last executing test programs: 8m54.288915673s ago: executing program 32 (id=671): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) close(0x3) 8m42.982261418s ago: executing program 33 (id=572): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) splice(r0, 0x0, r1, 0x0, 0x6, 0xa) 7m18.454506209s ago: executing program 34 (id=3352): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601020000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a31000000002000078005000300010000000c00018008000140ac1414aa050014001c00000005000500020000000500010006"], 0x68}}, 0x0) 6m10.948312329s ago: executing program 35 (id=6227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000080)=@tcp6=r1, 0x1}, 0x20) 4m2.429189063s ago: executing program 36 (id=9314): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e2b, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r2, 0x3}, 0x8) 3m41.249552839s ago: executing program 37 (id=10321): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x14) close(r0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 3m26.292730845s ago: executing program 38 (id=10755): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 2m46.598542044s ago: executing program 4 (id=11896): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xde, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") 2m46.456862222s ago: executing program 4 (id=11903): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 2m46.343577977s ago: executing program 4 (id=11909): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{0x2, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "559c4157df5c5fc0a343bdfd992c89ec7c178d3d401a0657e948c1e50e9f29438946924347e8c9a7f1d228cf082056214904d6e39350c2d1bf5443d0ef0296b0"}, 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x811) 2m46.290681873s ago: executing program 4 (id=11912): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a0d006, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 2m46.252646219s ago: executing program 39 (id=11911): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x1, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) 2m46.244751219s ago: executing program 4 (id=11915): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m46.076958731s ago: executing program 4 (id=11916): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) 2m46.076792201s ago: executing program 40 (id=11916): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) 1m48.296585229s ago: executing program 1 (id=13566): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ptrace(0x10, r0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000480)={0x0}) 1m48.173639165s ago: executing program 1 (id=13568): io_uring_setup(0x21dd, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x0, 0x83, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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") rename(0x0, 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) unlink(&(0x7f0000000100)='./file0/file1\x00') 1m47.956455893s ago: executing program 1 (id=13571): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000626000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x820, 0x2) remap_file_pages(&(0x7f0000250000/0x4000)=nil, 0x4000, 0x0, 0x1ff, 0x800) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1m47.770497756s ago: executing program 1 (id=13578): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 1m47.660638681s ago: executing program 0 (id=13579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x4, 0xca, 0x0, 0x1000, {[@window={0x3, 0x3, 0x9}]}}}}}}}, 0x0) 1m47.641006553s ago: executing program 0 (id=13581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 1m47.622999965s ago: executing program 1 (id=13582): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 1m47.580929171s ago: executing program 1 (id=13583): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@gettfilter={0x24, 0x2e, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xe}, {0xfff1, 0x2}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m47.530654858s ago: executing program 0 (id=13586): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111df1800000000850000003b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 1m47.397719575s ago: executing program 0 (id=13589): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0903"], 0xfdef) 1m47.246317054s ago: executing program 0 (id=13593): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 1m47.209817389s ago: executing program 0 (id=13594): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/1, 0x1}, 0x1}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m32.534779658s ago: executing program 41 (id=13583): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@gettfilter={0x24, 0x2e, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xe}, {0xfff1, 0x2}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m32.150867827s ago: executing program 42 (id=13594): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/1, 0x1}, 0x1}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m24.487429304s ago: executing program 5 (id=13967): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x80420c, &(0x7f0000000100)={[{@noload}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@usrjquota}]}, 0x1, 0x78b, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) 1m24.264933483s ago: executing program 5 (id=13974): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xb3a4, 0x8000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 1m23.086645854s ago: executing program 5 (id=13999): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xaf) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x8, 0xb, r0, 0x0, 0x0, 0x1397, 0x0, 0x1, r1}]) 1m22.953356572s ago: executing program 5 (id=14008): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0x0, 0x2a}, 0x18) open_tree(r1, &(0x7f0000000080)='./file0\x00', 0x801) 1m22.924313685s ago: executing program 5 (id=14010): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x2, @perf_config_ext={0x9, 0x6}, 0x6302, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0xa14499, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6a6f6c6965742c6d61703d6f66662c6d61703d61636f726e2c7362736563746f723d3078303030303030303030303030303030302c626c6f636b3d3078303030303030303030303030303830302c6d61706f766572f2696465726f636b7065726d2c636865636b3d72656c617865642c0000000000000000"], 0x1, 0x519, &(0x7f0000000ac0)="$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") ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) write(r0, 0x0, 0x0) 1m22.286986477s ago: executing program 5 (id=14037): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x90) close(r0) 1m22.277665079s ago: executing program 43 (id=14037): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x90) close(r0) 58.301020785s ago: executing program 2 (id=14638): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) 58.220563305s ago: executing program 2 (id=14640): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) unshare(0x24020400) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) 58.071100444s ago: executing program 2 (id=14642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 57.905291465s ago: executing program 2 (id=14645): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10454ca, 0x0) 57.887985138s ago: executing program 2 (id=14646): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 57.229182523s ago: executing program 2 (id=14656): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20040064) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 57.187146258s ago: executing program 44 (id=14656): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20040064) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 1.866428449s ago: executing program 3 (id=16000): pselect6(0x0, 0x0, &(0x7f0000000080)={0x6, 0x10000, 0x3, 0x9, 0x81, 0x3ff, 0x4, 0x4}, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x20}]}}, 0x0, 0x32, 0x0, 0x1}, 0x77) 1.180909578s ago: executing program 9 (id=16022): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0xff, @empty, 0x8e1726d}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x5, @empty, 0x82}, 0x1c) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 1.150817201s ago: executing program 9 (id=16024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="8f84725707e61096f37538e486dd23cf8b13c14184"], 0xffbf) 1.076903831s ago: executing program 6 (id=16026): setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000007f6252dd42b6726c26700d30bd4a1788e0e5076364690496124d6714dbe8c1810519b9c0dfcc3e62972aa560cff80545b12558df5a887dbec936cc12cb525c6d0cfdf4280fe68a8695ece543741701c498083c6f12d8c2e9f6b2c45c819cd4379d1104a0a8f3d8a863ac80eaed43697990269aeb8272c8b5727374219da1a34704da02dd1dda4d950b8b3dd27f"], 0x8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000080fedbdf250a8080"], 0x24}}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000180)=0x7f, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x8804) 1.055312724s ago: executing program 6 (id=16028): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "cc320e4a27cb5791", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) 1.043730815s ago: executing program 7 (id=16029): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000008d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006200)=""/27, 0x1b}, 0x80000000}], 0x1, 0x45833af92e4b39ff, 0x0) 1.021621058s ago: executing program 7 (id=16030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x2}]}}}]}, 0x48}}, 0x4048084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1.002652451s ago: executing program 3 (id=16031): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 960.984536ms ago: executing program 6 (id=16032): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 912.011332ms ago: executing program 6 (id=16034): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 911.802832ms ago: executing program 3 (id=16035): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000001280)="f61217563d9d7685bdb745dd51b189afaee14d56af196681fe4a7ed93c406f2cf943", 0x22, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r2, 0x20, 0x0, 0x8000) 860.917249ms ago: executing program 7 (id=16036): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20000090}, 0x8084) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000030601020000ffffffff00000a0000010500018007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 835.532322ms ago: executing program 7 (id=16037): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 821.588444ms ago: executing program 9 (id=16038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f0000000040)=[{r2, 0x3273}, {r0}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 752.969743ms ago: executing program 6 (id=16039): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x5e21, 0x0, @empty, 0x1000}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) 752.800093ms ago: executing program 6 (id=16040): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setsockopt(r0, 0x1, 0x7, &(0x7f0000000440)="f624737f", 0x4) 741.728584ms ago: executing program 3 (id=16041): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') 675.946882ms ago: executing program 9 (id=16043): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) 603.397412ms ago: executing program 3 (id=16044): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0xffffff4b, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRES16=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) 545.3991ms ago: executing program 9 (id=16046): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@can_newroute={0x2c, 0x18, 0x1, 0x80, 0x25dfdbfe, {}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) 483.344997ms ago: executing program 7 (id=16047): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1380a000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000840)={{}, {0x77359400}}, &(0x7f0000000880)) 420.647755ms ago: executing program 3 (id=16049): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8015e00004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 382.11301ms ago: executing program 9 (id=16051): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 264.178975ms ago: executing program 8 (id=16053): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001740)='d', 0x1}], 0x1}}], 0x1, 0x4000050) 200.884024ms ago: executing program 7 (id=16054): futex_waitv(&(0x7f0000000440)=[{0x0, 0x0, 0x2}, {0x0, &(0x7f0000000180), 0x82}], 0x2, 0x0, 0x0, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 200.730654ms ago: executing program 8 (id=16055): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff0000bb719b98fb73e53a0000000600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xff7e, 0xd, 0x8, 0xb3, 0xc, "7fff7a2004dc17a8"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x4) 172.949908ms ago: executing program 8 (id=16056): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) 128.913363ms ago: executing program 8 (id=16057): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 66.008091ms ago: executing program 8 (id=16058): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) 0s ago: executing program 8 (id=16059): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) kernel console output (not intermixed with test programs): cklog [ 515.669431][ T7540] loop3: detected capacity change from 0 to 1024 [ 515.678171][ T7540] EXT4-fs: inline encryption not supported [ 515.684073][ T7540] EXT4-fs: Ignoring removed orlov option [ 515.699152][ T7540] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 515.759329][ T7540] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 515.778010][ T7540] System zones: 0-1, 3-12 [ 515.794951][ T7540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.868411][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.939003][ T7559] netlink: 'syz.3.14315': attribute type 4 has an invalid length. [ 515.981116][ T7559] netlink: 'syz.3.14315': attribute type 4 has an invalid length. [ 516.079756][ T7569] SELinux: failed to load policy [ 516.112155][ T7573] loop8: detected capacity change from 0 to 512 [ 516.133313][ T7573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 516.142163][ T7573] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 516.193747][ T7573] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.14323: Allocating blocks 41-42 which overlap fs metadata [ 516.295187][ T7573] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.14323: Allocating blocks 41-42 which overlap fs metadata [ 516.309556][ T7573] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.14323: Failed to acquire dquot type 1 [ 516.348177][ T7573] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 516.389929][ T7573] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.14323: corrupted inode contents [ 516.408065][ T7573] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.14323: mark_inode_dirty error [ 516.438071][ T7573] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.14323: corrupted inode contents [ 516.458034][ T7573] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.14323: mark_inode_dirty error [ 516.483285][ T7573] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.14323: corrupted inode contents [ 516.505923][ T7573] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 516.526183][ T7573] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.14323: corrupted inode contents [ 516.559937][ T7573] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.14323: mark_inode_dirty error [ 516.578151][ T7573] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 516.598118][ T7573] EXT4-fs (loop8): 1 truncate cleaned up [ 516.604369][ T7573] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.669249][ T7573] EXT4-fs: Ignoring removed orlov option [ 516.683590][ T7573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 516.703204][ T7573] EXT4-fs (loop8): can't enable nombcache during remount [ 516.726267][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.793488][ T7628] netlink: 'syz.8.14343': attribute type 3 has an invalid length. [ 516.810528][ T7628] netlink: 'syz.8.14343': attribute type 3 has an invalid length. [ 516.853457][ T7637] loop8: detected capacity change from 0 to 512 [ 516.879906][ T7637] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 516.892845][ T7637] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.916082][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 517.094153][ T7673] loop8: detected capacity change from 0 to 512 [ 517.125392][ T7673] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 517.238142][ T7684] netlink: 'syz.8.14362': attribute type 1 has an invalid length. [ 517.246134][ T7684] netlink: 'syz.8.14362': attribute type 4 has an invalid length. [ 517.254124][ T7684] netlink: 15334 bytes leftover after parsing attributes in process `syz.8.14362'. [ 517.291128][ T7690] loop3: detected capacity change from 0 to 128 [ 517.308453][ T7690] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 517.344690][ T7696] loop6: detected capacity change from 0 to 512 [ 517.351976][ T7692] netlink: 'syz.8.14367': attribute type 1 has an invalid length. [ 517.360810][ T7690] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 517.386868][ T7696] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 517.428400][ T7692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.443305][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 517.461066][ T7696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.531395][ T7702] bond1: (slave geneve2): making interface the new active one [ 517.539663][ T7696] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 517.557208][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 517.557260][ T29] audit: type=1326 audit(2000001851.750:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.2.14374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24f9eacb9 code=0x7ffc0000 [ 517.569036][ T7702] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 517.631374][ T29] audit: type=1326 audit(2000001851.790:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.2.14374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc24f9eacb9 code=0x7ffc0000 [ 517.655118][ T29] audit: type=1326 audit(2000001851.790:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.2.14374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24f9eacb9 code=0x7ffc0000 [ 517.678648][ T29] audit: type=1326 audit(2000001851.790:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.2.14374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24f9eacb9 code=0x7ffc0000 [ 517.702332][ T29] audit: type=1326 audit(2000001851.790:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.2.14374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fc24f9eacb9 code=0x7ffc0000 [ 517.725949][ T29] audit: type=1326 audit(2000001851.790:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.2.14374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24f9eacb9 code=0x7ffc0000 [ 517.749596][ T29] audit: type=1326 audit(2000001851.790:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.2.14374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24f9eacb9 code=0x7ffc0000 [ 517.773186][ T29] audit: type=1326 audit(2000001851.790:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.2.14374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fc24f9eacb9 code=0x7ffc0000 [ 517.796719][ T29] audit: type=1326 audit(2000001851.790:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.2.14374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24f9eacb9 code=0x7ffc0000 [ 517.820273][ T29] audit: type=1326 audit(2000001851.790:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.2.14374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc24f9eacb9 code=0x7ffc0000 [ 517.846048][ T5842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.935028][ T7747] loop6: detected capacity change from 0 to 2048 [ 517.959206][ T7747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.026229][ T7756] loop8: detected capacity change from 0 to 2048 [ 518.038413][ T5842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.094755][ T7756] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.172973][ T7756] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.14380: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 518.270539][ T7756] EXT4-fs (loop8): Remounting filesystem read-only [ 518.333834][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.460642][ T7790] loop8: detected capacity change from 0 to 1024 [ 518.482313][ T7790] EXT4-fs: Ignoring removed mblk_io_submit option [ 518.505355][ T7790] EXT4-fs: Ignoring removed nobh option [ 518.547156][ T7790] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.589952][ T7801] netlink: 'syz.6.14392': attribute type 1 has an invalid length. [ 518.674442][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.691358][ T7801] bond1: (slave ip6gretap0): making interface the new active one [ 518.699559][ T7801] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 518.730666][ T7813] netlink: 'syz.6.14398': attribute type 7 has an invalid length. [ 518.742954][ T31] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.791699][ T31] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.830762][ T31] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.846928][ T31] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.855595][ T7881] netlink: 104 bytes leftover after parsing attributes in process `syz.7.14427'. [ 519.999682][ T7893] loop3: detected capacity change from 0 to 1024 [ 520.016349][ T7893] EXT4-fs: Ignoring removed nobh option [ 520.022067][ T7893] EXT4-fs: inline encryption not supported [ 520.050837][ T7900] netlink: 92 bytes leftover after parsing attributes in process `syz.2.14434'. [ 520.080008][ T7893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.101981][ T7893] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.14432: Allocating blocks 385-513 which overlap fs metadata [ 520.145532][ T7908] program syz.6.14437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.149359][ T7893] EXT4-fs (loop3): pa ffff888107dd6e00: logic 16, phys. 129, len 24 [ 520.163029][ T7893] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 520.174221][ T7893] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 520.186503][ T7893] EXT4-fs (loop3): This should not happen!! Data will be lost [ 520.186503][ T7893] [ 520.196280][ T7893] EXT4-fs (loop3): Total free blocks count 0 [ 520.202369][ T7893] EXT4-fs (loop3): Free/Dirty block details [ 520.208375][ T7893] EXT4-fs (loop3): free_blocks=128 [ 520.213557][ T7893] EXT4-fs (loop3): dirty_blocks=0 [ 520.218650][ T7893] EXT4-fs (loop3): Block reservation details [ 520.224671][ T7893] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 520.587695][ T7941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.665390][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.734427][ T9557] kernel read not supported for file /vcs (pid: 9557 comm: kworker/0:15) [ 520.816414][ T7954] lo speed is unknown, defaulting to 1000 [ 520.885448][ T7961] set_capacity_and_notify: 1 callbacks suppressed [ 520.885467][ T7961] loop8: detected capacity change from 0 to 256 [ 520.914720][ T7961] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 521.423723][ T7999] loop8: detected capacity change from 0 to 1024 [ 521.430662][ T7999] EXT4-fs: Ignoring removed bh option [ 521.465016][ T7999] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 521.512157][ T7999] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.544383][ T8012] sch_tbf: peakrate 16 is lower than or equals to rate 2225451442729165302 ! [ 521.776408][T25176] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 521.819706][T25176] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 521.832062][T25176] EXT4-fs (loop8): This should not happen!! Data will be lost [ 521.832062][T25176] [ 521.891867][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 521.982937][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14488'. [ 522.274681][ T8058] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 522.286980][ T8058] SELinux: failed to load policy [ 522.368348][ T8069] validate_nla: 1 callbacks suppressed [ 522.368366][ T8069] netlink: 'syz.3.14499': attribute type 2 has an invalid length. [ 522.548186][ T8080] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14504'. [ 522.862535][ T8094] loop3: detected capacity change from 0 to 2048 [ 522.908522][ T4566] loop3: p2 < > p3 < p5 > p4 [ 522.913342][ T4566] loop3: partition table partially beyond EOD, truncated [ 522.927023][ T4566] loop3: p2 start 4278190080 is beyond EOD, truncated [ 522.945881][ T4566] loop3: p4 size 8192 extends beyond EOD, truncated [ 522.953582][ T4566] loop3: p5 size 8192 extends beyond EOD, truncated [ 522.966392][ T8094] loop3: p2 < > p3 < p5 > p4 [ 522.971174][ T8094] loop3: partition table partially beyond EOD, truncated [ 522.979426][ T8094] loop3: p2 start 4278190080 is beyond EOD, truncated [ 522.987108][ T8094] loop3: p4 size 8192 extends beyond EOD, truncated [ 522.994556][ T8094] loop3: p5 size 8192 extends beyond EOD, truncated [ 523.006997][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 523.007014][ T29] audit: type=1400 audit(2000001857.200:5787): avc: denied { map } for pid=8093 comm="syz.3.14511" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 523.093013][ T8105] loop6: detected capacity change from 0 to 1024 [ 523.102004][ T8105] EXT4-fs: inline encryption not supported [ 523.120786][ T8105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.143117][ T3012] loop3: p2 < > p3 < p5 > p4 [ 523.147892][ T3012] loop3: partition table partially beyond EOD, truncated [ 523.156870][ T3012] loop3: p2 start 4278190080 is beyond EOD, truncated [ 523.164650][ T3012] loop3: p4 size 8192 extends beyond EOD, truncated [ 523.172431][ T3012] loop3: p5 size 8192 extends beyond EOD, truncated [ 523.186855][ T8105] EXT4-fs (loop6): shut down requested (1) [ 523.205720][ T5842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.228730][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 523.228769][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 523.240839][ T4566] udevd[4566]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 523.277270][ T8113] loop6: detected capacity change from 0 to 1024 [ 523.284786][ T8113] EXT4-fs: Ignoring removed bh option [ 523.315455][ T8113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 523.333486][ T8113] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.373662][ T8113] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 3: comm syz.6.14517: lblock 3 mapped to illegal pblock 3 (length 3) [ 523.461024][ T8113] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 523.473448][ T8113] EXT4-fs (loop6): This should not happen!! Data will be lost [ 523.473448][ T8113] [ 523.498100][ T8113] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.14517: lblock 3 mapped to illegal pblock 3 (length 1) [ 523.528332][ T8113] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.14517: lblock 3 mapped to illegal pblock 3 (length 1) [ 523.548541][ T8112] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 4: comm syz.6.14517: lblock 4 mapped to illegal pblock 4 (length 2) [ 523.574152][ T8113] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.14517: lblock 3 mapped to illegal pblock 3 (length 1) [ 523.615185][ T8112] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 4: comm syz.6.14517: lblock 4 mapped to illegal pblock 4 (length 2) [ 523.633713][ T8113] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.14517: lblock 3 mapped to illegal pblock 3 (length 1) [ 523.648947][ T8112] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 4: comm syz.6.14517: lblock 4 mapped to illegal pblock 4 (length 2) [ 523.663419][ T8113] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.14517: lblock 3 mapped to illegal pblock 3 (length 1) [ 523.698427][ T8112] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 4: comm syz.6.14517: lblock 4 mapped to illegal pblock 4 (length 2) [ 523.985016][ T29] audit: type=1326 audit(2000001858.180:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.7.14537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 524.008642][ T29] audit: type=1326 audit(2000001858.180:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.7.14537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 524.067995][ T29] audit: type=1326 audit(2000001858.230:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.7.14537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 524.091649][ T29] audit: type=1326 audit(2000001858.230:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.7.14537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 524.115222][ T29] audit: type=1326 audit(2000001858.230:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.7.14537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 524.257325][ T29] audit: type=1326 audit(2000001858.430:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.7.14537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ed1b5b58e code=0x7ffc0000 [ 524.281073][ T29] audit: type=1326 audit(2000001858.430:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.7.14537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ed1b5b58e code=0x7ffc0000 [ 524.305156][ T29] audit: type=1326 audit(2000001858.430:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.7.14537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ed1b5b58e code=0x7ffc0000 [ 524.328841][ T29] audit: type=1326 audit(2000001858.440:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.7.14537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ed1b5b58e code=0x7ffc0000 [ 524.353438][T32713] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 524.365980][T32713] EXT4-fs (loop6): This should not happen!! Data will be lost [ 524.365980][T32713] [ 524.409257][ T5842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 524.490144][ T8171] loop8: detected capacity change from 0 to 256 [ 524.513273][ T8171] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 524.621617][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14544'. [ 524.667698][ T8184] netlink: 'syz.3.14548': attribute type 33 has an invalid length. [ 524.668597][ T8178] netlink: 36 bytes leftover after parsing attributes in process `syz.7.14544'. [ 524.675768][ T8184] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14548'. [ 524.745307][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14548'. [ 524.883210][ T8188] netlink: 'syz.2.14550': attribute type 29 has an invalid length. [ 524.908655][ T8188] netlink: 'syz.2.14550': attribute type 29 has an invalid length. [ 524.936397][ T8188] netlink: 500 bytes leftover after parsing attributes in process `syz.2.14550'. [ 525.046433][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14555'. [ 525.252999][ T8219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14562'. [ 525.266045][ T8221] loop8: detected capacity change from 0 to 512 [ 525.281148][ T8221] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.303961][ T8219] netlink: 'syz.3.14562': attribute type 2 has an invalid length. [ 525.311930][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14562'. [ 525.318239][ T8221] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.351583][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.441502][ T8229] loop8: detected capacity change from 0 to 512 [ 525.462037][ T8232] lo speed is unknown, defaulting to 1000 [ 525.481714][ T8229] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.521261][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14568'. [ 525.530622][ T8229] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.561203][ T8234] wireguard0: entered promiscuous mode [ 525.566804][ T8234] wireguard0: entered allmulticast mode [ 525.824899][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.885376][ T8257] netlink: 'syz.8.14574': attribute type 19 has an invalid length. [ 525.916593][ T9548] hid-generic 0000:0000:FFFFFFFC.0010: unknown main item tag 0x0 [ 525.924442][ T9548] hid-generic 0000:0000:FFFFFFFC.0010: unknown main item tag 0x0 [ 525.932268][ T9548] hid-generic 0000:0000:FFFFFFFC.0010: unknown main item tag 0x0 [ 525.941999][ T8257] netlink: 'syz.8.14574': attribute type 19 has an invalid length. [ 525.958289][ T2443] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.983508][ T2443] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.998235][ T9548] hid-generic 0000:0000:FFFFFFFC.0010: unknown main item tag 0x0 [ 526.006090][ T9548] hid-generic 0000:0000:FFFFFFFC.0010: unknown main item tag 0x0 [ 526.008703][ T2443] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.014173][ T9548] hid-generic 0000:0000:FFFFFFFC.0010: unknown main item tag 0x0 [ 526.030372][ T9548] hid-generic 0000:0000:FFFFFFFC.0010: unknown main item tag 0x1 [ 526.038160][ T9548] hid-generic 0000:0000:FFFFFFFC.0010: unknown main item tag 0x0 [ 526.045918][ T9548] hid-generic 0000:0000:FFFFFFFC.0010: unknown main item tag 0x0 [ 526.053711][ T9548] hid-generic 0000:0000:FFFFFFFC.0010: unknown main item tag 0x0 [ 526.101531][ T2443] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.154860][ T9548] hid-generic 0000:0000:FFFFFFFC.0010: hidraw0: HID v8.00 Device [syz0] on syz0 [ 526.185021][ T8264] fido_id[8264]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 526.244295][ T8269] loop6: detected capacity change from 0 to 512 [ 526.274474][ T8268] SELinux: failed to load policy [ 526.290286][ T8269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.322273][ T8269] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.365316][ T5842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.531838][ T8282] SELinux: unknown common netfil [ 526.553087][ T8290] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 526.558911][ T8282] SELinux: failed to load policy [ 526.596654][ T8290] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 527.435256][ T8338] netlink: 'syz.7.14609': attribute type 4 has an invalid length. [ 527.445304][ T8338] netlink: 'syz.7.14609': attribute type 4 has an invalid length. [ 527.455100][ T9557] lo speed is unknown, defaulting to 1000 [ 527.460939][ T9557] syz1: Port: 1 Link ACTIVE [ 527.468126][T32490] lo speed is unknown, defaulting to 1000 [ 528.377863][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 528.377882][ T29] audit: type=1326 audit(2000002118.569:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.7.14644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 528.407582][ T29] audit: type=1326 audit(2000002118.569:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.7.14644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 528.507046][ T29] audit: type=1326 audit(2000002118.699:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.7.14644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 528.575928][ T29] audit: type=1326 audit(2000002118.749:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.7.14644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 528.599707][ T29] audit: type=1326 audit(2000002118.749:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.7.14644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 528.623101][ T29] audit: type=1326 audit(2000002118.749:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.7.14644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 528.646629][ T29] audit: type=1326 audit(2000002118.749:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.7.14644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 528.670213][ T29] audit: type=1326 audit(2000002118.759:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.7.14644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 528.693764][ T29] audit: type=1326 audit(2000002118.759:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.7.14644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 528.717326][ T29] audit: type=1326 audit(2000002118.759:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.7.14644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 528.815555][ T8434] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.825978][ T8434] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.913768][ T8434] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.924283][ T8434] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.005061][ T8434] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.015601][ T8434] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.062096][ T8434] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.072519][ T8434] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.144242][ T2443] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.152683][ T2443] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.175561][ T2443] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.183844][ T2443] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.216681][ T2443] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.225038][ T2443] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.246250][ T2443] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.254601][ T2443] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.536145][ T8483] loop8: detected capacity change from 0 to 256 [ 529.543082][T32713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.554160][ T8483] FAT-fs (loop8): Directory bread(block 517) failed [ 529.561454][T32713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.564641][ T8483] FAT-fs (loop8): Directory bread(block 518) failed [ 529.576933][ T8483] FAT-fs (loop8): Directory bread(block 519) failed [ 529.583699][ T8483] FAT-fs (loop8): Directory bread(block 520) failed [ 529.585118][T32713] bond0 (unregistering): Released all slaves [ 529.590646][ T8483] FAT-fs (loop8): Directory bread(block 521) failed [ 529.603327][ T8483] FAT-fs (loop8): Directory bread(block 522) failed [ 529.610526][ T8483] FAT-fs (loop8): Directory bread(block 523) failed [ 529.615546][T32713] bond1 (unregistering): Released all slaves [ 529.635338][ T8451] lo speed is unknown, defaulting to 1000 [ 529.640781][ T8483] FAT-fs (loop8): Directory bread(block 524) failed [ 529.648734][ T8483] FAT-fs (loop8): Directory bread(block 525) failed [ 529.655669][ T8483] FAT-fs (loop8): Directory bread(block 526) failed [ 529.680236][ T8486] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 529.756750][ T8488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.767159][ T8488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.785115][ T8492] netlink: 'syz.7.14673': attribute type 1 has an invalid length. [ 529.833889][T32713] hsr_slave_0: left promiscuous mode [ 529.841205][T32713] hsr_slave_1: left promiscuous mode [ 529.847096][T32713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.855934][T32713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.864375][ T8496] SELinux: failed to load policy [ 529.933091][T32713] team0 (unregistering): Port device team_slave_1 removed [ 529.954382][T32713] team0 (unregistering): Port device team_slave_0 removed [ 530.006556][ T8492] bond3: (slave ip6gretap2): making interface the new active one [ 530.015030][ T8492] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 530.049009][ T8488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.059401][ T8488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.147695][ T8451] chnl_net:caif_netlink_parms(): no params data found [ 530.199024][ T8488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.209393][ T8488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.317984][ T8488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.328638][ T8488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.349037][ T8520] infiniband syz!: set down [ 530.353650][ T8520] infiniband syz!: added team_slave_0 [ 530.389276][ T8520] RDS/IB: syz!: added [ 530.405623][ T8520] smc: adding ib device syz! with port count 1 [ 530.415310][T32713] IPVS: stop unused estimator thread 0... [ 530.436734][ T8451] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.443884][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.453658][ T8520] smc: ib device syz! port 1 has no pnetid [ 530.545757][ T8451] bridge_slave_0: entered allmulticast mode [ 530.552674][ T8451] bridge_slave_0: entered promiscuous mode [ 530.563754][ T8451] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.570920][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.585123][ T8451] bridge_slave_1: entered allmulticast mode [ 530.592079][ T8451] bridge_slave_1: entered promiscuous mode [ 530.625279][ T8451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.634791][ T8538] batadv_slave_1: entered promiscuous mode [ 530.641386][ T8538] __nla_validate_parse: 7 callbacks suppressed [ 530.641404][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14679'. [ 530.661904][T32707] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.670225][T32707] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.684034][ T8538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.703872][ T8538] batadv_slave_1 (unregistering): left promiscuous mode [ 530.712020][ T8538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.766484][ T8451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.807614][ T2443] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.815931][ T2443] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.826954][ T8451] team0: Port device team_slave_0 added [ 530.852296][ T8451] team0: Port device team_slave_1 added [ 530.857990][ T2443] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.866273][ T2443] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.920071][ T2443] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.928497][ T2443] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.938915][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.945969][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.972734][ T8451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.996065][ T8550] netlink: 'syz.8.14683': attribute type 6 has an invalid length. [ 531.004085][ T8550] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.14683'. [ 531.098782][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.105839][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.131830][ T8451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.184392][ T8554] loop3: detected capacity change from 0 to 8192 [ 531.224220][ T8451] hsr_slave_0: entered promiscuous mode [ 531.230449][ T8451] hsr_slave_1: entered promiscuous mode [ 531.248482][ T8554] loop3: p1 p2 p4 < > [ 531.252595][ T8554] loop3: partition table partially beyond EOD, truncated [ 531.260134][ T8554] loop3: p1 start 16777216 is beyond EOD, truncated [ 531.266768][ T8554] loop3: p2 size 515840 extends beyond EOD, truncated [ 531.276046][ T8554] loop3: p4 start 16777216 is beyond EOD, truncated [ 531.348683][ T3012] loop3: p1 p2 p4 < > [ 531.352811][ T3012] loop3: partition table partially beyond EOD, truncated [ 531.387998][ T3012] loop3: p1 start 16777216 is beyond EOD, truncated [ 531.394727][ T3012] loop3: p2 size 515840 extends beyond EOD, truncated [ 531.428450][ T3012] loop3: p4 start 16777216 is beyond EOD, truncated [ 531.517028][ T8451] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.530461][ T4566] udevd[4566]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 531.579248][ T4566] udevd[4566]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 531.612762][ T8451] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.681632][ T8451] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.769912][ T8451] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.856785][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14694'. [ 531.876985][ T8451] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 531.894360][ T8451] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 531.911655][ T8451] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 531.936784][ T8451] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 532.038598][ T8451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.062107][ T8451] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.075007][T32707] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.082160][T32707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.102061][T32707] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.109270][T32707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.278056][ T8451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.586164][ T8451] veth0_vlan: entered promiscuous mode [ 532.614964][ T8451] veth1_vlan: entered promiscuous mode [ 532.724721][ T8451] veth0_macvtap: entered promiscuous mode [ 532.750595][ T8451] veth1_macvtap: entered promiscuous mode [ 532.795376][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.824569][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.858035][T25176] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.872265][T25176] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.010609][T25176] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.036403][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14707'. [ 533.058046][T25176] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.422810][ T8692] loop8: detected capacity change from 0 to 128 [ 533.817561][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 533.817578][ T29] audit: type=1326 audit(2000002124.009:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.14723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9905acb9 code=0x7ffc0000 [ 533.947980][ T29] audit: type=1326 audit(2000002124.049:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.14723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9905acb9 code=0x7ffc0000 [ 533.971541][ T29] audit: type=1326 audit(2000002124.049:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.14723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9905acb9 code=0x7ffc0000 [ 533.995069][ T29] audit: type=1326 audit(2000002124.049:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.14723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9905acb9 code=0x7ffc0000 [ 534.018687][ T29] audit: type=1326 audit(2000002124.049:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.14723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fab9905acb9 code=0x7ffc0000 [ 534.042221][ T29] audit: type=1326 audit(2000002124.059:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.14723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9905acb9 code=0x7ffc0000 [ 534.065987][ T29] audit: type=1326 audit(2000002124.139:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.14723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab9901b58e code=0x7ffc0000 [ 534.150766][ T8719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8719 comm=syz.7.14728 [ 534.237841][ T29] audit: type=1326 audit(2000002124.169:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.14723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab9901b58e code=0x7ffc0000 [ 534.261426][ T29] audit: type=1326 audit(2000002124.179:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.14723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab9901b58e code=0x7ffc0000 [ 534.285037][ T29] audit: type=1326 audit(2000002124.179:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8707 comm="syz.3.14723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab9901b58e code=0x7ffc0000 [ 534.349677][ T8725] loop6: detected capacity change from 0 to 512 [ 534.356686][ T8725] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 534.369837][ T8725] EXT4-fs (loop6): 1 truncate cleaned up [ 534.375919][ T8725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.405284][ T5842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.576980][ T8750] syzkaller1: entered promiscuous mode [ 534.582600][ T8750] syzkaller1: entered allmulticast mode [ 534.670823][ T8752] syzkaller1: entered promiscuous mode [ 534.676389][ T8752] syzkaller1: entered allmulticast mode [ 534.870533][ T8777] loop3: detected capacity change from 0 to 512 [ 534.918813][ T8777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.953497][ T8777] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 534.965736][ T8777] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.14751: corrupted inode contents [ 534.989529][ T8777] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.14751: mark_inode_dirty error [ 535.002459][ T8777] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.14751: corrupted inode contents [ 535.025704][ T8790] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.14751: corrupted inode contents [ 535.051522][ T8790] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.14751: mark_inode_dirty error [ 535.063481][ T8790] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.14751: corrupted inode contents [ 535.076191][ T8790] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.14751: mark_inode_dirty error [ 535.088700][ T8790] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.14751: corrupted inode contents [ 535.100812][ T8790] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.14751: mark_inode_dirty error [ 535.113687][ T8777] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.14751: corrupted inode contents [ 535.153576][ T2443] nci: nci_rsp_packet: unknown rsp opcode 0x10 [ 535.154839][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.778904][ T8856] loop3: detected capacity change from 0 to 512 [ 535.808596][ T8856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.845098][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.878117][ T8863] bond1: up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 535.928454][ T8870] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 535.958707][ T8870] bond1: (slave lo): Enslaving as a backup interface with an up link [ 535.980418][ T8874] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 536.005927][ T8870] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 536.044956][ T8882] loop8: detected capacity change from 0 to 128 [ 536.065833][ T8882] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 536.078290][ T8882] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 536.161208][ T8888] netlink: 'syz.7.14795': attribute type 4 has an invalid length. [ 536.171672][ T3479] lo speed is unknown, defaulting to 1000 [ 536.177413][ T3479] syz1: Port: 1 Link DOWN [ 536.194259][ T6781] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 536.218153][ T36] lo speed is unknown, defaulting to 1000 [ 536.288717][ T8903] netlink: 104 bytes leftover after parsing attributes in process `syz.7.14802'. [ 536.596824][ T8929] loop9: detected capacity change from 0 to 1024 [ 536.639898][ T8931] SELinux: failed to load policy [ 536.675755][ T8934] syzkaller0: entered promiscuous mode [ 536.681339][ T8934] syzkaller0: entered allmulticast mode [ 536.690073][ T8929] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.785989][ T8451] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.229897][ T8985] netlink: 'syz.6.14839': attribute type 1 has an invalid length. [ 537.261483][ T8985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 537.344878][ T8985] bond2: (slave geneve2): making interface the new active one [ 537.354781][ T8985] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 537.390708][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14841'. [ 537.599907][ T8988] syz.8.14840 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 537.611339][ T8988] CPU: 1 UID: 0 PID: 8988 Comm: syz.8.14840 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 537.611419][ T8988] Tainted: [W]=WARN [ 537.611428][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.611444][ T8988] Call Trace: [ 537.611453][ T8988] [ 537.611522][ T8988] __dump_stack+0x1d/0x30 [ 537.611548][ T8988] dump_stack_lvl+0x95/0xd0 [ 537.611570][ T8988] dump_stack+0x15/0x1b [ 537.611590][ T8988] dump_header+0x80/0x240 [ 537.611614][ T8988] oom_kill_process+0x295/0x350 [ 537.611670][ T8988] out_of_memory+0x97d/0xb80 [ 537.611703][ T8988] try_charge_memcg+0x62e/0xa10 [ 537.611795][ T8988] charge_memcg+0x51/0xc0 [ 537.611829][ T8988] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 537.611928][ T8988] __read_swap_cache_async+0x17b/0x2d0 [ 537.611972][ T8988] swap_cluster_readahead+0x262/0x3c0 [ 537.612055][ T8988] swapin_readahead+0xde/0x840 [ 537.612187][ T8988] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 537.612223][ T8988] ? lruvec_stat_mod_folio+0xd2/0x110 [ 537.612254][ T8988] ? __rcu_read_unlock+0x4e/0x70 [ 537.612277][ T8988] ? swap_cache_get_folio+0x26f/0x280 [ 537.612343][ T8988] do_swap_page+0x2f4/0x2140 [ 537.612400][ T8988] ? css_rstat_updated+0xbb/0x280 [ 537.612444][ T8988] ? __pfx_default_wake_function+0x10/0x10 [ 537.612490][ T8988] handle_mm_fault+0xb40/0x3030 [ 537.612569][ T8988] ? vma_start_read+0x1c7/0x2c0 [ 537.612609][ T8988] do_user_addr_fault+0x62f/0x1050 [ 537.612647][ T8988] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 537.612747][ T8988] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 537.612778][ T8988] ? irqentry_exit+0x3c/0x510 [ 537.612835][ T8988] exc_page_fault+0x62/0xa0 [ 537.612864][ T8988] asm_exc_page_fault+0x26/0x30 [ 537.612884][ T8988] RIP: 0033:0x7fee9e2e8710 [ 537.612904][ T8988] Code: c4 4c 0f 42 e0 83 3d ba f6 3a 00 00 0f 8e d9 fd ff ff e8 b3 8a fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 7e cf ed 00 e8 03 00 00 48 8d 1d 7f d8 3a 00 e8 ca 30 13 00 [ 537.612947][ T8988] RSP: 002b:00007ffdc6fd81c0 EFLAGS: 00010202 [ 537.612969][ T8988] RAX: 00000000000833b0 RBX: 00007fee9e697da0 RCX: 00000000000831a8 [ 537.612983][ T8988] RDX: 0000000000000208 RSI: 00007ffdc6fd81a0 RDI: 0000000000000001 [ 537.613000][ T8988] RBP: 00007fee9e697da0 R08: 000000001f080e98 R09: 7fffffffffffffff [ 537.613101][ T8988] R10: 3fffffffffffffff R11: 0000000000000246 R12: 00000000000835df [ 537.613119][ T8988] R13: 00007fee9e69609c R14: 0000000000083375 R15: 00007fee9e696090 [ 537.613153][ T8988] [ 537.613163][ T8988] memory: usage 307200kB, limit 307200kB, failcnt 768 [ 537.861592][ T8988] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 537.869583][ T8988] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 537.876922][ T8988] Memory cgroup stats for /syz8: [ 537.918076][ T8988] cache 0 [ 537.926058][ T8988] rss 4096 [ 537.929245][ T8988] shmem 0 [ 537.932194][ T8988] mapped_file 0 [ 537.935767][ T8988] dirty 0 [ 537.938803][ T8988] writeback 4096 [ 537.942422][ T8988] workingset_refault_anon 1385 [ 537.947321][ T8988] workingset_refault_file 0 [ 537.951898][ T8988] swap 446464 [ 537.955197][ T8988] swapcached 4096 [ 537.959106][ T8988] pgpgin 315267 [ 537.962596][ T8988] pgpgout 315262 [ 537.966167][ T8988] pgfault 319902 [ 537.969815][ T8988] pgmajfault 239 [ 537.973380][ T8988] inactive_anon 4096 [ 537.977296][ T8988] active_anon 0 [ 537.980894][ T8988] inactive_file 16384 [ 537.984914][ T8988] active_file 0 [ 537.988445][ T8988] unevictable 0 [ 537.991914][ T8988] hierarchical_memory_limit 314572800 [ 537.997324][ T8988] hierarchical_memsw_limit 9223372036854771712 [ 538.003576][ T8988] total_cache 0 [ 538.007047][ T8988] total_rss 4096 [ 538.011038][ T8988] total_shmem 0 [ 538.014768][ T8988] total_mapped_file 0 [ 538.018807][ T8988] total_dirty 0 [ 538.022332][ T8988] total_writeback 4096 [ 538.026405][ T8988] total_workingset_refault_anon 1385 [ 538.031763][ T8988] total_workingset_refault_file 0 [ 538.036807][ T8988] total_swap 446464 [ 538.040731][ T8988] total_swapcached 4096 [ 538.044899][ T8988] total_pgpgin 315267 [ 538.048913][ T8988] total_pgpgout 315262 [ 538.053001][ T8988] total_pgfault 319906 [ 538.057129][ T8988] total_pgmajfault 239 [ 538.061412][ T8988] total_inactive_anon 4096 [ 538.065949][ T8988] total_active_anon 0 [ 538.069969][ T8988] total_inactive_file 16384 [ 538.074491][ T8988] total_active_file 0 [ 538.078568][ T8988] total_unevictable 0 [ 538.082600][ T8988] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.14840,pid=8988,uid=0 [ 538.097721][ T8988] Memory cgroup out of memory: Killed process 8988 (syz.8.14840) total-vm:94132kB, anon-rss:1204kB, file-rss:22176kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 538.311853][ T9023] loop8: detected capacity change from 0 to 8192 [ 538.358185][ T4566] loop8: p1 p2 p4 < > [ 538.362355][ T4566] loop8: partition table partially beyond EOD, truncated [ 538.378422][ T4566] loop8: p1 start 16777216 is beyond EOD, truncated [ 538.385137][ T4566] loop8: p2 size 515840 extends beyond EOD, truncated [ 538.392893][ T4566] loop8: p4 start 16777216 is beyond EOD, truncated [ 538.421832][ T9023] loop8: p1 p2 p4 < > [ 538.425965][ T9023] loop8: partition table partially beyond EOD, truncated [ 538.433774][ T9023] loop8: p1 start 16777216 is beyond EOD, truncated [ 538.440564][ T9023] loop8: p2 size 515840 extends beyond EOD, truncated [ 538.449013][ T9023] loop8: p4 start 16777216 is beyond EOD, truncated [ 538.561068][ T4566] udevd[4566]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 538.586247][ T4566] udevd[4566]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 538.866087][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14873'. [ 538.897928][ T9125] bridge_slave_1: left allmulticast mode [ 538.903702][ T9125] bridge_slave_1: left promiscuous mode [ 538.909478][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.920663][ T9130] netlink: 76 bytes leftover after parsing attributes in process `syz.6.14876'. [ 538.933189][ T9125] bridge_slave_0: left allmulticast mode [ 538.939002][ T9125] bridge_slave_0: left promiscuous mode [ 538.944699][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.183950][ T3479] kernel write not supported for file bpf-prog (pid: 3479 comm: kworker/1:7) [ 539.422590][ T9166] dvmrp6: entered allmulticast mode [ 539.532810][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 539.532831][ T29] audit: type=1326 audit(2000002129.729:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.7.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 539.576959][ T29] audit: type=1326 audit(2000002129.729:5947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.7.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 539.600587][ T29] audit: type=1326 audit(2000002129.739:5948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.7.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 539.624203][ T29] audit: type=1400 audit(2000002129.739:5949): avc: denied { setattr } for pid=9177 comm="syz.7.14897" name="file0" dev="tmpfs" ino=13226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 539.647019][ T29] audit: type=1326 audit(2000002129.739:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.7.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 539.670699][ T29] audit: type=1326 audit(2000002129.739:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.7.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 539.926060][ T29] audit: type=1326 audit(2000002130.119:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9190 comm="syz.7.14903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x0 [ 540.069708][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14906'. [ 540.091286][ T9199] xfrm1: entered promiscuous mode [ 540.096476][ T9199] xfrm1: entered allmulticast mode [ 540.108354][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14906'. [ 540.302811][ T9216] lo speed is unknown, defaulting to 1000 [ 540.303327][ T29] audit: type=1400 audit(2000002130.499:5953): avc: denied { read } for pid=9217 comm="syz.8.14915" path="socket:[138474]" dev="sockfs" ino=138474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 540.361970][ T9223] loop8: detected capacity change from 0 to 512 [ 540.378654][ T9223] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 540.414340][ T9223] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.478663][ T9223] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 540.571162][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.793788][ T9251] loop3: detected capacity change from 0 to 512 [ 540.814909][ T9216] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 540.821225][ T9251] EXT4-fs: Ignoring removed i_version option [ 540.836698][ T9251] EXT4-fs: Ignoring removed nobh option [ 540.866354][ T9251] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 540.919360][ T9251] EXT4-fs (loop3): 1 truncate cleaned up [ 540.942671][ T9251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.027382][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.113846][ T9273] gretap3: entered allmulticast mode [ 541.242051][ T29] audit: type=1326 audit(2000002131.439:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.7.14938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 541.265727][ T29] audit: type=1326 audit(2000002131.439:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.7.14938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 541.481891][ T9295] netlink: 68 bytes leftover after parsing attributes in process `syz.9.14944'. [ 541.689313][ T9316] loop8: detected capacity change from 0 to 1024 [ 541.697255][ T9316] EXT4-fs: Ignoring removed orlov option [ 541.703970][ T9316] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 541.720790][ T9316] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.763749][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.786234][ T9317] loop3: detected capacity change from 0 to 2048 [ 541.795363][ T9325] syzkaller1: entered promiscuous mode [ 541.801030][ T9325] syzkaller1: entered allmulticast mode [ 541.830572][ T9317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 541.886958][ T9317] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 541.918883][ T9317] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 541.931520][ T9317] EXT4-fs (loop3): This should not happen!! Data will be lost [ 541.931520][ T9317] [ 541.941299][ T9317] EXT4-fs (loop3): Total free blocks count 0 [ 541.947367][ T9317] EXT4-fs (loop3): Free/Dirty block details [ 541.953300][ T9317] EXT4-fs (loop3): free_blocks=2415919104 [ 541.959137][ T9317] EXT4-fs (loop3): dirty_blocks=32 [ 541.964346][ T9317] EXT4-fs (loop3): Block reservation details [ 541.970376][ T9317] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 541.980693][ T9337] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000900. [ 541.995757][ T9338] syzkaller1: entered promiscuous mode [ 542.001413][ T9338] syzkaller1: entered allmulticast mode [ 542.080060][ T9345] loop6: detected capacity change from 0 to 256 [ 542.091033][ T9345] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 542.185114][ T9350] SELinux: ebitmap start bit (280) is not a multiple of the map unit size (64) [ 542.217322][ T9350] SELinux: failed to load policy [ 542.254844][ T9358] loop8: detected capacity change from 0 to 512 [ 542.300149][ T9358] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.14963: bg 0: block 248: padding at end of block bitmap is not set [ 542.344692][ T9374] loop3: detected capacity change from 0 to 128 [ 542.378315][ T9358] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.14963: Failed to acquire dquot type 1 [ 542.390106][ T9374] EXT4-fs: Ignoring removed nobh option [ 542.397699][ T9374] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 542.447569][ T9358] EXT4-fs (loop8): 1 truncate cleaned up [ 542.467636][ T9358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.551549][ T9374] ext4 filesystem being mounted at /222/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 542.562396][ T9358] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.580148][ T9405] loop9: detected capacity change from 0 to 512 [ 542.613814][ T9405] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.639804][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.659953][ T12] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 542.675357][ T9405] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 542.686921][ T5816] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 542.757019][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14977'. [ 542.766134][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14977'. [ 542.778361][ T3479] hid_parser_main: 20 callbacks suppressed [ 542.778380][ T3479] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 542.793439][ T3479] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 542.928675][ T8451] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.964878][ T9431] syzkaller1: entered promiscuous mode [ 542.970562][ T9431] syzkaller1: entered allmulticast mode [ 542.995468][ T9436] netlink: 56 bytes leftover after parsing attributes in process `syz.9.14982'. [ 543.111527][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14987'. [ 543.182187][ T9453] loop6: detected capacity change from 0 to 512 [ 543.199033][ T9453] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 543.224970][ T9453] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.14990: inode has both inline data and extents flags [ 543.239289][ T9453] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.14990: couldn't read orphan inode 17 (err -117) [ 543.272498][ T9453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.295427][ T9463] loop8: detected capacity change from 0 to 256 [ 543.314936][ T9463] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 543.336357][ T9453] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.14990: bg 0: block 65: padding at end of block bitmap is not set [ 543.353433][ T9453] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.14990: Failed to acquire dquot type 0 [ 543.379097][ T5842] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.389041][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15018'. [ 544.398143][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15018'. [ 544.407207][ T9532] netlink: 'syz.6.15018': attribute type 12 has an invalid length. [ 544.488154][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15018'. [ 544.497188][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15018'. [ 544.506225][ T9532] netlink: 'syz.6.15018': attribute type 12 has an invalid length. [ 544.547068][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 544.547085][ T29] audit: type=1326 audit(2000002134.739:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9551 comm="syz.8.15023" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9e41acb9 code=0x0 [ 544.916908][ T29] audit: type=1400 audit(2000002135.109:6001): avc: denied { unmount } for pid=9589 comm="syz.7.15038" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 545.219612][ T9624] netlink: 'syz.3.15053': attribute type 16 has an invalid length. [ 545.227659][ T9624] netlink: 'syz.3.15053': attribute type 17 has an invalid length. [ 545.249087][ T9618] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 545.254486][ T9626] netlink: 'syz.7.15054': attribute type 1 has an invalid length. [ 545.258023][ T9618] FAT-fs (loop6): Filesystem has been set read-only [ 545.316072][ T29] audit: type=1326 audit(2000002135.509:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9628 comm="syz.7.15056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 545.343759][ T29] audit: type=1326 audit(2000002135.539:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9628 comm="syz.7.15056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 545.345794][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.367902][ T29] audit: type=1326 audit(2000002135.539:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9628 comm="syz.7.15056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 545.374749][ T9624] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.398300][ T29] audit: type=1326 audit(2000002135.539:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9628 comm="syz.7.15056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 545.428345][ T29] audit: type=1326 audit(2000002135.539:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9628 comm="syz.7.15056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 545.451969][ T29] audit: type=1326 audit(2000002135.539:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9628 comm="syz.7.15056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 545.476121][ T29] audit: type=1326 audit(2000002135.539:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9628 comm="syz.7.15056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 545.499652][ T29] audit: type=1326 audit(2000002135.539:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9628 comm="syz.7.15056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 545.677988][ T9624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.690551][ T9624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.957458][ T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.966014][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.989922][ T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.998458][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.017163][ T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.025845][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.196411][ T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.204949][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.213516][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15067'. [ 546.596038][ T9704] set_capacity_and_notify: 1 callbacks suppressed [ 546.596055][ T9704] loop8: detected capacity change from 0 to 1024 [ 546.619805][ T9704] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.671649][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.745689][ T9726] loop8: detected capacity change from 0 to 512 [ 546.765670][ T9726] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 546.812040][ T9726] EXT4-fs warning (device loop8): dx_probe:837: inode #2: comm syz.8.15092: Unimplemented hash flags: 0x0001 [ 546.823738][ T9726] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.15092: Corrupt directory, running e2fsck is recommended [ 546.842478][ T9726] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 3: comm syz.8.15092: path /165/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 546.997349][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.046662][ T9745] loop9: detected capacity change from 0 to 1024 [ 547.057026][ T9742] loop8: detected capacity change from 0 to 2048 [ 547.091298][ T9745] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 547.091683][ T9742] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.111343][ T9745] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.297820][ T9741] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 547.347151][ T9741] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 96 with max blocks 24 with error 28 [ 547.359730][ T9741] EXT4-fs (loop8): This should not happen!! Data will be lost [ 547.359730][ T9741] [ 547.369473][ T9741] EXT4-fs (loop8): Total free blocks count 0 [ 547.375474][ T9741] EXT4-fs (loop8): Free/Dirty block details [ 547.381527][ T9741] EXT4-fs (loop8): free_blocks=2415919504 [ 547.387264][ T9741] EXT4-fs (loop8): dirty_blocks=32 [ 547.392511][ T9741] EXT4-fs (loop8): Block reservation details [ 547.398610][ T9741] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 547.401946][ T9770] netlink: 'syz.3.15107': attribute type 1 has an invalid length. [ 547.434043][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.458017][ T9770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 547.577884][ T9781] __nla_validate_parse: 3 callbacks suppressed [ 547.577904][ T9781] netlink: 67 bytes leftover after parsing attributes in process `syz.3.15111'. [ 547.753659][ T9791] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 547.899904][ T9796] loop3: detected capacity change from 0 to 512 [ 547.923453][ T9796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.940498][ T9796] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 547.953866][ T9796] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.15118: corrupted inode contents [ 547.966366][ T9796] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.15118: mark_inode_dirty error [ 547.978147][ T9796] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.15118: corrupted inode contents [ 547.982969][ T9745] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 3: comm syz.9.15100: lblock 3 mapped to illegal pblock 3 (length 3) [ 548.004839][ T9796] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.15118: mark_inode_dirty error [ 548.022353][ T9796] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #18: comm syz.3.15118: directory missing '.' [ 548.055226][ T9745] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 548.067683][ T9745] EXT4-fs (loop9): This should not happen!! Data will be lost [ 548.067683][ T9745] [ 548.085987][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.158652][T32713] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:18: lblock 8 mapped to illegal pblock 8 (length 8) [ 548.174063][T32713] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 548.186412][T32713] EXT4-fs (loop9): This should not happen!! Data will be lost [ 548.186412][T32713] [ 548.230159][T32713] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:18: bg 0: block 112: padding at end of block bitmap is not set [ 548.266472][T32713] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 548.279326][T32713] EXT4-fs (loop9): This should not happen!! Data will be lost [ 548.279326][T32713] [ 548.289055][T32713] EXT4-fs (loop9): Total free blocks count 0 [ 548.295251][T32713] EXT4-fs (loop9): Free/Dirty block details [ 548.301253][T32713] EXT4-fs (loop9): free_blocks=0 [ 548.368348][ T9823] netlink: 'syz.7.15129': attribute type 6 has an invalid length. [ 548.642372][ T9857] netlink: 'syz.8.15144': attribute type 16 has an invalid length. [ 548.650498][ T9857] netlink: 'syz.8.15144': attribute type 17 has an invalid length. [ 548.909428][ T9857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.920241][ T9857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.030708][ T12] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.039769][ T12] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.151450][ T12] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.160443][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.182972][ T12] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.192178][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.201390][ T12] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.210455][ T12] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.241238][ T9873] netlink: 60 bytes leftover after parsing attributes in process `syz.9.15149'. [ 549.334960][ T9878] loop9: detected capacity change from 0 to 512 [ 549.363607][ T9878] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 549.460062][ T9878] EXT4-fs (loop9): 1 truncate cleaned up [ 549.466067][ T9878] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.600990][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 549.601008][ T29] audit: type=1326 audit(2000002139.799:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.7.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 549.632006][ T29] audit: type=1326 audit(2000002139.829:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.7.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 549.632713][ T8451] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.678515][ T29] audit: type=1326 audit(2000002139.859:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.7.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 549.702110][ T29] audit: type=1326 audit(2000002139.859:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.7.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 549.725824][ T29] audit: type=1326 audit(2000002139.859:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.7.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 549.749409][ T29] audit: type=1326 audit(2000002139.859:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.7.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 549.773018][ T29] audit: type=1326 audit(2000002139.859:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.7.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 549.796620][ T29] audit: type=1326 audit(2000002139.859:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.7.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 549.820247][ T29] audit: type=1326 audit(2000002139.859:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.7.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 549.843938][ T29] audit: type=1326 audit(2000002139.859:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.7.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 549.883171][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15156'. [ 549.892273][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15156'. [ 549.901428][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15156'. [ 549.972877][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15160'. [ 549.982006][ T9897] netlink: 'syz.7.15160': attribute type 26 has an invalid length. [ 549.990025][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15160'. [ 550.000007][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15160'. [ 550.009155][ T9897] netlink: 'syz.7.15160': attribute type 26 has an invalid length. [ 550.017164][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15160'. [ 550.041743][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15156'. [ 550.088906][ T9900] lo speed is unknown, defaulting to 1000 [ 550.159221][ T9913] netlink: 'syz.8.15166': attribute type 8 has an invalid length. [ 550.190598][ T9913] bond0: entered promiscuous mode [ 550.195693][ T9913] bond_slave_0: entered promiscuous mode [ 550.201494][ T9913] bond_slave_1: entered promiscuous mode [ 550.245048][ T9913] gretap0: entered promiscuous mode [ 550.259739][ T9913] bond0: left promiscuous mode [ 550.264630][ T9913] bond_slave_0: left promiscuous mode [ 550.270183][ T9913] bond_slave_1: left promiscuous mode [ 550.280836][ T9913] gretap0: left promiscuous mode [ 550.634795][ T9952] netlink: 'syz.8.15181': attribute type 13 has an invalid length. [ 550.738971][ T9960] ip6gre2: entered allmulticast mode [ 550.950056][ T9983] netlink: 'syz.6.15195': attribute type 13 has an invalid length. [ 551.017466][ T9983] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.024808][ T9983] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.084971][ T9983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.221147][ T52] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.229686][ T52] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.266171][ T52] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.274713][ T52] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.289867][ T52] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.298345][ T52] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.307471][ T52] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.315975][ T52] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.351700][T32477] kernel write not supported for file [eventfd] (pid: 32477 comm: kworker/1:16) [ 551.936878][T10063] netlink: 'syz.7.15226': attribute type 10 has an invalid length. [ 552.209654][T10087] netlink: 'syz.7.15236': attribute type 18 has an invalid length. [ 552.217995][T10087] netlink: 'syz.7.15236': attribute type 18 has an invalid length. [ 552.357904][T10093] syzkaller1: entered promiscuous mode [ 552.363511][T10093] syzkaller1: entered allmulticast mode [ 552.428812][T10097] netlink: 'syz.3.15241': attribute type 7 has an invalid length. [ 552.437161][T10097] netlink: 'syz.3.15241': attribute type 7 has an invalid length. [ 552.782375][T10128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.790622][T10128] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.799864][T10128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.984525][T10149] __nla_validate_parse: 16 callbacks suppressed [ 552.984540][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15265'. [ 553.021941][T10149] macsec2: entered promiscuous mode [ 553.027209][T10149] erspan0: entered promiscuous mode [ 553.032549][T10149] macsec2: entered allmulticast mode [ 553.037904][T10149] erspan0: entered allmulticast mode [ 553.409257][T10188] loop9: detected capacity change from 0 to 512 [ 553.416343][T10188] EXT4-fs: Ignoring removed nobh option [ 553.442014][T10188] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.461863][T10188] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 553.473278][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15281'. [ 553.486030][T10195] macvlan2: entered promiscuous mode [ 553.491393][T10195] hsr0: entered promiscuous mode [ 553.496436][T10195] macvlan2: entered allmulticast mode [ 553.501930][T10195] hsr0: entered allmulticast mode [ 553.507046][T10195] hsr_slave_0: entered allmulticast mode [ 553.512867][T10195] hsr_slave_1: entered allmulticast mode [ 553.563504][ T8451] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.598558][T10201] vlan2: entered allmulticast mode [ 553.603821][T10201] bond0: entered allmulticast mode [ 553.609144][T10201] bond_slave_0: entered allmulticast mode [ 553.614930][T10201] bond_slave_1: entered allmulticast mode [ 553.629514][T10201] netlink: 14 bytes leftover after parsing attributes in process `syz.9.15284'. [ 553.652411][T10201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.661771][T10201] bond_slave_0: left allmulticast mode [ 553.669974][T10201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.679352][T10201] bond_slave_1: left allmulticast mode [ 553.686374][T10201] bond0 (unregistering): Released all slaves [ 553.958675][T10219] gretap0: left promiscuous mode [ 553.971277][T10219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.980255][T10219] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.993147][T10219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.009067][T32477] lo speed is unknown, defaulting to 1000 [ 554.014987][T32477] syz1: Port: 1 Link ACTIVE [ 554.024776][ T23] lo speed is unknown, defaulting to 1000 [ 554.139513][T10236] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.15300'. [ 554.190839][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15303'. [ 554.199994][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15303'. [ 554.212847][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15303'. [ 554.217102][ T1708] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.222142][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15303'. [ 554.232096][ T1708] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.277862][ T1708] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.288060][ T1708] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.947958][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15323'. [ 555.000356][T10283] macvlan2: entered promiscuous mode [ 555.005956][T10283] hsr0: entered promiscuous mode [ 555.011119][T10283] macvlan2: entered allmulticast mode [ 555.016664][T10283] hsr0: entered allmulticast mode [ 555.021762][T10283] hsr_slave_0: entered allmulticast mode [ 555.027420][T10283] hsr_slave_1: entered allmulticast mode [ 555.043090][T10289] validate_nla: 5 callbacks suppressed [ 555.043109][T10289] netlink: 'syz.8.15324': attribute type 21 has an invalid length. [ 555.056666][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15324'. [ 555.066446][T10289] netlink: 'syz.8.15324': attribute type 21 has an invalid length. [ 555.116334][T10300] ip6gre3: entered promiscuous mode [ 555.121778][T10300] ip6gre3: entered allmulticast mode [ 555.157272][T10309] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 555.169748][ T2032] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 555.177377][ T2032] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 555.180336][T10311] loop9: detected capacity change from 0 to 128 [ 555.211083][T10311] FAT-fs (loop9): Directory bread(block 414) failed [ 555.214962][ T9543] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 555.219601][T10311] FAT-fs (loop9): Directory bread(block 415) failed [ 555.232264][T10311] FAT-fs (loop9): Directory bread(block 416) failed [ 555.240477][T10311] FAT-fs (loop9): Directory bread(block 417) failed [ 555.247277][T10311] FAT-fs (loop9): Directory bread(block 418) failed [ 555.254529][T10311] FAT-fs (loop9): Directory bread(block 419) failed [ 555.261309][T10311] FAT-fs (loop9): Directory bread(block 420) failed [ 555.286133][T10311] FAT-fs (loop9): Directory bread(block 421) failed [ 555.753598][ T2032] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.771049][ T2032] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.790523][ T2032] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.806547][ T2032] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.098041][ T9547] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 556.105916][ T9547] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 556.720925][T10445] bond1: (slave lo): Releasing backup interface [ 556.744959][T10445] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 556.810125][T10445] bridge_slave_0: left allmulticast mode [ 556.815857][T10445] bridge_slave_0: left promiscuous mode [ 556.821577][T10445] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.841047][T10445] bridge_slave_1: left allmulticast mode [ 556.846790][T10445] bridge_slave_1: left promiscuous mode [ 556.852643][T10445] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.868360][T10445] bond0: (slave bond_slave_0): Releasing backup interface [ 556.877289][T10445] bond0: (slave bond_slave_1): Releasing backup interface [ 556.887488][T10445] team0: Port device team_slave_0 removed [ 556.897246][T10445] team0: Port device team_slave_1 removed [ 556.904227][T10445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.912110][T10445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.919881][T10445] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 557.408660][T10461] loop3: detected capacity change from 0 to 2048 [ 557.439763][T10461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.488136][T10461] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 557.513428][T10461] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 31 with max blocks 33 with error 28 [ 557.526099][T10461] EXT4-fs (loop3): This should not happen!! Data will be lost [ 557.526099][T10461] [ 557.535847][T10461] EXT4-fs (loop3): Total free blocks count 0 [ 557.541908][T10461] EXT4-fs (loop3): Free/Dirty block details [ 557.547898][T10461] EXT4-fs (loop3): free_blocks=2415919504 [ 557.553667][T10461] EXT4-fs (loop3): dirty_blocks=48 [ 557.558950][T10461] EXT4-fs (loop3): Block reservation details [ 557.564957][T10461] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 557.619526][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.959722][T10506] veth2: entered promiscuous mode [ 557.964872][T10506] veth2: entered allmulticast mode [ 557.974625][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 557.974642][ T29] audit: type=1326 audit(2000002148.169:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.7.15415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 558.009005][ T29] audit: type=1326 audit(2000002148.169:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.7.15415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 558.032772][ T29] audit: type=1326 audit(2000002148.199:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.7.15415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 558.057744][ T29] audit: type=1326 audit(2000002148.199:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.7.15415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 558.081465][ T29] audit: type=1326 audit(2000002148.219:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.7.15415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 558.105221][ T29] audit: type=1326 audit(2000002148.219:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.7.15415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 558.129132][ T29] audit: type=1326 audit(2000002148.219:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.7.15415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 558.152934][ T29] audit: type=1326 audit(2000002148.219:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10508 comm="syz.7.15415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 558.218858][T10520] __nla_validate_parse: 8 callbacks suppressed [ 558.218879][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15419'. [ 558.273529][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15420'. [ 558.325802][T10525] bond3: entered promiscuous mode [ 558.331495][T10525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 558.357310][T10525] 8021q: adding VLAN 0 to HW filter on device bond4 [ 558.367555][T10525] bond4: entered promiscuous mode [ 558.375962][T10525] bond3: (slave bond4): Enslaving as an active interface with an up link [ 558.409181][ T29] audit: type=1326 audit(2000002148.609:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.7.15427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 558.447619][ T29] audit: type=1326 audit(2000002148.609:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.7.15427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 558.906129][T10595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15445'. [ 558.915388][T10595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15445'. [ 559.595549][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.607947][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 559.630191][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.206500][T10669] netlink: 'syz.9.15478': attribute type 1 has an invalid length. [ 560.259259][T10669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.285034][T10672] bond0: (slave geneve2): making interface the new active one [ 560.304258][T10672] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 560.901805][T10698] xt_hashlimit: max too large, truncated to 1048576 [ 560.926392][T10698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15488'. [ 560.956815][ T2032] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.965751][ T2032] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.981225][ T2032] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.010850][ T2032] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.439291][T10706] bridge_slave_0: left allmulticast mode [ 561.445160][T10706] bridge_slave_0: left promiscuous mode [ 561.451105][T10706] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.520490][T10706] bridge_slave_1: left allmulticast mode [ 561.526215][T10706] bridge_slave_1: left promiscuous mode [ 561.532042][T10706] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.556136][T10709] loop3: detected capacity change from 0 to 128 [ 561.630040][T10706] team0: Port device team_slave_0 removed [ 561.694616][T10706] team0: Port device team_slave_1 removed [ 561.837924][T10706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.845373][T10706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.943017][T10706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.950548][T10706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.961374][T10706] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 562.081158][T10732] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.15502'. [ 562.093707][T10734] netlink: 'syz.3.15503': attribute type 1 has an invalid length. [ 562.113603][T10736] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15504'. [ 562.159209][T10734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.185429][T10743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.209379][T10743] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 562.241468][T10743] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 562.266910][T10753] netlink: 92 bytes leftover after parsing attributes in process `syz.7.15510'. [ 562.568808][T10794] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.15528'. [ 563.180107][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 563.180126][ T29] audit: type=1326 audit(2000002153.379:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.7.15545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 563.252294][ T29] audit: type=1326 audit(2000002153.409:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.7.15545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 563.275978][ T29] audit: type=1326 audit(2000002153.409:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.7.15545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 563.299717][ T29] audit: type=1326 audit(2000002153.409:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.7.15545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 563.323453][ T29] audit: type=1326 audit(2000002153.409:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.7.15545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 563.347212][ T29] audit: type=1326 audit(2000002153.409:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.7.15545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 563.370920][ T29] audit: type=1326 audit(2000002153.409:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.7.15545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 563.394683][ T29] audit: type=1326 audit(2000002153.409:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.7.15545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 563.418307][ T29] audit: type=1326 audit(2000002153.409:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.7.15545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 563.441923][ T29] audit: type=1326 audit(2000002153.409:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.7.15545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 563.787083][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15558'. [ 563.796151][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15558'. [ 563.864971][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15558'. [ 563.874119][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15558'. [ 563.968045][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15562'. [ 563.987120][T10878] 8021q: adding VLAN 0 to HW filter on device bond5 [ 564.074556][T10878] bond5: (slave batadv1): Opening slave failed [ 564.089153][T10852] lo speed is unknown, defaulting to 1000 [ 564.343521][T10908] netlink: 'syz.3.15574': attribute type 13 has an invalid length. [ 564.351565][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15574'. [ 564.426209][T10908] netlink: 'syz.3.15574': attribute type 13 has an invalid length. [ 564.434206][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15574'. [ 564.919829][T10959] loop8: detected capacity change from 0 to 256 [ 564.944965][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15595'. [ 564.954155][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15595'. [ 565.037917][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15595'. [ 565.094785][T10950] loop3: detected capacity change from 0 to 512 [ 565.192104][T10980] netlink: 'syz.8.15604': attribute type 1 has an invalid length. [ 565.245562][T10980] bond2: (slave geneve3): making interface the new active one [ 565.253703][T10980] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 565.262436][ T2032] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 565.287921][ T2032] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 565.296750][ T2032] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 565.307849][T10950] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 565.369531][ T2032] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 565.431819][T10950] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 565.443187][T10950] System zones: 1-12 [ 565.831788][T10950] EXT4-fs (loop3): 1 truncate cleaned up [ 565.898770][T10950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.662050][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.059187][T11049] netlink: 'syz.3.15630': attribute type 2 has an invalid length. [ 567.098198][T11049] netlink: 'syz.3.15630': attribute type 2 has an invalid length. [ 567.728392][T11068] loop3: detected capacity change from 0 to 1024 [ 567.755760][T11068] EXT4-fs: Ignoring removed bh option [ 567.812547][T11068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.877115][T11068] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.15637: Allocating blocks 385-513 which overlap fs metadata [ 567.950237][T11068] EXT4-fs (loop3): pa ffff888107e24cb0: logic 16, phys. 129, len 24 [ 567.958451][T11068] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 568.054114][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.737911][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 569.086461][T11112] geneve3: entered promiscuous mode [ 569.283820][T11129] __nla_validate_parse: 2 callbacks suppressed [ 569.283840][T11129] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15656'. [ 569.326139][T11114] gre1: entered promiscuous mode [ 569.788992][T11162] netlink: 76 bytes leftover after parsing attributes in process `syz.8.15671'. [ 570.359978][T11183] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15679'. [ 570.404310][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15680'. [ 570.422063][T11185] 8021q: adding VLAN 0 to HW filter on device bond4 [ 570.435899][T11185] bond4: Unable to set up delay as MII monitoring is disabled [ 570.466544][T11188] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15681'. [ 570.490368][T11190] loop3: detected capacity change from 0 to 256 [ 570.509309][T11190] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 570.787367][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 570.787382][ T29] audit: type=1326 audit(2000002160.979:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.9.15694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5798faacb9 code=0x7ffc0000 [ 570.917919][ T29] audit: type=1326 audit(2000002160.979:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.9.15694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5798faacb9 code=0x7ffc0000 [ 570.941653][ T29] audit: type=1326 audit(2000002161.009:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.9.15694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5798faacb9 code=0x7ffc0000 [ 570.965296][ T29] audit: type=1326 audit(2000002161.019:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.9.15694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5798faacb9 code=0x7ffc0000 [ 570.989040][ T29] audit: type=1326 audit(2000002161.019:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.9.15694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5798faacb9 code=0x7ffc0000 [ 571.012758][ T29] audit: type=1326 audit(2000002161.029:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.9.15694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5798faacb9 code=0x7ffc0000 [ 571.036414][ T29] audit: type=1326 audit(2000002161.029:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.9.15694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5798faacb9 code=0x7ffc0000 [ 571.060041][ T29] audit: type=1326 audit(2000002161.029:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.9.15694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f5798faacb9 code=0x7ffc0000 [ 571.083642][ T29] audit: type=1326 audit(2000002161.029:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.9.15694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5798faacb9 code=0x7ffc0000 [ 571.107226][ T29] audit: type=1326 audit(2000002161.029:6261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11215 comm="syz.9.15694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5798faacb9 code=0x7ffc0000 [ 571.468880][T11244] loop8: detected capacity change from 0 to 256 [ 571.476609][T11244] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 571.589763][T11254] netlink: 'syz.9.15706': attribute type 4 has an invalid length. [ 571.643655][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15709'. [ 571.668232][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15709'. [ 572.231547][T11285] netlink: 76 bytes leftover after parsing attributes in process `syz.8.15719'. [ 572.547235][T11314] netlink: 'syz.9.15731': attribute type 10 has an invalid length. [ 573.197257][T11316] lo speed is unknown, defaulting to 1000 [ 573.539037][T11327] loop3: detected capacity change from 0 to 512 [ 573.568429][T11327] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.15737: error while reading EA inode 32 err=-116 [ 573.582055][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15739'. [ 573.615290][T11327] EXT4-fs (loop3): Remounting filesystem read-only [ 573.624428][T11327] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 573.634701][T11327] EXT4-fs (loop3): 1 orphan inode deleted [ 573.641037][T11327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.759376][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.653617][T11372] all: renamed from bridge_slave_0 [ 574.666355][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15758'. [ 574.675465][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15758'. [ 574.913079][T11401] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 574.970361][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15768'. [ 574.991358][T11409] geneve4: entered promiscuous mode [ 574.996610][T11409] geneve4: entered allmulticast mode [ 575.003301][ T2755] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 575.049189][ T2755] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 575.064245][ T2755] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 575.084157][ T2755] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 575.145404][T11414] all: renamed from bridge_slave_0 (while UP) [ 575.202084][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15772'. [ 575.222287][T25176] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.222316][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15772'. [ 575.271135][T25176] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.289978][T25176] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.311257][T25176] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.776054][T11437] netlink: 'syz.9.15779': attribute type 1 has an invalid length. [ 575.783947][T11437] netlink: 'syz.9.15779': attribute type 4 has an invalid length. [ 575.791846][T11437] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.15779'. [ 575.863202][ T23] page_pool_release_retry() stalled pool shutdown: id 304, 1 inflight 60 sec [ 576.058698][T11447] all: renamed from bridge_slave_0 [ 576.196110][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15790'. [ 576.239093][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15790'. [ 576.411943][T11469] netlink: 'syz.8.15792': attribute type 13 has an invalid length. [ 576.578171][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15802'. [ 576.592931][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15802'. [ 576.629564][T11497] lo: Caught tx_queue_len zero misconfig [ 576.672627][T11501] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 576.683259][T11501] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 576.749247][T11501] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 576.759811][T11501] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 576.810089][T11501] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 576.820651][T11501] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 576.869614][T11501] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 576.880236][T11501] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 576.954782][ T2443] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 576.963133][ T2443] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 576.984807][ T2443] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 576.993140][ T2443] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 577.004101][ T2443] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 577.012498][ T2443] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 577.151593][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 577.151611][ T29] audit: type=1400 audit(2000002167.349:6310): avc: denied { name_connect } for pid=11532 comm="syz.6.15817" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 578.360920][T11574] netlink: 'syz.9.15834': attribute type 13 has an invalid length. [ 578.463172][T11580] loop3: detected capacity change from 0 to 128 [ 578.472043][T11580] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 322) [ 578.480404][T11580] FAT-fs (loop3): Filesystem has been set read-only [ 578.520542][T11578] gretap0: entered promiscuous mode [ 578.525864][T11581] gretap0: left promiscuous mode [ 578.652220][ T29] audit: type=1326 audit(2000002168.849:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.7.15841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 578.676689][ T29] audit: type=1326 audit(2000002168.869:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.7.15841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 578.700293][ T29] audit: type=1326 audit(2000002168.869:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.7.15841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 578.724263][ T29] audit: type=1326 audit(2000002168.869:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.7.15841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 578.749172][ T29] audit: type=1326 audit(2000002168.949:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.7.15841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 578.772887][ T29] audit: type=1326 audit(2000002168.949:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.7.15841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 578.796601][ T29] audit: type=1326 audit(2000002168.949:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.7.15841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed1b9acb9 code=0x7ffc0000 [ 578.832170][T11508] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 578.842190][T11508] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 578.900602][T11508] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 578.910633][T11508] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 578.991904][T11508] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 579.001967][T11508] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 579.056221][ T31] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 579.064665][ T31] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 579.086175][ T31] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 579.094576][ T31] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 579.103685][ T31] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 579.112065][ T31] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 579.121515][ T31] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 579.129891][ T31] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 579.160492][ T29] audit: type=1400 audit(2000002169.359:6318): avc: denied { read } for pid=11616 comm="syz.8.15852" path="socket:[144865]" dev="sockfs" ino=144865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 579.230162][ T29] audit: type=1326 audit(2000002169.429:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.3.15854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9905acb9 code=0x7ffc0000 [ 579.754990][T11644] __nla_validate_parse: 6 callbacks suppressed [ 579.755011][T11644] netlink: 64 bytes leftover after parsing attributes in process `syz.6.15861'. [ 579.927287][T11665] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15872'. [ 580.036574][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15876'. [ 580.077422][T11684] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15880'. [ 580.534618][T11733] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15899'. [ 580.556689][T11736] geneve4: entered promiscuous mode [ 580.641281][T11744] loop8: detected capacity change from 0 to 1024 [ 580.657064][T11744] EXT4-fs: Ignoring removed bh option [ 580.680777][T11744] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.705818][T11744] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 580.722629][T11744] EXT4-fs (loop8): Remounting filesystem read-only [ 580.729368][T11744] EXT4-fs warning (device loop8): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 580.758767][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.919430][T11766] loop8: detected capacity change from 0 to 512 [ 580.926619][T11766] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 580.939208][T11766] EXT4-fs (loop8): 1 truncate cleaned up [ 580.945476][T11766] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.973735][ T6781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.028362][T11771] netlink: 'syz.7.15915': attribute type 10 has an invalid length. [ 581.229693][T11794] loop9: detected capacity change from 0 to 512 [ 581.238308][T11794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 581.246564][T11794] System zones: 1-12 [ 581.251280][T11794] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.15925: corrupted in-inode xattr: e_value size too large [ 581.265748][T11794] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.15925: couldn't read orphan inode 15 (err -117) [ 581.280596][T11794] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.500189][ T8451] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.560365][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15927'. [ 581.651184][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15930'. [ 581.681200][T11811] 9p: Bad value for 'rfdno' [ 582.014401][T11830] netlink: 84 bytes leftover after parsing attributes in process `syz.6.15939'. [ 582.246618][T11845] netlink: 'syz.8.15945': attribute type 10 has an invalid length. [ 582.468560][T11853] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15948'. [ 582.509818][T11855] loop8: detected capacity change from 0 to 2048 [ 582.538560][T11857] ipip1: entered promiscuous mode [ 582.570910][T11855] Alternate GPT is invalid, using primary GPT. [ 582.577354][T11855] loop8: p2 p3 p7 [ 583.575231][T11909] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15972'. [ 583.754394][T11924] loop3: detected capacity change from 0 to 512 [ 583.771916][T11924] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 583.786070][T11927] loop9: detected capacity change from 0 to 512 [ 583.809592][T11927] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.826773][T11927] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 583.852758][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 583.852771][ T29] audit: type=1326 audit(2000002174.049:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.6.15982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21fb0acb9 code=0x7ffc0000 [ 583.884609][ T8451] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.903120][ T29] audit: type=1326 audit(2000002174.079:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.6.15982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21fb0acb9 code=0x7ffc0000 [ 583.926769][ T29] audit: type=1326 audit(2000002174.079:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.6.15982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21fb0acb9 code=0x7ffc0000 [ 583.950634][ T29] audit: type=1326 audit(2000002174.079:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.6.15982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21fb0acb9 code=0x7ffc0000 [ 583.974431][ T29] audit: type=1326 audit(2000002174.079:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.6.15982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa21fb0acb9 code=0x7ffc0000 [ 583.998213][ T29] audit: type=1326 audit(2000002174.079:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.6.15982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21fb0acb9 code=0x7ffc0000 [ 584.021993][ T29] audit: type=1326 audit(2000002174.079:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.6.15982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21fb0acb9 code=0x7ffc0000 [ 584.045608][ T29] audit: type=1326 audit(2000002174.079:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.6.15982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21fb0acb9 code=0x7ffc0000 [ 584.069573][ T29] audit: type=1326 audit(2000002174.079:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.6.15982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fa21fb0acb9 code=0x7ffc0000 [ 584.093073][ T29] audit: type=1326 audit(2000002174.079:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11934 comm="syz.6.15982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21fb0acb9 code=0x7ffc0000 [ 584.094278][T11943] netlink: 'syz.6.15985': attribute type 12 has an invalid length. [ 584.127979][T11943] netlink: 'syz.6.15985': attribute type 12 has an invalid length. [ 584.142934][T11944] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 584.204683][T11950] netlink: 'syz.9.15988': attribute type 13 has an invalid length. [ 584.226304][T11950] gretap0: refused to change device tx_queue_len [ 584.238544][T11950] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 584.370210][T11968] veth0: entered promiscuous mode [ 584.562654][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 584.812884][T12001] netlink: 'syz.6.16010': attribute type 29 has an invalid length. [ 584.851766][T12001] netlink: 'syz.6.16010': attribute type 29 has an invalid length. [ 584.869057][T12006] __nla_validate_parse: 3 callbacks suppressed [ 584.869075][T12006] netlink: 104 bytes leftover after parsing attributes in process `syz.8.16011'. [ 584.893236][T12001] netlink: 500 bytes leftover after parsing attributes in process `syz.6.16010'. [ 585.181148][T12035] rdma_op ffff8881ae7f1d80 conn xmit_rdma 0000000000000000 [ 585.365374][T12060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16031'. [ 585.446258][T12066] loop3: detected capacity change from 0 to 128 [ 585.462419][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16034'. [ 585.485303][T12066] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 585.495728][T12068] team1: entered promiscuous mode [ 585.502883][T12068] team1: entered allmulticast mode [ 585.508642][T12068] 8021q: adding VLAN 0 to HW filter on device team1 [ 585.568469][T12066] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.604564][ T5816] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 585.710464][T12088] loop9: detected capacity change from 0 to 512 [ 585.726718][T12088] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 585.735311][T12088] EXT4-fs (loop9): invalid journal inode [ 585.747864][T12088] EXT4-fs (loop9): can't get journal size [ 585.754591][T12088] EXT4-fs (loop9): 1 truncate cleaned up [ 585.764244][T12088] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.852107][ T8451] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.996861][T12112] loop9: detected capacity change from 0 to 128 [ 586.018336][T12112] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 586.060282][T12112] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 586.226259][T12127] bridge_slave_0: Caught tx_queue_len zero misconfig [ 586.323693][T12119] ================================================================== [ 586.331833][T12119] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 586.339073][T12119] [ 586.341422][T12119] write to 0xffff88811b029414 of 4 bytes by task 12112 on cpu 1: [ 586.349169][T12119] __xa_set_mark+0x172/0x1a0 [ 586.353806][T12119] __folio_mark_dirty+0x383/0x490 [ 586.358878][T12119] mark_buffer_dirty+0x11e/0x200 [ 586.363865][T12119] block_write_end+0x12d/0x210 [ 586.368684][T12119] generic_write_end+0x56/0x150 [ 586.373570][T12119] fat_write_end+0x4f/0x160 [ 586.378116][T12119] generic_perform_write+0x311/0x490 [ 586.383449][T12119] __generic_file_write_iter+0x9e/0x120 [ 586.389069][T12119] generic_file_write_iter+0x8d/0x310 [ 586.394481][T12119] iter_file_splice_write+0x6bc/0xa80 [ 586.399886][T12119] direct_splice_actor+0x156/0x2a0 [ 586.405041][T12119] splice_direct_to_actor+0x311/0x670 [ 586.410432][T12119] do_splice_direct+0x119/0x1a0 [ 586.415313][T12119] do_sendfile+0x380/0x650 [ 586.419761][T12119] __x64_sys_sendfile64+0x105/0x150 [ 586.424991][T12119] x64_sys_call+0x2db1/0x3000 [ 586.429715][T12119] do_syscall_64+0xc0/0x2a0 [ 586.434260][T12119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.440186][T12119] [ 586.442561][T12119] read to 0xffff88811b029414 of 4 bytes by task 12119 on cpu 0: [ 586.450257][T12119] xas_find_marked+0x5d7/0x620 [ 586.455084][T12119] find_get_entry+0x5d/0x380 [ 586.459719][T12119] filemap_get_folios_tag+0xb6/0x230 [ 586.465053][T12119] file_write_and_wait_range+0x20c/0x2f0 [ 586.470729][T12119] __generic_file_fsync+0x46/0x160 [ 586.475871][T12119] fat_file_fsync+0x49/0x100 [ 586.480509][T12119] vfs_fsync_range+0x10d/0x130 [ 586.485363][T12119] generic_file_write_iter+0x1ba/0x310 [ 586.490890][T12119] iter_file_splice_write+0x6bc/0xa80 [ 586.496388][T12119] direct_splice_actor+0x156/0x2a0 [ 586.501543][T12119] splice_direct_to_actor+0x311/0x670 [ 586.506953][T12119] do_splice_direct+0x119/0x1a0 [ 586.511897][T12119] do_sendfile+0x380/0x650 [ 586.516354][T12119] __x64_sys_sendfile64+0x105/0x150 [ 586.521593][T12119] x64_sys_call+0x2db1/0x3000 [ 586.526313][T12119] do_syscall_64+0xc0/0x2a0 [ 586.530844][T12119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.536870][T12119] [ 586.539221][T12119] value changed: 0x04000021 -> 0x0e000021 [ 586.544967][T12119] [ 586.547404][T12119] Reported by Kernel Concurrency Sanitizer on: [ 586.553583][T12119] CPU: 0 UID: 0 PID: 12119 Comm: syz.9.16051 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 586.565071][T12119] Tainted: [W]=WARN [ 586.568897][T12119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 586.578988][T12119] ================================================================== [ 586.919675][ T1660] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 587.288154][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 594.167866][ T23] page_pool_release_retry() stalled pool shutdown: id 323, 1 inflight 60 sec