last executing test programs: 9.423682532s ago: executing program 2 (id=1161): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7.37926411s ago: executing program 2 (id=1160): syz_open_dev$usbmon(&(0x7f0000000080), 0x3, 0x400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x5b, 0x4, 0x10000, 0x4, 0xffffffff}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000880), 0xfffffffffffffffd, 0x100) 5.31007569s ago: executing program 4 (id=1177): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 5.018613925s ago: executing program 2 (id=1181): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/192, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(0x3) 4.654550604s ago: executing program 2 (id=1184): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x4) socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210041, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x100000) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4.066377585s ago: executing program 1 (id=1192): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd3c0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) io_setup(0x239f, &(0x7f0000000380)) open$dir(0x0, 0x8002, 0x41) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, 0x0, 0x20000010) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x20000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000c0) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_setup(0x6621, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x1, 0x15c}, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000)) 3.807445159s ago: executing program 4 (id=1195): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000400)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000300000000050000000200000000000000020000000000000c2000000000002e"], 0x0, 0x40}, 0x28) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r3, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) fcntl$getown(r2, 0x9) readv(r3, &(0x7f0000000580)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021831020b00000000000000fddbdf25030005000000000002000300e00000010000000000000000030012003c80000002004e20ac1414b90000000000000000030006000000000002"], 0x58}}, 0x0) socket$kcm(0x29, 0x0, 0x0) read(r1, &(0x7f0000000000)=""/56, 0x38) 3.806797619s ago: executing program 1 (id=1205): socket$kcm(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000002000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r0, &(0x7f0000000540), &(0x7f0000000640)=""/144}, 0x20) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xe0ffff}, 0x0) 3.685888946s ago: executing program 2 (id=1196): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}}], 0x1, 0x4000044) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_read_part_table(0x1047, &(0x7f00000011c0)="$eJzsz9EJwjAUBdDbWls7oPvED6dwA1dwMn+sNCnYBUSEc8jHezfhQsJPPZYu0zrcduFrqZJu3aYtvXTJsM3l8/hUT8a6HDLN/a6pPFtVy44pw3jt53Y3JOf7F78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/jHQAA//+NGRQm") 3.655748887s ago: executing program 4 (id=1197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.663955203s ago: executing program 4 (id=1198): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.621341505s ago: executing program 0 (id=1199): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000000100)='Ac', 0x2}], 0x1, 0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='wchan\x00') fchdir(r3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x10000207) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) 1.51782168s ago: executing program 0 (id=1201): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x2, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100]}}, 0x5c) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x68, 0x17, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000880) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x64000080) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0xfffffffc, @mcast2}, 0xffffffffffffffff, {[0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff]}}, 0x5c) 1.503019411s ago: executing program 0 (id=1202): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(0xffffffffffffffff, 0x0, 0x10, 0x24048048, &(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap$IORING_OFF_CQ_RING(&(0x7f000046c000/0x4000)=nil, 0x4000, 0x2, 0x4000010, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x9, 0x0) socket$caif_stream(0x25, 0x1, 0x5) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.495341661s ago: executing program 3 (id=1203): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) unshare(0x64000600) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x10) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) process_vm_readv(0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 1.277925413s ago: executing program 3 (id=1204): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8e, 0x80000000000000}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_create(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 1.277662463s ago: executing program 4 (id=1206): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x1, 0x0, 0x0, 0x7, 0x13c539, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa, 0x8}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x407f8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x4}, 0x120, 0x10000, 0x33f8, 0x1, 0xb, 0x20007, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r2, 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xf06f, 0x3180, 0x1, 0x283}, &(0x7f0000000300), &(0x7f0000000380), &(0x7f0000000000)) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2d, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x4, 0x6}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 1.261014594s ago: executing program 3 (id=1207): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000080)='./file1\x00') prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20040800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xffe0, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) 1.177466868s ago: executing program 0 (id=1208): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000400)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000300000000050000000200000000000000020000000000000c2000000000002e"], 0x0, 0x40}, 0x28) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r3, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) fcntl$getown(r2, 0x9) readv(r3, &(0x7f0000000580)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021831020b00000000000000fddbdf25030005000000000002000300e00000010000000000000000030012003c80000002004e20ac1414b90000000000000000030006000000000002"], 0x58}}, 0x0) socket$kcm(0x29, 0x0, 0x0) read(r1, &(0x7f0000000000)=""/56, 0x38) 1.111197302s ago: executing program 3 (id=1209): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket(0x2, 0x80805, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x200, 0x5388, 0x8, 0x8, 0xcb, 0x7}, {0x7f, 0x5, 0x1, 0x3, 0x6, 0x1}]}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r3, 0x80404518, 0x0) 1.110678662s ago: executing program 0 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.081980353s ago: executing program 1 (id=1211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc02, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x6, 0x7, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf3b, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1.081780403s ago: executing program 3 (id=1212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x40040) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.035693086s ago: executing program 1 (id=1213): r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x4008894) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 865.137364ms ago: executing program 2 (id=1214): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0xfffffe70, 0x1}}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5402, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4000008]}) 237.850778ms ago: executing program 4 (id=1215): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r0, {0xe, 0x1}}}, 0x24}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x80000001}, 0x11111a, 0x3, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x62042, 0x1902b057021bc7bc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0xf2c, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2005, &(0x7f0000000000)=0x2d34, 0x7ff, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 219.549599ms ago: executing program 3 (id=1216): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r1, 0x5, 0x1, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, &(0x7f00000000c0)}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 93.871645ms ago: executing program 1 (id=1217): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 80.922626ms ago: executing program 0 (id=1218): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$UHID_INPUT(r1, &(0x7f0000000a80)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00`\x00'}}}]}, 0x48}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xfff, 0x44, 0x2, 0x0, 0x7}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x8}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) socket(0x2, 0x3, 0xff) 0s ago: executing program 1 (id=1219): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000000}, 0x0) r2 = inotify_init() timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): system 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.398477][ T4389] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.664714][ T4397] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #19: comm syz.0.296: corrupted inode contents [ 69.718764][ T4401] netlink: 14 bytes leftover after parsing attributes in process `syz.1.298'. [ 69.730822][ T4397] loop0: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 69.731235][ T4397] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #19: comm syz.0.296: mark_inode_dirty error [ 69.787089][ T4397] loop0: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 69.788534][ T4397] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #19: comm syz.0.296: corrupted inode contents [ 69.835234][ T4397] loop0: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 69.835517][ T4397] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #19: comm syz.0.296: mark_inode_dirty error [ 69.872446][ T4397] loop0: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 69.875227][ T4397] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #19: comm syz.0.296: mark inode dirty (error -117) [ 69.920755][ T4397] loop0: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 69.920981][ T4397] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 69.980154][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.504706][ T4419] netlink: 277 bytes leftover after parsing attributes in process `syz.3.307'. [ 70.652926][ T4421] loop1: detected capacity change from 0 to 8192 [ 70.674229][ T4424] Cannot find add_set index 0 as target [ 70.841008][ T4424] netlink: 'syz.4.308': attribute type 4 has an invalid length. [ 70.890073][ T4425] netlink: 'syz.4.308': attribute type 4 has an invalid length. [ 71.478820][ T4432] loop4: detected capacity change from 0 to 1024 [ 71.553523][ T4432] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.605028][ T4432] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 71.649566][ T4432] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.309: inode #1: comm syz.4.309: iget: illegal inode # [ 71.705170][ T4432] loop4: lost filesystem error report for type 5 error -117 [ 71.709318][ T4432] EXT4-fs (loop4): no journal found [ 71.718288][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 71.718488][ C1] EXT4-fs (loop4): initial error at time 1776488347: ext4_get_journal_inode:5896 [ 71.718738][ C1] EXT4-fs (loop4): last error at time 1776488347: ext4_get_journal_inode:5896 [ 71.800635][ T4432] EXT4-fs (loop4): can't get journal size [ 71.822082][ T4432] EXT4-fs (loop4): failed to initialize system zone (-22) [ 71.844752][ T4432] EXT4-fs (loop4): mount failed [ 72.422137][ T4453] loop0: detected capacity change from 0 to 256 [ 73.346816][ T4453] FAT-fs (loop0): Directory bread(block 64) failed [ 73.353454][ T4453] FAT-fs (loop0): Directory bread(block 65) failed [ 73.360061][ T4453] FAT-fs (loop0): Directory bread(block 66) failed [ 73.366701][ T4453] FAT-fs (loop0): Directory bread(block 67) failed [ 73.373384][ T4453] FAT-fs (loop0): Directory bread(block 68) failed [ 73.379922][ T4453] FAT-fs (loop0): Directory bread(block 69) failed [ 73.386549][ T4453] FAT-fs (loop0): Directory bread(block 70) failed [ 73.393187][ T4453] FAT-fs (loop0): Directory bread(block 71) failed [ 73.400001][ T4453] FAT-fs (loop0): Directory bread(block 72) failed [ 73.406652][ T4453] FAT-fs (loop0): Directory bread(block 73) failed [ 73.437343][ T4458] loop2: detected capacity change from 0 to 512 [ 73.470845][ T4453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'. [ 73.479889][ T4453] netlink: 2 bytes leftover after parsing attributes in process `syz.0.315'. [ 73.489178][ T4453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'. [ 73.498248][ T4453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'. [ 73.507374][ T4453] netlink: 2 bytes leftover after parsing attributes in process `syz.0.315'. [ 73.516477][ T4453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'. [ 73.525565][ T4453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'. [ 73.534548][ T4453] netlink: 2 bytes leftover after parsing attributes in process `syz.0.315'. [ 73.604196][ T4458] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.858423][ T4468] syz_tun: entered allmulticast mode [ 73.882471][ T4467] syz_tun: left allmulticast mode [ 73.940009][ T4458] EXT4-fs (loop2): 1 truncate cleaned up [ 73.967600][ T4458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.109986][ T4472] loop4: detected capacity change from 0 to 512 [ 74.145522][ T4472] EXT4-fs: Ignoring removed i_version option [ 74.167428][ T4472] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.205432][ T4472] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.323: invalid block [ 74.231396][ T4472] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.233793][ T4472] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.323: invalid indirect mapped block 4294967295 (level 1) [ 74.243495][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 74.243571][ C1] EXT4-fs (loop4): initial error at time 1776488350: ext4_get_branch:178: inode 11: block 4294967295 [ 74.243743][ C1] EXT4-fs (loop4): last error at time 1776488350: ext4_get_branch:178: inode 11: block 4294967295 [ 74.322759][ T4472] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.334531][ T4472] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.323: invalid indirect mapped block 4294967295 (level 1) [ 74.361140][ T4472] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.363057][ T4472] EXT4-fs (loop4): 2 truncates cleaned up [ 74.402667][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.405277][ T4472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.446897][ T4478] loop0: detected capacity change from 0 to 128 [ 74.523128][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.578591][ T4484] xt_hashlimit: size too large, truncated to 1048576 [ 74.606072][ T4477] loop1: detected capacity change from 0 to 512 [ 74.641950][ T4477] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.701094][ T4482] loop4: detected capacity change from 0 to 8192 [ 74.723705][ T4477] EXT4-fs (loop1): 1 truncate cleaned up [ 74.768371][ T28] audit: type=1400 audit(1776488350.804:361): avc: denied { write } for pid=4489 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.804282][ T4477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.264214][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.326085][ T4504] loop2: detected capacity change from 0 to 128 [ 75.362551][ T4504] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.410843][ T4504] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.503084][ T28] audit: type=1400 audit(1776488351.534:362): avc: denied { mount } for pid=4508 comm="syz.1.334" name="/" dev="ramfs" ino=12946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 75.594741][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.911366][ T4532] loop0: detected capacity change from 0 to 512 [ 75.984297][ T4532] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.342: inode has both inline data and extents flags [ 76.026526][ T4532] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.035888][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 76.052790][ C1] EXT4-fs (loop0): initial error at time 1776488352: ext4_orphan_get:1397: inode 15 [ 76.063510][ C1] EXT4-fs (loop0): last error at time 1776488352: ext4_orphan_get:1397: inode 15 [ 76.083464][ T4532] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.342: couldn't read orphan inode 15 (err -117) [ 76.098498][ T4532] loop0: lost filesystem error report for type 5 error -117 [ 76.104780][ T4532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.460049][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.746653][ T4553] __nla_validate_parse: 22 callbacks suppressed [ 76.746676][ T4553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 76.840846][ T4556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4556 comm=syz.3.349 [ 77.387858][ T28] audit: type=1400 audit(1776488353.424:363): avc: denied { connect } for pid=4568 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.529012][ T4583] bridge_slave_0: default FDB implementation only supports local addresses [ 77.545232][ T4590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.356'. [ 77.607385][ T4590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.356'. [ 77.627648][ T4590] veth3: entered promiscuous mode [ 77.637656][ T4590] veth3: entered allmulticast mode [ 77.698255][ T4598] loop0: detected capacity change from 0 to 4096 [ 77.724213][ T4598] EXT4-fs: Ignoring removed bh option [ 77.738962][ T4598] ext4: Unknown parameter 'fsuuid' [ 77.900517][ T4598] loop0: detected capacity change from 0 to 512 [ 77.937140][ T4598] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.181736][ T28] audit: type=1400 audit(1776488354.214:365): avc: denied { ioctl } for pid=4617 comm="syz.3.362" path="socket:[14326]" dev="sockfs" ino=14326 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.196156][ T4616] syz_tun: entered allmulticast mode [ 78.230732][ T28] audit: type=1400 audit(1776488354.214:364): avc: denied { execute } for pid=4613 comm="syz.0.372" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 78.263430][ T4615] syz_tun: left allmulticast mode [ 78.339096][ T4618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.362'. [ 78.396360][ T4626] Cannot find del_set index 0 as target [ 78.451226][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 78.491849][ T4629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.528579][ T4629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.553261][ T4629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.582129][ T4629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.731797][ T4626] syz.4.364 (4626) used greatest stack depth: 9408 bytes left [ 78.795706][ T4639] xt_hashlimit: size too large, truncated to 1048576 [ 79.120879][ T4650] syz_tun: entered allmulticast mode [ 79.151409][ T4649] syz_tun: left allmulticast mode [ 79.192228][ T4652] loop1: detected capacity change from 0 to 512 [ 79.220054][ T4652] EXT4-fs: Ignoring removed i_version option [ 79.234682][ T4652] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.279717][ T4652] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.377: invalid block [ 79.295449][ T4652] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.299247][ T4652] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.377: invalid indirect mapped block 4294967295 (level 1) [ 79.309644][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 79.309957][ C0] EXT4-fs (loop1): initial error at time 1776488355: ext4_get_branch:178: inode 11: block 4294967295 [ 79.310752][ C0] EXT4-fs (loop1): last error at time 1776488355: ext4_get_branch:178: inode 11: block 4294967295 [ 79.356997][ T4652] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.358369][ T4652] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.377: invalid indirect mapped block 4294967295 (level 1) [ 79.383532][ T4652] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.387055][ T4652] EXT4-fs (loop1): 2 truncates cleaned up [ 79.413305][ T4652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.499704][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.387148][ T4679] loop1: detected capacity change from 0 to 1024 [ 80.498814][ T4679] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 80.570946][ T4679] System zones: 0-1, 3-36 [ 80.611644][ T4679] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.386: bad orphan inode 134217728 [ 80.669200][ T4679] loop1: lost filesystem error report for type 5 error -117 [ 80.675791][ T4679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.844082][ T4679] kernel profiling enabled (shift: 9) [ 80.914912][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.329691][ T28] audit: type=1400 audit(1776488359.304:366): avc: denied { write } for pid=4708 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.352020][ T4718] xt_CT: No such helper "pptp" [ 83.595131][ T4724] syz.0.395 uses obsolete (PF_INET,SOCK_PACKET) [ 83.816681][ T28] audit: type=1400 audit(1776488359.704:367): avc: denied { listen } for pid=4727 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.870602][ T28] audit: type=1400 audit(1776488359.884:368): avc: denied { getopt } for pid=4732 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.662408][ T28] audit: type=1400 audit(1776488360.694:369): avc: denied { create } for pid=4746 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.958101][ T4765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'. [ 84.995206][ T4765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4765 comm=syz.0.411 [ 85.098914][ T4770] syzkaller0: entered promiscuous mode [ 85.110182][ T4770] syzkaller0: entered allmulticast mode [ 85.143662][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 85.185915][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 85.687269][ T28] audit: type=1400 audit(1776488361.724:370): avc: denied { getopt } for pid=4774 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.126225][ T4789] loop2: detected capacity change from 0 to 512 [ 86.174532][ T28] audit: type=1400 audit(1776488362.204:371): avc: denied { getopt } for pid=4782 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.204953][ T4789] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.276621][ T4789] EXT4-fs (loop2): 1 truncate cleaned up [ 86.290358][ T4789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.599355][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.657158][ T4803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.423'. [ 86.705991][ T4803] vlan2: entered allmulticast mode [ 86.706008][ T4803] bridge2: entered allmulticast mode [ 86.727159][ T4803] bridge2: port 1(bond1) entered blocking state [ 86.769081][ T4803] bridge2: port 1(bond1) entered disabled state [ 86.775224][ T4803] bond1: entered allmulticast mode [ 86.784340][ T4803] bond1: entered promiscuous mode [ 86.942423][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 86.968747][ T4806] bridge_slave_1 (unregistering): left allmulticast mode [ 86.968774][ T4806] bridge_slave_1 (unregistering): left promiscuous mode [ 86.968815][ T4806] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.350797][ T4808] loop2: detected capacity change from 0 to 512 [ 87.372500][ T4808] EXT4-fs: Ignoring removed i_version option [ 87.407642][ T4808] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.461371][ T4808] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.424: invalid block [ 87.461781][ T4808] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.475540][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 87.475582][ C1] EXT4-fs (loop2): initial error at time 1776488363: ext4_get_branch:178: inode 11: block 4294967295 [ 87.475981][ C1] EXT4-fs (loop2): last error at time 1776488363: ext4_get_branch:178: inode 11: block 4294967295 [ 87.483602][ T4808] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.424: invalid indirect mapped block 4294967295 (level 1) [ 87.483655][ T4808] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.485420][ T4808] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.424: invalid indirect mapped block 4294967295 (level 1) [ 87.485464][ T4808] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.493090][ T4808] EXT4-fs (loop2): 2 truncates cleaned up [ 87.514676][ T4808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.640433][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.841348][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.431'. [ 87.845872][ T4822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.888575][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 87.894961][ T28] audit: type=1400 audit(1776488363.924:372): avc: denied { listen } for pid=4816 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.922409][ T4826] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.008535][ T28] audit: type=1400 audit(1776488364.044:373): avc: denied { accept } for pid=4816 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.021513][ T4826] block device autoloading is deprecated and will be removed. [ 88.913761][ T28] audit: type=1400 audit(1776488364.944:374): avc: denied { ioctl } for pid=4843 comm="syz.1.438" path="socket:[15527]" dev="sockfs" ino=15527 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.983851][ T28] audit: type=1400 audit(1776488364.974:375): avc: denied { accept } for pid=4843 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.083747][ T28] audit: type=1400 audit(1776488365.114:376): avc: denied { bind } for pid=4850 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.144677][ T28] audit: type=1400 audit(1776488365.174:377): avc: denied { setopt } for pid=4850 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.200030][ T4853] syzkaller0: entered promiscuous mode [ 89.207154][ T4853] syzkaller0: entered allmulticast mode [ 89.248118][ T4860] x_tables: duplicate entry at hook 2 [ 89.317962][ T28] audit: type=1400 audit(1776488365.344:378): avc: denied { ioctl } for pid=4858 comm="syz.3.445" path="socket:[15559]" dev="sockfs" ino=15559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.322998][ T4884] loop1: detected capacity change from 0 to 512 [ 90.391791][ T4886] mmap: syz.3.451 (4886) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.421900][ T4884] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.429662][ T4884] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 90.444343][ T4884] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 90.451074][ T4884] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.448: couldn't read orphan inode 26 (err -116) [ 90.462878][ T4884] loop1: lost filesystem error report for type 5 error -116 [ 90.464309][ T4884] EXT4-fs (loop1): Remounting filesystem read-only [ 90.471707][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 90.471722][ C1] EXT4-fs (loop1): initial error at time 1776488366: ext4_orphan_get:1402 [ 90.471749][ C1] EXT4-fs (loop1): last error at time 1776488366: ext4_orphan_get:1402 [ 90.502549][ T4884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.090381][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 91.133570][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 91.241633][ T4898] syz_tun: entered allmulticast mode [ 91.284240][ T4897] syz_tun: left allmulticast mode [ 92.287483][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.357312][ T4900] loop0: detected capacity change from 0 to 1024 [ 92.404799][ T4929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.470'. [ 92.428435][ T4929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.461740][ T4900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.612357][ T4929] macvlan2: entered promiscuous mode [ 92.620318][ T4929] macvlan2: entered allmulticast mode [ 92.634917][ T4929] bond1: (slave vti0): refused to change device type [ 92.717520][ T4946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.463'. [ 93.119068][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.311794][ T28] audit: type=1400 audit(1776488369.344:379): avc: denied { bind } for pid=4958 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.342377][ T4959] loop1: detected capacity change from 0 to 1024 [ 93.362045][ T4959] EXT4-fs: dax option not supported [ 93.418781][ T28] audit: type=1400 audit(1776488369.454:380): avc: denied { ioctl } for pid=4963 comm="syz.4.472" path="socket:[14771]" dev="sockfs" ino=14771 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.458139][ T4959] netlink: zone id is out of range [ 93.460558][ T4952] loop0: detected capacity change from 0 to 512 [ 93.475500][ T4959] netlink: zone id is out of range [ 93.483649][ T4959] netlink: zone id is out of range [ 93.491590][ T4959] netlink: zone id is out of range [ 93.499540][ T4959] netlink: zone id is out of range [ 93.502387][ T4952] EXT4-fs: Ignoring removed nobh option [ 93.512442][ T4959] netlink: zone id is out of range [ 93.519638][ T4959] netlink: zone id is out of range [ 93.525716][ T4959] netlink: zone id is out of range [ 93.531449][ T4959] netlink: zone id is out of range [ 93.557724][ T4959] netlink: zone id is out of range [ 93.599346][ T4972] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.610244][ T4972] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.688298][ T4972] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.699104][ T4972] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.731520][ T4952] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #3: comm syz.0.464: corrupted inode contents [ 93.743566][ T4952] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 93.745324][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 93.746373][ T4952] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #3: comm syz.0.464: mark_inode_dirty error [ 93.754417][ C0] EXT4-fs (loop0): initial error at time 1776488369: ext4_do_update_inode:5690: inode 3 [ 93.754463][ C0] EXT4-fs (loop0): last error at time 1776488369: ext4_do_update_inode:5690: inode 3 [ 93.810429][ T4979] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4979 comm=syz.1.476 [ 93.811837][ T4979] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 93.843047][ T4952] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 93.847544][ T4972] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.849443][ T4952] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #3: comm syz.0.464: corrupted inode contents [ 93.857604][ T4972] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.893556][ T4952] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 93.896676][ T4952] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.464: mark_inode_dirty error [ 93.906611][ T4979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.928187][ T4952] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 93.930796][ T4952] Quota error (device loop0): write_blk: dquota write failed [ 93.963496][ T4952] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 93.975827][ T4952] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.464: Failed to acquire dquot type 0 [ 93.988520][ T4952] loop0: lost filesystem error report for type 5 error -117 [ 94.010939][ T4972] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.018414][ T4952] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.464: corrupted inode contents [ 94.018464][ T4952] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 94.018712][ T4952] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.464: mark_inode_dirty error [ 94.018743][ T4952] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 94.018993][ T4952] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.464: corrupted inode contents [ 94.019082][ T4952] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 94.019637][ T4952] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.464: mark_inode_dirty error [ 94.029377][ T4972] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.145370][ T4952] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 94.147748][ T4952] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.464: corrupted inode contents [ 94.189387][ T4952] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 94.192597][ T4952] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 94.227097][ T4952] loop0: lost filesystem error report for type 5 error -117 [ 94.229371][ T4952] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.464: corrupted inode contents [ 94.254172][ T4952] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 94.255424][ T4952] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.464: mark_inode_dirty error [ 94.324926][ T4952] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 94.338572][ T4995] syzkaller0: entered promiscuous mode [ 94.344753][ T4952] loop0: lost filesystem error report for type 5 error -117 [ 94.348905][ T4995] syzkaller0: entered allmulticast mode [ 94.360914][ T4952] EXT4-fs (loop0): 1 truncate cleaned up [ 94.403766][ T4952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.413904][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.420422][ T4952] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.426370][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.434092][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.434125][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.434219][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.434286][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.441192][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.441232][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.585437][ T5005] netlink: 550 bytes leftover after parsing attributes in process `syz.2.485'. [ 94.649796][ T3369] IPVS: starting estimator thread 0... [ 94.732726][ T28] audit: type=1400 audit(1776488370.764:381): avc: denied { getopt } for pid=5019 comm="syz.2.488" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.755664][ T5013] IPVS: using max 2448 ests per chain, 122400 per kthread [ 94.816659][ T4952] syz.0.464 (4952) used greatest stack depth: 8592 bytes left [ 94.840437][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.158946][ T5037] syzkaller0: entered promiscuous mode [ 95.170471][ T5037] syzkaller0: entered allmulticast mode [ 95.704274][ T5048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 96.134408][ T5053] loop1: detected capacity change from 0 to 256 [ 96.314500][ T5061] loop0: detected capacity change from 0 to 512 [ 96.327168][ T5061] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 96.373829][ T5061] EXT4-fs (loop0): mount failed [ 96.630669][ T5058] kernel read not supported for file /policy (pid: 5058 comm: syz.4.502) [ 96.639287][ T28] audit: type=1400 audit(1776488372.664:382): avc: denied { module_load } for pid=5056 comm="syz.4.502" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 96.949559][ T28] audit: type=1400 audit(1776488372.984:383): avc: denied { read } for pid=5072 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.441742][ T5082] loop2: detected capacity change from 0 to 256 [ 97.491160][ T28] audit: type=1400 audit(1776488373.214:384): avc: denied { ioctl } for pid=5072 comm="syz.2.505" path="socket:[15964]" dev="sockfs" ino=15964 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.548016][ T5082] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.596432][ T28] audit: type=1400 audit(1776488373.634:385): avc: denied { create } for pid=5081 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 98.098465][ T5093] netlink: 36 bytes leftover after parsing attributes in process `syz.4.509'. [ 98.259996][ T5092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.289652][ T5092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.405111][ T5093] geneve2: entered promiscuous mode [ 98.449581][ T5101] : renamed from vlan0 (while UP) [ 98.480640][ T49] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.499502][ T49] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.525513][ T49] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.551358][ T49] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.248463][ T5124] loop4: detected capacity change from 0 to 8192 [ 99.263958][ T5127] loop2: detected capacity change from 0 to 4096 [ 99.296966][ T5127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.400448][ T28] audit: type=1400 audit(1776488375.434:386): avc: denied { execute } for pid=5126 comm="syz.2.519" path="/96/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.491987][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.870793][ T28] audit: type=1400 audit(1776488376.904:387): avc: denied { append } for pid=5147 comm="syz.4.526" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.946200][ T28] audit: type=1400 audit(1776488376.944:388): avc: denied { setopt } for pid=5149 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.979647][ T28] audit: type=1400 audit(1776488376.964:389): avc: denied { allowed } for pid=5147 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.044685][ T5148] loop4: detected capacity change from 0 to 1024 [ 101.056718][ T5154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'. [ 101.094587][ T5148] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 101.121374][ T5148] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 101.139534][ T5148] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.526: inode #1: comm syz.4.526: iget: illegal inode # [ 101.141170][ T28] audit: type=1400 audit(1776488377.174:390): avc: denied { create } for pid=5156 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.154354][ T5148] loop4: lost filesystem error report for type 5 error -117 [ 101.175339][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 101.189215][ C1] EXT4-fs (loop4): initial error at time 1776488377: ext4_get_journal_inode:5896 [ 101.198387][ C1] EXT4-fs (loop4): last error at time 1776488377: ext4_get_journal_inode:5896 [ 101.217973][ T5148] EXT4-fs (loop4): no journal found [ 101.241643][ T5161] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 101.249953][ T5148] EXT4-fs (loop4): can't get journal size [ 101.259530][ T5161] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.282457][ T5161] bond3: (slave ip6gretap1): making interface the new active one [ 101.291276][ T5148] EXT4-fs (loop4): failed to initialize system zone (-22) [ 101.299942][ T5161] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 101.335551][ T5166] bond3: entered allmulticast mode [ 101.340741][ T5166] ip6gretap1: entered allmulticast mode [ 101.366356][ T5148] EXT4-fs (loop4): mount failed [ 101.578659][ T5180] loop1: detected capacity change from 0 to 128 [ 101.678181][ T28] audit: type=1400 audit(1776488377.634:391): avc: denied { remount } for pid=5175 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 101.822427][ T5188] netlink: 'syz.3.540': attribute type 10 has an invalid length. [ 101.835760][ T5184] loop2: detected capacity change from 0 to 1024 [ 101.899538][ T5184] EXT4-fs: dax option not supported [ 101.940248][ T5188] bond0: (slave bond_slave_0): Releasing backup interface [ 102.119812][ T5184] net_ratelimit: 93 callbacks suppressed [ 102.119834][ T5184] netlink: zone id is out of range [ 102.153154][ T5184] netlink: zone id is out of range [ 102.159993][ T5184] netlink: zone id is out of range [ 102.166704][ T5184] netlink: zone id is out of range [ 102.172201][ T5184] netlink: zone id is out of range [ 102.178569][ T5184] netlink: zone id is out of range [ 102.185132][ T5184] netlink: zone id is out of range [ 102.202183][ T5184] netlink: zone id is out of range [ 102.210933][ T5184] netlink: zone id is out of range [ 102.217561][ T5184] netlink: zone id is out of range [ 102.261164][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.542'. [ 102.294965][ T5194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5194 comm=syz.3.543 [ 102.457796][ T28] audit: type=1400 audit(1776488378.494:392): avc: denied { execute } for pid=5199 comm="syz.3.546" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.494001][ T28] audit: type=1400 audit(1776488378.494:393): avc: denied { execute_no_trans } for pid=5199 comm="syz.3.546" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.362569][ T5220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.376202][ T5220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.930027][ T5224] netlink: 80 bytes leftover after parsing attributes in process `syz.3.552'. [ 104.029385][ T5226] loop0: detected capacity change from 0 to 512 [ 104.125175][ T5226] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.132267][ T5226] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.147129][ T5226] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 104.153793][ T5226] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.554: couldn't read orphan inode 26 (err -116) [ 104.165627][ T5226] loop0: lost filesystem error report for type 5 error -116 [ 104.166151][ T5226] EXT4-fs (loop0): Remounting filesystem read-only [ 104.180077][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 104.180095][ C1] EXT4-fs (loop0): initial error at time 1776488380: ext4_orphan_get:1402 [ 104.180118][ C1] EXT4-fs (loop0): last error at time 1776488380: ext4_orphan_get:1402 [ 104.204706][ T5226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.358445][ T5220] bridge0: port 2(syz_tun) entered blocking state [ 104.466806][ T5220] bridge0: port 2(syz_tun) entered disabled state [ 104.479585][ T5220] syz_tun: entered allmulticast mode [ 104.490090][ T5220] syz_tun: entered promiscuous mode [ 104.523646][ T5220] netlink: 'syz.4.553': attribute type 10 has an invalid length. [ 104.548952][ T5220] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 104.785741][ T5246] loop1: detected capacity change from 0 to 164 [ 104.858448][ T28] audit: type=1400 audit(1776488380.894:394): avc: denied { mount } for pid=5244 comm="syz.1.560" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 104.899403][ T5246] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 105.031009][ T28] audit: type=1400 audit(1776488381.064:395): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 105.283925][ T5258] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 105.329441][ T5258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.401486][ T5258] bond1: (slave ip6gretap1): making interface the new active one [ 105.449760][ T5258] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 105.500768][ T5263] bond1: entered allmulticast mode [ 105.536336][ T5263] ip6gretap1: entered allmulticast mode [ 105.719271][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.126793][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 106.150125][ T5273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.171142][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 106.185383][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 106.288614][ T5273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.335913][ T5273] bond2: (slave bond0): making interface the new active one [ 106.342177][ T5279] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 106.386320][ T5273] bond2: (slave bond0): Enslaving as an active interface with an up link [ 106.451320][ T5279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.503020][ T5283] macvlan2: entered promiscuous mode [ 106.544623][ T5283] bond1: entered promiscuous mode [ 106.575093][ T5283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.600593][ T5283] bond1: left promiscuous mode [ 106.644422][ T5282] ip6erspan0: entered promiscuous mode [ 106.668752][ T5282] bond1: (slave ip6erspan0): making interface the new active one [ 106.687323][ T5282] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 106.871827][ T5288] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.961510][ T5292] loop4: detected capacity change from 0 to 512 [ 106.976470][ T5288] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.005246][ T5292] FAT-fs (loop4): Directory bread(block 199916) failed [ 107.019513][ T5292] FAT-fs (loop4): Directory bread(block 199917) failed [ 107.029945][ T5292] FAT-fs (loop4): Directory bread(block 199918) failed [ 107.039384][ T5292] FAT-fs (loop4): Directory bread(block 199919) failed [ 107.048509][ T5292] FAT-fs (loop4): Directory bread(block 199920) failed [ 107.061548][ T5292] FAT-fs (loop4): Directory bread(block 199921) failed [ 107.071098][ T5292] FAT-fs (loop4): Directory bread(block 199922) failed [ 107.083102][ T5292] FAT-fs (loop4): Directory bread(block 199923) failed [ 107.133591][ T5288] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.232774][ T5288] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.293695][ T5292] FAT-fs (loop4): FAT read failed (blocknr 128) [ 107.418144][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.435617][ T5299] tipc: Started in network mode [ 107.447654][ T5299] tipc: Node identity 4, cluster identity 4711 [ 107.454158][ T5299] tipc: Node number set to 4 [ 107.493408][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.524941][ T28] audit: type=1400 audit(1776488383.554:396): avc: denied { write } for pid=5302 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 107.581519][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.653228][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.672140][ T5309] netlink: 9 bytes leftover after parsing attributes in process `syz.4.582'. [ 107.704100][ T5309] gretap0: entered promiscuous mode [ 107.733160][ T5310] netlink: 5 bytes leftover after parsing attributes in process `syz.4.582'. [ 107.761212][ T5310] 0{X功: renamed from gretap0 [ 107.796724][ T5310] 0{X功: left promiscuous mode [ 107.801879][ T5310] 0{X功: entered allmulticast mode [ 107.808853][ T5310] net_ratelimit: 93 callbacks suppressed [ 107.808870][ T5310] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 107.854306][ T5309] loop4: detected capacity change from 0 to 1024 [ 107.893225][ T5309] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 107.902618][ T5309] System zones: 0-1, 3-36 [ 107.912274][ T5309] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.582: bad orphan inode 134217728 [ 107.928457][ T5309] loop4: lost filesystem error report for type 5 error -117 [ 107.947027][ T5319] loop1: detected capacity change from 0 to 1024 [ 107.952964][ T5309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.954954][ T5319] EXT4-fs: Ignoring removed bh option [ 107.955261][ T5319] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 107.955261][ T5319] [ 108.019392][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.073550][ T28] audit: type=1400 audit(1776488384.104:397): avc: denied { setopt } for pid=5323 comm="syz.0.587" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.096075][ T5324] pimreg: entered allmulticast mode [ 108.290123][ T5324] pimreg: left allmulticast mode [ 109.078410][ T5348] kernel read not supported for file /policy (pid: 5348 comm: syz.2.595) [ 109.817726][ T5371] netlink: 44 bytes leftover after parsing attributes in process `syz.1.603'. [ 110.144851][ T28] audit: type=1400 audit(1776488386.174:398): avc: denied { write } for pid=5375 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 110.231136][ T5384] syzkaller0: entered promiscuous mode [ 110.249496][ T5384] syzkaller0: entered allmulticast mode [ 110.309416][ T5387] loop2: detected capacity change from 0 to 128 [ 110.408847][ T5388] netlink: 'syz.4.607': attribute type 10 has an invalid length. [ 110.878876][ T5388] bond0: (slave bond_slave_0): Releasing backup interface [ 110.980193][ T5403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5403 comm=syz.4.613 [ 111.114106][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 111.123430][ T5408] loop4: detected capacity change from 0 to 1024 [ 111.198139][ T5408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.247489][ T28] audit: type=1400 audit(1776488387.284:399): avc: denied { ioctl } for pid=5409 comm="syz.2.616" path="socket:[17410]" dev="sockfs" ino=17410 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.364226][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.447712][ T5425] loop4: detected capacity change from 0 to 256 [ 111.457183][ T5425] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 111.795433][ T28] audit: type=1400 audit(1776488387.764:400): avc: denied { write } for pid=5426 comm="syz.2.622" name="snmp" dev="proc" ino=4026532421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 112.021510][ T5433] syzkaller0: entered promiscuous mode [ 112.046817][ T5433] syzkaller0: entered allmulticast mode [ 112.357347][ T5447] netlink: 80 bytes leftover after parsing attributes in process `syz.1.626'. [ 112.509554][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 112.527949][ T5458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 112.549754][ T5458] vlan2: entered promiscuous mode [ 112.554925][ T5458] bridge1: entered promiscuous mode [ 112.561798][ T5458] vlan2: entered allmulticast mode [ 112.568553][ T5458] bridge1: entered allmulticast mode [ 113.263725][ T5466] loop2: detected capacity change from 0 to 512 [ 113.281635][ T5470] netlink: 144 bytes leftover after parsing attributes in process `syz.0.636'. [ 113.295197][ T5470] unsupported nla_type 210 [ 113.307247][ T5466] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.634: inode has both inline data and extents flags [ 113.327022][ T5469] syzkaller0: entered promiscuous mode [ 113.343063][ T5469] syzkaller0: entered allmulticast mode [ 113.360951][ T5466] fserror_report: 1 callbacks suppressed [ 113.360969][ T5466] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.368020][ T5475] loop0: detected capacity change from 0 to 512 [ 113.385597][ T5466] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.634: couldn't read orphan inode 15 (err -117) [ 113.395312][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 113.403796][ C0] EXT4-fs (loop2): initial error at time 1776488389: ext4_orphan_get:1397: inode 15 [ 113.413212][ C0] EXT4-fs (loop2): last error at time 1776488389: ext4_orphan_get:1397: inode 15 [ 113.429658][ T5466] loop2: lost filesystem error report for type 5 error -117 [ 113.431508][ T5466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.574032][ T5482] loop0: detected capacity change from 0 to 1024 [ 113.582093][ T5482] EXT4-fs: Ignoring removed nobh option [ 113.589618][ T5482] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.600639][ T5482] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.640: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 113.619888][ T5482] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 113.620054][ T5482] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.640: couldn't read orphan inode 11 (err -117) [ 113.629252][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 113.629292][ C1] EXT4-fs (loop0): initial error at time 1776488389: ext4_ext_check_inode:521: inode 11 [ 113.629328][ C1] EXT4-fs (loop0): last error at time 1776488389: ext4_ext_check_inode:521: inode 11 [ 113.667295][ T5482] loop0: lost filesystem error report for type 5 error -117 [ 113.668989][ T5482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.699525][ T28] audit: type=1400 audit(1776488389.734:401): avc: denied { create } for pid=5481 comm="syz.0.640" name=B85C7766D4E1B3D4FFFBA371EA94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 113.708577][ T5482] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.640: Invalid block bitmap block 0 in block_group 0 [ 113.736748][ T5482] Quota error (device loop0): write_blk: dquota write failed [ 113.744234][ T5482] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 113.755499][ T5482] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.640: Failed to acquire dquot type 0 [ 113.783166][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.792753][ T12] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 113.803047][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 113.814677][ T12] loop0: lost filesystem error report for type 5 error -117 [ 113.889102][ T5485] netlink: 80 bytes leftover after parsing attributes in process `syz.0.641'. [ 114.084639][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.284874][ T5498] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 114.818945][ T5511] netlink: 'syz.2.651': attribute type 1 has an invalid length. [ 114.849211][ T5511] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.872120][ T5511] bond2: (slave gretap1): making interface the new active one [ 114.881308][ T5511] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 115.536841][ T5530] netlink: 80 bytes leftover after parsing attributes in process `syz.4.653'. [ 115.593923][ T5525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.769846][ T5525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.903847][ T5525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.023580][ T5525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.341936][ T1707] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.353635][ T1707] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.417572][ T1707] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.431537][ T1707] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.146755][ T5576] loop4: detected capacity change from 0 to 512 [ 117.165869][ T5578] bridge0: port 3(gretap0) entered blocking state [ 117.185434][ T5578] bridge0: port 3(gretap0) entered disabled state [ 117.216914][ T5578] gretap0: entered allmulticast mode [ 117.225241][ T5576] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.669: inode has both inline data and extents flags [ 117.273994][ T5578] gretap0: entered promiscuous mode [ 117.278100][ T5576] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 117.279788][ T5578] bridge0: port 3(gretap0) entered blocking state [ 117.288260][ T5576] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.669: couldn't read orphan inode 15 (err -117) [ 117.288986][ T5578] bridge0: port 3(gretap0) entered forwarding state [ 117.295457][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 117.295478][ C0] EXT4-fs (loop4): initial error at time 1776488393: ext4_orphan_get:1397: inode 15 [ 117.295525][ C0] EXT4-fs (loop4): last error at time 1776488393: ext4_orphan_get:1397: inode 15 [ 117.385342][ T5576] loop4: lost filesystem error report for type 5 error -117 [ 117.385950][ T5576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.553487][ T5591] syzkaller0: entered promiscuous mode [ 117.568147][ T5591] syzkaller0: entered allmulticast mode [ 117.996184][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.071225][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 118.071833][ T5606] syzkaller0: entered promiscuous mode [ 118.103187][ T5606] syzkaller0: entered allmulticast mode [ 118.123071][ T5606] 0: reclassify loop, rule prio 0, protocol 800 [ 118.238849][ T5607] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 118.322125][ T5611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.682'. [ 118.376092][ T5611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5611 comm=syz.4.682 [ 118.409576][ T5617] netlink: 'syz.3.685': attribute type 4 has an invalid length. [ 118.435937][ T5617] netlink: 'syz.3.685': attribute type 4 has an invalid length. [ 118.487145][ T5621] tipc: Failed to remove unknown binding: 66,0,0/0:3744218604/3744218606 [ 118.496870][ T5621] tipc: Failed to remove unknown binding: 66,0,0/0:3744218604/3744218605 [ 118.507696][ T5621] tipc: Failed to remove unknown binding: 66,0,0/0:3744218604/3744218606 [ 118.517159][ T5621] tipc: Failed to remove unknown binding: 66,0,0/0:3744218604/3744218605 [ 118.539608][ T28] audit: type=1400 audit(1776488394.574:402): avc: denied { connect } for pid=5622 comm="syz.1.688" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.612801][ T28] audit: type=1400 audit(1776488394.644:403): avc: denied { write } for pid=5624 comm="syz.3.689" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.670439][ T5633] tipc: Failed to remove unknown binding: 66,0,0/0:3446346296/3446346297 [ 118.671973][ T5634] IPv6: NLM_F_CREATE should be specified when creating new route [ 118.798348][ T5641] loop0: detected capacity change from 0 to 512 [ 118.810125][ T5646] loop1: detected capacity change from 0 to 736 [ 118.820075][ T5641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.835228][ T5641] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.889177][ T5641] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 118.903659][ T5641] EXT4-fs (loop0): failed to initialize system zone (-117) [ 118.915409][ T5641] EXT4-fs (loop0): mount failed [ 119.208753][ T5654] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.317068][ T5654] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.407703][ T5654] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.484151][ T5654] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.608619][ T1473] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.669378][ T1707] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.712355][ T1707] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.764125][ T1473] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.942176][ T5670] netlink: 'syz.4.704': attribute type 11 has an invalid length. [ 120.157054][ T5675] tipc: Failed to remove unknown binding: 66,0,0/4:1988879076/1988879077 [ 120.186604][ T5675] tipc: Failed to remove unknown binding: 66,0,0/4:1988879076/1988879077 [ 120.880342][ T28] audit: type=1400 audit(1776488396.914:404): avc: denied { create } for pid=5692 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 120.901569][ T5693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 120.975681][ T28] audit: type=1400 audit(1776488396.934:405): avc: denied { write } for pid=5692 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 121.010859][ T5693] bond1: entered promiscuous mode [ 121.020015][ T5693] bond1: entered allmulticast mode [ 121.030147][ T28] audit: type=1400 audit(1776488397.054:406): avc: denied { ioctl } for pid=5697 comm="syz.2.716" path="socket:[17340]" dev="sockfs" ino=17340 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.072636][ T28] audit: type=1400 audit(1776488397.054:407): avc: denied { bind } for pid=5697 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.093658][ T28] audit: type=1400 audit(1776488397.054:408): avc: denied { connect } for pid=5697 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.114096][ T28] audit: type=1400 audit(1776488397.114:409): avc: denied { write } for pid=5697 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.163941][ T5704] loop0: detected capacity change from 0 to 512 [ 121.182093][ T28] audit: type=1400 audit(1776488397.214:410): avc: denied { mounton } for pid=5703 comm="syz.0.717" path="/137/file0/file0" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 121.239764][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.247103][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.349960][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.448889][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.468103][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.495421][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.524104][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.669087][ T5718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'. [ 121.713060][ T5718] bond3: entered promiscuous mode [ 121.741378][ T5718] bond3: entered allmulticast mode [ 121.957543][ T5729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 122.202192][ T5729] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.371128][ T5729] bond4 (unregistering): Released all slaves [ 122.605809][ T28] audit: type=1400 audit(1776488398.644:411): avc: denied { ioctl } for pid=5748 comm="syz.2.727" path="socket:[17973]" dev="sockfs" ino=17973 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.681362][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 122.928596][ T5758] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.072724][ T5758] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.195813][ T5758] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.340286][ T5758] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.519807][ T1473] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.586163][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.623830][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.742366][ T221] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.752559][ T5779] syzkaller0: entered promiscuous mode [ 123.762472][ T5779] syzkaller0: entered allmulticast mode [ 124.867809][ T5822] loop0: detected capacity change from 0 to 1024 [ 124.920664][ T5822] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.983155][ T5822] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.033096][ T5822] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.059890][ T5884] loop1: detected capacity change from 0 to 512 [ 125.152613][ T5884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.201444][ T5884] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.281719][ T5828] netlink: 'syz.2.742': attribute type 10 has an invalid length. [ 125.292948][ T5828] team0: Failed to send options change via netlink (err -105) [ 125.300784][ T5828] team0: Port device dummy0 added [ 125.307944][ T5828] netlink: 'syz.2.742': attribute type 10 has an invalid length. [ 125.307953][ T5894] syz_tun: left allmulticast mode [ 125.307973][ T5894] syz_tun: left promiscuous mode [ 125.322736][ T5822] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.741: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 125.349410][ T5822] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 125.351869][ T5822] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.741: couldn't read orphan inode 11 (err -117) [ 125.362397][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 125.362456][ C1] EXT4-fs (loop0): initial error at time 1776488401: ext4_ext_check_inode:521: inode 11 [ 125.362989][ C1] EXT4-fs (loop0): last error at time 1776488401: ext4_ext_check_inode:521: inode 11 [ 125.411356][ T5894] bridge0: port 2(syz_tun) entered disabled state [ 125.413682][ T5822] loop0: lost filesystem error report for type 5 error -117 [ 125.422741][ T5894] bond0: (slave bridge0): Releasing backup interface [ 125.423724][ T5822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.474495][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'. [ 125.486650][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.512558][ T28] audit: type=1400 audit(1776488401.534:412): avc: denied { setattr } for pid=5821 comm="syz.0.741" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.540713][ T5822] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.741: Invalid block bitmap block 0 in block_group 0 [ 125.560181][ T5822] Quota error (device loop0): write_blk: dquota write failed [ 125.569612][ T5822] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 125.582147][ T5822] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.741: Failed to acquire dquot type 0 [ 125.603845][ T5894] bridge_slave_0: left allmulticast mode [ 125.611683][ T5894] bridge_slave_0: left promiscuous mode [ 125.618122][ T5822] syz.0.741 (5822) used greatest stack depth: 8128 bytes left [ 125.641910][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.675666][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.696914][ T5894] bond0: (slave bond_slave_1): Releasing backup interface [ 125.707995][ T5894] team0: Port device team_slave_0 removed [ 125.727777][ T28] audit: type=1400 audit(1776488401.764:413): avc: denied { read } for pid=5900 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.802487][ T5894] team0: Port device team_slave_1 removed [ 125.826452][ T5894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.838433][ T5894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.840308][ T28] audit: type=1400 audit(1776488401.874:414): avc: denied { shutdown } for pid=5904 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.865930][ T5894] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.888513][ T5828] team0: Port device dummy0 removed [ 125.895696][ T5828] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.907429][ T5895] team0: Mode changed to "loadbalance" [ 125.935641][ T5909] netlink: 32 bytes leftover after parsing attributes in process `syz.3.753'. [ 125.958781][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.753'. [ 126.001957][ T5914] syzkaller0: entered promiscuous mode [ 126.009806][ T5914] syzkaller0: entered allmulticast mode [ 126.095333][ T5918] netlink: 5 bytes leftover after parsing attributes in process `syz.3.757'. [ 126.143575][ T5916] netlink: 9 bytes leftover after parsing attributes in process `syz.3.757'. [ 126.150411][ T5918] 0{X功: renamed from gretap0 (while UP) [ 126.163821][ T5918] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 126.212445][ T5916] bridge0: port 3(30{X功) entered disabled state [ 126.271965][ T5923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5923 comm=syz.1.756 [ 126.522821][ T28] audit: type=1400 audit(1776488402.544:415): avc: denied { recv } for pid=3322 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.245 dest=39862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 126.559680][ T5930] tipc: Enabled bearer , priority 0 [ 126.576644][ T5930] syzkaller0: entered promiscuous mode [ 126.591972][ T5930] syzkaller0: entered allmulticast mode [ 126.658008][ T28] audit: type=1326 audit(1776488402.694:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c05b8c819 code=0x7ffc0000 [ 126.684829][ T5930] tipc: Resetting bearer [ 126.691810][ T28] audit: type=1326 audit(1776488402.694:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c05b8c819 code=0x7ffc0000 [ 126.698323][ T5929] tipc: Resetting bearer [ 126.758538][ T28] audit: type=1326 audit(1776488402.714:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f3c05b8c819 code=0x7ffc0000 [ 126.785923][ T5929] tipc: Disabling bearer [ 126.791819][ T28] audit: type=1326 audit(1776488402.714:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c05b8c819 code=0x7ffc0000 [ 127.811590][ T5962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5962 comm=syz.0.771 [ 128.807484][ T5980] netlink: 'syz.3.776': attribute type 1 has an invalid length. [ 128.858885][ T5980] bond4: entered promiscuous mode [ 128.887044][ T5980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.930693][ T5982] vlan2: entered allmulticast mode [ 128.957124][ T5982] bond4: entered allmulticast mode [ 129.062065][ T5980] bond4: (slave bridge1): making interface the new active one [ 129.084185][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.777'. [ 129.095948][ T5980] bridge1: entered promiscuous mode [ 129.101712][ T5980] bridge1: entered allmulticast mode [ 129.108894][ T5980] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 129.192032][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.777'. [ 129.358818][ T5995] netlink: 'syz.4.781': attribute type 4 has an invalid length. [ 129.427577][ T5997] loop2: detected capacity change from 0 to 164 [ 129.434799][ T5997] ISOFS: unable to read i-node block [ 129.441325][ T5997] isofs_fill_super: get root inode failed [ 129.472269][ T5997] ipip0: entered promiscuous mode [ 129.899698][ T6013] syzkaller0: entered promiscuous mode [ 129.905291][ T6013] syzkaller0: entered allmulticast mode [ 129.922900][ T6015] macsec1: entered promiscuous mode [ 129.928337][ T6015] bridge0: entered promiscuous mode [ 130.134595][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.143592][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.246078][ T6032] bridge0: entered allmulticast mode [ 130.406246][ T6047] netlink: 'syz.3.797': attribute type 1 has an invalid length. [ 130.436528][ T6047] 8021q: adding VLAN 0 to HW filter on device bond5 [ 130.472251][ T6047] ipvlan2: entered allmulticast mode [ 130.483615][ T6047] bond5: entered allmulticast mode [ 130.513002][ T6047] bond5: (slave bridge2): making interface the new active one [ 130.529127][ T6047] bridge2: entered allmulticast mode [ 130.541091][ T6047] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 130.592624][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 130.601720][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 130.907531][ T6075] loop4: detected capacity change from 0 to 512 [ 130.958993][ T6075] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.765631][ T3323] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 131.972619][ T6087] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.601120][ T6094] netlink: 104 bytes leftover after parsing attributes in process `syz.0.816'. [ 132.957026][ T6087] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.110703][ T6087] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.178629][ T28] kauditd_printk_skb: 1113 callbacks suppressed [ 133.178644][ T28] audit: type=1400 audit(133.119:1533): avc: denied { create } for pid=6105 comm="syz.4.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 133.205185][ T6104] loop0: detected capacity change from 0 to 512 [ 133.217952][ T28] audit: type=1400 audit(133.119:1534): avc: denied { write } for pid=6105 comm="syz.4.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 133.362754][ T6087] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.408740][ T6104] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.812: corrupted inode contents [ 133.489563][ T6104] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.490186][ T6104] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.812: mark_inode_dirty error [ 133.499511][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 133.499531][ C0] EXT4-fs (loop0): initial error at time 133: ext4_do_update_inode:5690: inode 16 [ 133.499568][ C0] EXT4-fs (loop0): last error at time 133: ext4_do_update_inode:5690: inode 16 [ 133.658818][ T5863] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.710409][ T5863] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.797753][ T5863] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.058591][ T5863] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.081973][ T6104] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.082215][ T6104] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.812: corrupted inode contents [ 134.184042][ T6104] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.185031][ T6104] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.812: mark_inode_dirty error [ 134.301624][ T6104] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.301830][ T6104] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.812: corrupted inode contents [ 134.401998][ T6104] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.403370][ T6104] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 134.477739][ T6104] loop0: lost filesystem error report for type 5 error -117 [ 134.479061][ T6104] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.812: corrupted inode contents [ 134.552413][ T6131] loop4: detected capacity change from 0 to 512 [ 134.577875][ T6104] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.777473][ T28] audit: type=1400 audit(134.749:1535): avc: denied { create } for pid=6123 comm="syz.1.819" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.103154][ T6131] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.113223][ T6104] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.812: mark_inode_dirty error [ 135.153784][ T6131] EXT4-fs (loop4): 1 orphan inode deleted [ 135.163145][ T6104] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 135.163640][ T6104] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 135.185354][ T6131] EXT4-fs (loop4): 1 truncate cleaned up [ 135.205631][ T6131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.218344][ T28] audit: type=1400 audit(134.779:1536): avc: denied { write } for pid=6123 comm="syz.1.819" name="file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.262147][ T6104] loop0: lost filesystem error report for type 5 error -117 [ 135.263147][ T6104] EXT4-fs (loop0): 1 truncate cleaned up [ 135.302828][ T6104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.321252][ T28] audit: type=1400 audit(134.779:1537): avc: denied { open } for pid=6123 comm="syz.1.819" path="/169/file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.363854][ T6131] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.822' sets config #0 [ 135.537578][ T5863] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 135.547502][ T5863] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:17: Failed to release dquot type 1 [ 135.573431][ T28] audit: type=1400 audit(134.779:1538): avc: denied { ioctl } for pid=6123 comm="syz.1.819" path="/169/file0" dev="tmpfs" ino=906 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.633415][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.725981][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.735148][ T6148] loop2: detected capacity change from 0 to 512 [ 135.758197][ T6148] /dev/loop2: Can't open blockdev [ 135.777646][ T6150] netlink: 'syz.0.826': attribute type 2 has an invalid length. [ 135.790180][ T6150] netlink: 'syz.0.826': attribute type 8 has an invalid length. [ 135.833419][ T6150] netlink: 132 bytes leftover after parsing attributes in process `syz.0.826'. [ 135.847273][ T28] audit: type=1400 audit(135.799:1539): avc: denied { ioctl } for pid=6149 comm="syz.0.826" path="socket:[20331]" dev="sockfs" ino=20331 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.943148][ T6161] netlink: 'syz.3.831': attribute type 5 has an invalid length. [ 135.965848][ T6161] netlink: 168 bytes leftover after parsing attributes in process `syz.3.831'. [ 136.009974][ T6164] loop4: detected capacity change from 0 to 1024 [ 136.034776][ T6164] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 136.120042][ T6168] netlink: 'syz.3.834': attribute type 4 has an invalid length. [ 136.154205][ T6168] netlink: 'syz.3.834': attribute type 4 has an invalid length. [ 136.306890][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.837'. [ 136.345316][ T28] audit: type=1400 audit(136.299:1540): avc: denied { unlink } for pid=3322 comm="syz-executor" name="file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.420896][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.837'. [ 136.802872][ T28] audit: type=1400 audit(136.769:1541): avc: denied { cmd } for pid=6198 comm="syz.4.844" path="socket:[20913]" dev="sockfs" ino=20913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 136.928424][ T6206] syz_tun: entered allmulticast mode [ 137.222016][ T6210] netlink: 277 bytes leftover after parsing attributes in process `syz.1.848'. [ 138.051583][ T6237] loop4: detected capacity change from 0 to 128 [ 138.061550][ T6227] loop1: detected capacity change from 0 to 2048 [ 138.092837][ T6237] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.327628][ T6227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.513619][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.587307][ T6246] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 138.626726][ T6247] loop1: detected capacity change from 0 to 1024 [ 138.670422][ T6247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.815585][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.140711][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.260286][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 140.260319][ T28] audit: type=1400 audit(140.229:1546): avc: denied { bind } for pid=6220 comm="syz.3.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.324677][ T6271] syzkaller0: entered promiscuous mode [ 140.335804][ T6271] syzkaller0: entered allmulticast mode [ 140.793413][ T28] audit: type=1400 audit(140.759:1547): avc: denied { write } for pid=6279 comm="syz.2.868" path="socket:[21545]" dev="sockfs" ino=21545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.094847][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'. [ 141.166203][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 141.616669][ T6298] netlink: 'syz.1.874': attribute type 10 has an invalid length. [ 141.796650][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 142.035021][ T6317] loop2: detected capacity change from 0 to 1024 [ 142.047779][ T6317] EXT4-fs: Ignoring removed bh option [ 142.067739][ T6317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.129322][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 142.145567][ T28] audit: type=1400 audit(142.109:1548): avc: denied { name_bind 0x1000000 } for pid=6321 comm="syz.0.882" path="socket:[21607]" dev="sockfs" ino=21607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 142.418739][ T6338] loop4: detected capacity change from 0 to 512 [ 142.550764][ T28] audit: type=1400 audit(142.519:1549): avc: denied { append } for pid=6337 comm="syz.4.889" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 142.720655][ T6344] loop4: detected capacity change from 0 to 512 [ 142.758948][ T6344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.936805][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.070516][ T6359] loop1: detected capacity change from 0 to 256 [ 143.080414][ T6360] netlink: 'syz.3.892': attribute type 13 has an invalid length. [ 143.168684][ T6359] FAT-fs (loop1): codepage cp852 not found [ 143.218966][ T6360] bridge0: port 3(30{X功) entered blocking state [ 143.225780][ T6360] bridge0: port 3(30{X功) entered forwarding state [ 143.232787][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.239945][ T6360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.247338][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.254474][ T6360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.420853][ T6360] bridge0: left allmulticast mode [ 143.577350][ T6360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.682358][ T6367] loop0: detected capacity change from 0 to 512 [ 143.726414][ T6369] loop4: detected capacity change from 0 to 512 [ 143.743330][ T6367] EXT4-fs: Ignoring removed orlov option [ 143.838899][ T6369] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.894: invalid indirect mapped block 4294967295 (level 0) [ 144.051424][ T6369] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.051645][ T6369] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.894: invalid indirect mapped block 4294967295 (level 1) [ 144.061000][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 144.061032][ C1] EXT4-fs (loop4): initial error at time 144: ext4_free_branches:1023: inode 16 [ 144.061070][ C1] EXT4-fs (loop4): last error at time 144: ext4_free_branches:1023: inode 16 [ 144.122947][ T6367] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 144.159272][ T6369] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.231946][ T6369] EXT4-fs (loop4): 1 orphan inode deleted [ 144.303911][ T6369] EXT4-fs (loop4): 1 truncate cleaned up [ 144.325868][ T6369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.393467][ T28] audit: type=1400 audit(144.359:1550): avc: denied { quotaon } for pid=6368 comm="syz.4.894" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.488699][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.584510][ T6388] netlink: 'syz.3.903': attribute type 39 has an invalid length. [ 144.810715][ T6393] syzkaller0: entered promiscuous mode [ 144.824098][ T6393] syzkaller0: entered allmulticast mode [ 146.017588][ T6410] tmpfs: Unknown parameter 'inode31' [ 147.375820][ T28] audit: type=1400 audit(147.339:1551): avc: denied { block_suspend } for pid=6418 comm="syz.4.913" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.244197][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 149.398188][ T6438] syzkaller0: entered promiscuous mode [ 149.409655][ T6438] syzkaller0: entered allmulticast mode [ 149.488040][ T6442] netlink: 'syz.4.919': attribute type 2 has an invalid length. [ 149.507520][ T6442] netlink: 199792 bytes leftover after parsing attributes in process `syz.4.919'. [ 149.571528][ T6444] netlink: 'syz.2.920': attribute type 2 has an invalid length. [ 149.992647][ T28] audit: type=1326 audit(149.959:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a1c1c819 code=0x7ffc0000 [ 150.026114][ T28] audit: type=1326 audit(149.959:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a1c1c819 code=0x7ffc0000 [ 150.050405][ T28] audit: type=1326 audit(149.959:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a1c1c819 code=0x7ffc0000 [ 150.079310][ T6456] netlink: 'syz.0.924': attribute type 21 has an invalid length. [ 150.088627][ T6456] netlink: 128 bytes leftover after parsing attributes in process `syz.0.924'. [ 150.098374][ T6456] netlink: 'syz.0.924': attribute type 4 has an invalid length. [ 150.106517][ T28] audit: type=1326 audit(149.959:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a1c1c819 code=0x7ffc0000 [ 150.129875][ T6456] netlink: 'syz.0.924': attribute type 3 has an invalid length. [ 150.138609][ T6456] netlink: 3 bytes leftover after parsing attributes in process `syz.0.924'. [ 150.147858][ T28] audit: type=1326 audit(149.959:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f84a1c1c819 code=0x7ffc0000 [ 150.174009][ T28] audit: type=1326 audit(149.989:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a1c1c819 code=0x7ffc0000 [ 150.198103][ T28] audit: type=1326 audit(150.039:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a1c1c819 code=0x7ffc0000 [ 150.221145][ T28] audit: type=1326 audit(150.049:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a1c1c819 code=0x7ffc0000 [ 150.251305][ T28] audit: type=1326 audit(150.049:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a1c1c819 code=0x7ffc0000 [ 150.369837][ T6463] netlink: 764 bytes leftover after parsing attributes in process `syz.4.928'. [ 150.422542][ T6469] loop2: detected capacity change from 0 to 1024 [ 150.449700][ T6475] sg_write: data in/out 262109/10 bytes for SCSI command 0x5d-- guessing data in; [ 150.449700][ T6475] program syz.0.933 not setting count and/or reply_len properly [ 150.473184][ T6469] EXT4-fs: Ignoring removed nobh option [ 150.498232][ T6469] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.523424][ T6469] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.931: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 150.560505][ T6469] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 150.560615][ T6469] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.931: couldn't read orphan inode 11 (err -117) [ 150.569868][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 150.569889][ C1] EXT4-fs (loop2): initial error at time 150: ext4_ext_check_inode:521: inode 11 [ 150.569920][ C1] EXT4-fs (loop2): last error at time 150: ext4_ext_check_inode:521: inode 11 [ 150.606974][ T6469] loop2: lost filesystem error report for type 5 error -117 [ 150.609337][ T6469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.640745][ T6469] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.931: Invalid block bitmap block 0 in block_group 0 [ 150.656185][ T6469] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.931: Failed to acquire dquot type 0 [ 150.666305][ T6481] syzkaller0: entered promiscuous mode [ 150.672932][ T6481] syzkaller0: entered allmulticast mode [ 150.879079][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.935414][ T5847] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 0 [ 150.950477][ T5847] loop2: lost filesystem error report for type 5 error -117 [ 151.016847][ T6493] loop1: detected capacity change from 0 to 512 [ 151.365108][ T6502] loop0: detected capacity change from 0 to 256 [ 151.365700][ T6500] netlink: 'syz.1.942': attribute type 21 has an invalid length. [ 151.424513][ T6500] netlink: 128 bytes leftover after parsing attributes in process `syz.1.942'. [ 151.435577][ T6502] FAT-fs (loop0): codepage cp852 not found [ 151.631293][ T6500] netlink: 'syz.1.942': attribute type 4 has an invalid length. [ 151.643825][ T6500] netlink: 'syz.1.942': attribute type 3 has an invalid length. [ 151.652342][ T6500] netlink: 3 bytes leftover after parsing attributes in process `syz.1.942'. [ 152.408447][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 152.408464][ T28] audit: type=1400 audit(152.199:1619): avc: denied { open } for pid=6510 comm="syz.4.945" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.745419][ T6529] loop1: detected capacity change from 0 to 1024 [ 152.767319][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.952'. [ 152.771298][ T6529] EXT4-fs: Ignoring removed nobh option [ 152.803081][ T6528] netlink: 'syz.0.950': attribute type 10 has an invalid length. [ 152.804833][ T6529] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 152.850276][ T6529] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.959: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 152.872496][ T6529] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.872710][ T6529] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.959: couldn't read orphan inode 11 (err -117) [ 152.881933][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 152.881950][ C0] EXT4-fs (loop1): initial error at time 152: ext4_ext_check_inode:521: inode 11 [ 152.881971][ C0] EXT4-fs (loop1): last error at time 152: ext4_ext_check_inode:521: inode 11 [ 152.925822][ T6529] loop1: lost filesystem error report for type 5 error -117 [ 152.926402][ T6529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.990663][ T6538] netlink: 'syz.2.951': attribute type 13 has an invalid length. [ 153.030511][ T6529] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.959: Invalid block bitmap block 0 in block_group 0 [ 153.056782][ T6529] Quota error (device loop1): write_blk: dquota write failed [ 153.064262][ T6529] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 153.081582][ T6529] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.959: Failed to acquire dquot type 0 [ 153.110008][ T6539] loop2: detected capacity change from 0 to 512 [ 153.140123][ T6539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.230055][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.245043][ T5851] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 153.256941][ T5851] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 0 [ 153.298072][ T5851] loop1: lost filesystem error report for type 5 error -117 [ 153.655405][ T6546] veth5: entered allmulticast mode [ 153.685454][ T6546] bond2: (slave veth5): Enslaving as an active interface with an up link [ 153.721330][ T6549] bond2 (unregistering): (slave veth5): Releasing backup interface [ 153.748753][ T6549] bond2 (unregistering): Released all slaves [ 153.858604][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.887631][ T6538] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.945684][ T6538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.329199][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.869677][ T6597] netlink: 'syz.4.968': attribute type 39 has an invalid length. [ 155.664893][ T6604] xt_hashlimit: size too large, truncated to 1048576 [ 155.698248][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 155.837199][ T6605] veth5: entered allmulticast mode [ 155.883800][ T6605] bond2: (slave veth5): Enslaving as an active interface with an up link [ 155.948736][ T6609] bond2 (unregistering): (slave veth5): Releasing backup interface [ 156.004778][ T6609] bond2 (unregistering): Released all slaves [ 156.264429][ T6617] syzkaller0: entered promiscuous mode [ 156.280183][ T6617] syzkaller0: entered allmulticast mode [ 156.297517][ T6620] netlink: 'syz.1.975': attribute type 4 has an invalid length. [ 156.348782][ T6622] netlink: 'syz.1.975': attribute type 4 has an invalid length. [ 156.627051][ T6626] netlink: 'syz.1.976': attribute type 13 has an invalid length. [ 156.704247][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.711539][ T6626] bridge0: port 2(bridge_slave_1) entered listening state [ 156.718768][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.725970][ T6626] bridge0: port 1(bridge_slave_0) entered listening state [ 156.786464][ T6626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.810951][ T6632] loop1: detected capacity change from 0 to 512 [ 156.822403][ T6629] loop0: detected capacity change from 0 to 164 [ 156.876953][ T6631] sg_write: data in/out 262109/10 bytes for SCSI command 0x5d-- guessing data in; [ 156.876953][ T6631] program syz.2.977 not setting count and/or reply_len properly [ 156.998029][ T6629] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82 [ 157.043331][ T6632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.341110][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.380621][ T6642] netlink: 72 bytes leftover after parsing attributes in process `syz.3.983'. [ 159.149114][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 159.303570][ T6662] veth5: entered allmulticast mode [ 159.341860][ T6662] bond4: (slave veth5): Enslaving as an active interface with an up link [ 159.433291][ T6663] bond4 (unregistering): (slave veth5): Releasing backup interface [ 159.526881][ T6663] bond4 (unregistering): Released all slaves [ 159.659419][ T6673] bridge0: port 1(30{X功) entered blocking state [ 159.681094][ T6673] bridge0: port 1(30{X功) entered disabled state [ 159.692548][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'. [ 159.716845][ T6673] 0{X功: entered promiscuous mode [ 160.153011][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.994'. [ 160.165125][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.185786][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.212122][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 160.238962][ T6688] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6688 comm=syz.2.994 [ 160.297364][ T6695] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.509113][ T6708] loop0: detected capacity change from 0 to 256 [ 160.555148][ T6708] FAT-fs (loop0): Directory bread(block 64) failed [ 160.595183][ T6708] FAT-fs (loop0): Directory bread(block 65) failed [ 160.620892][ T6708] FAT-fs (loop0): Directory bread(block 66) failed [ 160.638721][ T6708] FAT-fs (loop0): Directory bread(block 67) failed [ 160.653200][ T6708] FAT-fs (loop0): Directory bread(block 68) failed [ 160.670202][ T6708] FAT-fs (loop0): Directory bread(block 69) failed [ 160.687472][ T6708] FAT-fs (loop0): Directory bread(block 70) failed [ 160.713242][ T6708] FAT-fs (loop0): Directory bread(block 71) failed [ 160.756366][ T6708] FAT-fs (loop0): Directory bread(block 72) failed [ 160.792346][ T6708] FAT-fs (loop0): Directory bread(block 73) failed [ 161.365395][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 161.538222][ T6776] veth0_macvtap: left promiscuous mode [ 162.017216][ T6809] loop2: detected capacity change from 0 to 512 [ 162.028368][ T6807] loop4: detected capacity change from 0 to 512 [ 162.049849][ T6807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.078205][ T6807] tmpfs: Unknown parameter 'inode31' [ 162.095267][ T28] audit: type=1400 audit(162.049:1620): avc: denied { mounton } for pid=6805 comm="syz.4.1020" path="/197/file1" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.730995][ T6822] bridge0: port 3(gretap0) entered blocking state [ 163.100592][ T6822] bridge0: port 3(gretap0) entered disabled state [ 163.219768][ T6822] gretap0: entered allmulticast mode [ 163.262524][ T6822] gretap0: entered promiscuous mode [ 163.267846][ T28] audit: type=1400 audit(163.169:1621): avc: denied { read write } for pid=6805 comm="syz.4.1020" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.267935][ T28] audit: type=1400 audit(163.169:1622): avc: denied { open } for pid=6805 comm="syz.4.1020" path="/197/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.377259][ T6822] bridge0: port 3(gretap0) entered blocking state [ 163.383883][ T6822] bridge0: port 3(gretap0) entered forwarding state [ 163.953654][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.184703][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 164.197195][ T6835] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.326376][ T6838] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 164.469611][ T6828] loop2: detected capacity change from 0 to 1024 [ 164.560921][ T6828] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.621858][ T6828] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.723027][ T6828] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 164.774185][ T6828] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.1025: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 164.924455][ T6828] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 164.925275][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 164.941464][ C0] EXT4-fs (loop2): initial error at time 164: ext4_ext_check_inode:521: inode 11 [ 164.951065][ C0] EXT4-fs (loop2): last error at time 164: ext4_ext_check_inode:521: inode 11 [ 165.049872][ T6828] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1025: couldn't read orphan inode 11 (err -117) [ 165.069955][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'. [ 165.129227][ T6848] veth5: entered allmulticast mode [ 165.137797][ T6848] bond6: (slave veth5): Enslaving as an active interface with an up link [ 165.141566][ T6828] loop2: lost filesystem error report for type 5 error -117 [ 165.186351][ T6848] bond6 (unregistering): (slave veth5): Releasing backup interface [ 165.203355][ T6828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.244377][ T6848] bond6 (unregistering): Released all slaves [ 165.287696][ T6828] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1025: Invalid block bitmap block 0 in block_group 0 [ 165.338397][ T6828] Quota error (device loop2): write_blk: dquota write failed [ 165.351369][ T6828] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 165.472583][ T6828] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1025: Failed to acquire dquot type 0 [ 165.477686][ T6855] loop4: detected capacity change from 0 to 164 [ 165.532157][ T6855] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 165.544299][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.882572][ T6867] bridge0: port 3(gretap0) entered blocking state [ 165.905635][ T6867] bridge0: port 3(gretap0) entered disabled state [ 165.926162][ T6867] gretap0: entered allmulticast mode [ 165.942039][ T6867] gretap0: entered promiscuous mode [ 165.958105][ T6867] bridge0: port 3(gretap0) entered blocking state [ 165.964632][ T6867] bridge0: port 3(gretap0) entered listening state [ 165.978597][ T6860] netlink: 'syz.0.1023': attribute type 13 has an invalid length. [ 165.998415][ T6860] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 166.094622][ T6860] loop0: detected capacity change from 0 to 512 [ 166.149451][ T6860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.196163][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.210285][ T28] audit: type=1400 audit(166.179:1623): avc: denied { read } for pid=6875 comm="syz.2.1030" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.251347][ T28] audit: type=1400 audit(166.179:1624): avc: denied { open } for pid=6875 comm="syz.2.1030" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.394850][ T6870] netlink: 'syz.3.1028': attribute type 10 has an invalid length. [ 166.426364][ T6870] netlink: 'syz.3.1028': attribute type 10 has an invalid length. [ 166.742455][ T6910] syzkaller0: entered promiscuous mode [ 166.748271][ T6910] syzkaller0: entered allmulticast mode [ 166.878807][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'. [ 166.897025][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1035'. [ 167.060863][ T6925] veth5: entered allmulticast mode [ 167.123154][ T6925] bond4: (slave veth5): Enslaving as an active interface with an up link [ 167.282121][ T6920] 8021q: adding VLAN 0 to HW filter on device bond5 [ 167.581198][ T6920] bond5 (unregistering): Released all slaves [ 167.601336][ T6918] bond4 (unregistering): (slave veth5): Releasing backup interface [ 167.613524][ T6918] bond4 (unregistering): Released all slaves [ 167.624236][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 168.075145][ T6972] loop1: detected capacity change from 0 to 1024 [ 168.153334][ T6972] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.274398][ T6972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.332592][ T6972] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.471599][ T6972] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.1038: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 168.505978][ T6972] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.508107][ T6972] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1038: couldn't read orphan inode 11 (err -117) [ 168.519507][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 168.519537][ C1] EXT4-fs (loop1): initial error at time 168: ext4_ext_check_inode:521: inode 11 [ 168.519985][ C1] EXT4-fs (loop1): last error at time 168: ext4_ext_check_inode:521: inode 11 [ 168.565552][ T6972] loop1: lost filesystem error report for type 5 error -117 [ 168.594977][ T6972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.679033][ T6972] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1038: Invalid block bitmap block 0 in block_group 0 [ 168.718183][ T6972] Quota error (device loop1): write_blk: dquota write failed [ 168.734240][ T6972] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 168.760403][ T6972] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1038: Failed to acquire dquot type 0 [ 168.832229][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.934893][ T6990] bridge0: port 3(gretap0) entered blocking state [ 168.950691][ T6990] bridge0: port 3(gretap0) entered disabled state [ 168.957488][ T6990] gretap0: entered allmulticast mode [ 168.963330][ T6990] gretap0: entered promiscuous mode [ 168.969518][ T6990] bridge0: port 3(gretap0) entered blocking state [ 168.976073][ T6990] bridge0: port 3(gretap0) entered forwarding state [ 169.029404][ T6985] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.220959][ T6985] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.325953][ T6985] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.448525][ T6985] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.606048][ T7010] loop1: detected capacity change from 0 to 512 [ 169.633169][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1051'. [ 169.653822][ T7010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.706938][ T7010] tmpfs: Unknown parameter 'inode31' [ 169.712956][ T7011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.725828][ T7011] bond3 (unregistering): Released all slaves [ 169.781808][ T5857] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.806624][ T5857] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.825092][ T5857] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.843525][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 169.867253][ T5857] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.008024][ T7024] netlink: 'syz.3.1055': attribute type 10 has an invalid length. [ 170.022355][ T7027] loop0: detected capacity change from 0 to 2048 [ 170.072169][ T7027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.221580][ T7031] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 170.238556][ T7031] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 23 with max blocks 1 with error 28 [ 170.255435][ T7031] EXT4-fs (loop0): This should not happen!! Data will be lost [ 170.255435][ T7031] [ 170.285662][ T7031] EXT4-fs (loop0): Total free blocks count 0 [ 170.302310][ T7031] EXT4-fs (loop0): Free/Dirty block details [ 170.320971][ T7031] EXT4-fs (loop0): free_blocks=2415919504 [ 170.338760][ T7031] EXT4-fs (loop0): dirty_blocks=32 [ 170.355846][ T7031] EXT4-fs (loop0): Block reservation details [ 170.380217][ T7031] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 170.393647][ T7027] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 24 with error 28 [ 170.449727][ T3316] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 170.506909][ T7021] loop4: detected capacity change from 0 to 1024 [ 170.532543][ T7021] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.546666][ T7021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.563582][ T7021] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.693016][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.707453][ T7021] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.1054: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 170.784945][ T7021] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 170.790827][ T7021] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1054: couldn't read orphan inode 11 (err -117) [ 170.800566][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 170.800597][ C1] EXT4-fs (loop4): initial error at time 170: ext4_ext_check_inode:521: inode 11 [ 170.800687][ C1] EXT4-fs (loop4): last error at time 170: ext4_ext_check_inode:521: inode 11 [ 170.890917][ T7021] loop4: lost filesystem error report for type 5 error -117 [ 170.922901][ T7021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.031700][ T7021] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1054: Invalid block bitmap block 0 in block_group 0 [ 171.056054][ T7049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1071'. [ 171.104703][ T7021] Quota error (device loop4): write_blk: dquota write failed [ 171.125831][ T7049] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7049 comm=syz.1.1071 [ 171.176099][ T7021] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 171.197317][ T7021] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1054: Failed to acquire dquot type 0 [ 171.250703][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.274045][ T7054] loop1: detected capacity change from 0 to 512 [ 171.330278][ T7054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.717615][ T7062] netlink: 'syz.4.1062': attribute type 13 has an invalid length. [ 171.777071][ T7062] bridge0: port 1(30{X功) entered blocking state [ 171.783845][ T7062] bridge0: port 1(30{X功) entered listening state [ 171.817301][ T7062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.840680][ T7061] loop4: detected capacity change from 0 to 512 [ 171.888026][ T7062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.930832][ T7061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.131434][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.298153][ T28] audit: type=1400 audit(172.499:1625): avc: denied { egress } for pid=7075 comm="syz.0.1077" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 173.798200][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.047674][ T7088] syzkaller0: entered promiscuous mode [ 174.053238][ T7088] syzkaller0: entered allmulticast mode [ 174.061310][ T28] audit: type=1400 audit(172.499:1626): avc: denied { sendto } for pid=7075 comm="syz.0.1077" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 174.188007][ T7090] loop1: detected capacity change from 0 to 512 [ 174.454021][ T28] audit: type=1400 audit(174.419:1627): avc: denied { create } for pid=7101 comm="syz.4.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.213570][ T7122] netlink: 'syz.4.1078': attribute type 13 has an invalid length. [ 176.226645][ T7122] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 176.257271][ T7122] loop4: detected capacity change from 0 to 512 [ 176.288255][ T7122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.315154][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.602858][ T28] audit: type=1400 audit(176.569:1628): avc: denied { ioctl } for pid=7136 comm="syz.2.1082" path="socket:[23080]" dev="sockfs" ino=23080 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 176.771599][ T7143] syzkaller0: entered promiscuous mode [ 176.778053][ T7143] syzkaller0: entered allmulticast mode [ 177.817336][ T7153] loop0: detected capacity change from 0 to 512 [ 177.906107][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 178.639958][ T7159] loop4: detected capacity change from 0 to 512 [ 178.887173][ T7159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.905640][ T7187] loop2: detected capacity change from 0 to 164 [ 179.813544][ T7187] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=82 [ 179.887387][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.015525][ T7196] syzkaller0: entered promiscuous mode [ 180.024575][ T7196] syzkaller0: entered allmulticast mode [ 180.139496][ T7199] infiniband syz0: set down [ 180.149545][ T7199] infiniband syz0: added ipvlan0 [ 180.226996][ T7199] RDS/IB: syz0: added [ 180.231123][ T7199] smc: adding ib device syz0 with port count 1 [ 180.240248][ T7199] smc: ib device syz0 port 1 has no pnetid [ 180.403321][ T35] IPVS: starting estimator thread 0... [ 180.413387][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 180.446299][ T28] audit: type=1400 audit(180.409:1629): avc: denied { setopt } for pid=7216 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.506086][ T7218] IPVS: using max 2112 ests per chain, 105600 per kthread [ 180.536690][ T7221] gretap0: left allmulticast mode [ 180.549303][ T7221] gretap0: left promiscuous mode [ 180.559983][ T7221] bridge0: port 3(gretap0) entered disabled state [ 180.604654][ T7221] bridge_slave_0: left allmulticast mode [ 180.611248][ T7221] bridge_slave_0: left promiscuous mode [ 180.618408][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.629180][ T7221] bridge_slave_1: left allmulticast mode [ 180.634912][ T7221] bridge_slave_1: left promiscuous mode [ 180.641351][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 180.651563][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.661979][ T7221] bond0: (slave bond_slave_0): Releasing backup interface [ 180.681147][ T7221] bond0: (slave bond_slave_1): Releasing backup interface [ 180.708296][ T7221] team0: Port device team_slave_0 removed [ 180.726398][ T7221] team0: Port device team_slave_1 removed [ 180.738805][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.756160][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.773044][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.787663][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.806092][ T7221] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.852073][ T7222] team0: Mode changed to "loadbalance" [ 184.108236][ T7269] syzkaller0: entered promiscuous mode [ 184.113885][ T7269] syzkaller0: entered allmulticast mode [ 184.158623][ T7274] loop2: detected capacity change from 0 to 512 [ 184.178740][ T7274] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 185.590364][ T7366] syzkaller0: entered promiscuous mode [ 185.601332][ T7366] syzkaller0: entered allmulticast mode [ 185.673097][ T7366] 0: reclassify loop, rule prio 0, protocol 800 [ 186.330135][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 186.523779][ T7388] loop1: detected capacity change from 0 to 512 [ 186.558172][ T7388] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.571796][ T28] audit: type=1400 audit(186.519:1630): avc: denied { accept } for pid=7385 comm="syz.2.1130" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 187.069425][ T3322] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 187.235293][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 187.242529][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 187.983301][ T7404] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.258378][ T7404] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.735027][ T7404] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.819263][ T7404] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.300495][ T5867] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.334688][ T5867] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.383023][ T5863] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.568274][ T5863] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.608168][ T7482] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1151'. [ 189.627077][ T7482] hsr_slave_0: left promiscuous mode [ 189.658684][ T7482] hsr_slave_1: left promiscuous mode [ 190.199895][ T7489] loop2: detected capacity change from 0 to 2048 [ 190.256718][ T7489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.361395][ T7497] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 190.397881][ T7499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1145'. [ 190.513364][ T7504] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 190.539366][ T7504] syzkaller0: entered promiscuous mode [ 190.558158][ T7504] syzkaller0: entered allmulticast mode [ 190.954107][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.600266][ T7533] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1156'. [ 192.613580][ T28] audit: type=1400 audit(192.569:1631): avc: denied { nlmsg_read } for pid=7532 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.668948][ T7531] loop1: detected capacity change from 0 to 512 [ 192.699675][ T28] audit: type=1400 audit(192.629:1632): avc: denied { ioctl } for pid=7532 comm="syz.0.1156" path="socket:[23454]" dev="sockfs" ino=23454 ioctlcmd=0x6e83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.767095][ T7531] EXT4-fs (loop1): 1 truncate cleaned up [ 192.779874][ T7531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.892706][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.379002][ T7545] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 193.493972][ T7547] loop1: detected capacity change from 0 to 2048 [ 193.997852][ T7547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.620206][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.620826][ T7541] loop2: detected capacity change from 0 to 512 [ 194.933510][ T7541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.119292][ T7592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7592 comm=syz.1.1187 [ 195.276354][ T7596] loop0: detected capacity change from 0 to 1024 [ 195.319370][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.341311][ T7596] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 195.414666][ T7602] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 195.507054][ T7602] bond5: entered promiscuous mode [ 195.516745][ T7602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.562770][ T7602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.581797][ T7602] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 195.657915][ T7602] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 195.688041][ T7602] bond5: (slave gre1): making interface the new active one [ 195.720727][ T7602] gre1: entered promiscuous mode [ 195.793104][ T7602] bond5: (slave gre1): Enslaving as an active interface with an up link [ 195.937411][ T7617] loop2: detected capacity change from 0 to 1024 [ 196.017148][ T7617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.094179][ T28] audit: type=1400 audit(196.039:1633): avc: denied { associate } for pid=7623 comm="syz.1.1185" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 196.195277][ C0] bridge0: port 3(gretap0) entered learning state [ 196.384315][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1193'. [ 196.629275][ T7642] netlink: 'syz.1.1205': attribute type 39 has an invalid length. [ 196.683988][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.833834][ T7642] syz_tun (unregistering): left allmulticast mode [ 198.721334][ T7653] loop2: detected capacity change from 0 to 8192 [ 198.818372][ T7653] loop2: p3 p4 < > [ 198.829832][ T7653] loop2: p3 size 83886080 extends beyond EOD, truncated [ 199.160250][ T7678] netlink: 'syz.3.1207': attribute type 5 has an invalid length. [ 199.471559][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1212'. [ 200.282820][ T7710] loop2: detected capacity change from 0 to 8192 [ 200.347964][ T28] audit: type=1400 audit(200.319:1634): avc: denied { write } for pid=7717 comm="syz.0.1218" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 200.422670][ T7720] ================================================================== [ 200.430902][ T7720] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 200.438075][ T7720] [ 200.440423][ T7720] write to 0xffff88814af032d4 of 2 bytes by task 7710 on cpu 1: [ 200.448078][ T7720] fat16_ent_put+0x28/0x60 [ 200.452531][ T7720] fat_alloc_clusters+0x57b/0xc50 [ 200.457599][ T7720] fat_get_block+0x25e/0x5f0 [ 200.462237][ T7720] __block_write_begin_int+0x400/0xf90 [ 200.467743][ T7720] cont_write_begin+0x5fe/0x970 [ 200.472670][ T7720] fat_write_begin+0x52/0xe0 [ 200.477306][ T7720] generic_perform_write+0x183/0x490 [ 200.482675][ T7720] __generic_file_write_iter+0x9e/0x120 [ 200.488278][ T7720] generic_file_write_iter+0x8d/0x310 [ 200.493693][ T7720] vfs_write+0x5a6/0x9f0 [ 200.497981][ T7720] ksys_write+0xdc/0x1a0 [ 200.502273][ T7720] __x64_sys_write+0x40/0x50 [ 200.506912][ T7720] x64_sys_call+0x27e1/0x3020 [ 200.511639][ T7720] do_syscall_64+0x12c/0x3b0 [ 200.516279][ T7720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.522201][ T7720] [ 200.524544][ T7720] read to 0xffff88814af03200 of 512 bytes by task 7720 on cpu 0: [ 200.532273][ T7720] fat_mirror_bhs+0x1df/0x330 [ 200.536992][ T7720] fat_ent_write+0xd0/0xe0 [ 200.537024][ T7720] fat_chain_add+0x172/0x490 [ 200.546059][ T7720] fat_get_block+0x475/0x5f0 [ 200.546094][ T7720] __block_write_begin_int+0x400/0xf90 [ 200.546129][ T7720] cont_write_begin+0x5fe/0x970 [ 200.546163][ T7720] fat_write_begin+0x52/0xe0 [ 200.546196][ T7720] cont_write_begin+0x1b0/0x970 [ 200.546221][ T7720] fat_write_begin+0x52/0xe0 [ 200.546253][ T7720] generic_perform_write+0x183/0x490 [ 200.546284][ T7720] __generic_file_write_iter+0x9e/0x120 [ 200.546316][ T7720] generic_file_write_iter+0x8d/0x310 [ 200.546346][ T7720] do_iter_readv_writev+0x4fd/0x5a0 [ 200.546385][ T7720] vfs_writev+0x2e1/0x900 [ 200.546406][ T7720] __se_sys_pwritev2+0xfc/0x1c0 [ 200.546430][ T7720] __x64_sys_pwritev2+0x67/0x80 [ 200.546453][ T7720] x64_sys_call+0xe07/0x3020 [ 200.615541][ T7720] do_syscall_64+0x12c/0x3b0 [ 200.620173][ T7720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.626104][ T7720] [ 200.628447][ T7720] Reported by Kernel Concurrency Sanitizer on: [ 200.634637][ T7720] CPU: 0 UID: 0 PID: 7720 Comm: syz.2.1214 Not tainted syzkaller #0 PREEMPT(full) [ 200.643962][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 200.654052][ T7720] ================================================================== [ 201.955371][ C1] bridge0: port 1(30{X功) entered learning state