last executing test programs: 7m47.557757259s ago: executing program 32 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2c, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 7m23.14756448s ago: executing program 33 (id=1623): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xe, 0x2, 0x9}}]}, 0x38}}, 0x4000010) 6m37.719904869s ago: executing program 34 (id=3220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc6}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x24008000) 6m37.576444254s ago: executing program 35 (id=3237): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x67]}}]}) 5m45.31974268s ago: executing program 36 (id=5060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000a840}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001208000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 5m17.818320471s ago: executing program 37 (id=5510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x14) 2m59.816682499s ago: executing program 38 (id=8950): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 2m40.705191231s ago: executing program 39 (id=9097): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000080, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1m45.567390296s ago: executing program 4 (id=10913): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x107000488) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x50, 0x0, &(0x7f0000000180)) 1m45.545328327s ago: executing program 4 (id=10914): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x6) 1m45.276365386s ago: executing program 4 (id=10919): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x2048dc, &(0x7f0000000740)=ANY=[], 0x1, 0x343, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x40) fsync(r0) 1m45.226269078s ago: executing program 4 (id=10921): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) 1m45.007841715s ago: executing program 4 (id=10924): io_setup(0x800, &(0x7f0000000440)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x4f}]) io_pgetevents(r0, 0x5, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f00000000c0)={[0x3]}, 0x8}) 1m44.783100072s ago: executing program 4 (id=10927): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) 1m44.741340924s ago: executing program 40 (id=10927): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) 1m30.763811616s ago: executing program 9 (id=11275): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x10000}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) 1m30.688283069s ago: executing program 9 (id=11277): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x0, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'wg1\x00', {}, {0xff}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x4, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) 1m30.64795917s ago: executing program 9 (id=11279): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="800000", @ANYRES16, @ANYBLOB="01002cbd7000fcdbdf2501000000140002007767300000000000000000000000000058000880540000800400098024000100f44da367a88ee6564f020211456727081f0aeb"], 0x80}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tw'], 0x3d) 1m30.620943471s ago: executing program 9 (id=11281): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 1m30.552103504s ago: executing program 9 (id=11284): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5707}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) 1m30.376156909s ago: executing program 9 (id=11292): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x4, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) 1m30.331044391s ago: executing program 41 (id=11292): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x4, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) 1m17.06948587s ago: executing program 6 (id=11596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) 1m16.964124253s ago: executing program 6 (id=11597): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000200000002c00128009000100626f6e64000000001c000280050001"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m16.860453326s ago: executing program 6 (id=11601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x30, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1m16.783576789s ago: executing program 6 (id=11604): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m16.735530231s ago: executing program 6 (id=11605): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 1m16.100236032s ago: executing program 6 (id=11622): syz_clone3(0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0)="fd8293603ec84084d47db52c629d29e6c24d87caa48fb2a710c717e3a23bca88604272", 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000180)=""/187, 0xbb, 0x0, &(0x7f0000000240)=""/205, 0xcd}}, 0x10) r0 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 1m16.069543772s ago: executing program 42 (id=11622): syz_clone3(0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0)="fd8293603ec84084d47db52c629d29e6c24d87caa48fb2a710c717e3a23bca88604272", 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000180)=""/187, 0xbb, 0x0, &(0x7f0000000240)=""/205, 0xcd}}, 0x10) r0 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 1m12.82436894s ago: executing program 1 (id=11695): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000050) socket$inet_udp(0x2, 0x2, 0x0) 1m12.742082693s ago: executing program 1 (id=11697): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) poll(&(0x7f0000009b00)=[{}], 0x20, 0x72) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m11.554432642s ago: executing program 1 (id=11729): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) setresuid(0x0, 0xee00, 0x0) r0 = io_uring_setup(0x4b63, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x10000, 0x0, 0x3cf}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m11.469561625s ago: executing program 1 (id=11730): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m11.419697427s ago: executing program 1 (id=11734): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x10}, @in=@local, 0x0, 0x8, 0x4e23, 0x0, 0x2}, {0x0, 0x100000000, 0xfffffffffffffffd, 0x2, 0xfffffffffffffff6, 0x2000000, 0x2, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x2b}, 0x2, @in=@loopback, 0x3504, 0x4, 0x3, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 1m11.212340203s ago: executing program 1 (id=11736): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x409, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m11.171175595s ago: executing program 43 (id=11736): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x409, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 44.651812592s ago: executing program 3 (id=12474): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x90\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) 44.619169874s ago: executing program 3 (id=12475): socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x92, 0x0) 44.575103285s ago: executing program 3 (id=12476): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x78, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5241}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 44.531504627s ago: executing program 3 (id=12477): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 44.491412668s ago: executing program 3 (id=12479): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 44.051910112s ago: executing program 3 (id=12498): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.051741132s ago: executing program 44 (id=12498): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.262661499s ago: executing program 5 (id=13531): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) 906.103491ms ago: executing program 5 (id=13544): open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") 567.425451ms ago: executing program 0 (id=13556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r2, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x0) 549.477962ms ago: executing program 2 (id=13557): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x420000000000d07, 0xc0}, 0x100b2a, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x703d2f, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20013, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x8000002) 529.863193ms ago: executing program 8 (id=13558): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) 523.753653ms ago: executing program 0 (id=13559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="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"}}}, 0xfce) 510.532754ms ago: executing program 7 (id=13560): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x403c0, 0x10b) 490.229204ms ago: executing program 8 (id=13561): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000440)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x2, r1, 0x0}]) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) 466.502915ms ago: executing program 7 (id=13562): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @broadcast}, {0x0, @random="9705000000e8"}, 0x48, {0x2, 0x0, @broadcast}}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) 440.022626ms ago: executing program 2 (id=13563): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73229c52bbea23870200000079d3c7a519afc7d2dff1cc9fe1b9bd41c5d0b4f2d04979d68cc3471637e69740313dd0f31448193bd26131968d5f790e1429b24ba0", 0x6e}], 0x1}, 0x20048020) 417.622887ms ago: executing program 7 (id=13564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x4e20, 0x0, @remote, 0x1000}, 0x1c) r1 = dup(r0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 405.154997ms ago: executing program 0 (id=13566): socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 353.445169ms ago: executing program 5 (id=13567): r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0xff, 0x8000, 0x400}, 0x10) 353.230089ms ago: executing program 5 (id=13568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 353.108199ms ago: executing program 7 (id=13569): io_setup(0x400, &(0x7f0000000000)=0x0) io_destroy(r0) io_destroy(r0) io_setup(0x3, &(0x7f00000000c0)) io_destroy(r0) 258.639902ms ago: executing program 0 (id=13570): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000140007800800114000000000050015000c0db7490500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) 258.159552ms ago: executing program 8 (id=13571): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000005000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f"], 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000500040000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 244.203833ms ago: executing program 8 (id=13572): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 186.091224ms ago: executing program 5 (id=13573): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 185.835295ms ago: executing program 0 (id=13574): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x6, 0x1, 0x0, &(0x7f0000000080)=0x79) 185.631654ms ago: executing program 5 (id=13575): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close_range(r0, r0, 0x2) epoll_create1(0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 185.110864ms ago: executing program 2 (id=13576): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) 161.001325ms ago: executing program 2 (id=13577): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sched_setscheduler(0x0, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x30}, 0x40040c0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 160.077856ms ago: executing program 0 (id=13578): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000b00)) 151.475015ms ago: executing program 7 (id=13579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xffdd) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffff7ffffd, 0x0, 0x0, 0x403, 0x0, 0x2, 0x0, 0x4}) 151.112236ms ago: executing program 8 (id=13580): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x6) 129.967316ms ago: executing program 2 (id=13581): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 42.885539ms ago: executing program 7 (id=13582): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x80800) 42.434089ms ago: executing program 2 (id=13583): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 0s ago: executing program 8 (id=13584): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d530100000000008404000000000000737200000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}}, 0x8004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): eport for type 5 error -117 [ 448.650257][ T443] EXT4-fs error (device loop3): ext4_evict_inode:265: inode #11: comm syz.3.11783: mark_inode_dirty error [ 448.676607][ T443] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 448.676775][ T443] EXT4-fs warning (device loop3): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 448.697142][ T443] EXT4-fs (loop3): 1 orphan inode deleted [ 448.703454][ T443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.717574][ T314] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 448.776966][ T314] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:6: Failed to release dquot type 0 [ 448.835624][T31128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.852433][T31128] EXT4-fs error (device loop3): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 448.889945][T31128] loop3: lost filesystem error report for type 5 error -117 [ 448.890282][T31128] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 448.892722][T32720] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 448.917189][T31128] loop3: lost filesystem error report for type 5 error -117 [ 448.917345][T31128] EXT4-fs error (device loop3): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 448.938530][T32720] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 448.968467][T32720] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 448.979415][T32720] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 449.011972][T31128] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 449.085125][T32720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.147030][T32720] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.262434][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.269710][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.310395][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.317539][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.412297][ T514] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 449.572704][T32720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.921657][T32720] veth0_vlan: entered promiscuous mode [ 449.928075][ T580] sctp: [Deprecated]: syz.3.11807 (pid 580) Use of int in max_burst socket option. [ 449.928075][ T580] Use struct sctp_assoc_value instead [ 449.953833][T32720] veth1_vlan: entered promiscuous mode [ 449.984496][T32720] veth0_macvtap: entered promiscuous mode [ 450.022581][T32720] veth1_macvtap: entered promiscuous mode [ 450.083580][T32720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.129973][T32720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.188674][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.198567][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.229450][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.250365][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.271217][ T608] lo speed is unknown, defaulting to 1000 [ 450.841056][ T697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11836'. [ 450.859695][ T697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11836'. [ 450.860053][ T693] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11835'. [ 451.328151][ T748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11849'. [ 451.353005][ T748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11849'. [ 451.397476][ T757] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.461710][ T766] loop3: detected capacity change from 0 to 128 [ 452.007126][ T841] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11867'. [ 452.035471][ T841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11867'. [ 452.056877][ T841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11867'. [ 452.143187][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 452.143272][ T28] audit: type=1400 audit(2000000176.793:15246): avc: denied { compute_member } for pid=861 comm="syz.0.11872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 452.190668][ T28] audit: type=1326 audit(2000000176.843:15247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.3.11875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a347bc819 code=0x7ffc0000 [ 452.223732][ T28] audit: type=1326 audit(2000000176.843:15248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.3.11875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a347bc819 code=0x7ffc0000 [ 452.248198][ T28] audit: type=1326 audit(2000000176.843:15249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.3.11875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a347bc819 code=0x7ffc0000 [ 452.308328][ T28] audit: type=1326 audit(2000000176.843:15250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.3.11875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a347bc819 code=0x7ffc0000 [ 452.349159][ T28] audit: type=1326 audit(2000000176.843:15251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.3.11875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a347bc819 code=0x7ffc0000 [ 452.403996][ T28] audit: type=1326 audit(2000000176.843:15252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.3.11875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f8a347bc819 code=0x7ffc0000 [ 452.484164][ T28] audit: type=1326 audit(2000000176.843:15253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.3.11875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a347bc819 code=0x7ffc0000 [ 452.526705][ T28] audit: type=1326 audit(2000000176.843:15254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.3.11875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8a347bc819 code=0x7ffc0000 [ 452.570730][ T28] audit: type=1326 audit(2000000176.843:15255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=869 comm="syz.3.11875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a347bc819 code=0x7ffc0000 [ 452.887908][ T757] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.903290][ T954] bond_slave_0: entered promiscuous mode [ 452.909113][ T954] bond_slave_1: entered promiscuous mode [ 452.915435][ T954] macvlan0: entered promiscuous mode [ 452.920970][ T954] bond0: entered promiscuous mode [ 452.927783][ T954] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 452.947069][ T954] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 452.950055][ T957] loop3: detected capacity change from 0 to 2048 [ 452.957403][ T954] bond0: left promiscuous mode [ 452.970060][ T954] bond_slave_0: left promiscuous mode [ 452.975660][ T954] bond_slave_1: left promiscuous mode [ 452.988558][ T957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.004180][ T957] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.186463][ T757] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.240489][T31128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.254293][ T757] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.303843][ T50] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.322100][ T50] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.339724][ T50] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.363365][ T50] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.417436][ T988] netlink: 92 bytes leftover after parsing attributes in process `syz.5.11912'. [ 453.523630][ T996] loop3: detected capacity change from 0 to 164 [ 453.533366][ T996] rock: directory entry would overflow storage [ 453.552257][ T996] rock: sig=0x5252, size=5, remaining=3 [ 453.766939][ T1019] loop7: detected capacity change from 0 to 8192 [ 453.797054][ T1019] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 453.804745][ T1019] FAT-fs (loop7): Filesystem has been set read-only [ 454.187083][ T1057] loop3: detected capacity change from 0 to 512 [ 454.204142][ T1057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 454.239811][ T1057] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.11943: iget: bad i_size value: 38620345925642 [ 454.268723][ T1057] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 454.268906][ T1057] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.11943: couldn't read orphan inode 15 (err -117) [ 454.278476][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 454.278501][ C1] EXT4-fs (loop3): initial error at time 2000000178: ext4_orphan_get:1397: inode 15 [ 454.278537][ C1] EXT4-fs (loop3): last error at time 2000000178: ext4_orphan_get:1397: inode 15 [ 454.316572][ T1057] loop3: lost filesystem error report for type 5 error -117 [ 454.318355][ T1057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.410102][T31128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.479439][ T1083] loop7: detected capacity change from 0 to 512 [ 454.501696][ T1083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.607518][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.629608][ T1094] netlink: 'syz.7.11959': attribute type 29 has an invalid length. [ 454.639750][ T1094] netlink: 'syz.7.11959': attribute type 29 has an invalid length. [ 454.650468][ T1094] netlink: 500 bytes leftover after parsing attributes in process `syz.7.11959'. [ 454.794839][ T1106] loop5: detected capacity change from 0 to 512 [ 454.816751][ T1106] EXT4-fs: Ignoring removed oldalloc option [ 454.832380][ T1106] EXT4-fs (loop5): 1 truncate cleaned up [ 454.845267][ T1106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.899439][ T1110] loop7: detected capacity change from 0 to 512 [ 454.927447][T32720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.985141][ T1110] EXT4-fs: test_dummy_encryption option not supported [ 455.020141][ T1110] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 456.040318][ T1214] loop5: detected capacity change from 0 to 128 [ 456.060989][ T1214] syz.5.11995: attempt to access beyond end of device [ 456.060989][ T1214] loop5: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 456.075795][ T1214] syz.5.11995: attempt to access beyond end of device [ 456.075795][ T1214] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 456.090876][ T1214] buffer_io_error: 18 callbacks suppressed [ 456.090892][ T1214] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 456.108337][ T1214] syz.5.11995: attempt to access beyond end of device [ 456.108337][ T1214] loop5: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 456.124135][ T1214] syz.5.11995: attempt to access beyond end of device [ 456.124135][ T1214] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 456.139118][ T1214] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 456.150094][ T1219] syz.5.11995: attempt to access beyond end of device [ 456.150094][ T1219] loop5: rw=2049, sector=186, nr_sectors = 64 limit=128 [ 456.164448][ T1219] syz.5.11995: attempt to access beyond end of device [ 456.164448][ T1219] loop5: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 456.178733][ T1219] syz.5.11995: attempt to access beyond end of device [ 456.178733][ T1219] loop5: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 456.276598][ T1232] __nla_validate_parse: 2 callbacks suppressed [ 456.276673][ T1232] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12002'. [ 456.293307][ T1234] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 456.309163][ T1232] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12002'. [ 456.379693][ T1244] netlink: 'syz.7.12007': attribute type 21 has an invalid length. [ 456.388442][ T1244] netlink: 156 bytes leftover after parsing attributes in process `syz.7.12007'. [ 456.563353][T20983] lo speed is unknown, defaulting to 1000 [ 456.589515][ T1271] loop3: detected capacity change from 0 to 1024 [ 456.596420][ T1271] EXT4-fs: Ignoring removed bh option [ 456.607416][ T1271] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 456.620426][ T1271] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 456.629352][ T1271] System zones: 0-1, 3-12 [ 456.636618][ T1271] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #3: block 1: comm syz.3.12018: lblock 1 mapped to illegal pblock 1 (length 1) [ 456.651030][ T1271] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 456.651712][ T1271] EXT4-fs (loop3): Remounting filesystem read-only [ 456.660804][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 456.660824][ C0] EXT4-fs (loop3): initial error at time 2000000181: ext4_map_blocks:828: inode 3: block 1 [ 456.660855][ C0] EXT4-fs (loop3): last error at time 2000000181: ext4_map_blocks:828: inode 3: block 1 [ 456.694618][ T1271] EXT4-fs (loop3): 1 orphan inode deleted [ 456.700868][ T1271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.721048][ T1284] syzkaller1: entered promiscuous mode [ 456.737731][T31128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.738573][ T1284] syzkaller1: entered allmulticast mode [ 456.830628][ T1300] loop3: detected capacity change from 0 to 512 [ 456.909066][ T1300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.939850][ T1300] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.997502][ T1324] loop7: detected capacity change from 0 to 1024 [ 457.018730][ T1324] EXT4-fs: Ignoring removed bh option [ 457.028291][ T1324] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 457.049521][T31128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.063457][ T1324] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 457.074310][ T1324] System zones: 0-1, 3-12 [ 457.081316][ T1324] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #3: block 1: comm syz.7.12032: lblock 1 mapped to illegal pblock 1 (length 1) [ 457.103598][ T1324] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 457.103795][ T1324] EXT4-fs (loop7): Remounting filesystem read-only [ 457.113236][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 457.113278][ C0] EXT4-fs (loop7): initial error at time 2000000181: ext4_map_blocks:828: inode 3: block 1 [ 457.113325][ C0] EXT4-fs (loop7): last error at time 2000000181: ext4_map_blocks:828: inode 3: block 1 [ 457.148523][ T1324] __quota_error: 491 callbacks suppressed [ 457.148542][ T1324] Quota error (device loop7): write_blk: dquota write failed [ 457.162696][ T1324] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 457.173033][ T1324] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 457.182266][ T1324] EXT4-fs (loop7): 1 orphan inode deleted [ 457.188995][ T1324] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.224958][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.310350][ T1352] loop7: detected capacity change from 0 to 2048 [ 457.390665][ T1352] Alternate GPT is invalid, using primary GPT. [ 457.397310][ T1352] loop7: p2 p3 p7 [ 457.426816][ T28] audit: type=1326 audit(2000000182.083:15744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.0.12043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f1e1c819 code=0x7ffc0000 [ 457.456276][ T28] audit: type=1326 audit(2000000182.103:15745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.0.12043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f63f1e1c819 code=0x7ffc0000 [ 457.485009][ T28] audit: type=1326 audit(2000000182.103:15746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.0.12043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f1e1c819 code=0x7ffc0000 [ 457.509621][ T28] audit: type=1326 audit(2000000182.103:15747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.0.12043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f1e1c819 code=0x7ffc0000 [ 457.541185][T30924] udevd[30924]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 457.545191][T24873] udevd[24873]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 457.563090][T24765] udevd[24765]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 457.639693][ T1368] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12047'. [ 457.706550][ T28] audit: type=1326 audit(2000000182.353:15748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.5.12048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2c36c819 code=0x7ffc0000 [ 457.783965][ T28] audit: type=1326 audit(2000000182.353:15749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.5.12048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2c36c819 code=0x7ffc0000 [ 457.851107][ T28] audit: type=1326 audit(2000000182.363:15750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.5.12048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8a2c36c819 code=0x7ffc0000 [ 458.092679][ T1390] ref_ctr_offset mismatch. inode: 0x2a69 offset: 0x0 ref_ctr_offset(old): 0x44 ref_ctr_offset(new): 0x0 [ 458.336375][ T1396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.360996][ T1396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.195799][ T38] Bluetooth: hci0: Frame reassembly failed (-84) [ 459.375144][ T1487] loop5: detected capacity change from 0 to 1024 [ 459.418606][ T1487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.441304][ T1487] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.477380][T32720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 459.589323][ T1509] syzkaller1: entered promiscuous mode [ 459.594837][ T1509] syzkaller1: entered allmulticast mode [ 459.872165][ T1533] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12117'. [ 459.883493][ T314] Bluetooth: hci1: Frame reassembly failed (-84) [ 459.971688][ T1552] 9p: Bad value for 'rfdno' [ 459.988219][ T1554] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 460.004601][ T1554] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 460.212695][ T1575] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 460.247299][ T1575] bond2 (unregistering): Released all slaves [ 460.296300][ T1582] loop7: detected capacity change from 0 to 512 [ 460.306954][ T1582] EXT4-fs: Ignoring removed oldalloc option [ 460.333101][ T1582] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 460.360419][ T1582] EXT4-fs (loop7): 1 truncate cleaned up [ 460.367186][ T1582] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.395696][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.497294][ T1590] loop7: detected capacity change from 0 to 512 [ 460.516791][ T1590] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 460.529885][ T1590] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 460.541719][ T1590] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.12137: Corrupt directory, running e2fsck is recommended [ 460.571549][ T1590] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 460.579759][ T1590] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.12137: corrupted in-inode xattr: invalid ea_ino [ 460.593626][ T1590] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 460.594041][ T1590] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.12137: couldn't read orphan inode 15 (err -117) [ 460.603209][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 460.603233][ C1] EXT4-fs (loop7): initial error at time 2000000185: ext4_iget_extra_inode:5040: inode 15 [ 460.603286][ C1] EXT4-fs (loop7): last error at time 2000000185: ext4_iget_extra_inode:5040: inode 15 [ 460.642573][ T1590] loop7: lost filesystem error report for type 5 error -117 [ 460.643286][ T1590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.686755][ T1590] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #2: comm syz.7.12137: corrupted xattr block 255: invalid header [ 460.700732][ T1590] SELinux: (dev loop7, type ext4) getxattr errno 117 [ 460.708648][ T1590] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.771697][ T1590] loop7: detected capacity change from 0 to 512 [ 460.801106][ T1590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.816874][ T1590] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 460.871644][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.068932][ T1630] netlink: 'syz.8.12155': attribute type 1 has an invalid length. [ 461.141005][ T1641] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12160'. [ 461.197028][T23049] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 461.203270][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 461.302607][ T38] Bluetooth: hci0: Frame reassembly failed (-84) [ 461.918524][ T3531] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 461.935931][ T1678] loop3: detected capacity change from 0 to 2368 [ 461.972553][ T1678] iso9660: Unknown parameter 'ŠXðÓ-¥¤ô' [ 462.276058][ T1693] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12184'. [ 462.289873][ T1693] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12184'. [ 462.446561][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 462.446581][ T28] audit: type=1326 audit(2000000187.073:15762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1698 comm="syz.5.12187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a2c36c819 code=0x0 [ 462.496741][ T1701] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12188'. [ 462.496789][ T1701] bridge_slave_1: entered promiscuous mode [ 462.497232][ T1701] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12188'. [ 463.254713][ T1730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12200'. [ 463.344139][ T1736] netlink: 35284 bytes leftover after parsing attributes in process `syz.8.12202'. [ 463.356536][T23049] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 463.362750][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 463.405448][ T1736] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12202'. [ 463.660708][ T1768] loop5: detected capacity change from 0 to 512 [ 463.687057][ T1768] EXT4-fs: Ignoring removed nobh option [ 463.715659][ T1768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.765587][ T1768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.786635][ T1768] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.926004][T32720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.307931][ T28] audit: type=1400 audit(2000000188.963:15763): avc: denied { append } for pid=1819 comm="syz.3.12223" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 464.697610][ T1862] loop3: detected capacity change from 0 to 4096 [ 464.731522][ T1862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.849548][T31128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.387842][ T1899] xt_l2tp: unknown flags: 10 [ 465.405504][ T1901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12251'. [ 465.439439][ T1901] vlan2: entered allmulticast mode [ 465.444605][ T1901] dummy0: entered allmulticast mode [ 465.467775][ T1901] bridge0: port 3(vlan2) entered blocking state [ 465.486968][ T1901] bridge0: port 3(vlan2) entered disabled state [ 465.507459][ T1901] vlan2: entered promiscuous mode [ 465.519263][ T1901] dummy0: entered promiscuous mode [ 465.580767][ T1915] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12259'. [ 465.871431][ T28] audit: type=1400 audit(2000000190.523:15764): avc: denied { read } for pid=1951 comm="syz.3.12276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 465.903712][ T1956] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 465.921971][ T28] audit: type=1400 audit(2000000190.573:15765): avc: denied { ioctl } for pid=1951 comm="syz.3.12276" path="socket:[100979]" dev="sockfs" ino=100979 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 465.997499][ T1961] vlan2: entered allmulticast mode [ 466.004521][ T1961] bridge0: entered allmulticast mode [ 466.011724][ T1961] bridge0: port 3(vlan2) entered blocking state [ 466.018863][ T28] audit: type=1326 audit(2000000190.663:15766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz.8.12282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 466.042886][ T1961] bridge0: port 3(vlan2) entered disabled state [ 466.050981][ T28] audit: type=1326 audit(2000000190.663:15767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz.8.12282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 466.095606][ T28] audit: type=1326 audit(2000000190.693:15768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz.8.12282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 466.121980][ T28] audit: type=1326 audit(2000000190.703:15769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz.8.12282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 466.128098][ T1969] lo: entered allmulticast mode [ 466.175142][ T28] audit: type=1326 audit(2000000190.703:15770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz.8.12282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 466.199755][ T28] audit: type=1326 audit(2000000190.703:15771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz.8.12282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 466.242463][ T1973] 9pnet: p9_errstr2errno: server reported unknown error  [ 466.246738][ T1969] lo: left allmulticast mode [ 466.325780][ T1977] syzkaller1: entered promiscuous mode [ 466.334553][ T1983] loop5: detected capacity change from 0 to 512 [ 466.344045][ T1981] loop3: detected capacity change from 0 to 1024 [ 466.350555][ T1977] syzkaller1: entered allmulticast mode [ 466.359194][ T1981] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 466.373701][ T1983] EXT4-fs: Ignoring removed oldalloc option [ 466.388126][ T1981] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 466.406637][ T1983] EXT4-fs error (device loop5): ext4_iget_extra_inode:5040: inode #15: comm syz.5.12290: corrupted in-inode xattr: invalid ea_ino [ 466.420437][ T1981] EXT4-fs (loop3): orphan cleanup on readonly fs [ 466.430669][ T1983] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 466.430845][ T1983] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.12290: couldn't read orphan inode 15 (err -117) [ 466.436820][ T1981] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.12288: Freeing blocks not in datazone - block = 0, count = 4096 [ 466.440065][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 466.452150][ T1981] loop3: lost filesystem error report for type 5 error -117 [ 466.465708][ C1] EXT4-fs (loop5): initial error at time 2000000191: ext4_iget_extra_inode:5040: inode 15 [ 466.472477][ T1981] EXT4-fs (loop3): Remounting filesystem read-only [ 466.479555][ C1] [ 466.479565][ C1] EXT4-fs (loop5): last error at time 2000000191: ext4_iget_extra_inode:5040: inode 15 [ 466.479778][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 466.479796][ C0] EXT4-fs (loop3): initial error at time 2000000191: ext4_free_blocks:6724 [ 466.479823][ C0] EXT4-fs (loop3): last error at time 2000000191: ext4_free_blocks:6724 [ 466.534005][ T1981] EXT4-fs (loop3): 1 orphan inode deleted [ 466.535123][ T1983] loop5: lost filesystem error report for type 5 error -117 [ 466.540907][ T1981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 466.540981][ T1983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.571929][ T1981] EXT4-fs (loop3): shut down requested (2) [ 466.602679][T32720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.689937][T31128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.814340][ T2024] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12308'. [ 466.845634][ T2026] loop3: detected capacity change from 0 to 2048 [ 466.889100][ T2026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.076366][T31128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.137666][ T2039] netlink: 'syz.0.12314': attribute type 30 has an invalid length. [ 467.150151][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.158779][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.170791][ T2039] netlink: 'syz.0.12314': attribute type 30 has an invalid length. [ 467.181695][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.196681][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.591909][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 467.591993][ T28] audit: type=1400 audit(2000000192.243:15851): avc: denied { getopt } for pid=2079 comm="syz.5.12331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 467.692790][ T2088] hsr0: entered allmulticast mode [ 467.708374][ T2088] hsr_slave_0: entered allmulticast mode [ 467.714306][ T2088] hsr_slave_1: entered allmulticast mode [ 467.721034][ T2088] __nla_validate_parse: 5 callbacks suppressed [ 467.721048][ T2088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12334'. [ 467.748913][ T2088] hsr_slave_0: left promiscuous mode [ 467.754796][ T2088] hsr_slave_1: left promiscuous mode [ 467.764991][ T2088] hsr0 (unregistering): left allmulticast mode [ 467.788795][ T2092] bridge_slave_0: left allmulticast mode [ 467.794733][ T2092] bridge_slave_0: left promiscuous mode [ 467.800657][ T2092] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.813865][ T2092] bridge_slave_1: left allmulticast mode [ 467.820885][ T2092] bridge_slave_1: left promiscuous mode [ 467.826773][ T2092] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.847066][ T2092] bond0: (slave bond_slave_0): Releasing backup interface [ 467.858260][ T2092] bond0: (slave bond_slave_1): Releasing backup interface [ 467.875029][ T2092] team0: Port device team_slave_0 removed [ 467.884928][ T2092] team0: Port device team_slave_1 removed [ 467.892672][ T2092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.900400][ T2092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.918473][ T2092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.926023][ T2092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.936082][ T2092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 468.165028][ T2125] lo speed is unknown, defaulting to 1000 [ 468.199182][ T2130] loop3: detected capacity change from 0 to 256 [ 468.246526][ T28] audit: type=1400 audit(2000000192.873:15852): avc: denied { watch watch_reads } for pid=2129 comm="syz.3.12355" path="/197/file0/file2" dev="loop3" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 468.290271][ T2133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12356'. [ 468.312294][ T2133] bond2: option primary_reselect: invalid value (8) [ 468.320449][ T2133] bond2 (unregistering): Released all slaves [ 468.333545][ T2136] netlink: 'syz.8.12357': attribute type 1 has an invalid length. [ 468.341775][ T2136] netlink: 'syz.8.12357': attribute type 2 has an invalid length. [ 468.350700][ T2136] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12357'. [ 468.396838][T23049] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 468.468039][ T2145] loop3: detected capacity change from 0 to 512 [ 468.474818][ T2145] EXT4-fs: Ignoring removed oldalloc option [ 468.503284][ T2145] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.12362: corrupted in-inode xattr: invalid ea_ino [ 468.539789][ T2145] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 468.546503][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 468.562244][ C1] EXT4-fs (loop3): initial error at time 2000000193: ext4_iget_extra_inode:5040: inode 15 [ 468.562366][ T2145] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.12362: couldn't read orphan inode 15 (err -117) [ 468.572508][ C1] EXT4-fs (loop3): last error at time 2000000193: ext4_iget_extra_inode:5040: inode 15 [ 468.601671][ T2145] loop3: lost filesystem error report for type 5 error -117 [ 468.605273][ T2145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.673429][T31128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.740543][ T2168] netlink: 236 bytes leftover after parsing attributes in process `syz.8.12371'. [ 468.751742][ T2168] netlink: 236 bytes leftover after parsing attributes in process `syz.8.12371'. [ 469.003049][ T2194] netlink: 'syz.8.12384': attribute type 13 has an invalid length. [ 469.026218][ T2198] loop3: detected capacity change from 0 to 256 [ 469.040533][ T2198] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 469.052072][ T2194] erspan0: refused to change device tx_queue_len [ 469.066144][ T2194] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 469.164225][ T28] audit: type=1326 audit(2000000193.813:15853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2205 comm="syz.0.12388" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63f1e1c819 code=0x0 [ 469.240422][ T2218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2218 comm=syz.5.12393 [ 469.253384][ T2218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2218 comm=syz.5.12393 [ 469.266833][ T2218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2218 comm=syz.5.12393 [ 469.289946][ T28] audit: type=1326 audit(2000000193.933:15854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2141 comm="syz.7.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57d34c819 code=0x7fc00000 [ 469.325744][ T2218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2218 comm=syz.5.12393 [ 469.341194][ T2218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2218 comm=syz.5.12393 [ 469.354483][ T2218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2218 comm=syz.5.12393 [ 469.367837][ T2218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2218 comm=syz.5.12393 [ 469.380726][ T2218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2218 comm=syz.5.12393 [ 469.402520][ T2218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2218 comm=syz.5.12393 [ 469.420923][ T2218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2218 comm=syz.5.12393 [ 469.641694][T11300] kernel write not supported for file bpf-prog (pid: 11300 comm: kworker/1:6) [ 469.927602][ T2271] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12417'. [ 469.938229][ T2271] netlink: 'syz.8.12417': attribute type 30 has an invalid length. [ 469.951280][ T30] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.963954][ T2271] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12417'. [ 469.963996][ T30] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.976442][ T2271] netlink: 'syz.8.12417': attribute type 30 has an invalid length. [ 469.989178][ T30] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.999723][ T28] audit: type=1400 audit(2000000194.653:15855): avc: denied { setopt } for pid=2268 comm="syz.3.12416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 470.029645][ T30] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.046569][ T28] audit: type=1400 audit(2000000194.673:15856): avc: denied { write } for pid=2272 comm="syz.5.12418" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 470.105983][ T2280] lo speed is unknown, defaulting to 1000 [ 470.545621][ T2301] netlink: 32 bytes leftover after parsing attributes in process `syz.7.12428'. [ 470.619008][ T2307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12430'. [ 470.906170][ T2324] loop5: detected capacity change from 0 to 512 [ 470.925691][ T2324] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 470.939251][ T2328] lo speed is unknown, defaulting to 1000 [ 470.956735][ T2324] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 470.976487][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 470.982971][ C0] EXT4-fs (loop5): initial error at time 2000000195: mb_free_blocks:2049: inode 11: block 64 [ 470.993377][ C0] EXT4-fs (loop5): last error at time 2000000195: mb_free_blocks:2049: inode 11: block 64 [ 471.062147][ T2324] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #11: comm syz.5.12438: corrupted inode contents [ 471.086607][ T2324] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 471.086771][ T2324] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #11: comm syz.5.12438: mark_inode_dirty error [ 471.130825][ T2324] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 471.145567][ T2324] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.12438: invalid indirect mapped block 1 (level 1) [ 471.188599][ T2324] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 471.195519][ T2324] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #11: comm syz.5.12438: corrupted inode contents [ 471.267272][ T28] audit: type=1400 audit(2000000195.923:15857): avc: denied { setopt } for pid=2354 comm="syz.3.12451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 471.297654][ T2324] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 471.298723][ T2324] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 471.325137][ T2324] loop5: lost filesystem error report for type 5 error -117 [ 471.340974][ T2324] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #11: comm syz.5.12438: corrupted inode contents [ 471.400681][ T2324] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 471.400921][ T2324] EXT4-fs error (device loop5): ext4_truncate:4602: inode #11: comm syz.5.12438: mark_inode_dirty error [ 471.427260][ T2324] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 471.438311][ T2324] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 471.479561][ T2324] loop5: lost filesystem error report for type 5 error -117 [ 471.481823][ T2324] EXT4-fs (loop5): 1 truncate cleaned up [ 471.507169][ T28] audit: type=1400 audit(2000000196.153:15858): avc: denied { name_bind } for pid=2374 comm="syz.8.12462" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=tcp_socket permissive=1 [ 471.529616][ T2324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.578740][T32720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.662907][ T2385] loop5: detected capacity change from 0 to 512 [ 471.687402][ T2385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 471.780502][ T2385] System zones: 1-12 [ 471.784648][ T2385] EXT4-fs error (device loop5): ext4_iget_extra_inode:5040: inode #15: comm syz.5.12464: corrupted in-inode xattr: e_value size too large [ 471.876521][ T2385] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 471.886493][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 471.902123][ C0] EXT4-fs (loop5): initial error at time 2000000196: ext4_iget_extra_inode:5040: inode 15 [ 471.903620][ T28] audit: type=1326 audit(2000000196.543:15859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2391 comm="syz.7.12468" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd57d34c819 code=0x0 [ 471.912076][ C0] EXT4-fs (loop5): last error at time 2000000196: ext4_iget_extra_inode:5040: inode 15 [ 471.945269][ T2385] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.12464: couldn't read orphan inode 15 (err -117) [ 471.986636][ T2385] loop5: lost filesystem error report for type 5 error -117 [ 471.996913][ T2385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.046355][ T28] audit: type=1400 audit(2000000196.693:15860): avc: denied { unlink } for pid=2384 comm="syz.5.12464" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 472.181743][T32720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.411245][ T2411] netlink: 'syz.3.12476': attribute type 34 has an invalid length. [ 472.561153][ T2420] Set syz1 is full, maxelem 2 reached [ 472.581992][ T2424] SELinux: failed to load policy [ 472.624751][ T2435] sctp: [Deprecated]: syz.5.12487 (pid 2435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.624751][ T2435] Use struct sctp_sack_info instead [ 472.862370][ T2458] xt_CONNSECMARK: invalid mode: 0 [ 472.896107][ T314] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.942208][ T314] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.989368][ T314] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.048296][ T314] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.097949][ T2475] loop5: detected capacity change from 0 to 128 [ 473.138704][ T2475] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 473.167447][ T2475] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 473.177013][ T314] vlan2: left promiscuous mode [ 473.192072][ T314] dummy0: left promiscuous mode [ 473.207519][ T314] bridge0: port 3(vlan2) entered disabled state [ 473.214900][ T314] bridge_slave_1: left allmulticast mode [ 473.224104][ T314] bridge_slave_1: left promiscuous mode [ 473.231306][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.247974][ T314] bridge_slave_0: left allmulticast mode [ 473.253758][ T314] bridge_slave_0: left promiscuous mode [ 473.264146][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.452161][ T314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.471539][ T314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.471650][T11300] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 473.500059][ T314] bond0 (unregistering): Released all slaves [ 473.516442][ T314] bond1 (unregistering): Released all slaves [ 473.519290][T11300] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 473.594085][ T2462] lo speed is unknown, defaulting to 1000 [ 473.640443][ T314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.662491][ T314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.719548][ T314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.736239][ T314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.739382][ T28] audit: type=1400 audit(2000000198.383:15861): avc: denied { accept } for pid=2519 comm="syz.7.12520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 473.767666][ T314] veth1_macvtap: left promiscuous mode [ 473.773227][ T314] veth0_macvtap: left promiscuous mode [ 473.788656][ T314] veth1_vlan: left promiscuous mode [ 473.795450][ T314] veth0_vlan: left promiscuous mode [ 473.938007][ T314] team0 (unregistering): Port device team_slave_1 removed [ 473.956380][ T314] team0 (unregistering): Port device team_slave_0 removed [ 474.000616][ T2500] lo speed is unknown, defaulting to 1000 [ 474.129247][ T2543] loop5: detected capacity change from 0 to 128 [ 474.237522][ T2556] netlink: 104 bytes leftover after parsing attributes in process `syz.5.12524'. [ 474.247203][ T28] audit: type=1400 audit(2000000198.893:15862): avc: denied { nlmsg_read } for pid=2555 comm="syz.5.12524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 474.291524][ T2462] chnl_net:caif_netlink_parms(): no params data found [ 474.378956][ T2462] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.395245][ T2462] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.433354][ T2462] bridge_slave_0: entered allmulticast mode [ 474.463509][ T2462] bridge_slave_0: entered promiscuous mode [ 474.498783][ T2462] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.511507][ T2462] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.519252][ T2462] bridge_slave_1: entered allmulticast mode [ 474.527539][ T2462] bridge_slave_1: entered promiscuous mode [ 474.536039][ T2596] wireguard: wg1: Could not create IPv4 socket [ 474.572012][ T2462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.585617][ T2462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.629678][ T2462] team0: Port device team_slave_0 added [ 474.638794][ T314] IPVS: stop unused estimator thread 0... [ 474.688108][ T2462] team0: Port device team_slave_1 added [ 474.703879][ T2611] netlink: 'syz.5.12539': attribute type 6 has an invalid length. [ 474.741584][ T2462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.760126][ T2462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.823963][ T2621] loop5: detected capacity change from 0 to 512 [ 474.881056][ T2462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.893629][ T2621] EXT4-fs: Ignoring removed orlov option [ 474.913926][ T2462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.916637][ T2621] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.931173][ T2462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.932464][ T2621] EXT4-fs: inline encryption not supported [ 474.986087][ T2621] EXT4-fs error (device loop5): ext4_iget_extra_inode:5040: inode #15: comm syz.5.12541: corrupted in-inode xattr: e_value size too large [ 475.000578][ T2621] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 475.003749][ T2462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.012927][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 475.012951][ C0] EXT4-fs (loop5): initial error at time 2000000199: ext4_iget_extra_inode:5040: inode 15 [ 475.013017][ C0] EXT4-fs (loop5): last error at time 2000000199: ext4_iget_extra_inode:5040: inode 15 [ 475.049987][ T2621] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.12541: couldn't read orphan inode 15 (err -117) [ 475.062187][ T2621] loop5: lost filesystem error report for type 5 error -117 [ 475.062740][ T2621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.129762][T32720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.192346][ T2462] hsr_slave_0: entered promiscuous mode [ 475.206675][ T2462] hsr_slave_1: entered promiscuous mode [ 475.212823][ T2462] debugfs: 'hsr0' already exists in 'hsr' [ 475.218971][ T28] audit: type=1326 audit(2000000199.863:15863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2638 comm="syz.5.12545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2c36c819 code=0x7ffc0000 [ 475.243428][ T2462] Cannot create hsr debugfs directory [ 475.255435][ T28] audit: type=1326 audit(2000000199.863:15864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2638 comm="syz.5.12545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2c36c819 code=0x7ffc0000 [ 475.283426][ T28] audit: type=1326 audit(2000000199.863:15865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2638 comm="syz.5.12545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f8a2c36c819 code=0x7ffc0000 [ 475.331601][ T28] audit: type=1326 audit(2000000199.863:15866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2638 comm="syz.5.12545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2c36c819 code=0x7ffc0000 [ 475.368192][ T2646] loop5: detected capacity change from 0 to 128 [ 475.379074][ T2646] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 475.406382][ T28] audit: type=1326 audit(2000000199.863:15867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2638 comm="syz.5.12545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2c36c819 code=0x7ffc0000 [ 475.446240][ T2646] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 475.449279][ T28] audit: type=1400 audit(2000000200.093:15868): avc: denied { search } for pid=2650 comm="syz.7.12550" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 475.516820][ T28] audit: type=1400 audit(2000000200.113:15869): avc: denied { search } for pid=2650 comm="syz.7.12550" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 475.545228][ T2658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12552'. [ 475.556008][ T28] audit: type=1400 audit(2000000200.113:15870): avc: denied { search } for pid=2650 comm="syz.7.12550" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 475.592807][ T2658] bond0: ARP target 8.4.0.0 is already present [ 475.606882][ T2658] bond0: option arp_ip_target: invalid value (1032) [ 475.768504][ T2685] loop7: detected capacity change from 0 to 128 [ 475.848414][ T2462] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 475.880381][ T2462] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 475.889499][ T2462] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 475.899333][ T2698] syz.7.12559: attempt to access beyond end of device [ 475.899333][ T2698] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 475.916008][ T2462] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 475.946900][ T2698] syz.7.12559: attempt to access beyond end of device [ 475.946900][ T2698] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 476.018699][ T2462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.027728][ T2698] syz.7.12559: attempt to access beyond end of device [ 476.027728][ T2698] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 476.054910][ T2462] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.076580][ T2698] syz.7.12559: attempt to access beyond end of device [ 476.076580][ T2698] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 476.098424][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.105536][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.118013][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.125313][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.142945][ T2698] syz.7.12559: attempt to access beyond end of device [ 476.142945][ T2698] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 476.220053][ T2698] syz.7.12559: attempt to access beyond end of device [ 476.220053][ T2698] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 476.266391][ T2698] syz.7.12559: attempt to access beyond end of device [ 476.266391][ T2698] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 476.282881][ T2698] syz.7.12559: attempt to access beyond end of device [ 476.282881][ T2698] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 476.297717][ T2698] syz.7.12559: attempt to access beyond end of device [ 476.297717][ T2698] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 476.312407][ T2698] syz.7.12559: attempt to access beyond end of device [ 476.312407][ T2698] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 476.320410][ T2462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.498484][ T2754] loop7: detected capacity change from 0 to 512 [ 476.552295][ T2754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.628196][ T2754] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 476.640173][ T2462] veth0_vlan: entered promiscuous mode [ 476.673045][ T2462] veth1_vlan: entered promiscuous mode [ 476.729856][ T2462] veth0_macvtap: entered promiscuous mode [ 476.754449][ T2462] veth1_macvtap: entered promiscuous mode [ 476.773128][ T2776] dummy0: entered promiscuous mode [ 476.787966][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.801010][ T2776] dummy0: left promiscuous mode [ 476.828123][ T2462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.863884][ T2462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.906273][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.933194][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.974624][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.996889][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.050789][ T2852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12587'. [ 478.091742][ T2852] netlink: 'syz.2.12587': attribute type 6 has an invalid length. [ 478.134511][ T2852] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12587'. [ 478.154221][ T2860] loop5: detected capacity change from 0 to 128 [ 478.311055][ T2880] loop7: detected capacity change from 0 to 2048 [ 478.319488][ T2882] 9p: Bad value for 'rfdno' [ 478.381464][ T2880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.414826][ T2895] netem: incorrect gi model size [ 478.423144][ T2895] netem: change failed [ 478.504196][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.516294][ T2904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12606'. [ 478.717606][ T2932] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12613'. [ 478.727342][ T2935] loop2: detected capacity change from 0 to 256 [ 478.869161][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 478.869179][ T28] audit: type=1400 audit(2000000203.523:15877): avc: denied { getopt } for pid=2955 comm="syz.0.12621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 479.250112][ T3026] loop2: detected capacity change from 0 to 512 [ 479.250448][ T3021] loop7: detected capacity change from 0 to 128 [ 479.287050][ T3026] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 479.326865][ T3026] EXT4-fs (loop2): orphan cleanup on readonly fs [ 479.348268][ T3026] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.12638: corrupted inode contents [ 479.398533][ T3026] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 479.398776][ T3026] EXT4-fs (loop2): Remounting filesystem read-only [ 479.408140][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 479.408177][ C0] EXT4-fs (loop2): initial error at time 2000000204: ext4_do_update_inode:5602: inode 16 [ 479.408208][ C0] EXT4-fs (loop2): last error at time 2000000204: ext4_do_update_inode:5602: inode 16 [ 479.471122][ T3026] EXT4-fs (loop2): 1 truncate cleaned up [ 479.491620][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 479.534436][ T12] Quota error (device loop2): write_blk: dquota write failed [ 479.548500][ T12] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 479.549794][ T28] audit: type=1326 audit(2000000204.203:15878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3049 comm="syz.5.12643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2c36c819 code=0x7ffc0000 [ 479.568701][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 479.584017][ T28] audit: type=1326 audit(2000000204.203:15879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3049 comm="syz.5.12643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2c36c819 code=0x7ffc0000 [ 479.617561][ T12] Quota error (device loop2): write_blk: dquota write failed [ 479.620037][ T28] audit: type=1326 audit(2000000204.203:15880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3049 comm="syz.5.12643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2c36c819 code=0x7ffc0000 [ 479.665128][ T12] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 479.686646][ T28] audit: type=1326 audit(2000000204.203:15881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3049 comm="syz.5.12643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f8a2c36c819 code=0x7ffc0000 [ 479.696556][ T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 479.786517][ T28] audit: type=1326 audit(2000000204.203:15882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3049 comm="syz.5.12643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2c36c819 code=0x7ffc0000 [ 479.820197][ T3026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 479.863841][ T2462] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.017318][ T3089] loop2: detected capacity change from 0 to 256 [ 480.070422][ T3089] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 480.166924][ T3096] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 480.184681][ T3110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12665'. [ 480.194173][ T3110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12665'. [ 480.308913][ T3119] lo speed is unknown, defaulting to 1000 [ 480.404420][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.434394][ T3130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12673'. [ 480.505607][ T3137] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12677'. [ 480.773039][ T3171] netlink: 'syz.7.12688': attribute type 2 has an invalid length. [ 480.804712][ T3171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12688'. [ 480.955692][ T3178] loop7: detected capacity change from 0 to 164 [ 480.962888][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.972474][T20988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.981530][T20985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.027139][ T3180] loop2: detected capacity change from 0 to 128 [ 481.218719][ T3192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12697'. [ 482.016861][ T3257] syzkaller1: entered promiscuous mode [ 482.022397][ T3257] syzkaller1: entered allmulticast mode [ 483.175547][ T3285] lo speed is unknown, defaulting to 1000 [ 483.403342][ T3303] loop2: detected capacity change from 0 to 8192 [ 483.584703][ T3325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12749'. [ 483.625500][ T3330] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12752'. [ 484.047799][ T3672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.133898][ T3345] loop2: detected capacity change from 0 to 512 [ 484.190183][ T3345] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #3: comm syz.2.12758: corrupted inode contents [ 484.210137][ T3345] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 484.216503][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 484.226656][ T3345] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #3: comm syz.2.12758: mark_inode_dirty error [ 484.232479][ C0] EXT4-fs (loop2): initial error at time 2000000208: ext4_do_update_inode:5602: inode 3 [ 484.253965][ C0] EXT4-fs (loop2): last error at time 2000000208: ext4_do_update_inode:5602: inode 3 [ 484.327205][ T3345] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 484.330449][ T3345] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #3: comm syz.2.12758: corrupted inode contents [ 484.380677][ T3352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12762'. [ 484.413995][ T3347] loop7: detected capacity change from 0 to 8192 [ 484.426737][ T3345] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 484.430015][ T3345] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.12758: mark_inode_dirty error [ 484.471411][ T3357] IPv6: NLM_F_CREATE should be specified when creating new route [ 484.521522][ T3357] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12764'. [ 484.576520][ T3345] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 484.576752][ T3345] __quota_error: 33 callbacks suppressed [ 484.576842][ T3345] Quota error (device loop2): write_blk: dquota write failed [ 484.667703][ T3345] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 484.708642][ T3345] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.12758: Failed to acquire dquot type 0 [ 484.752387][ T3345] loop2: lost filesystem error report for type 5 error -117 [ 484.755293][ T3345] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.12758: corrupted inode contents [ 484.828201][ T3345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.828370][ T3345] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #16: comm syz.2.12758: mark_inode_dirty error [ 484.888309][ T3345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.888616][ T3345] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.12758: corrupted inode contents [ 484.955198][ T3345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.955377][ T3345] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.12758: mark_inode_dirty error [ 485.026542][ T3345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 485.026769][ T3345] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.12758: corrupted inode contents [ 485.115391][ T3345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 485.115595][ T3345] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 485.174276][ T3345] loop2: lost filesystem error report for type 5 error -117 [ 485.174542][ T3345] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.12758: corrupted inode contents [ 485.236852][ T3345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 485.237083][ T3345] EXT4-fs error (device loop2): ext4_truncate:4602: inode #16: comm syz.2.12758: mark_inode_dirty error [ 485.262591][ T3345] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 485.263080][ T3345] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 485.284792][ T3345] loop2: lost filesystem error report for type 5 error -117 [ 485.285180][ T3345] EXT4-fs (loop2): 1 truncate cleaned up [ 485.343644][ T3345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.357845][ T3345] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.419203][ T3376] loop7: detected capacity change from 0 to 512 [ 485.470116][ T3376] EXT4-fs: Ignoring removed mblk_io_submit option [ 485.499775][ T3376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 485.525634][ T2462] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.549108][ T3376] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.564270][ T3376] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 485.667983][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.795375][ T3397] netlink: 256 bytes leftover after parsing attributes in process `syz.7.12776'. [ 485.815377][ T28] audit: type=1400 audit(2000000210.463:15914): avc: denied { listen } for pid=3399 comm="syz.8.12779" lport=50496 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 485.846636][ T3397] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12776'. [ 486.153659][ T3424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12788'. [ 486.163585][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.195158][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.349842][ T3431] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12788'. [ 486.368525][ T3437] netlink: 'syz.2.12792': attribute type 29 has an invalid length. [ 486.573496][ T28] audit: type=1326 audit(2000000211.223:15915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3446 comm="syz.0.12796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f1e1c819 code=0x7ffc0000 [ 486.694542][ T28] audit: type=1326 audit(2000000211.253:15916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3446 comm="syz.0.12796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f63f1e1c819 code=0x7ffc0000 [ 486.757595][T21103] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 486.798498][T21103] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 486.851886][ T28] audit: type=1326 audit(2000000211.253:15917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3446 comm="syz.0.12796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f1e1c819 code=0x7ffc0000 [ 487.001539][ T28] audit: type=1326 audit(2000000211.253:15918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3446 comm="syz.0.12796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f1e1c819 code=0x7ffc0000 [ 487.723399][ T28] audit: type=1326 audit(2000000212.373:15919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3535 comm="syz.8.12819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 487.787501][ T28] audit: type=1326 audit(2000000212.373:15920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3535 comm="syz.8.12819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 487.839768][ T3539] netlink: 88 bytes leftover after parsing attributes in process `syz.5.12820'. [ 487.871773][ T28] audit: type=1326 audit(2000000212.373:15921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3535 comm="syz.8.12819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 488.082161][ T3566] loop5: detected capacity change from 0 to 512 [ 488.135599][ T3566] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #3: comm syz.5.12826: corrupted inode contents [ 488.156342][ T3566] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 488.156488][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 488.172072][ C1] EXT4-fs (loop5): initial error at time 2000000212: ext4_do_update_inode:5602: inode 3 [ 488.181880][ C1] EXT4-fs (loop5): last error at time 2000000212: ext4_do_update_inode:5602: inode 3 [ 488.236531][ T3566] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #3: comm syz.5.12826: mark_inode_dirty error [ 488.256915][ T3566] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #3: comm syz.5.12826: corrupted inode contents [ 488.269482][ T3566] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.12826: mark_inode_dirty error [ 488.296990][ T3566] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.12826: Failed to acquire dquot type 0 [ 488.340133][ T3566] loop5: lost filesystem error report for type 5 error -117 [ 488.340714][ T3566] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #16: comm syz.5.12826: corrupted inode contents [ 488.389120][ T3566] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #16: comm syz.5.12826: mark_inode_dirty error [ 488.416559][ T3566] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #16: comm syz.5.12826: corrupted inode contents [ 488.446710][ T3566] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.12826: mark_inode_dirty error [ 488.466862][ T3566] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #16: comm syz.5.12826: corrupted inode contents [ 488.510382][ T3566] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 488.536663][ T3566] loop5: lost filesystem error report for type 5 error -117 [ 488.541160][ T3566] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #16: comm syz.5.12826: corrupted inode contents [ 488.574727][ T3566] EXT4-fs error (device loop5): ext4_truncate:4602: inode #16: comm syz.5.12826: mark_inode_dirty error [ 488.739843][ T3566] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 488.764585][ T3566] loop5: lost filesystem error report for type 5 error -117 [ 488.766223][ T3566] EXT4-fs (loop5): 1 truncate cleaned up [ 488.807104][ T3566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.824139][ T3566] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.907941][T32720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.939544][ T3607] dummy0: entered promiscuous mode [ 489.010423][ T3607] dummy0: left promiscuous mode [ 489.403800][ T3614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.748850][ T3631] lo speed is unknown, defaulting to 1000 [ 490.076823][T20988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.098496][ T3637] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.108764][ T3637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.198997][ T3639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.218020][ T3648] syzkaller1: entered promiscuous mode [ 490.223666][ T3648] syzkaller1: entered allmulticast mode [ 490.256720][T20983] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 490.353243][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 490.353263][ T28] audit: type=1400 audit(2000000215.003:15960): avc: denied { read } for pid=3669 comm="syz.7.12865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 490.496856][ T59] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 490.773208][ T3713] all (unregistering): Released all slaves [ 490.947583][ T3729] loop7: detected capacity change from 0 to 1024 [ 490.992039][ T3729] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 491.010336][ T3729] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 491.028645][ T3729] EXT4-fs (loop7): orphan cleanup on readonly fs [ 491.036592][T20983] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 491.045575][ T3729] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm syz.7.12900: Invalid inode table block 0 in block_group 0 [ 491.059115][ T3729] loop7: lost filesystem error report for type 5 error -117 [ 491.059228][ T3729] EXT4-fs (loop7): Remounting filesystem read-only [ 491.066739][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 491.066763][ C1] EXT4-fs (loop7): initial error at time 2000000215: __ext4_get_inode_loc:4797 [ 491.066791][ C1] EXT4-fs (loop7): last error at time 2000000215: __ext4_get_inode_loc:4797 [ 491.098143][ T3729] Quota error (device loop7): write_blk: dquota write failed [ 491.105763][ T3729] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 491.116069][ T3729] EXT4-fs (loop7): 1 truncate cleaned up [ 491.122529][ T3729] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.156719][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.287182][ T28] audit: type=1326 audit(2000000215.943:15961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.2.12906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37773ec819 code=0x0 [ 491.310963][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.363105][ T3772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12909'. [ 491.444121][ T28] audit: type=1326 audit(2000000216.093:15962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 491.468288][ T28] audit: type=1326 audit(2000000216.093:15963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 491.493224][ T28] audit: type=1326 audit(2000000216.093:15964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 491.517472][ T1626] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 491.518108][ T28] audit: type=1326 audit(2000000216.093:15965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 491.529792][ T1626] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 491.549340][ T28] audit: type=1326 audit(2000000216.093:15966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 491.580785][ T28] audit: type=1326 audit(2000000216.093:15967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 491.761325][ T3801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.811474][ T3801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.836632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.853156][ T3805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.862263][ T3805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.871047][ T3805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.879531][ T3805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.888260][ T3805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.898639][ T3804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.906970][ T3672] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 492.095260][ T3818] netlink: 'syz.5.12929': attribute type 1 has an invalid length. [ 492.292561][ T3841] loop2: detected capacity change from 0 to 1024 [ 492.324096][ T3841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.368833][ T3850] loop7: detected capacity change from 0 to 512 [ 492.392526][ T3850] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 492.393260][ T2462] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.441156][ T3850] EXT4-fs (loop7): 1 truncate cleaned up [ 492.454154][ T3858] tipc: Started in network mode [ 492.460261][ T3850] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.466385][ T3858] tipc: Node identity ac14140f, cluster identity 4711 [ 492.480509][ T3858] tipc: New replicast peer: 255.255.255.255 [ 492.500307][ T3858] tipc: Enabled bearer , priority 10 [ 492.548833][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.586305][ T3878] loop7: detected capacity change from 0 to 512 [ 492.597547][ T3876] batadv_slave_0: entered promiscuous mode [ 492.616162][ T3874] batadv_slave_0: left promiscuous mode [ 492.781573][ T3900] serio: Serial port ttyS3 [ 492.944192][ T3925] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 493.739354][ T3672] tipc: Node number set to 2886997007 [ 494.035989][ T3959] loop2: detected capacity change from 0 to 4096 [ 494.048201][ T3959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.107511][ T2462] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.165966][ T3973] loop2: detected capacity change from 0 to 128 [ 494.318118][ T3984] bio_check_eod: 101 callbacks suppressed [ 494.318138][ T3984] syz.2.12993: attempt to access beyond end of device [ 494.318138][ T3984] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 494.401295][ T3987] tipc: Started in network mode [ 494.406699][ T3987] tipc: Node identity ac14140f, cluster identity 4711 [ 494.414050][ T3987] tipc: New replicast peer: 255.255.255.255 [ 494.420881][ T3987] tipc: Enabled bearer , priority 10 [ 495.532518][ T4027] loop2: detected capacity change from 0 to 1764 [ 495.641404][ T4035] loop7: detected capacity change from 0 to 128 [ 495.675436][ T4035] syz.7.13021: attempt to access beyond end of device [ 495.675436][ T4035] loop7: rw=1, sector=138, nr_sectors = 2 limit=128 [ 495.788865][ T4040] loop5: detected capacity change from 0 to 512 [ 495.809748][ T4040] EXT4-fs: Ignoring removed i_version option [ 495.861250][ T4042] loop7: detected capacity change from 0 to 1024 [ 495.866273][ T4040] EXT4-fs: Ignoring removed bh option [ 495.902178][ T4040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.919393][ T4040] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 495.933634][ T4042] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.994638][ T4042] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.014889][T32720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.030526][ T4042] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.13025: bg 0: block 112: padding at end of block bitmap is not set [ 496.047612][ T4042] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 496.062231][ T4042] EXT4-fs (loop7): This should not happen!! Data will be lost [ 496.062231][ T4042] [ 496.066548][ T4005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.074653][ T4042] EXT4-fs (loop7): Total free blocks count 0 [ 496.116138][ T4005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.116858][ T4042] EXT4-fs (loop7): Free/Dirty block details [ 496.159062][ T4042] EXT4-fs (loop7): free_blocks=0 [ 496.173368][ T4042] EXT4-fs (loop7): dirty_blocks=64 [ 496.189586][ T4042] EXT4-fs (loop7): Block reservation details [ 496.207753][ T4042] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 496.233890][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 496.233970][ T28] audit: type=1400 audit(2000000220.883:15987): avc: denied { setattr } for pid=4059 comm="syz.5.13030" name="file0" dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 496.285169][T32189] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 496.308749][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 496.372463][ T4005] veth0_vlan: left allmulticast mode [ 496.452821][ T4071] loop5: detected capacity change from 0 to 512 [ 496.467404][ T4005] tipc: Resetting bearer [ 496.474463][ T4071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.643236][ T4005] bridge1: left promiscuous mode [ 496.649107][ T4005] bridge1: left allmulticast mode [ 496.710381][T32720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.875995][ T3672] lo speed is unknown, defaulting to 1000 [ 496.885269][T21103] tipc: Node number set to 2886997007 [ 496.890949][ T3672] syz2: Port: 1 Link DOWN [ 496.899258][ T38] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.915113][ T38] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.930220][ T38] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.939473][ T38] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.967448][ T38] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.992267][ T38] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.018050][ T50] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.038686][ T50] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.091772][ T4106] netlink: 'syz.7.13050': attribute type 2 has an invalid length. [ 497.220809][ T4114] loop7: detected capacity change from 0 to 512 [ 497.253112][ T4118] loop5: detected capacity change from 0 to 256 [ 497.273212][ T4118] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 497.296758][ T4114] EXT4-fs (loop7): 1 orphan inode deleted [ 497.319508][ T4114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.348221][ T38] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 497.377123][ T4114] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.406584][ T38] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 1 [ 497.443596][ T4114] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 497.481443][ T4137] loop2: detected capacity change from 0 to 512 [ 497.498349][ T4137] EXT4-fs: Ignoring removed oldalloc option [ 497.527220][ T4137] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.13064: invalid block [ 497.542176][ T28] audit: type=1326 audit(2000000222.173:15988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.8.13066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x0 [ 497.568638][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.596646][ T4137] fserror_report: 10 callbacks suppressed [ 497.596665][ T4137] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 497.612161][ T4137] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.13064: invalid indirect mapped block 4294967295 (level 1) [ 497.621530][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 497.621563][ C1] EXT4-fs (loop2): initial error at time 2000000222: ext4_get_branch:178: inode 11: block 4294967295 [ 497.621598][ C1] EXT4-fs (loop2): last error at time 2000000222: ext4_get_branch:178: inode 11: block 4294967295 [ 497.683005][ T4145] syzkaller1: entered promiscuous mode [ 497.688657][ T4145] syzkaller1: entered allmulticast mode [ 497.700364][ T4137] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 497.700534][ T4137] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.13064: invalid indirect mapped block 4294967295 (level 1) [ 497.724519][ T4137] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 497.724886][ T4137] EXT4-fs (loop2): 2 truncates cleaned up [ 497.732384][ T4152] loop5: detected capacity change from 0 to 512 [ 497.738915][ T4137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.769309][ T28] audit: type=1400 audit(2000000222.423:15989): avc: denied { mounton } for pid=4136 comm="syz.2.13064" path="/91/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 497.809024][ T2462] EXT4-fs error (device loop2): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 497.822298][ T2462] EXT4-fs error (device loop2): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 497.835585][ T4152] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #3: comm syz.5.13071: corrupted inode contents [ 497.859082][ T4152] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 497.859238][ T4152] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #3: comm syz.5.13071: mark_inode_dirty error [ 497.868618][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 497.868640][ C1] EXT4-fs (loop5): initial error at time 2000000222: ext4_do_update_inode:5602: inode 3 [ 497.868675][ C1] EXT4-fs (loop5): last error at time 2000000222: ext4_do_update_inode:5602: inode 3 [ 497.906149][ T4152] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 497.907070][ T4152] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #3: comm syz.5.13071: corrupted inode contents [ 497.929808][ T4152] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 497.929988][ T4152] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.13071: mark_inode_dirty error [ 497.951176][ T4152] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 497.952369][ T4152] Quota error (device loop5): write_blk: dquota write failed [ 497.969559][ T4152] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 497.979814][ T4152] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.13071: Failed to acquire dquot type 0 [ 497.991404][ T4152] loop5: lost filesystem error report for type 5 error -117 [ 497.996595][ T4152] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #16: comm syz.5.13071: corrupted inode contents [ 498.019225][ T4152] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 498.019509][ T4152] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #16: comm syz.5.13071: mark_inode_dirty error [ 498.041474][ T4152] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 498.041699][ T4152] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #16: comm syz.5.13071: corrupted inode contents [ 498.063386][ T4152] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 498.063643][ T4152] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.13071: mark_inode_dirty error [ 498.087304][ T4152] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #16: comm syz.5.13071: corrupted inode contents [ 498.099810][ T4152] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 498.108751][ T4152] loop5: lost filesystem error report for type 5 error -117 [ 498.108903][ T4152] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #16: comm syz.5.13071: corrupted inode contents [ 498.129286][ T4152] EXT4-fs error (device loop5): ext4_truncate:4602: inode #16: comm syz.5.13071: mark_inode_dirty error [ 498.141905][ T4152] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 498.153216][ T2462] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.162850][ T4152] loop5: lost filesystem error report for type 5 error -117 [ 498.165683][ T4152] EXT4-fs (loop5): 1 truncate cleaned up [ 498.177883][ T1626] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.192203][ T4152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.220121][ T4152] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.240028][ T1626] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.254098][ T4152] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #3: comm syz.5.13071: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 498.254098][ T4152] [ 498.281161][ T1626] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.292700][ T28] audit: type=1400 audit(2000000222.933:15990): avc: denied { link } for pid=4151 comm="syz.5.13071" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 498.294151][T32720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.339350][ T28] audit: type=1400 audit(2000000222.933:15991): avc: denied { unlink } for pid=4151 comm="syz.5.13071" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 498.441727][ T1626] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.552011][ T4170] lo speed is unknown, defaulting to 1000 [ 498.678269][ T1626] bridge_slave_1: left allmulticast mode [ 498.684018][ T1626] bridge_slave_1: left promiscuous mode [ 498.691614][ T1626] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.724147][ T1626] bridge_slave_0: left allmulticast mode [ 498.732163][ T1626] bridge_slave_0: left promiscuous mode [ 498.756681][ T4198] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 498.764990][ T1626] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.025757][ T1626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.064918][ T1626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.112417][ T1626] bond0 (unregistering): Released all slaves [ 499.225964][ T1626] hsr_slave_0: left promiscuous mode [ 499.233480][ T1626] hsr_slave_1: left promiscuous mode [ 499.287830][ T1626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.296269][ T4217] loop7: detected capacity change from 0 to 512 [ 499.314705][ T4217] EXT4-fs: Ignoring removed i_version option [ 499.321406][ T1626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.339067][ T4217] EXT4-fs: Ignoring removed bh option [ 499.360210][ T1626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.373282][ T1626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.384255][ T4217] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.409842][ T4217] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 499.428042][ T1626] veth1_macvtap: left promiscuous mode [ 499.453607][ T1626] veth0_macvtap: left promiscuous mode [ 499.461055][ T1626] veth1_vlan: left promiscuous mode [ 499.475111][ T1626] veth0_vlan: left promiscuous mode [ 499.581876][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.599974][ T1626] team0 (unregistering): Port device team_slave_1 removed [ 499.617336][ T4239] netlink: 63 bytes leftover after parsing attributes in process `syz.0.13098'. [ 499.628187][ T1626] team0 (unregistering): Port device team_slave_0 removed [ 499.696113][ T4238] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13097'. [ 499.724520][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 499.811721][ T4256] loop5: detected capacity change from 0 to 512 [ 499.861857][ T4256] EXT4-fs: test_dummy_encryption option not supported [ 499.921324][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.946516][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.953976][ T4170] bridge_slave_0: entered allmulticast mode [ 499.997169][ T4170] bridge_slave_0: entered promiscuous mode [ 499.997565][ T28] audit: type=1400 audit(2000000224.643:15992): avc: denied { create } for pid=4270 comm="syz.5.13107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 500.017003][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13105'. [ 500.035154][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.056787][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.070861][ T28] audit: type=1400 audit(2000000224.643:15993): avc: denied { write } for pid=4270 comm="syz.5.13107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 500.074279][ T4170] bridge_slave_1: entered allmulticast mode [ 500.131615][ T4170] bridge_slave_1: entered promiscuous mode [ 500.454708][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.516029][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.535879][ T4170] team0: Port device team_slave_0 added [ 500.542950][ T4170] team0: Port device team_slave_1 added [ 500.623570][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.646604][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.704083][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.731950][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.745786][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.783041][ T4292] loop7: detected capacity change from 0 to 1024 [ 500.793547][ T4292] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 500.827073][ T4292] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #3: block 5: comm syz.7.13112: lblock 5 mapped to illegal pblock 5 (length 1) [ 500.851644][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.892948][ T4292] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.13112: Failed to acquire dquot type 0 [ 500.904665][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 500.904695][ C0] EXT4-fs (loop7): initial error at time 2000000225: ext4_map_blocks:828: inode 3: block 5 [ 500.904726][ C0] EXT4-fs (loop7): last error at time 2000000225: ext4_map_blocks:828: inode 3: block 5 [ 500.931883][ T4292] loop7: lost filesystem error report for type 5 error -117 [ 500.932062][ T4292] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 5: comm syz.7.13112: lblock 5 mapped to illegal pblock 5 (length 1) [ 500.954553][ T4292] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.13112: Failed to acquire dquot type 0 [ 500.967356][ T4292] loop7: lost filesystem error report for type 5 error -117 [ 500.979705][ T4292] EXT4-fs error (device loop7): ext4_free_blocks:6724: comm syz.7.13112: Freeing blocks not in datazone - block = 0, count = 4096 [ 501.001704][ T4292] loop7: lost filesystem error report for type 5 error -117 [ 501.009568][ T4170] hsr_slave_0: entered promiscuous mode [ 501.023177][ T4170] hsr_slave_1: entered promiscuous mode [ 501.030301][ T4170] debugfs: 'hsr0' already exists in 'hsr' [ 501.036223][ T4170] Cannot create hsr debugfs directory [ 501.043325][ T4292] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 5: comm syz.7.13112: lblock 5 mapped to illegal pblock 5 (length 1) [ 501.118489][ T4292] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.13112: Failed to acquire dquot type 0 [ 501.154992][ T4292] loop7: lost filesystem error report for type 5 error -117 [ 501.159644][ T4292] EXT4-fs (loop7): 1 orphan inode deleted [ 501.210605][ T4292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.239049][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 501.239090][ T28] audit: type=1326 audit(2000000225.893:15999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.8.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 501.336687][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.346070][ T28] audit: type=1326 audit(2000000225.893:16000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.8.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 501.376252][ T28] audit: type=1326 audit(2000000225.893:16001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.8.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 501.401092][ T28] audit: type=1326 audit(2000000225.893:16002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.8.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 501.523008][ T4332] netlink: 'syz.5.13123': attribute type 6 has an invalid length. [ 501.545692][ T28] audit: type=1326 audit(2000000225.923:16003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.8.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 501.636527][ T28] audit: type=1326 audit(2000000225.933:16004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.8.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 501.653526][ T4170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 501.716517][ T28] audit: type=1326 audit(2000000225.933:16005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.8.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 501.779140][ T4170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 501.796582][ T28] audit: type=1326 audit(2000000225.933:16006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.8.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 501.839103][ T4170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 501.863705][ T4170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 501.894662][ T28] audit: type=1326 audit(2000000225.933:16007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.8.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 501.976532][ T28] audit: type=1326 audit(2000000225.933:16008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4322 comm="syz.8.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 502.010717][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.054756][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.092810][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.100004][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.118420][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.125885][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.341072][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.699475][ T4408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 502.715458][ T4170] veth0_vlan: entered promiscuous mode [ 502.746691][ T4170] veth1_vlan: entered promiscuous mode [ 502.779741][ T4170] veth0_macvtap: entered promiscuous mode [ 502.787932][ T4170] veth1_macvtap: entered promiscuous mode [ 502.815896][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.826095][ T4398] loop7: detected capacity change from 0 to 32768 [ 502.827884][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.857618][ T4398] loop7: p1 p3 < > [ 502.868219][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.877591][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.891407][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.913580][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.174126][T24765] udevd[24765]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 503.185820][T30924] udevd[30924]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 503.258412][ T4434] loop5: detected capacity change from 0 to 128 [ 503.320778][ T4441] netlink: 104 bytes leftover after parsing attributes in process `syz.8.13147'. [ 503.847738][ T4504] selinux_netlink_send: 7 callbacks suppressed [ 503.847757][ T4504] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=4504 comm=syz.0.13175 [ 504.444993][ T4551] dummy0: entered allmulticast mode [ 504.450940][ T4551] dummy0: left allmulticast mode [ 505.096146][ T4643] lo speed is unknown, defaulting to 1000 [ 505.153659][ T4654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13216'. [ 505.187608][ T4654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13216'. [ 505.978464][ T4769] lo speed is unknown, defaulting to 1000 [ 506.258356][ T4767] loop7: detected capacity change from 0 to 512 [ 506.327556][ T4767] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 506.557754][ T4789] process '/newroot/2429/file0' started with executable stack [ 506.596262][ T4798] 9p: Bad value for 'rfdno' [ 507.352691][ T4821] lo speed is unknown, defaulting to 1000 [ 507.614418][ T4828] loop7: detected capacity change from 0 to 256 [ 507.767478][ T4839] netlink: 'syz.2.13281': attribute type 5 has an invalid length. [ 508.120924][ T4863] loop5: detected capacity change from 0 to 1024 [ 508.127980][ T4863] EXT4-fs: Ignoring removed i_version option [ 508.147482][ T4863] EXT4-fs: Ignoring removed bh option [ 508.168748][ T4865] loop7: detected capacity change from 0 to 128 [ 508.234985][ T4863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.266500][ T4863] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.279757][ T4863] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: comm syz.5.13291: lblock 0 mapped to illegal pblock 0 (length 1) [ 508.313098][ T4863] EXT4-fs (loop5): Remounting filesystem read-only [ 508.337370][T32720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 508.381633][ T4881] loop5: detected capacity change from 0 to 128 [ 508.729616][ T4914] loop7: detected capacity change from 0 to 512 [ 508.754075][ T4914] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 508.763068][ T4914] EXT4-fs (loop7): orphan cleanup on readonly fs [ 508.777353][ T4914] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.13315: corrupted inode contents [ 508.806574][ T4914] fserror_report: 7 callbacks suppressed [ 508.806596][ T4914] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 508.819518][ T4914] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #16: comm syz.7.13315: mark_inode_dirty error [ 508.828856][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 508.828882][ C1] EXT4-fs (loop7): initial error at time 2000000233: ext4_do_update_inode:5602: inode 16 [ 508.828915][ C1] EXT4-fs (loop7): last error at time 2000000233: ext4_do_update_inode:5602: inode 16 [ 508.833092][ T4882] loop2: detected capacity change from 0 to 512 [ 508.844506][ T4914] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 508.866908][ T4920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13317'. [ 508.901638][ T4914] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.13315: corrupted inode contents [ 508.914543][ T4914] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 508.916079][ T4914] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.13315: mark_inode_dirty error [ 508.937464][ T4914] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 508.947326][ T4882] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 508.957374][ T4914] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.13315: corrupted inode contents [ 508.957407][ T4914] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 508.970456][ T4914] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 508.970483][ T4914] loop7: lost filesystem error report for type 5 error -117 [ 508.970685][ T4914] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.13315: corrupted inode contents [ 508.970713][ T4914] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 508.970817][ T4914] EXT4-fs error (device loop7): ext4_truncate:4602: inode #16: comm syz.7.13315: mark_inode_dirty error [ 508.970884][ T4914] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 508.971451][ T4914] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 508.971472][ T4914] loop7: lost filesystem error report for type 5 error -117 [ 508.971990][ T4914] EXT4-fs (loop7): 1 truncate cleaned up [ 508.993070][ T314] __quota_error: 135 callbacks suppressed [ 508.993085][ T314] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 509.099146][ T314] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:6: Failed to release dquot type 1 [ 509.111007][ T314] loop7: lost filesystem error report for type 5 error -117 [ 509.126103][ T4914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 509.195744][ T28] audit: type=1400 audit(2000000233.843:16144): avc: denied { accept } for pid=4929 comm="syz.2.13321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 509.231421][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.273167][ T4942] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13326'. [ 509.370166][ T28] audit: type=1326 audit(2000000234.023:16145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.8.13331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 509.395875][ T28] audit: type=1326 audit(2000000234.023:16146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.8.13331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 509.421258][ T28] audit: type=1326 audit(2000000234.023:16147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.8.13331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 509.447807][ T28] audit: type=1326 audit(2000000234.023:16148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.8.13331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 509.474792][ T28] audit: type=1326 audit(2000000234.023:16149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.8.13331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 509.513072][ T28] audit: type=1326 audit(2000000234.023:16150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.8.13331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 509.541753][ T28] audit: type=1326 audit(2000000234.023:16151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.8.13331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 509.565955][ T28] audit: type=1326 audit(2000000234.023:16152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.8.13331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5152c819 code=0x7ffc0000 [ 509.660081][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13343'. [ 509.819434][ T5000] xt_hashlimit: size too large, truncated to 1048576 [ 509.906602][ T5004] net_ratelimit: 4 callbacks suppressed [ 509.906619][ T5004] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 510.061430][ T5019] lo speed is unknown, defaulting to 1000 [ 510.295263][ T5032] tun0: tun_chr_ioctl cmd 1074025675 [ 510.306588][ T5032] tun0: persist enabled [ 510.314411][ T5032] tun0: tun_chr_ioctl cmd 1074025675 [ 510.376602][ T5032] tun0: persist disabled [ 510.722091][ T5028] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 510.744398][ T5028] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 510.968939][ T5055] netlink: 'syz.0.13372': attribute type 41 has an invalid length. [ 511.080818][ T5071] netlink: 64 bytes leftover after parsing attributes in process `syz.8.13389'. [ 511.093507][ T5072] loop5: detected capacity change from 0 to 512 [ 511.134809][ T5072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.154421][ T5072] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.209584][T32720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.330887][ T5116] loop7: detected capacity change from 0 to 1024 [ 512.354638][ T5116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 512.380129][ T5116] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 512.420983][ T5116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 512.431017][ T5116] System zones: 0-1, 3-36 [ 512.456278][ T5116] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.492615][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.648399][ T5159] lo speed is unknown, defaulting to 1000 [ 513.061013][ T5210] loop7: detected capacity change from 0 to 512 [ 513.068303][ T5210] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 513.090703][ T5210] EXT4-fs (loop7): 1 truncate cleaned up [ 513.099057][ T5210] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.122779][ T5210] EXT4-fs (loop7): shut down requested (0) [ 513.136392][ T5210] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 513.154353][ T5210] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 513.179766][ T5210] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=13 [ 513.192757][ T5210] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 513.201939][ T5210] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 513.211315][ T5210] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=13 [ 513.237812][T32189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.265633][ T5229] bridge_slave_0: left allmulticast mode [ 513.272896][ T5229] bridge_slave_0: left promiscuous mode [ 513.280164][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.289950][ T5229] bridge_slave_1: left allmulticast mode [ 513.295814][ T5229] bridge_slave_1: left promiscuous mode [ 513.301914][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.311460][ T5229] bond0: (slave bond_slave_0): Releasing backup interface [ 513.328173][ T5229] bond0: (slave bond_slave_1): Releasing backup interface [ 513.337972][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13452'. [ 513.349302][ T5229] team0: Port device team_slave_0 removed [ 513.362811][ T5229] team0: Port device team_slave_1 removed [ 513.370190][ T5229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.377985][ T5229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.387088][ T5229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.394861][ T5229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.404962][ T5229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 513.538494][ T5249] syzkaller1: entered promiscuous mode [ 513.544128][ T5249] syzkaller1: entered allmulticast mode [ 513.590774][ T5257] netlink: 2 bytes leftover after parsing attributes in process `syz.5.13462'. [ 513.600607][ T5257] netlink: 2 bytes leftover after parsing attributes in process `syz.5.13462'. [ 513.614402][ T5257] netlink: 2 bytes leftover after parsing attributes in process `syz.5.13462'. [ 513.625646][ T5257] netlink: 2 bytes leftover after parsing attributes in process `syz.5.13462'. [ 513.803267][ T5289] IPv6: Can't replace route, no match found [ 513.909123][ T5298] lo speed is unknown, defaulting to 1000 [ 515.189268][ T5369] syzkaller1: entered promiscuous mode [ 515.201602][ T5369] syzkaller1: entered allmulticast mode [ 515.221680][ T5371] openvswitch: netlink: Missing key (keys=40, expected=100) [ 515.245786][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 515.245805][ T28] audit: type=1400 audit(2000000239.893:16234): avc: denied { getopt } for pid=5372 comm="syz.0.13515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 515.333111][ T28] audit: type=1400 audit(2000000239.973:16235): avc: denied { mounton } for pid=5375 comm="syz.7.13516" path="/proc/827/cgroup" dev="proc" ino=111115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 515.494141][ T5391] syzkaller1: entered promiscuous mode [ 515.510597][ T5391] syzkaller1: entered allmulticast mode [ 515.613756][ T5401] unsupported nla_type 210 [ 515.834093][ T5419] loop2: detected capacity change from 0 to 2048 [ 515.868658][ T5419] EXT4-fs: Ignoring removed i_version option [ 515.913117][ T5419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.941418][ T5419] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.065601][ T5442] loop5: detected capacity change from 0 to 512 [ 516.110599][ T5442] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 516.111048][ T4170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.121336][ T5442] System zones: 0-2, 18-18, 34-34 [ 516.150395][ T5442] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 516.170597][ T5452] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.176522][ T28] audit: type=1400 audit(2000000240.823:16236): avc: denied { execmod } for pid=5453 comm="syz.8.13550" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=111226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 516.177757][ T5452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.206490][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 516.218576][ C1] EXT4-fs (loop5): initial error at time 2000000240: ext4_mb_generate_buddy:1317 [ 516.227843][ C1] EXT4-fs (loop5): last error at time 2000000240: ext4_mb_generate_buddy:1317 [ 516.237111][ T5442] EXT4-fs (loop5): Remounting filesystem read-only [ 516.255476][ T5442] EXT4-fs (loop5): 1 truncate cleaned up [ 516.268165][ T5442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.281845][ T314] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 516.299669][ T314] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 516.312690][ T5442] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.329631][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13548'. [ 516.354176][ T5463] netlink: 'syz.2.13548': attribute type 29 has an invalid length. [ 516.362656][ T5442] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.362962][ T314] Quota error (device loop5): write_blk: dquota write failed [ 516.379936][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13548'. [ 516.407567][ T314] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 516.432086][ T314] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 516.454822][ T314] Quota error (device loop5): write_blk: dquota write failed [ 516.471968][ T314] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 516.482832][ T314] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 516.493686][ T314] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 516.507589][ T314] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 516.546105][ T5485] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13563'. [ 516.840302][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 516.882158][ T5520] lo speed is unknown, defaulting to 1000 [ 516.958276][ T5527] ================================================================== [ 516.966421][ T5527] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 516.974431][ T5527] [ 516.976779][ T5527] write to 0xffff88811a10b198 of 8 bytes by task 5530 on cpu 0: [ 516.984431][ T5527] cpu_map_kthread_run+0x4fe/0x1680 [ 516.989745][ T5527] kthread+0x22a/0x280 [ 516.993841][ T5527] ret_from_fork+0x150/0x360 [ 516.998478][ T5527] ret_from_fork_asm+0x1a/0x30 [ 517.003273][ T5527] [ 517.005657][ T5527] read to 0xffff88811a10b198 of 8 bytes by task 5527 on cpu 1: [ 517.013219][ T5527] bq_flush_to_queue+0x124/0x360 [ 517.018276][ T5527] __cpu_map_flush+0x47/0xa0 [ 517.022891][ T5527] xdp_do_flush+0xf8/0x160 [ 517.027343][ T5527] bpf_test_run_xdp_live+0xe8a/0x1360 [ 517.032779][ T5527] bpf_prog_test_run_xdp+0x57b/0xa10 [ 517.038183][ T5527] bpf_prog_test_run+0x204/0x340 [ 517.043267][ T5527] __sys_bpf+0x52e/0x7e0 [ 517.047656][ T5527] __x64_sys_bpf+0x41/0x50 [ 517.052093][ T5527] x64_sys_call+0x10cb/0x3020 [ 517.056888][ T5527] do_syscall_64+0x12c/0x370 [ 517.061602][ T5527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.067541][ T5527] [ 517.069967][ T5527] value changed: 0xffff888144819070 -> 0x0000000000000000 [ 517.077271][ T5527] [ 517.079672][ T5527] Reported by Kernel Concurrency Sanitizer on: [ 517.085853][ T5527] CPU: 1 UID: 0 PID: 5527 Comm: syz.2.13583 Tainted: G W syzkaller #0 PREEMPT(full) [ 517.096826][ T5527] Tainted: [W]=WARN [ 517.100647][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.110908][ T5527] ================================================================== [ 518.876552][T23049] Bluetooth: hci0: command 0x1003 tx timeout [ 518.876552][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110