1158.709799][T26230] inactive_file 0 [ 1158.727845][T26230] active_file 0 [ 1158.743406][T26230] unevictable 0 [ 1158.758260][T26230] hierarchical_memory_limit 314572800 [ 1158.781211][T26230] hierarchical_memsw_limit 9223372036854771712 [ 1158.810416][T26230] total_cache 0 [ 1158.824981][T26230] total_rss 0 [ 1158.838746][T26230] total_shmem 0 [ 1158.852828][T26230] total_mapped_file 0 [ 1158.872645][T26230] total_dirty 0 [ 1158.892827][T26230] total_writeback 24576 [ 1158.904166][T26230] total_workingset_refault_anon 194 [ 1158.926559][T26230] total_workingset_refault_file 1665 [ 1158.950924][T26230] total_swap 167936 [ 1158.963659][T26230] total_swapcached 22700032 [ 1158.971258][T26248] set_capacity_and_notify: 4 callbacks suppressed [ 1158.971317][T26248] loop1: detected capacity change from 0 to 4096 [ 1158.984783][T26230] total_pgpgin 1014666 [ 1158.988912][T26230] total_pgpgout 1014658 [ 1158.993268][T26230] total_pgfault 1224071 [ 1159.002874][T26248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1159.012482][T26230] total_pgmajfault 93 [ 1159.019013][T26230] total_inactive_anon 24576 [ 1159.025810][T26248] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1159.040353][T26230] total_active_anon 8192 [ 1159.058749][T26248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.060865][T26230] total_inactive_file 0 [ 1159.097474][ T28] audit: type=1400 audit(1779244091.720:1355): avc: denied { write } for pid=26247 comm="syz.1.6826" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1159.142563][T26230] total_active_file 0 [ 1159.147745][T26230] total_unevictable 0 [ 1159.158382][T26230] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6821,pid=26230,uid=0 [ 1159.241070][T26230] Memory cgroup out of memory: Killed process 26230 (syz.4.6821) total-vm:96216kB, anon-rss:1240kB, file-rss:22392kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1159.638724][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.512843][T26268] loop5: detected capacity change from 0 to 512 [ 1160.560412][T26268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.586231][T26268] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.635537][ T28] audit: type=1400 audit(1779244093.260:1356): avc: denied { write } for pid=26267 comm="syz.5.6831" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1160.703936][T26266] loop4: detected capacity change from 0 to 512 [ 1160.879076][T26276] loop2: detected capacity change from 0 to 512 [ 1161.103992][T26266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.133565][T26276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.149700][T20116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.164086][T26266] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.176602][T26276] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.540126][ T28] audit: type=1400 audit(1779244093.870:1357): avc: denied { write } for pid=26265 comm="syz.4.6829" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1161.562579][ T28] audit: type=1400 audit(1779244093.870:1358): avc: denied { write } for pid=26275 comm="syz.2.6833" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1161.670465][T22684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.688779][T22220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.040984][T26296] loop1: detected capacity change from 0 to 8192 [ 1162.393006][T26292] 9p: Bad value for 'rfdno' [ 1163.583674][T26310] loop5: detected capacity change from 0 to 8192 [ 1163.717989][T26313] loop1: detected capacity change from 0 to 8192 [ 1163.763854][T26310] loop5: detected capacity change from 0 to 512 [ 1163.830139][T26310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.858417][T26310] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1164.081508][T26291] sch_tbf: burst 6 is lower than device ip6gre0 mtu (65485) ! [ 1164.246486][T26327] __nla_validate_parse: 1 callbacks suppressed [ 1164.246507][T26327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6844'. [ 1164.261692][T26327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6844'. [ 1164.270729][T26327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6844'. [ 1164.958251][T20116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.042496][T26329] loop4: detected capacity change from 0 to 4096 [ 1165.055715][T26329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1165.069729][T26329] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1165.154856][T26329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.238138][ T28] audit: type=1400 audit(1779244097.800:1359): avc: denied { write } for pid=26328 comm="syz.4.6845" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1165.303295][T26343] 9p: Bad value for 'rfdno' [ 1165.446657][T26351] 9p: Bad value for 'rfdno' [ 1165.473564][ T28] audit: type=1326 audit(1779244098.100:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26352 comm="syz.0.6852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1165.534871][ T28] audit: type=1326 audit(1779244098.100:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26352 comm="syz.0.6852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1165.609608][ T28] audit: type=1326 audit(1779244098.100:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26352 comm="syz.0.6852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1165.679816][ T28] audit: type=1326 audit(1779244098.100:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26352 comm="syz.0.6852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1165.720486][T22220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.749456][ T28] audit: type=1326 audit(1779244098.100:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26352 comm="syz.0.6852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1165.800612][T26358] loop5: detected capacity change from 0 to 512 [ 1165.838914][ T28] audit: type=1326 audit(1779244098.100:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26352 comm="syz.0.6852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1165.873219][T26349] syz.2.6851 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1165.919607][T26349] CPU: 0 UID: 0 PID: 26349 Comm: syz.2.6851 Tainted: G W syzkaller #0 PREEMPT(full) [ 1165.919649][T26349] Tainted: [W]=WARN [ 1165.919658][T26349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1165.919715][T26349] Call Trace: [ 1165.919724][T26349] [ 1165.919734][T26349] __dump_stack+0x1d/0x30 [ 1165.919765][T26349] dump_stack_lvl+0x95/0xd0 [ 1165.919853][T26349] dump_stack+0x15/0x1b [ 1165.919876][T26349] dump_header+0x80/0x240 [ 1165.919902][T26349] oom_kill_process+0x295/0x350 [ 1165.919992][T26349] out_of_memory+0x97d/0xb80 [ 1165.920071][T26349] try_charge_memcg+0x62f/0xa10 [ 1165.920110][T26349] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 1165.920171][T26349] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1165.920197][T26349] alloc_pages_mpol+0xb3/0x260 [ 1165.920263][T26349] alloc_pages_noprof+0x8f/0x140 [ 1165.920292][T26349] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 1165.920327][T26349] __kvmalloc_node_noprof+0x3d4/0x640 [ 1165.920350][T26349] ? futex_hash_allocate+0x190/0x9a0 [ 1165.920447][T26349] ? futex_hash_allocate+0x190/0x9a0 [ 1165.920539][T26349] futex_hash_allocate+0x190/0x9a0 [ 1165.920582][T26349] ? cap_task_prctl+0x13f/0x6b0 [ 1165.920607][T26349] futex_hash_prctl+0xd8/0xf0 [ 1165.920640][T26349] __se_sys_prctl+0x4f4/0x1400 [ 1165.920689][T26349] __x64_sys_prctl+0x67/0x80 [ 1165.920719][T26349] x64_sys_call+0x2533/0x3020 [ 1165.920749][T26349] do_syscall_64+0x12c/0x3b0 [ 1165.920790][T26349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.920818][T26349] RIP: 0033:0x7f7c8064ce59 [ 1165.920838][T26349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.920858][T26349] RSP: 002b:00007f7c7f0a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1165.920893][T26349] RAX: ffffffffffffffda RBX: 00007f7c808c5fa0 RCX: 00007f7c8064ce59 [ 1165.920943][T26349] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1165.921015][T26349] RBP: 00007f7c806e2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1165.921031][T26349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.921047][T26349] R13: 00007f7c808c6038 R14: 00007f7c808c5fa0 R15: 00007ffc8795a438 [ 1165.921069][T26349] [ 1165.927218][T26349] memory: usage 307200kB, limit 307200kB, failcnt 2195 [ 1165.978501][ T28] audit: type=1326 audit(1779244098.110:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26352 comm="syz.0.6852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1166.147798][T26349] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 1166.182508][T26361] loop4: detected capacity change from 0 to 8192 [ 1166.313144][ T28] audit: type=1326 audit(1779244098.110:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26352 comm="syz.0.6852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1166.346715][T26349] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1166.362321][ T28] audit: type=1326 audit(1779244098.130:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26352 comm="syz.0.6852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb048fce59 code=0x7ffc0000 [ 1166.388142][T26349] Memory cgroup stats for /syz2: [ 1166.388318][T26349] cache 0 [ 1166.396383][T26349] rss 0 [ 1166.400105][T26349] shmem 0 [ 1166.403173][T26349] mapped_file 0 [ 1166.406681][T26349] dirty 0 [ 1166.410259][T26349] writeback 0 [ 1166.413575][T26349] workingset_refault_anon 468 [ 1166.421906][T26349] workingset_refault_file 3389 [ 1166.426757][T26349] swap 196608 [ 1166.430075][T26349] swapcached 38309888 [ 1166.434091][T26349] pgpgin 1062442 [ 1166.437664][T26349] pgpgout 1062441 [ 1166.441379][T26349] pgfault 1298973 [ 1166.445089][T26349] pgmajfault 283 [ 1166.448711][T26349] inactive_anon 0 [ 1166.452412][T26349] active_anon 4096 [ 1166.456150][T26349] inactive_file 0 [ 1166.459830][T26349] active_file 0 [ 1166.463456][T26349] unevictable 0 [ 1166.466963][T26349] hierarchical_memory_limit 314572800 [ 1166.472359][T26349] hierarchical_memsw_limit 9223372036854771712 [ 1166.478538][T26349] total_cache 0 [ 1166.482087][T26349] total_rss 0 [ 1166.485403][T26349] total_shmem 0 [ 1166.488877][T26349] total_mapped_file 0 [ 1166.492919][T26349] total_dirty 0 [ 1166.496488][T26349] total_writeback 0 [ 1166.500317][T26349] total_workingset_refault_anon 468 [ 1166.505633][T26349] total_workingset_refault_file 3389 [ 1166.510932][T26349] total_swap 196608 [ 1166.514952][T26349] total_swapcached 38309888 [ 1166.519480][T26349] total_pgpgin 1064379 [ 1166.745104][T26368] loop1: detected capacity change from 0 to 4096 [ 1166.751780][T26361] loop4: detected capacity change from 0 to 512 [ 1166.773882][T26368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1166.785806][T26349] total_pgpgout 1064378 [ 1166.790048][T26349] total_pgfault 1300911 [ 1166.794229][T26349] total_pgmajfault 283 [ 1166.798319][T26349] total_inactive_anon 0 [ 1166.802543][T26349] total_active_anon 4096 [ 1166.806871][T26349] total_inactive_file 0 [ 1166.811055][T26349] total_active_file 0 [ 1166.815112][T26349] total_unevictable 0 [ 1166.819112][T26349] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6851,pid=26348,uid=0 [ 1166.869078][T26349] Memory cgroup out of memory: Killed process 26348 (syz.2.6851) total-vm:94168kB, anon-rss:1228kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1166.897736][T26368] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1166.936452][T26361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.970607][T26368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.988759][T26361] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1167.185768][T26358] EXT4-fs (loop5): 1 orphan inode deleted [ 1167.192006][T26358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1167.205459][T26358] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1167.287566][ T3433] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 1167.559762][T22220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.609266][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.233735][T26393] 9p: Bad value for 'rfdno' [ 1168.739072][T26401] loop4: detected capacity change from 0 to 8192 [ 1168.860052][T26404] 9p: Bad value for 'rfdno' [ 1169.176563][T26407] loop1: detected capacity change from 0 to 512 [ 1169.284981][T26407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.298571][T26407] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1169.300137][T26403] syz.0.6863 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1169.384114][T26403] CPU: 1 UID: 0 PID: 26403 Comm: syz.0.6863 Tainted: G W syzkaller #0 PREEMPT(full) [ 1169.384160][T26403] Tainted: [W]=WARN [ 1169.384167][T26403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1169.384244][T26403] Call Trace: [ 1169.384251][T26403] [ 1169.384261][T26403] __dump_stack+0x1d/0x30 [ 1169.384341][T26403] dump_stack_lvl+0x95/0xd0 [ 1169.384456][T26403] dump_stack+0x15/0x1b [ 1169.384481][T26403] dump_header+0x80/0x240 [ 1169.384506][T26403] oom_kill_process+0x295/0x350 [ 1169.384538][T26403] out_of_memory+0x97d/0xb80 [ 1169.384638][T26403] try_charge_memcg+0x62f/0xa10 [ 1169.384714][T26403] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 1169.384762][T26403] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1169.384793][T26403] alloc_pages_mpol+0xb3/0x260 [ 1169.384821][T26403] alloc_pages_noprof+0x8f/0x140 [ 1169.384856][T26403] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 1169.384891][T26403] __kvmalloc_node_noprof+0x3d4/0x640 [ 1169.384915][T26403] ? futex_hash_allocate+0x190/0x9a0 [ 1169.384951][T26403] ? futex_hash_allocate+0x190/0x9a0 [ 1169.385001][T26403] futex_hash_allocate+0x190/0x9a0 [ 1169.385038][T26403] ? cap_task_prctl+0x13f/0x6b0 [ 1169.385067][T26403] futex_hash_prctl+0xd8/0xf0 [ 1169.385138][T26403] __se_sys_prctl+0x4f4/0x1400 [ 1169.385171][T26403] __x64_sys_prctl+0x67/0x80 [ 1169.385201][T26403] x64_sys_call+0x2533/0x3020 [ 1169.385288][T26403] do_syscall_64+0x12c/0x3b0 [ 1169.385323][T26403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.385366][T26403] RIP: 0033:0x7fcb048fce59 [ 1169.385386][T26403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.385408][T26403] RSP: 002b:00007fcb0334f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1169.385434][T26403] RAX: ffffffffffffffda RBX: 00007fcb04b75fa0 RCX: 00007fcb048fce59 [ 1169.385520][T26403] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1169.385537][T26403] RBP: 00007fcb04992d6f R08: 0000000000000000 R09: 0000000000000000 [ 1169.385553][T26403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1169.385568][T26403] R13: 00007fcb04b76038 R14: 00007fcb04b75fa0 R15: 00007ffc70dcf388 [ 1169.385590][T26403] [ 1169.385654][T26403] memory: usage 307200kB, limit 307200kB, failcnt 2059 [ 1169.468524][T26377] loop2: detected capacity change from 0 to 4096 [ 1169.626028][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.630849][T26377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1169.648241][T26403] memory+swap: usage 227568kB, limit 9007199254740988kB, failcnt 0 [ 1169.668334][T26403] kmem: usage 220812kB, limit 9007199254740988kB, failcnt 0 [ 1169.703475][T26377] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1169.714231][T26403] Memory cgroup stats for /syz0: [ 1169.714530][T26403] cache 0 [ 1169.724797][T26403] rss 4096 [ 1169.728145][T26403] shmem 0 [ 1169.731263][T26403] mapped_file 0 [ 1169.732779][T26377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.734997][T26403] dirty 0 [ 1169.735012][T26403] writeback 0 [ 1169.735022][T26403] workingset_refault_anon 537 [ 1169.735032][T26403] workingset_refault_file 1784 [ 1169.735062][T26403] swap 192512 [ 1169.735071][T26403] swapcached 12058624 [ 1169.735080][T26403] pgpgin 1270320 [ 1169.774972][T26403] pgpgout 1270318 [ 1169.778775][T26403] pgfault 1371295 [ 1169.782495][T26403] pgmajfault 337 [ 1169.786054][T26403] inactive_anon 8192 [ 1169.790185][T26403] active_anon 0 [ 1169.793697][T26403] inactive_file 0 [ 1169.807074][T26403] active_file 0 [ 1169.810675][T26403] unevictable 0 [ 1169.814246][T26403] hierarchical_memory_limit 314572800 [ 1169.819838][T26403] hierarchical_memsw_limit 9223372036854771712 [ 1169.826180][T26403] total_cache 0 [ 1169.829725][T26403] total_rss 4096 [ 1169.834061][T26403] total_shmem 0 [ 1169.837818][T26403] total_mapped_file 0 [ 1169.841829][T26403] total_dirty 0 [ 1169.845319][T26403] total_writeback 0 [ 1169.849206][T26403] total_workingset_refault_anon 537 [ 1169.854455][T26403] total_workingset_refault_file 1784 [ 1169.859791][T26403] total_swap 192512 [ 1169.863777][T26403] total_swapcached 12058624 [ 1169.868363][T26403] total_pgpgin 1270320 [ 1169.872465][T26403] total_pgpgout 1270318 [ 1169.876623][T26403] total_pgfault 1371295 [ 1169.880866][T26403] total_pgmajfault 337 [ 1169.885025][T26403] total_inactive_anon 8192 [ 1169.912584][T26403] total_active_anon 0 [ 1169.934923][T26403] total_inactive_file 0 [ 1169.946666][T26403] total_active_file 0 [ 1169.963741][T26403] total_unevictable 0 [ 1169.981308][T26403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6863,pid=26402,uid=0 [ 1170.017513][T26413] loop1: detected capacity change from 0 to 4096 [ 1170.046871][T26403] Memory cgroup out of memory: Killed process 26402 (syz.0.6863) total-vm:96216kB, anon-rss:1232kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1170.067252][T26413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1170.108200][T26413] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1170.172547][T26413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1170.358450][T22684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.641159][T26422] loop4: detected capacity change from 0 to 8192 [ 1170.918548][T26422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6866'. [ 1170.951682][T26430] loop2: detected capacity change from 0 to 512 [ 1171.209225][T26430] EXT4-fs (loop2): 1 orphan inode deleted [ 1171.216581][T26430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.230207][T26430] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1171.345253][T16310] __quota_error: 11 callbacks suppressed [ 1171.345284][T16310] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1171.361791][T16310] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:13: Failed to release dquot type 1 [ 1171.605627][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.602609][T22684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.669973][T26451] loop2: detected capacity change from 0 to 1024 [ 1172.676926][T20116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.686495][T26451] EXT4-fs: test_dummy_encryption option not supported [ 1172.748376][T26449] loop1: detected capacity change from 0 to 8192 [ 1172.760136][T26452] 9p: Bad value for 'rfdno' [ 1172.884491][T26449] loop1: detected capacity change from 0 to 512 [ 1172.985754][T26459] loop2: detected capacity change from 0 to 512 [ 1172.993529][T26459] EXT4-fs: Ignoring removed orlov option [ 1173.079848][T26460] loop5: detected capacity change from 0 to 128 [ 1173.116130][T26460] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1173.861116][T26459] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1173.900316][T26460] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1173.914907][T26459] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.6874: invalid indirect mapped block 32768 (level 2) [ 1173.928720][T26459] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1173.933204][T26459] EXT4-fs (loop2): 1 orphan inode deleted [ 1173.948276][T26459] EXT4-fs (loop2): 1 truncate cleaned up [ 1173.955147][T26459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.003758][T26449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.299233][T26449] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1174.363759][ T3433] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1174.374318][T20116] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1174.569559][T26475] loop4: detected capacity change from 0 to 512 [ 1174.606189][T26475] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.6880: inode has both inline data and extents flags [ 1174.673970][T26475] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1174.674213][T26475] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6880: couldn't read orphan inode 15 (err -117) [ 1174.683470][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1174.683487][ C1] EXT4-fs (loop4): initial error at time 1779244107: ext4_orphan_get:1397: inode 15 [ 1174.683522][ C1] EXT4-fs (loop4): last error at time 1779244107: ext4_orphan_get:1397: inode 15 [ 1174.808290][T26475] loop4: lost filesystem error report for type 5 error -117 [ 1174.809191][T26475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.884396][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.898244][T22684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.966133][ T28] audit: type=1400 audit(1779244107.590:1379): avc: denied { write } for pid=26472 comm="syz.4.6880" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1175.114376][T26479] loop5: detected capacity change from 0 to 512 [ 1175.190742][T22220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.243802][T26479] EXT4-fs (loop5): 1 orphan inode deleted [ 1175.250061][T26479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.325075][T26482] loop1: detected capacity change from 0 to 512 [ 1175.333428][T26479] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1175.395402][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1175.409967][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1 [ 1175.715110][T26502] loop2: detected capacity change from 0 to 512 [ 1175.770109][T26482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.815813][T26502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.840198][T26502] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1175.857636][T26482] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1175.884320][T26497] 9p: Bad value for 'rfdno' [ 1176.005536][ T28] audit: type=1400 audit(1779244108.620:1380): avc: denied { write } for pid=26500 comm="syz.2.6887" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1176.065677][T26506] EXT4-fs warning (device loop2): ext4_empty_dir:3104: inode #12: comm syz.2.6887: directory missing '..' [ 1176.156963][ T28] audit: type=1400 audit(1779244108.690:1381): avc: denied { write } for pid=26500 comm="syz.2.6887" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1176.196210][ T28] audit: type=1400 audit(1779244108.690:1382): avc: denied { write } for pid=26500 comm="syz.2.6887" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1176.303166][ T28] audit: type=1400 audit(1779244108.690:1383): avc: denied { rename } for pid=26500 comm="syz.2.6887" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1176.381898][ T28] audit: type=1400 audit(1779244108.820:1384): avc: denied { write } for pid=26481 comm="syz.1.6881" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1177.024761][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.034451][T22684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.216897][T26508] loop2: detected capacity change from 0 to 512 [ 1177.715721][T26508] EXT4-fs (loop2): 1 orphan inode deleted [ 1177.726133][T26508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1177.740560][T26508] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1177.867448][T26508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6888'. [ 1177.904075][ T3433] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1177.914379][ T3433] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 1177.928566][T22684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.170860][T26528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6894'. [ 1178.187088][T26530] loop2: detected capacity change from 0 to 512 [ 1178.311643][T26530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.324446][T26530] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1178.860224][T22684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.929684][T26551] loop2: detected capacity change from 0 to 512 [ 1179.961392][T26551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1180.050276][T26551] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.099594][ T28] audit: type=1400 audit(1779244112.730:1385): avc: denied { write } for pid=26550 comm="syz.2.6901" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1180.151697][T20116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.259633][T26557] loop5: detected capacity change from 0 to 8192 [ 1180.301064][ T28] audit: type=1400 audit(1779244112.930:1386): avc: denied { setattr } for pid=26550 comm="syz.2.6901" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1180.640205][T26557] loop5: detected capacity change from 0 to 512 [ 1180.706320][T26557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1180.722778][T26557] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1181.073663][T22684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.555012][T20116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.469491][T26605] loop2: detected capacity change from 0 to 128 [ 1182.479732][T26600] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1182.499280][T26605] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1182.576805][T26605] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1182.621840][ T30] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1182.638513][T26605] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1182.691390][T26615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6919'. [ 1182.706739][T26615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6919'. [ 1182.864313][T26623] loop5: detected capacity change from 0 to 128 [ 1182.875581][T26623] /dev/loop5: Can't open blockdev [ 1183.031654][T26631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6925'. [ 1183.041013][T26631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6925'. [ 1183.135566][T26643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6931'. [ 1183.157803][T26643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6931'. [ 1183.197248][T26647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.204577][T26647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.212173][T26647] bridge0: entered allmulticast mode [ 1183.220236][T26647] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1183.436964][T26650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6932'. [ 1183.773759][T26654] loop5: detected capacity change from 0 to 128 [ 1183.781069][T26654] /dev/loop5: Can't open blockdev [ 1183.824346][T26657] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1184.220095][T26681] loop4: detected capacity change from 0 to 1024 [ 1184.227477][T26681] EXT4-fs: test_dummy_encryption option not supported [ 1184.586658][T26685] loop4: detected capacity change from 0 to 512 [ 1184.607650][T26685] EXT4-fs: Ignoring removed orlov option [ 1184.620286][T26685] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1184.835623][T26685] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.6944: invalid indirect mapped block 32768 (level 2) [ 1184.850103][T26685] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1184.855410][T26685] EXT4-fs (loop4): 1 orphan inode deleted [ 1184.864688][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1184.864737][ C0] EXT4-fs (loop4): initial error at time 1779244117: ext4_free_branches:1023: inode 16 [ 1184.865077][ C0] EXT4-fs (loop4): last error at time 1779244117: ext4_free_branches:1023: inode 16 [ 1184.902155][T26685] EXT4-fs (loop4): 1 truncate cleaned up [ 1184.915302][T26685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1186.134828][T22220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.038909][T26717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.046212][T26717] bridge0: entered allmulticast mode [ 1187.054872][T26717] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1187.179075][T26720] loop4: detected capacity change from 0 to 128 [ 1187.568427][T26720] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1187.634088][T26720] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1187.712894][T16310] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1187.732336][T26720] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1187.804370][T26727] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1187.815988][ T28] audit: type=1400 audit(1779244120.440:1387): avc: denied { unlink } for pid=22684 comm="syz-executor" name="bus" dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1188.014509][T26740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.021829][T26740] bridge0: entered allmulticast mode [ 1188.029783][T26740] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1188.651271][ T28] audit: type=1400 audit(1779244121.280:1388): avc: denied { unmount } for pid=26743 comm="syz.0.6964" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1189.025437][T26756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6967'. [ 1189.122656][T26745] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 1189.778018][T26763] loop5: detected capacity change from 0 to 128 [ 1189.810024][T26763] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1189.885078][T26763] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1189.988317][T16310] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1189.998898][T26763] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1190.024889][T26771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6973'. [ 1190.037548][T26771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6973'. [ 1190.305459][T26784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6978'. [ 1192.430927][T26810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6987'. [ 1193.443876][T26834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.451215][T26834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.458669][T26834] bridge0: entered allmulticast mode [ 1193.466253][T26834] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1194.105151][T26836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.112442][T26836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.119820][T26836] bridge0: entered allmulticast mode [ 1194.127501][T26836] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1194.630977][T26842] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 1195.439675][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7008'. [ 1195.513915][T26875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7009'. [ 1195.950156][T26905] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 1195.963541][T26906] loop1: detected capacity change from 0 to 512 [ 1196.013455][T26906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.026103][T26906] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1196.776395][T26923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7022'. [ 1196.797855][T26926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.830481][T26926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.849871][T26926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.869849][T26926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.887323][T26926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.901097][T26926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.909417][T26926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.918278][T26926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.978632][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.338376][T26946] loop1: detected capacity change from 0 to 512 [ 1197.459866][T26946] EXT4-fs (loop1): 1 orphan inode deleted [ 1197.466758][T26946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1197.480387][T26946] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1197.672719][T11793] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1197.688596][T11793] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:11: Failed to release dquot type 1 [ 1198.634979][T26942] net_ratelimit: 580 callbacks suppressed [ 1198.635002][T26942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.054551][T10326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.063053][T25014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.086596][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.096413][T26942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.107461][T26942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.116693][T26942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.128528][T26942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.136974][T26942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.150261][T26965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.165681][T26942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.344080][T26983] loop1: detected capacity change from 0 to 512 [ 1200.359500][T26983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1200.372204][T26983] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1200.850016][T26996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7043'. [ 1201.394672][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.495592][T27010] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1203.764664][T25014] net_ratelimit: 32 callbacks suppressed [ 1203.764730][T25014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.157848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.166089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.174372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.338700][T11384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.347515][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.507671][T27053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.537885][T27053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.567840][T27053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.602004][T27058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.716148][T27123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7092'. [ 1207.086868][T27135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7097'. [ 1207.300173][T27143] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1208.777755][ C0] net_ratelimit: 2185 callbacks suppressed [ 1208.777810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.793361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.801612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.809890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.827748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.838162][T27195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.853052][T27195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.870732][T27195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.871906][T27199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7121'. [ 1208.894345][T27195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.948747][T27201] sch_tbf: burst 6 is lower than device ip6gre0 mtu (65485) ! [ 1208.966416][ T28] audit: type=1400 audit(1779244141.580:1389): avc: denied { getopt } for pid=27203 comm="syz.0.7123" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1209.067758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.329848][T27210] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1209.716637][T27220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7129'. [ 1212.456433][ T28] audit: type=1400 audit(1779244145.080:1390): avc: denied { listen } for pid=27289 comm="syz.0.7153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1212.514869][ T28] audit: type=1400 audit(1779244145.080:1391): avc: denied { accept } for pid=27289 comm="syz.0.7153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1214.251740][ T3337] net_ratelimit: 649 callbacks suppressed [ 1214.251802][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.850026][T27336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7168'. [ 1215.437829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.446081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.016386][T27358] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1218.379235][T27407] sch_tbf: burst 0 is lower than device lo mtu (65499) ! [ 1218.896772][ T28] audit: type=1400 audit(1779244151.520:1392): avc: denied { setopt } for pid=27425 comm="syz.4.7202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1222.162592][T27519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7237'. [ 1223.748055][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.871760][T27556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.889282][T27556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.919098][T27556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.927498][T27559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.943467][T27559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.952055][T27559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.961846][T27559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.970647][T27559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.981306][T27559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.759333][T27589] loop1: detected capacity change from 0 to 512 [ 1225.639884][T27589] EXT4-fs (loop1): 1 orphan inode deleted [ 1225.646108][T27589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1225.658867][T27589] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1226.225043][ T3433] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1226.255362][ T3433] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 1226.274514][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.469583][T27615] 9p: Bad value for 'rfdno' [ 1228.349285][T27677] 9p: Bad value for 'rfdno' [ 1228.757890][T27680] net_ratelimit: 707 callbacks suppressed [ 1228.757910][T27680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.799779][T27680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.822208][T27680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.847336][T27680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.873044][T27680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.891887][T27680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.910562][T27680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.929189][T27680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.949737][T27680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.962741][T27680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.188655][T27669] syz.4.7289 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1229.202602][T27669] CPU: 0 UID: 0 PID: 27669 Comm: syz.4.7289 Tainted: G W syzkaller #0 PREEMPT(full) [ 1229.202690][T27669] Tainted: [W]=WARN [ 1229.202700][T27669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1229.202716][T27669] Call Trace: [ 1229.202723][T27669] [ 1229.202733][T27669] __dump_stack+0x1d/0x30 [ 1229.202809][T27669] dump_stack_lvl+0x95/0xd0 [ 1229.202834][T27669] dump_stack+0x15/0x1b [ 1229.202858][T27669] dump_header+0x80/0x240 [ 1229.202880][T27669] oom_kill_process+0x295/0x350 [ 1229.202945][T27669] out_of_memory+0x97d/0xb80 [ 1229.203060][T27669] try_charge_memcg+0x62f/0xa10 [ 1229.203140][T27669] charge_memcg+0x6d/0x120 [ 1229.203166][T27669] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1229.203195][T27669] __swap_cache_prepare_and_add+0x69/0x4a0 [ 1229.203252][T27669] ? alloc_pages_mpol+0x217/0x260 [ 1229.203358][T27669] swap_cache_alloc_folio+0xa2/0x120 [ 1229.203383][T27669] swap_cluster_readahead+0x35c/0x3c0 [ 1229.203532][T27669] swapin_readahead+0xde/0x840 [ 1229.203563][T27669] ? _raw_spin_unlock+0x9/0x30 [ 1229.203704][T27669] ? swap_put_entries_cluster+0x46c/0x490 [ 1229.203736][T27669] ? __entry_text_end+0x1d808/0x102179 [ 1229.203767][T27669] ? __rcu_read_unlock+0x4e/0x70 [ 1229.203868][T27669] ? swap_cache_get_folio+0x1e0/0x1f0 [ 1229.203899][T27669] do_swap_page+0x31e/0x2180 [ 1229.203969][T27669] ? css_rstat_updated+0xbb/0x280 [ 1229.204064][T27669] ? __rcu_read_lock+0x36/0x50 [ 1229.204089][T27669] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1229.204149][T27669] handle_mm_fault+0xb30/0x2e70 [ 1229.204182][T27669] ? vma_start_read+0x1c7/0x2c0 [ 1229.204352][T27669] do_user_addr_fault+0x62f/0x1050 [ 1229.204465][T27669] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 1229.204496][T27669] ? trace_page_fault_user+0x1f/0xa0 [ 1229.204528][T27669] exc_page_fault+0x62/0xa0 [ 1229.204628][T27669] asm_exc_page_fault+0x26/0x30 [ 1229.204654][T27669] RIP: 0033:0x7f9d853e1494 [ 1229.204675][T27669] Code: 54 24 28 0f 82 5e 03 00 00 40 0f b6 fe c6 44 24 0e 01 45 31 ed 45 31 f6 89 7c 24 08 85 c0 0f 84 10 01 00 00 66 90 48 8b 3c 24 <49> 8b 54 24 40 4c 89 f0 4a 03 14 ef 80 3d 01 69 3a 00 00 49 89 d6 [ 1229.204698][T27669] RSP: 002b:00007ffffcf80ca0 EFLAGS: 00010297 [ 1229.204719][T27669] RAX: 0000001b31823000 RBX: ffffffff819b27a0 RCX: 0000001b31822ff8 [ 1229.204762][T27669] RDX: 0000001b31424220 RSI: 0000000000000008 RDI: 00007f9d84f6f008 [ 1229.204778][T27669] RBP: 00000000000001c6 R08: 00007f9d85770000 R09: 00007f9d85772000 [ 1229.204794][T27669] R10: 00000000819b27a4 R11: 0000000000000001 R12: 00007f9d85786038 [ 1229.204881][T27669] R13: 0000000000006f94 R14: ffffffff819b225f R15: 00007f9d862b5720 [ 1229.204899][T27669] ? vfs_pressure_ratio+0xf/0x90 [ 1229.204924][T27669] ? __d_drop+0x1c0/0x240 [ 1229.205020][T27669] [ 1229.205240][T27669] memory: usage 307200kB, limit 307200kB, failcnt 1186 [ 1229.477639][T27669] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 1229.485679][T27669] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 1229.493052][T27669] Memory cgroup stats for /syz4: [ 1229.493282][T27669] cache 4096 [ 1229.501573][T27669] rss 8192 [ 1229.504675][T27669] shmem 0 [ 1229.507629][T27669] mapped_file 4096 [ 1229.517912][T27669] dirty 0 [ 1229.521072][T27669] writeback 0 [ 1229.524489][T27669] workingset_refault_anon 344 [ 1229.529320][T27669] workingset_refault_file 3438 [ 1229.534168][T27669] swap 258048 [ 1229.537633][T27669] swapcached 23904256 [ 1229.541734][T27669] pgpgin 1075531 [ 1229.554668][T27669] pgpgout 1075526 [ 1229.558376][T27669] pgfault 1305552 [ 1229.562084][T27669] pgmajfault 208 [ 1229.578449][T27669] inactive_anon 0 [ 1229.582158][T27669] active_anon 16384 [ 1229.586090][T27669] inactive_file 0 [ 1229.589978][T27669] active_file 4096 [ 1229.597597][T27669] unevictable 0 [ 1229.602228][T27669] hierarchical_memory_limit 314572800 [ 1229.608206][T27669] hierarchical_memsw_limit 9223372036854771712 [ 1229.614407][T27669] total_cache 4096 [ 1229.619269][T27669] total_rss 8192 [ 1229.622864][T27669] total_shmem 0 [ 1229.631033][T27669] total_mapped_file 4096 [ 1229.640855][T27669] total_dirty 0 [ 1229.647955][T27669] total_writeback 0 [ 1229.656232][T27669] total_workingset_refault_anon 344 [ 1229.666801][T27669] total_workingset_refault_file 3438 [ 1229.672402][T27669] total_swap 258048 [ 1229.676294][T27669] total_swapcached 23904256 [ 1229.687153][T27669] total_pgpgin 1075531 [ 1229.693573][T27669] total_pgpgout 1075526 [ 1229.701983][T27669] total_pgfault 1305552 [ 1229.710666][T27669] total_pgmajfault 208 [ 1229.714844][T27669] total_inactive_anon 0 [ 1229.719356][T27669] total_active_anon 16384 [ 1229.723797][T27669] total_inactive_file 0 [ 1229.729385][T27669] total_active_file 4096 [ 1229.733684][T27669] total_unevictable 0 [ 1229.739314][T27669] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7289,pid=27669,uid=0 [ 1229.754628][T27669] Memory cgroup out of memory: Killed process 27669 (syz.4.7289) total-vm:94300kB, anon-rss:1240kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1229.892716][T27723] bridge0: port 2(bridge_slave_1) entered listening state [ 1229.959613][T27725] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7310'. [ 1230.496791][T27752] 9p: Bad value for 'rfdno' [ 1230.595390][T27767] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7325'. [ 1230.941947][T27795] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7338'. [ 1231.047430][T27805] loop1: detected capacity change from 0 to 1024 [ 1231.062454][T27805] EXT4-fs: test_dummy_encryption option not supported [ 1231.652960][T27812] loop1: detected capacity change from 0 to 512 [ 1231.677026][T27812] EXT4-fs: Ignoring removed orlov option [ 1231.716649][T27812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1231.789715][T27812] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7343: invalid indirect mapped block 32768 (level 2) [ 1231.806961][T27812] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1231.817848][T27812] EXT4-fs (loop1): 1 orphan inode deleted [ 1231.834049][T27812] EXT4-fs (loop1): 1 truncate cleaned up [ 1231.840648][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1231.841046][ C0] EXT4-fs (loop1): initial error at time 1779244164: ext4_free_branches:1023: inode 16 [ 1231.841648][ C0] EXT4-fs (loop1): last error at time 1779244164: ext4_free_branches:1023: inode 16 [ 1231.882286][T27812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1232.402169][T27830] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7351'. [ 1233.497298][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.764641][T27868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7365'. [ 1233.777462][T27863] net_ratelimit: 669 callbacks suppressed [ 1233.777481][T27863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.791456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.847568][T27872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.855901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.217613][T27880] 9p: Bad value for 'rfdno' [ 1235.010115][T27885] loop1: detected capacity change from 0 to 512 [ 1235.039930][T27885] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.7371: inode has both inline data and extents flags [ 1235.531384][T27885] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1235.537698][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1235.553338][ C1] EXT4-fs (loop1): initial error at time 1779244168: ext4_orphan_get:1397: inode 15 [ 1235.562749][ C1] EXT4-fs (loop1): last error at time 1779244168: ext4_orphan_get:1397: inode 15 [ 1235.582220][T27885] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.7371: couldn't read orphan inode 15 (err -117) [ 1236.053924][T27885] loop1: lost filesystem error report for type 5 error -117 [ 1236.054695][T27885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1236.191977][ T28] audit: type=1400 audit(1779244168.790:1393): avc: denied { write } for pid=27883 comm="syz.1.7371" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1236.241530][T27905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.249916][T27905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.258273][T27905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.267731][T27907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7379'. [ 1236.268225][T27905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.278822][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.285398][T27905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.302663][T27905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.171792][T27905] net_ratelimit: 446 callbacks suppressed [ 1239.171814][T27905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.288987][T27905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.297334][T27905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.277867][T27905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.286309][T27905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.294754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.302973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.311211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.319526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.327753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.626743][T28001] sch_tbf: burst 6 is lower than device ip6gre0 mtu (65485) ! [ 1244.747178][T28005] bridge0: port 2(bridge_slave_1) entered listening state [ 1244.880823][T28009] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7415'. [ 1246.110879][T28028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7422'. [ 1251.161472][T28204] loop1: detected capacity change from 0 to 8192 [ 1251.168190][T28204] vfat: Unknown parameter '' [ 1251.499156][T28212] netlink: 'syz.1.7453': attribute type 1 has an invalid length. [ 1253.429884][T28306] net_ratelimit: 96 callbacks suppressed [ 1253.429904][T28306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.447347][T28306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.455709][T28306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.264667][T28306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.291630][T28306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.067963][T28423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.094640][T28423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.104145][T28423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.068392][T28423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.084490][T28423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.016060][T28452] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.7517'. [ 1259.607119][T28462] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.7522'. [ 1260.749368][T28496] loop1: detected capacity change from 0 to 8192 [ 1260.756206][T28496] vfat: Unknown parameter '' [ 1262.179743][T28507] net_ratelimit: 99 callbacks suppressed [ 1262.179761][T28507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.236791][T28507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.268713][T28507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.308610][T28512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.377092][T28512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.387973][T28512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.406050][T28512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.417983][T28512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.425445][T28517] 9p: Bad value for 'rfdno' [ 1262.434525][T28512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.442811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.809544][T28541] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.7550'. [ 1264.436868][ T28] audit: type=1400 audit(1779244197.060:1394): avc: denied { setopt } for pid=28577 comm="syz.5.7565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1265.265500][T28609] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.7576'. [ 1267.337752][ C1] net_ratelimit: 1477 callbacks suppressed [ 1267.337775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.357844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.366021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.374223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.382398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.390580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.398777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.406900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.415152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.423413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.405041][T28663] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.7598'. [ 1269.079866][T28665] loop1: detected capacity change from 0 to 512 [ 1269.109637][T28665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1269.122340][T28665] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1269.177817][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.432066][T28696] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.7610'. [ 1271.765706][T28747] loop1: detected capacity change from 0 to 512 [ 1271.900674][T28747] EXT4-fs (loop1): 1 orphan inode deleted [ 1271.920678][T28747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1271.952304][T28747] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1272.065170][T28138] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1272.106664][T28138] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:17: Failed to release dquot type 1 [ 1272.951757][ T28] audit: type=1400 audit(1779244205.450:1395): avc: denied { read } for pid=28811 comm="syz.2.7634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1273.363431][T28855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7640'. [ 1273.411779][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.043662][T28876] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7642'. [ 1274.937220][ T28] audit: type=1400 audit(1779244207.560:1396): avc: denied { write } for pid=28864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.249237][T28901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7649'. [ 1276.034444][ T28] audit: type=1400 audit(1779244208.660:1397): avc: denied { write } for pid=28905 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1276.171397][ T3018] veth0_vlan: left promiscuous mode [ 1276.186323][T28904] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.7652'. [ 1276.202776][ T3018] veth0_vlan: entered promiscuous mode [ 1276.448119][ T28] audit: type=1400 audit(1779244209.070:1398): avc: denied { write } for pid=28920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1276.523880][ T28] audit: type=1400 audit(1779244209.150:1399): avc: denied { write } for pid=28934 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1276.694502][T28945] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7659'. [ 1277.270531][ T28] audit: type=1400 audit(1779244209.900:1400): avc: denied { write } for pid=28941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.323628][ T28] audit: type=1400 audit(1779244209.950:1401): avc: denied { write } for pid=28969 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.519323][T28987] netlink: 4832 bytes leftover after parsing attributes in process `syz.4.7670'. [ 1277.556554][T28987] netlink: 4832 bytes leftover after parsing attributes in process `syz.4.7670'. [ 1277.570846][ T28] audit: type=1400 audit(1779244210.200:1402): avc: denied { write } for pid=28978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.618420][T28987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7670'. [ 1277.640222][T29005] net_ratelimit: 1481 callbacks suppressed [ 1277.640239][T29005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.661486][ T28] audit: type=1400 audit(1779244210.290:1403): avc: denied { write } for pid=29002 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.663013][T29005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.693005][T28919] Set syz1 is full, maxelem 65536 reached [ 1277.722884][T29005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.738424][T29010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.747476][T29010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.756276][T29010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.766318][T29010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.800726][T29010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.822529][T29010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.908366][T26953] IPVS: starting estimator thread 0... [ 1279.017752][T29054] IPVS: using max 2640 ests per chain, 132000 per kthread [ 1279.072006][T29072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7698'. [ 1279.774690][T29129] loop1: detected capacity change from 0 to 128 [ 1279.880289][T29129] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1279.920822][T29129] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1280.059673][ T28] audit: type=1400 audit(1779244212.680:1404): avc: denied { write } for pid=29128 comm="syz.1.7722" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1280.337978][T29154] netlink: 4832 bytes leftover after parsing attributes in process `syz.4.7733'. [ 1280.347873][T29154] netlink: 4832 bytes leftover after parsing attributes in process `syz.4.7733'. [ 1280.855441][T29159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7733'. [ 1280.859968][T24991] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1280.864710][T29159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7733'. [ 1280.953048][T25014] IPVS: starting estimator thread 0... [ 1281.047786][T29169] IPVS: using max 2736 ests per chain, 136800 per kthread [ 1282.107023][T29275] __nla_validate_parse: 2 callbacks suppressed [ 1282.107042][T29275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7777'. [ 1282.486718][T29295] netlink: 'syz.1.7782': attribute type 4 has an invalid length. [ 1282.767755][ C1] net_ratelimit: 959 callbacks suppressed [ 1282.767775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.783385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.791621][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.799933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.808129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.816278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.824457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.832613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.840781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.848914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.066839][T29431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7808'. [ 1285.558196][T29442] loop1: detected capacity change from 0 to 1024 [ 1285.582988][T29442] EXT4-fs: test_dummy_encryption option not supported [ 1285.879961][T29462] loop1: detected capacity change from 0 to 512 [ 1285.887082][T29462] EXT4-fs: Ignoring removed orlov option [ 1285.914160][T29462] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1285.960766][T29462] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7817: invalid indirect mapped block 32768 (level 2) [ 1285.981059][T29462] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1285.986403][T29462] EXT4-fs (loop1): 1 orphan inode deleted [ 1286.001352][T29462] EXT4-fs (loop1): 1 truncate cleaned up [ 1286.007958][T29462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1287.349471][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.556932][T29560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7842'. [ 1287.969141][T29625] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7854'. [ 1288.258568][T29628] loop1: detected capacity change from 0 to 512 [ 1288.571508][T29638] 9p: Bad value for 'wfdno' [ 1288.586474][T29628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1288.609718][T29628] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1288.742397][ T28] audit: type=1400 audit(1779244221.370:1405): avc: denied { write } for pid=29639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1288.821925][T29669] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7860'. [ 1288.962571][ T28] audit: type=1400 audit(1779244221.570:1406): avc: denied { write } for pid=29668 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.557722][ T28] audit: type=1400 audit(1779244222.140:1407): avc: denied { write } for pid=29677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.611116][ T28] audit: type=1400 audit(1779244222.240:1408): avc: denied { write } for pid=29692 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1290.165922][ T28] audit: type=1400 audit(1779244222.790:1409): avc: denied { create } for pid=29717 comm="syz.2.7872" name=06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1290.232441][ T28] audit: type=1400 audit(1779244222.820:1410): avc: denied { write } for pid=29709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1290.232491][T10313] IPVS: starting estimator thread 0... [ 1290.299326][ T28] audit: type=1400 audit(1779244222.900:1411): avc: denied { write } for pid=29724 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1290.305474][T29726] net_ratelimit: 478 callbacks suppressed [ 1290.305494][T29726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.350443][T29726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.376350][T29731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7874'. [ 1290.427868][T29727] IPVS: using max 2592 ests per chain, 129600 per kthread [ 1290.457905][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1290.615977][T29749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7879'. [ 1291.299837][ T28] audit: type=1400 audit(1779244223.930:1412): avc: denied { write } for pid=29758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1291.401701][ T28] audit: type=1400 audit(1779244224.020:1413): avc: denied { write } for pid=29774 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1291.436116][T29777] netlink: 'syz.1.7887': attribute type 83 has an invalid length. [ 1291.536107][T29790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.090324][T29802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7894'. [ 1292.243294][T29809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7895'. [ 1293.530658][T29821] syzkaller0: entered promiscuous mode [ 1293.555523][T29821] syzkaller0: entered allmulticast mode [ 1293.720469][T29837] netlink: 'syz.4.7907': attribute type 83 has an invalid length. [ 1294.350936][T29883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7917'. [ 1295.573006][T25014] IPVS: starting estimator thread 0... [ 1295.838183][T29998] IPVS: using max 2736 ests per chain, 136800 per kthread [ 1297.644405][T30035] syzkaller0: entered promiscuous mode [ 1297.657760][T30035] syzkaller0: entered allmulticast mode [ 1297.712812][T30047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.721103][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.743619][T30047] 9p: Could not find request transport: fd0xffffffffffffffff [ 1297.989614][T30062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7954'. [ 1298.010378][T30062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7954'. [ 1298.618177][T30040] syz.2.7946 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1298.658754][T30040] CPU: 1 UID: 0 PID: 30040 Comm: syz.2.7946 Tainted: G W syzkaller #0 PREEMPT(full) [ 1298.658795][T30040] Tainted: [W]=WARN [ 1298.658804][T30040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1298.658819][T30040] Call Trace: [ 1298.658826][T30040] [ 1298.658834][T30040] __dump_stack+0x1d/0x30 [ 1298.659000][T30040] dump_stack_lvl+0x95/0xd0 [ 1298.659024][T30040] dump_stack+0x15/0x1b [ 1298.659047][T30040] dump_header+0x80/0x240 [ 1298.659102][T30040] oom_kill_process+0x295/0x350 [ 1298.659147][T30040] out_of_memory+0x97d/0xb80 [ 1298.659206][T30040] try_charge_memcg+0x62f/0xa10 [ 1298.659253][T30040] charge_memcg+0x6d/0x120 [ 1298.659280][T30040] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1298.659330][T30040] __swap_cache_prepare_and_add+0x69/0x4a0 [ 1298.659388][T30040] ? alloc_pages_mpol+0x217/0x260 [ 1298.659418][T30040] swap_cache_alloc_folio+0xa2/0x120 [ 1298.659443][T30040] swap_cluster_readahead+0x25f/0x3c0 [ 1298.659524][T30040] swapin_readahead+0xde/0x840 [ 1298.659555][T30040] ? rcu_segcblist_enqueue+0x92/0xb0 [ 1298.659590][T30040] ? __account_obj_stock+0x3ba/0x5f0 [ 1298.659671][T30040] ? __rcu_read_unlock+0x4e/0x70 [ 1298.659694][T30040] ? swap_cache_get_folio+0x1e0/0x1f0 [ 1298.659721][T30040] do_swap_page+0x31e/0x2180 [ 1298.659759][T30040] ? __refill_obj_stock+0xd3/0x2c0 [ 1298.659827][T30040] ? __rcu_read_unlock+0x4e/0x70 [ 1298.659916][T30040] ? __rcu_read_lock+0x36/0x50 [ 1298.659949][T30040] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1298.659975][T30040] handle_mm_fault+0xb30/0x2e70 [ 1298.660061][T30040] ? vma_start_read+0x1c7/0x2c0 [ 1298.660148][T30040] do_user_addr_fault+0x62f/0x1050 [ 1298.660184][T30040] ? trace_page_fault_user+0x1f/0xa0 [ 1298.660279][T30040] exc_page_fault+0x62/0xa0 [ 1298.660306][T30040] asm_exc_page_fault+0x26/0x30 [ 1298.660330][T30040] RIP: 0033:0x7f7c8064ce61 [ 1298.660435][T30040] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1298.660457][T30040] RSP: 002b:00007ffc8795a598 EFLAGS: 00010217 [ 1298.660478][T30040] RAX: 0000000000000000 RBX: 00007f7c808c7da0 RCX: 00007f7c8064ce59 [ 1298.660554][T30040] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1298.660569][T30040] RBP: 00007f7c808c7da0 R08: 0000000000000006 R09: 0000000000000000 [ 1298.660584][T30040] R10: 00007f7c808c7cb0 R11: 0000000000000246 R12: 000000000013d002 [ 1298.660650][T30040] R13: 00007f7c808c609c R14: 000000000013cd79 R15: 00007f7c808c6090 [ 1298.660672][T30040] [ 1298.660726][T30040] memory: usage 307200kB, limit 307200kB, failcnt 2747 [ 1298.689811][T30086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7966'. [ 1298.696550][T30083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7965'. [ 1298.708779][T30086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7966'. [ 1298.710125][T30040] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 1298.720745][T30083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7965'. [ 1298.724681][T30040] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1298.975710][T30040] Memory cgroup stats for /syz2: [ 1298.987807][T30040] cache 0 [ 1298.998079][T30040] rss 0 [ 1299.001001][T30040] shmem 0 [ 1299.004004][T30040] mapped_file 0 [ 1299.007568][T30040] dirty 0 [ 1299.011161][T30040] writeback 0 [ 1299.014739][T30040] workingset_refault_anon 609 [ 1299.019807][T30040] workingset_refault_file 4807 [ 1299.024640][T30040] swap 266240 [ 1299.028064][T30040] swapcached 39800832 [ 1299.032141][T30040] pgpgin 1155072 [ 1299.035766][T30040] pgpgout 1155072 [ 1299.039477][T30040] pgfault 1482175 [ 1299.044816][T30040] pgmajfault 346 [ 1299.049487][T30040] inactive_anon 0 [ 1299.054585][T30040] active_anon 0 [ 1299.061073][T30040] inactive_file 0 [ 1299.068716][T30040] active_file 0 [ 1299.072386][T30040] unevictable 0 [ 1299.075903][T30040] hierarchical_memory_limit 314572800 [ 1299.081790][T30040] hierarchical_memsw_limit 9223372036854771712 [ 1299.090342][T30040] total_cache 0 [ 1299.093864][T30040] total_rss 0 [ 1299.097165][T30040] total_shmem 0 [ 1299.101193][T30040] total_mapped_file 0 [ 1299.105229][T30040] total_dirty 0 [ 1299.109223][T30040] total_writeback 0 [ 1299.113162][T30040] total_workingset_refault_anon 609 [ 1299.119912][T30040] total_workingset_refault_file 4807 [ 1299.130978][T30040] total_swap 266240 [ 1299.135616][T30040] total_swapcached 39800832 [ 1299.140570][T30040] total_pgpgin 1157009 [ 1299.144893][T30040] total_pgpgout 1157009 [ 1299.157597][T30040] total_pgfault 1484113 [ 1299.162182][T30040] total_pgmajfault 346 [ 1299.166350][T30040] total_inactive_anon 0 [ 1299.170876][T30040] total_active_anon 0 [ 1299.179069][T30109] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7976'. [ 1299.180492][T30040] total_inactive_file 0 [ 1299.192898][T30040] total_active_file 0 [ 1299.202875][T30040] total_unevictable 0 [ 1299.210468][T30040] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7946,pid=30040,uid=0 [ 1299.234670][T30040] Memory cgroup out of memory: Killed process 30040 (syz.2.7946) total-vm:94168kB, anon-rss:1228kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:0 [ 1300.032523][T30147] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1300.060467][T30151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7992'. [ 1300.075774][T30151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7992'. [ 1300.452403][T30178] netlink: 252 bytes leftover after parsing attributes in process `syz.0.8003'. [ 1300.722054][T30195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8007'. [ 1300.928151][T30195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8007'. [ 1302.119929][T30230] syzkaller0: entered promiscuous mode [ 1302.133520][T30230] syzkaller0: entered allmulticast mode [ 1302.142551][T30232] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8020'. [ 1302.291164][T30244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8023'. [ 1302.323291][T30244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8023'. [ 1302.466299][T30264] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1303.373286][T30358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8032'. [ 1303.420052][T30358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8032'. [ 1304.273730][T30452] erspan0: entered promiscuous mode [ 1304.292211][T30452] macvtap1: entered promiscuous mode [ 1304.312090][T30452] macvtap1: entered allmulticast mode [ 1304.332143][T30452] erspan0: entered allmulticast mode [ 1305.114903][T30511] syzkaller0: entered promiscuous mode [ 1305.140798][T30511] syzkaller0: entered allmulticast mode [ 1305.167542][T30526] __nla_validate_parse: 1 callbacks suppressed [ 1305.167562][T30526] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8045'. [ 1306.855739][ T28] audit: type=1400 audit(1779244239.480:1414): avc: denied { listen } for pid=30590 comm="syz.0.8058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1307.285482][T30614] loop1: detected capacity change from 0 to 512 [ 1307.352744][T30614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1307.365512][T30614] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1308.024776][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.230773][T30700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8074'. [ 1308.357116][T30726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8087'. [ 1310.632135][T30741] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8093'. [ 1310.724917][T30746] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1311.629823][T30795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8118'. [ 1311.893824][T30820] loop1: detected capacity change from 0 to 512 [ 1311.921410][T30820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.934178][T30820] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1312.386021][T30836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.395180][T30836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.403840][T30836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.415381][T30836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.424303][T30836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.433070][T30836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.441926][T30836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.450953][T30836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.459544][T30836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.584358][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.014062][T30914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8163'. [ 1319.933081][T30960] net_ratelimit: 298 callbacks suppressed [ 1319.933102][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.947328][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.955669][T30960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.399076][T30949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.407401][T30949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.132855][T30983] loop1: detected capacity change from 0 to 1024 [ 1322.147042][T30983] ext4: Unknown parameter 'hash' [ 1322.733096][T31001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.278148][T31001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.310061][T31001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.349017][T31008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.389149][T31008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.620477][T31039] loop1: detected capacity change from 0 to 1024 [ 1324.635974][T31039] ext4: Unknown parameter 'hash' [ 1326.863755][T31056] loop1: detected capacity change from 0 to 1024 [ 1326.901270][T31056] ext4: Unknown parameter 'hash' [ 1328.255651][T31069] loop1: detected capacity change from 0 to 512 [ 1328.264640][T31069] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1328.276303][T31069] EXT4-fs (loop1): 1 truncate cleaned up [ 1328.283994][T31069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1328.301003][ T28] audit: type=1400 audit(1779244260.930:1415): avc: denied { write } for pid=31065 comm="syz.1.8210" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1329.371949][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.138853][T31113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8224'. [ 1333.296769][T31122] loop1: detected capacity change from 0 to 512 [ 1333.374432][T31122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1333.387323][T31122] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1333.826051][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.897935][T31192] net_ratelimit: 25 callbacks suppressed [ 1337.897957][T31192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.911945][T31192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.920283][T31192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.966597][T31190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.974951][T31190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.170368][T31184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.178731][T31184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.708239][T31248] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8268'. [ 1341.560912][T31261] 9p: Bad value for 'rfdno' [ 1342.505939][T31252] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 1344.184788][T31301] netlink: 260 bytes leftover after parsing attributes in process `syz.5.8287'. [ 1344.323672][T31309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8291'. [ 1344.622686][T31321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.631241][T31321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.639530][T31321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.651142][T31321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.659457][T31321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.247171][T31313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.351741][T31345] netlink: 252 bytes leftover after parsing attributes in process `syz.2.8303'. [ 1345.437755][T31347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8304'. [ 1346.163455][T31376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8316'. [ 1346.255011][T31324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.270622][T31324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.278403][T31324] bridge_slave_0: entered allmulticast mode [ 1346.284973][T31324] bridge_slave_0: entered promiscuous mode [ 1346.293935][T31324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.301278][T31324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.310217][T31324] bridge_slave_1: entered allmulticast mode [ 1346.316966][T31324] bridge_slave_1: entered promiscuous mode [ 1346.335828][T31324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.346072][T31324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.367374][T31324] team0: Port device team_slave_0 added [ 1346.374992][T31324] team0: Port device team_slave_1 added [ 1346.404198][T31324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.422010][T31324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.460856][T31324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.476512][T31324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.483857][T31324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.513868][T31324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.585268][T31324] hsr_slave_0: entered promiscuous mode [ 1346.592899][T31324] hsr_slave_1: entered promiscuous mode [ 1346.600310][T31324] debugfs: 'hsr0' already exists in 'hsr' [ 1346.606407][T31324] Cannot create hsr debugfs directory [ 1346.808085][T31324] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.876531][T31324] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.967905][T31324] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.181252][T31324] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.222557][T31414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8331'. [ 1348.330116][T31324] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1348.356338][T31324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1348.379368][T31324] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1348.562844][T31324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1348.581873][T31324] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1349.044246][T31324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1349.376069][T31324] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1349.422877][T31324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1349.515820][T31324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1349.748106][T31324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1349.808818][T28140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.815952][T28140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1349.932145][T28138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.939256][T28138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.400567][T31324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1351.533392][T31480] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8346'. [ 1351.564772][T31476] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.8345'. [ 1351.699821][T31324] veth0_vlan: entered promiscuous mode [ 1351.713525][T31324] veth1_vlan: entered promiscuous mode [ 1351.786061][T31324] veth0_macvtap: entered promiscuous mode [ 1351.798238][T31324] veth1_macvtap: entered promiscuous mode [ 1351.814447][T31324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1351.826420][T31324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1351.838084][T28168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.847081][T28168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.857390][T28168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.871942][T28168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.293097][T31517] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.8360'. [ 1352.478955][T31526] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8364'. [ 1352.489045][T31527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.496381][T31527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.503748][T31527] bridge0: entered allmulticast mode [ 1352.510519][T31527] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1352.899944][T31543] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.8372'. [ 1353.505464][T31553] netlink: 260 bytes leftover after parsing attributes in process `syz.5.8376'. [ 1354.211115][T31588] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1354.634486][T31594] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8392'. [ 1354.813877][T31610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8399'. [ 1354.823652][T31610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8399'. [ 1356.078977][T31643] loop1: detected capacity change from 0 to 1024 [ 1356.087094][T31643] ext4: Unknown parameter 'hash' [ 1357.283587][T31674] __nla_validate_parse: 3 callbacks suppressed [ 1357.283607][T31674] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.8421'. [ 1357.589751][T31683] loop5: detected capacity change from 0 to 512 [ 1357.596772][T31683] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1357.646575][T31683] EXT4-fs (loop5): 1 truncate cleaned up [ 1357.652707][T31683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1357.673727][ T28] audit: type=1400 audit(1779244290.300:1416): avc: denied { write } for pid=31681 comm="syz.5.8424" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1359.047798][T31324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.051189][T31707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8431'. [ 1363.605842][T31731] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8439'. [ 1364.224475][T31746] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.8442'. [ 1367.463080][T31785] loop1: detected capacity change from 0 to 128 [ 1367.533887][T31785] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1367.594445][T31785] ext4 filesystem being mounted at /355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.678092][ T28] audit: type=1400 audit(1779244300.280:1417): avc: denied { write } for pid=31784 comm="syz.1.8457" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1367.772889][T24991] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1367.872043][T31802] loop1: detected capacity change from 0 to 1024 [ 1367.887728][T31802] ext4: Unknown parameter 'hash' [ 1367.983321][T31811] loop5: detected capacity change from 0 to 1024 [ 1368.006855][T31811] ext4: Unknown parameter 'hash' [ 1370.393168][T31845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8478'. [ 1370.476592][T31851] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8481'. [ 1370.531382][T31847] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.8479'. [ 1371.329088][T31882] loop1: detected capacity change from 0 to 512 [ 1371.419630][T31882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1371.451702][T31887] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8495'. [ 1371.464966][T31882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1371.792503][T31882] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.970156][ T28] audit: type=1400 audit(1779244304.600:1418): avc: denied { write } for pid=31879 comm="syz.1.8492" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1372.099217][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.604592][T31914] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8505'. [ 1372.721612][T31925] loop1: detected capacity change from 0 to 512 [ 1372.728962][T31925] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1372.745069][T31925] EXT4-fs (loop1): 1 truncate cleaned up [ 1372.753624][T31925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1372.772033][ T28] audit: type=1400 audit(1779244305.400:1419): avc: denied { write } for pid=31917 comm="syz.1.8507" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1373.963442][T31953] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8520'. [ 1374.066822][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.195907][T31966] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.8521'. [ 1374.846768][T31981] loop5: detected capacity change from 0 to 512 [ 1374.854965][T31981] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1374.993677][T31981] EXT4-fs (loop5): 1 truncate cleaned up [ 1375.002413][T31981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1375.043975][T31985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8532'. [ 1375.142196][T31996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8537'. [ 1375.616030][T31324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.977844][T32015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8544'. [ 1377.182952][T32038] loop5: detected capacity change from 0 to 1024 [ 1377.192805][T32041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8555'. [ 1377.209834][T32042] loop1: detected capacity change from 0 to 512 [ 1377.212292][T32038] ext4: Unknown parameter 'hash' [ 1377.216701][T32042] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1377.339048][T32042] EXT4-fs (loop1): 1 truncate cleaned up [ 1377.345270][T32042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1377.359938][ T28] audit: type=1400 audit(1779244309.990:1420): avc: denied { write } for pid=32037 comm="syz.1.8553" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1377.870366][T32054] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.8558'. [ 1378.045775][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.306258][T32069] loop1: detected capacity change from 0 to 1024 [ 1378.322844][T32069] ext4: Unknown parameter 'hash' [ 1378.494292][T32075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8566'. [ 1379.739925][T32090] loop1: detected capacity change from 0 to 512 [ 1379.746801][T32090] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1379.834358][T32090] EXT4-fs (loop1): 1 truncate cleaned up [ 1379.840489][T32090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1379.853938][ T28] audit: type=1400 audit(1779244312.480:1421): avc: denied { write } for pid=32088 comm="syz.1.8570" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1380.063387][T32105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8577'. [ 1381.314293][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.389341][T32139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8589'. [ 1381.844367][T32155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8596'. [ 1381.856560][T32155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8596'. [ 1382.039934][T32167] loop1: detected capacity change from 0 to 512 [ 1382.050886][T32167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1382.231322][T32167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1382.319816][T32167] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1382.526951][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.011394][T32204] loop1: detected capacity change from 0 to 512 [ 1383.272889][T32204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1383.367235][T32204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1383.509683][T32204] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1383.570875][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.855578][ T28] audit: type=1400 audit(1779244316.480:1422): avc: denied { bind } for pid=32223 comm="syz.1.8620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1384.495405][T32243] loop1: detected capacity change from 0 to 1024 [ 1384.569691][T32243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1384.595704][T32248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8627'. [ 1384.830160][T32256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8626'. [ 1384.842388][T32256] IPv6: sit1: Disabled Multicast RS [ 1384.849297][T32256] sit1: entered allmulticast mode [ 1384.876486][T32256] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8626'. [ 1384.890427][T32175] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 385: padding at end of block bitmap is not set [ 1386.004082][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.269571][T32294] loop5: detected capacity change from 0 to 512 [ 1388.280057][T32294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1388.336364][T32294] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1388.380176][ T28] audit: type=1400 audit(1779244321.010:1423): avc: denied { write } for pid=32293 comm="syz.5.8643" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1389.221807][T32306] loop1: detected capacity change from 0 to 1024 [ 1389.296766][T32306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1389.521460][T31324] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.676369][T32323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8646'. [ 1389.687182][ T28] audit: type=1400 audit(1779244322.310:1424): avc: denied { getopt } for pid=32305 comm="syz.1.8646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1390.468869][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.734702][T32341] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8657'. [ 1391.857568][T32350] loop1: detected capacity change from 0 to 2048 [ 1392.020093][T32350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1392.053772][T32350] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1392.416299][T32361] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 1392.615661][T32367] random: crng reseeded on system resumption [ 1392.792650][ T28] audit: type=1400 audit(1779244325.400:1425): avc: denied { write } for pid=32349 comm="syz.1.8660" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1393.065166][T32361] EXT4-fs (loop1): Remounting filesystem read-only [ 1393.194537][ T30] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 1393.977497][T32387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8669'. [ 1394.074844][T24991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.625493][T32399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8674'. [ 1394.651319][T32399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8674'. [ 1395.276211][T32402] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8675'. [ 1396.550976][T32426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8683'. [ 1398.943781][T32443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8689'. [ 1399.084017][T32443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8689'. [ 1399.348053][T32461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8693'. [ 1399.360761][T32461] IPv6: sit1: Disabled Multicast RS [ 1399.367456][T32461] sit1: entered allmulticast mode [ 1399.388841][T32461] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8693'. [ 1401.420188][T32498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8707'. [ 1401.440563][T32498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8707'. [ 1401.535899][T32505] loop1: detected capacity change from 0 to 1024 [ 1401.552981][T32505] ext4: Unknown parameter 'hash' [ 1401.775296][T32491] ================================================================== [ 1401.783429][T32491] BUG: KCSAN: data-race in touch_atime / touch_atime [ 1401.790232][T32491] [ 1401.792571][T32491] write to 0xffff88811bd3a938 of 4 bytes by task 32495 on cpu 0: [ 1401.800305][T32491] touch_atime+0x1d7/0x330 [ 1401.804759][T32491] shmem_file_splice_read+0x549/0x5a0 [ 1401.810165][T32491] splice_direct_to_actor+0x26e/0x670 [ 1401.815578][T32491] do_splice_direct+0x119/0x1a0 [ 1401.820452][T32491] do_sendfile+0x382/0x650 [ 1401.824890][T32491] __x64_sys_sendfile64+0x105/0x150 [ 1401.830105][T32491] x64_sys_call+0x2dc4/0x3020 [ 1401.834845][T32491] do_syscall_64+0x12c/0x3b0 [ 1401.839466][T32491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.845384][T32491] [ 1401.847736][T32491] read to 0xffff88811bd3a938 of 4 bytes by task 32491 on cpu 1: [ 1401.855374][T32491] touch_atime+0x16c/0x330 [ 1401.859812][T32491] shmem_file_splice_read+0x549/0x5a0 [ 1401.865195][T32491] splice_direct_to_actor+0x26e/0x670 [ 1401.870601][T32491] do_splice_direct+0x119/0x1a0 [ 1401.875554][T32491] do_sendfile+0x382/0x650 [ 1401.879975][T32491] __x64_sys_sendfile64+0x105/0x150 [ 1401.885174][T32491] x64_sys_call+0x2dc4/0x3020 [ 1401.889863][T32491] do_syscall_64+0x12c/0x3b0 [ 1401.894469][T32491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.900367][T32491] [ 1401.902688][T32491] value changed: 0x17e432b7 -> 0x18dd4266 [ 1401.908402][T32491] [ 1401.910724][T32491] Reported by Kernel Concurrency Sanitizer on: [ 1401.916877][T32491] CPU: 1 UID: 0 PID: 32491 Comm: syz.0.8706 Tainted: G W syzkaller #0 PREEMPT(full) [ 1401.927826][T32491] Tainted: [W]=WARN [ 1401.931631][T32491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1401.941688][T32491] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1402.229063][ T30] bond0 (unregistering): Released all slaves [ 1402.470630][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.540821][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.580295][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.620679][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.690365][ T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.751601][ T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.776990][ T28] audit: type=1400 audit(1779244335.400:1426): avc: denied { write } for pid=32525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1402.806714][ T28] audit: type=1400 audit(1779244335.420:1427): avc: denied { write } for pid=32536 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1402.810623][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1402.840805][ T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.881539][ T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.921583][ T28] audit: type=1400 audit(1779244335.550:1428): avc: denied { write } for pid=32540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1402.944829][ T28] audit: type=1400 audit(1779244335.570:1429): avc: denied { write } for pid=32551 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1402.954799][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1402.997805][ T30] bridge_slave_1: left promiscuous mode [ 1403.003639][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.011496][ T30] bridge_slave_0: left allmulticast mode [ 1403.017182][ T30] bridge_slave_0: left promiscuous mode [ 1403.023102][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.034317][ T30] bridge_slave_1: left allmulticast mode [ 1403.040252][ T30] bridge_slave_1: left promiscuous mode [ 1403.045986][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.054176][ T30] bridge_slave_0: left allmulticast mode [ 1403.059960][ T30] bridge_slave_0: left promiscuous mode [ 1403.065666][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.073623][ T28] audit: type=1400 audit(1779244335.700:1430): avc: denied { write } for pid=32554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1403.098328][ T28] audit: type=1400 audit(1779244335.720:1431): avc: denied { write } for pid=32565 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1403.399867][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.409635][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.419413][ T30] bond0 (unregistering): Released all slaves [ 1403.480406][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.490480][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.499994][ T30] bond0 (unregistering): Released all slaves [ 1403.507719][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1403.584938][ T30] hsr_slave_0: left promiscuous mode [ 1403.587648][ T28] audit: type=1400 audit(1779244336.210:1432): avc: denied { write } for pid=32569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1403.613590][ T30] hsr_slave_1: left promiscuous mode [ 1403.620353][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.628391][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.636142][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.637563][ T28] audit: type=1400 audit(1779244336.260:1433): avc: denied { write } for pid=32580 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1403.643859][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.675588][ T30] hsr_slave_0: left promiscuous mode [ 1403.681604][ T30] hsr_slave_1: left promiscuous mode [ 1403.687381][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.694853][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.702491][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.709910][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.721913][ T30] veth1_macvtap: left promiscuous mode [ 1403.727383][ T30] veth0_macvtap: left promiscuous mode [ 1403.733008][ T30] veth1_vlan: left promiscuous mode [ 1403.738275][ T30] veth0_vlan: left promiscuous mode [ 1403.743921][ T30] veth1_macvtap: left promiscuous mode [ 1403.749471][ T30] veth0_macvtap: left promiscuous mode [ 1403.755036][ T30] veth1_vlan: left promiscuous mode [ 1403.760468][ T30] veth0_vlan: left promiscuous mode [ 1403.845958][ T30] team0 (unregistering): Port device team_slave_1 removed [ 1403.855239][ T30] team0 (unregistering): Port device team_slave_0 removed [ 1403.908485][ T30] team0 (unregistering): Port device team_slave_1 removed [ 1403.918965][ T30] team0 (unregistering): Port device team_slave_0 removed [ 1403.949576][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1404.033524][ T28] audit: type=1400 audit(1779244336.660:1434): avc: denied { write } for pid=32584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1404.056709][ T28] audit: type=1400 audit(1779244336.680:1435): avc: denied { write } for pid=32595 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1404.068548][ T3018] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1404.180408][ T3018] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1404.290308][ T3018] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1404.382783][ T30] IPVS: stop unused estimator thread 0... [ 1404.392840][ T3018] 8021q: adding VLAN 0 to HW filter on device eth12