last executing test programs: 17.120889573s ago: executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='dots,dots,dots,dots,nfs,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,nodots,umask=00000000000000000004267,check=strict,nodots,dots,dots,umask=00000000000000000077777,no2^ts,dots,tz=UTC,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,showexec,nodots,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r0 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x66, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x29424, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3d4a}, 0x200, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec06000000000000002176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f3cc2b0da31fa21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bca84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e03564f7f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf05003f6cded6a2f8550b973b818184ebad0485fbaa816e3b26199d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c10a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d02000000a3ff4f8a4cf796b07a6ff61c5d52417fd703f7f14d8b78ac02ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c9ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12289ee34463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b0030000000000ea8809820000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f55e550fafa4cedd763ada3104f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ef1b71c1d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efc794874eac73381e6f523d9c8c21578fe3245097c280abe51427b9f6cd72b51b7689969c72fb632d1c072492d9da6d0252803c66730cd5eac907f09b9695906313f88735fce513974a24eee239baa91322608c6fc01e1b9e16587bb5f721303e6b89000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692baffffffff5c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b042d84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf53928867d596987024952b698d4a01c08aca45ea8727be6c8bc8fdcdff1917db98f152625b8465bc46dbe9762d1183ec79f4ab393541a6d9cabc4de71c5a65d228e4cb483cca06858dc6727c7a2322c9580d9afc33f6fcf87518ecca6dd027cb995f1eb4e98e4b500b5843d4ee1"], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = semget$private(0x0, 0x5, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r3, 0x40, 0x2003) semop(0x0, &(0x7f0000000140)=[{0x0, 0xd90d}], 0x1) syncfs(r2) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) semtimedop(r4, &(0x7f0000000640)=[{0x0, 0xafc}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000600)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f00000003c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, 0x0, 0x0) 16.000262616s ago: executing program 3: writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a75126", 0x2b}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @remote}, {0x0, @broadcast}, 0x1c, {0x2, 0x0, @dev}, 'bond_slave_0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0x55}], 0x1, 0xffff, 0x0) 15.97370923s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x11, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 14.262397406s ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f043608eee812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1529fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') socket$inet_udp(0x2, 0x2, 0x0) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 14.210801594s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000001d00010000000000000000000700000045"], 0x28}}, 0x20000000) 14.117173068s ago: executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) ptrace(0x10, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000002c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 8.398399476s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x10, 0x4, 0x0, 0x0}, 0x90) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) close_range(r0, 0xffffffffffffffff, 0x0) 8.348457634s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0xf4, 0x0, &(0x7f0000000080)) 8.297704742s ago: executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='cmdline\x00') preadv(r0, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 8.266702957s ago: executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.140205887s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000340)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc, &(0x7f0000002ac0)=[{&(0x7f0000003e40)={0x1c4, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x19e, 0x0, 0x0, 0x1, [@generic="cdf9891ee886fbec1eec11adda4a0f47710ad51d3afd87112e285900c1accb42933474a6c18b346a12e209795f98a075b3fb8b477e08b8b12395b9a5ada2b5a24644f8579219d06b597ed20d3b74921ee2fafe3a6ba2e63d99325ff9bcb975f90ea8ea31f148578aff3ada763973525a28fc483731af2e972731bf1c6a455c96e0e288f92d0af994b446d558b7a6a080be4e11b9030baa46f5a713cdf5255daab517ec561cebbde1931a44954750b02913e0e90b4e66c6516bd93f1aa070cffec5f5b30cbab2c4174c52e400", @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="6c2d1a07b10afd28274e0243d90f8cfb069eb855068f4a668f2ea3511bc648d48f94560a2b9c296e67066ba1a94d15034031dd364a469029b3023b18075fec6b544cee44e5f08cca30fee8aec63d3d03a3099723f70cf91ac4c02e56b5c2", @typed={0x67, 0x0, 0x0, 0x0, @binary="1062d731eb4bda5b595598b7321554efef9641b0c41e20ad6fa92bb9367f839d8f7d57af6adf7c8ea1c12e48c8c9b2093cdf3c7ef5913a12b756683b57d17a6ccca68aec39ddfed5689416982c9599a022a7cba52979cef73372923fdb7048c8fbd0d5"}]}]}, 0x1c4}, {&(0x7f0000000d40)={0x2c0, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x61, 0x0, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @pid}, @typed={0x4}, @generic="2e4a9dd0a8810d2dd8376b49d989ceb6c0135c2761022af3e8b9d33382302453d6d00a3a46a2047d847c150dece65020f0032a6c25", @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@dev}]}, @generic="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", @nested={0x4, 0x115, 0x0, 0x1, [@generic]}]}, 0x2c0}, {0x0}], 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) 8.101695252s ago: executing program 4: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, 0x0) 1.780340994s ago: executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000039c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000004c40)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000000000)={0x14, r1, 0xb01}, 0x14}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {0x5, 0x0, 0x0, 0x20000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256-ssse3\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x184}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010014000000000000006000000001000000000100002200000026735100ac7300"/50], 0xfdef) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) close_range(r6, 0xffffffffffffffff, 0x0) 1.74118958s ago: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000100)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) 1.723878573s ago: executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300), 0x16) r4 = dup3(r3, r1, 0x0) sendfile(r3, r2, 0x0, 0x8038) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x23, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, &(0x7f0000000080), 0x41000, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r3, r1, r4, r3, r4], 0x0, 0x10, 0xfff}, 0x90) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0xfec0ffff00000000, 0xff02}, 0x0, r8}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendfile(r1, r2, 0x0, 0xef84) 1.650008814s ago: executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2203, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2604010, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRESOCT], 0x6, 0x2d3, &(0x7f0000000640)="$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") creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb01500000086"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x180) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) read$watch_queue(r6, &(0x7f0000002e00)=""/4088, 0xff8) read$watch_queue(r8, &(0x7f0000001e00)=""/4096, 0x1000) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r5) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x48881}, 0x0) 1.272743483s ago: executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mount$9p_fd(0x20100000, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 856.787838ms ago: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$eJzs3M9rHGUfAPDvTLNNf+R9Ny+8h/f1IEILLZROkubSnowX8VIoFLzWJZmEsJNsyW5qEwttPQu1uSgIonePXoVS/wBvUlDwLojWeBAvkdls0jbNxm2bZGv8fGCyz/PMPPt9vjuTJzOQZwP4x3qt/JFEDEXEpYiodtrTiDjcLh2JuLV+3OrDG5PllsTa2uWfk7JbrK5VN98r6bwej3aX+F9E3K9EnHn/6bjNpeV6rSjyhU59pDV3daS5tHx2dq42k8/k82PjF0bPj4+fHx3ftVxPvn3h6N1v3lxZ+fbL1p1XB84mMdHOOzq57Vqgx6x/JpWY2NI+vxfB+ijp4ZiBfRgHAAA7K+/zD3XuzSpRjUPu0gAAAODAWRtcAwAAAA68JPo9AgAAAGBvbfwfwMba3r1aB9vNT29ExPB28Qfaa4gjjkQlIo6tJk+sTEjWu8ELuXU7Iu5NbHP9JZ3r7/mNbqn3skaa/XWvnH8mtpt/0s35J7aZfwY2vjvhBXWf/x7FP9Rl/rvUY4yvPv1/pWv82xGvDGwXP9mMn3SJ/06P8e+sfHC32761zyNObfv3J3ki1g7fDzEyPVvs+Kt1/4/TD3bK/9hT8ZOkHTXZOf+rPeb/3uqv9W5zSRn/9Imdz/96/MEn+pXXxIedcaQRcbfzWtZXtsQ4Mffd109HTm5txJ/q8vlvf/7f2sz/sx7z/+GLwes9HgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtaUQMRZJmm+U0zbKI4xHx3ziWFo1m68x0Y3F+qtwXMRyVdHq2yEcjorpeT8r6WLv8qH5uS308Iv7z/dH1oLNFnk02iql+Jw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCm4xExFEmaRUQaEb9V0zTL+j0qAAAAYNcN93sAAAAAwJ7z/A8AAAAH3/M+/ye7PA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgQLt08WK5ra0+vDFZ1qeuLS3WG9fOTuXNeja3OJlNNhauZjONxkyRZ5ONub96vzQixi7E4vWRVt5sjTSXlq/MNRbnW1dm52oz+ZW8si9ZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8KyG2luSZhGRtstpmmUR/4qI4agk07NFPhoR/46IB9XKYFkf6/egAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HXNpeV6rSjyBYW/YyGSiJdgGAr1WsSz9LoZL/uJ6/fMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAPzSXluu1osgXmv0eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP2V/phERLmdqp4c2rr3cPJ7tf0aEe9+cvmj67VWa2GsbP9ls731caf93GMdb+5nDgAAAHDgvf4sB288p288xwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPSqubRcrxVFvrCHhbjd7ywBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDn8WcAAAD//+Yew1w=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4004662b, &(0x7f0000000000)={0x10, 0x2, "31eacb679f3f4fd24dab671ab3445ed5"}) 834.840191ms ago: executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x52) r0 = open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) r1 = open(0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./control\x00', 0x0) getdents64(r1, &(0x7f0000fc4fbe)=""/80, 0x50) close(r0) sendfile(r0, r1, &(0x7f0000000480)=0x80000001, 0xffffffffffff8001) unlink(&(0x7f00000001c0)='./control/file0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@private0, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000100)=@sr0, r3, &(0x7f0000000400)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) unlinkat(r1, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 692.230563ms ago: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000100)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) 651.429419ms ago: executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000039c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000004c40)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000000000)={0x14, r1, 0xb01}, 0x14}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {0x5, 0x0, 0x0, 0x20000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256-ssse3\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x184}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010014000000000000006000000001000000000100002200000026735100ac7300"/50], 0xfdef) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) close_range(r6, 0xffffffffffffffff, 0x0) 455.815519ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0xfefdd41f25ee397a, &(0x7f00000000c0)={[{@dax}, {@oldalloc}, {@sysvgroups}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") 420.635915ms ago: executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) 419.522236ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001140)=ANY=[@ANYBLOB="84010000100033060000000000000000ac1414bb000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006"], 0x184}}, 0x0) 391.47472ms ago: executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x1e, 0x0, &(0x7f0000000000)) 390.51772ms ago: executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 353.061935ms ago: executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2203, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2604010, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRESOCT], 0x6, 0x2d3, &(0x7f0000000640)="$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") creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb01500000086"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x180) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "e26481ed1e7c639b5947fa03672a9556f2d9c88f35f8f8b62d6b01c1aef3d08f4ee43881217f959db47d280e8448925694f755ec0256840e58a31c14f0d78d223c58da8e0bd812fb893403e655823624c9e0581484207a6d914ad9befaa148971274f98aa0b753b38761ffcd20135aa09bee95ffc38cfb410de6eb0b1c0eaf69af8375bb982d21281acaa2966309f31ed037b8789d3bf55cda6f1fdefac7c7d4eec101525b850f72c5d3515de41ea6c4cc0a1d4c9d0e83fe98d8baa6325482d6270833cf890aba6768abf6a6ac45c0268bac824f692a521bf8500ce437d7bd4ecafbf918c063d8af3d110e24ddc569f535794d4c8c4ab3897b27310c8d39efca731b7a22caf0ec5f2df04ce6b496582e72b5cbb10480d59c191cd3eca3d3a973fe653216cd08c8de4098133f85da499af2f6a6c7513755f40d13810388f5476a67bb722dc832e4af4c76fda32aa9699c8191a644df90df4b2b2e7993e90bee48e3b65cbc84de44a15926c157018e46c849d57933b96f67dcec40eb733515b880aabbfd1324433ef61e0a112430d3829717820a9eb79c8767614facf386e07a7df2ceb2e9f9d33d65d33fecc7697f5bf74769a67ac297756ec495eaf87674ad5fae2fd772301896e85c617328f32f69bb718bf1ade1d8fd637a6bb4c7044929bf43757821b2bde4ce2ec164ef3841458207326249547ccd2c3ca3467e8c5474cb820ee8647c90d2da6af054fa1f25afb1b0792dcf21b2736c67fc8119a6bdbe19689bb639113f5b9165a50b6f2df8dd8c549220488da3bb10e45dcc7a6207635a550e5ee913aa8ec6ea5f92ba59eb003424e6ea472df633220c8e9644d5bf2f4b01027fc5c0422c39932531e1be7e62e021ac4592b57d95720d5ae86f4bd11d95ad82569ab24e0d1b5a144e6fbcc76c4d7800a70069a852979a3a1f02fcbef6bfeff2101576c998109c65350175bd05435d4be236097340cfafadfde768b1176e6c40f34731164afcd0c3620a0cd015494e432e9aff2c59a4cf476d9037a398183fe74789da0300172e1c02173ff867faf6fbed165ca819be3e4ea05fb6ff1633430984bece64ef93ff8d012b9c321941d59f5b8572008f6bb22597864ea1fbd6b9e349b6d9dc1adc185ea32d5e67e44ac5ebea2063635a53e1718a4246ea47a8874daae0ac6653f821f381a940cbfc98d4a25aea33c63309ee1c6c20f349b673509f09b5381956611359754bdb2eeda100ccb4834596de45556611d5b568f2604653c2129a7d5bd50a209a6d4a956c108b5349a8d208431a2edb17d7650332d308ea2e6f324e589f0e98de49ab655a77509637f0a65614c33f16f91e0d6305e8f9ba0766154e1599f67005ff75af7a6143e574acb799f2363dbb37971fc451c0054b5753de3e2278afe06b9e64b93ab09b4985fe26626a6266da1088f7b9755ac8a9e4e6e99a0dedfe2b1509de12f75d9dea83475543d2b328e986779f4992c870ad128b9d09e8ebcc264e8bb5b85d6d62ab902b8ed7409448cc26a777882627bf3e0c9cdd473289154560c2838c6d4fdaea97ff5d7992909c67710dfeb4977ea7bc06d77b06a19efa42178c46a3fa66ed7d6e2b67ab86be5d94721b099947563db706c5c3a12744ea61d63fce93f546f2669c50b6568e3f32d79bfc75adefc21ee93c5c5360cf2e7ac19571c3663857baf3325b666570642da4dcb309dab05b7ad05bf832d28fa8e871f7b89d6f4327953f4dbde3aac022f4dfe050d0924427e39a8027fbc4b54c4a8c2bf35f8c11c9c0ac4bc1fc31d6bdb2cee2675c5a782aa3ab5ffcc7be7207c89cdb8546fcfdd3a5aadfee5a296abd9afc127ebbf580649e9132b55d9f40a3778af49248b593e00c9f4812b8f7adb7323ab7852e4ed09c55aa356b2e8fee6eb14be3659fdf821d23ac556845f70670d8b6a417c29ac0b1585ea865634c0c921e9d930d4018f66d1e024179d80a7154c491c8662d427ab44a3633480782889f1d00c1d182ede30d4127d769291ef408b574a41c29153b7d949d4648b60a4faf32b380dbc87146c36479d47023876abd4ae7e289ba79d988f6c3a86a75bdc784bea2f0b7e2f77cb1282f54a18e1117e50ffa46ac208fcf8a7b5751e83b3e80cb428e4c2ae63ca3cf7b2c4353303edfe328626391f7925f1ab4ef1c7d0f54d0e45590188ecdb6d2c9c0db9b0552dc81b21dc1bbe9e94be5f78dad11f53d6fc3602e9ffb872d3557c44a133ee94e50d57d5eae2214569975982c63f22750db6f5c979ed81b3f68fe6be6daa85bcd98f25548c1d4db1f15394bc708933e0352e4059bedbf832abaf75e9bdca6fea93600357ca4153357d2e0661a308edf82c0f53e7a121c7e1e8bafdc5fdb61c21f4716d06b43a8395aa915a34c4dc4b5b15ba70a4e163728a9966515682b9ca3c2499aeb17a3c17f905fefed806b504f77c52564006273282db5e0c70565ee1016fc7c241830bef951294db9682ef41742b6550246e539143f15d6c2f017a8083ec97eb3a2de8bc2d8d5fec2b9b88996b3ff6c5aa5bed326f72fe9190de74a83e380b9fe89324421697d124d9a1bd3ced8e1856923147958582d737a36da6af4a0fd92b83f0ef0cb1a725d3a5ecb3a39ad039d200989a281a0686336457824ef582698222b7a063475b793a21745d6701940a0baf124461ad71de8dff6a6f7ed676d107e01ae6b7b79aa1f96efce91039dead977bf70365de8ebb3ec06634246d62f78287831984accef27048794468f520db5c71b4fa94818ddc7394fa1b609adb8cc80c0f32efac26a47bd74119100f0cfdcb889aab1019786cc0eefc1e4295ae919e9f6c8c8a16aa76a2bfe39adf5929e9b9925da0241e734378fe140981e3536bf0b77eb0263297a936a5f37605f128d79b16723b953331f99633b8d29ad1d1dbdb74188488ea0d1b7e0ddb652c040aa0477a079e92618e52f3b7ceebd62e0f0c6946469c19ae828b7eed288c3a53320c9d5468c39d608bd42d967a21e6b788de7c6826d1b99130083182562f63443290aeeb24308d3eb4881547db34b284d9af2bd7cac0d2f66bd14758c079c345d2bce3e1efc3599b0d06e69a92db7e05473673726e1848df75e83df50f98a9321468c10c6514dd7b3cb5b0ddf2fef13284463fe88ef2bc95d51288e41e3e0ba5c91bd686d7f7658b5bac8e3991a0f3b36f004585d9edd09d478ede73e7da067ea502894fc1247e62c1a84c9065ffccc3da96f07ddce135ceafdd784dda6f64a7add400d21ae13abf98e90fb96fcda23a8ad79905428a349b2230c19cf8cdca1724382bd19b4b075438098bd46cbc668bcbdcf1da85f733a50669f976a7106ff1936f20d799e7d01b0beeba7057a90016fb2d36bb3d14e11ac077ffb91f139d16ae5e78d84559312c9fd1a91ff70e5d9b4fd27940415d2f605665cd9374a50f7fc3c32efe30e4c0fc84f0c0e0bcd35e46665e4f29371c1c96324f65a94c85874e8e3baba68b88acc85c38f466d7353b5a00953c8ff5522cf0903e646301e3539d047286d10be16d9fbef02d450b7b12b1ead250f68c4c893fbc6f48765f34a81c477966278a1c6945d14d6531f0b5e4cef4edaf3708a5787162c39b236272694b0a302465d01004fa9d516414c040c27fccbf38466023b06293bd07f31fcdbb3b5378a8b2c7886e1551b1caeab96f7f3c159075756f5f8aaa05b6f87f581d802903c36d84169f87c01a77c43284adf66daa38fe8633a8f6d258231466aba89bb9e56ef289d2815cde433e381ddf74852302684b974c80d0a1d7d578039120a2db36213d167687e9390ed8f14c709d3149d2f5cfbc42a9b85e6d10c4ee77270534fdff2ccb816dedc6377257a73ba2a4ea82c0cc4a81bfb939f710b109beb279edeeda345867c0130ff6fc0fbbbbd25d16d2e73f6ab2fbb4c72abc0713ef9e4690b72208c468fa64c21f2247867b5edd514e5be23733ef2136b10e03161fe3b4e6018933df1f97a8250747e6140780a064e0c35bfafcb8177a75e8fde25e61e1c6332bbf7ddc3a11910feb3bd66707a7c1a9f87b320298acec88135a177b2f6f3c0ff02765f34c30b078b58470cd227ce4c0a1a77e662180b28fb360c3fbf47ba8982510979b86332b6d8a53d5f3947665c119a71e5b6ddc64228b47c3e23c30ebbede354d71d2780456de3f717a384112ccc9805dfe107fc9440ab7abccd8463150ce1306778fbea9793d88c4a7864a925bac5da593d6b72ee2c743f0b732a10285d293359c8126004f06fa12c0b3ca9c1e9c0a75b587207965c49f7450cb4210da01e5604f83f849b7eb9cb3f73de4bcff064b4fe08580971184db940bf29d6b8cea027dbfe0b78d6fa574da4b5b4db57b4e1939213c9848537baaf8076b1db4e767a467ec6a47c67aa33df96d7113cc9884124bca5579ce0058618b1b1f13ff3b102ff54e6bde7e29fd555acd6ffe6429af27301b6bbda38403d8f6f3266d7724f517778e7b2c1e13e3d83104ce743857c07b70cb5be8d6d8757d63a3bedfc9de79cc7e96c9833e15fd65f1336178568c2453a49cfc8c8dcb4f5d978f0a6144d62a5da6fd75d08a41084d4c59b345e07a5f4446af6e5216cc8d94347d333030015e262036f0a4fa6d2ae523654c55b37ac179efb66d230de5c70a9b33738ef0cd4ba2710d9ec03f426701101182051516a9be380a07e2555a8cda03eafc72d2bc2bc1dcadde4bb819692c1736b0ed203c4934842d791aae9e10bf239cc5393c9faf967109444c8f44532766ca5481f0ac16d25753a121727271c71d97b401dafe91588b362f2798f047deece9f860624b2d5753e46f929f8c2d03753e7245ffed6d8e36c7b380c4fb6a27e087a38b5e4a80f0043f95e5a20701c62692e684a764074e47badcecf8b2145be47b5b7089c249abcf0743a61b517004d120929d7846a39a46e0ddbcf5334fc01aca0bff31e67da8b3c88e38504db1dc3940c55bee158ae6dfcce289cf91106397d8e3990149a86c819e0354d785a4eed76fa6380491b01efbc23e7189ec253884d384865bca5da9a0917d68144a0a02cde867c365d339a025b7c8a16b82e341719a259ede8f09c165a354fd3e8f5d59e349e7c36302cf8ed115537969b598337fe7575157c89a254c0829cdb243d3d788321c756bf2817721db4bead96e1f25be5b8c7100d149d13900b6c6491ddbdbeaef7753ed5c5d9b07449bfd023501075ec08c37c13df696bf73500bd440a6522f5b955862c5eee8dc6e875c5055350b3397a6b31d2b764308ad24aafd4113af76f38f4aaba9e24efa3ad5b1c008a6cad2411ef6c7276dd3a5a2ae8130f91c36c34137731426fdf5272ef4ac5c4415e2d0f7b50da3ae910ba22bb5b962351e841746b00"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) read$watch_queue(r6, &(0x7f0000002e00)=""/4088, 0xff8) read$watch_queue(r8, &(0x7f0000001e00)=""/4096, 0x1000) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r5) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x48881}, 0x0) 326.19595ms ago: executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300), 0x16) r4 = dup3(r3, r1, 0x0) sendfile(r3, r2, 0x0, 0x8038) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x23, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, &(0x7f0000000080), 0x41000, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r3, r1, r4, r3, r4], 0x0, 0x10, 0xfff}, 0x90) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0xfec0ffff00000000, 0xff02}, 0x0, r8}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendfile(r1, r2, 0x0, 0xef84) 71.735119ms ago: executing program 1: set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x220080e, &(0x7f0000001900), 0x1, 0x4e6, &(0x7f0000001400)="$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") 0s ago: executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x52) r0 = open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) r1 = open(0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./control\x00', 0x0) getdents64(r1, &(0x7f0000fc4fbe)=""/80, 0x50) close(r0) sendfile(r0, r1, &(0x7f0000000480)=0x80000001, 0xffffffffffff8001) unlink(&(0x7f00000001c0)='./control/file0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@private0, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000100)=@sr0, r3, &(0x7f0000000400)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) unlinkat(r1, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') kernel console output (not intermixed with test programs): keep mac addresses unique to avoid problems! [ 249.296929][T13631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.307386][T13631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.318189][T13631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.328328][T13631] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.337116][T13631] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.345887][T13631] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.354701][T13631] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.371284][T13691] loop1: detected capacity change from 0 to 512 [ 249.378692][T13691] ext4: Unknown parameter 'audit' [ 249.405926][ T29] audit: type=1326 audit(1719043132.756:29933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dbf83d0a9 code=0x0 [ 249.479410][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 249.504029][ T29] audit: type=1326 audit(1719043132.846:29934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6309e9d0a9 code=0x7ffc0000 [ 249.529282][ T29] audit: type=1326 audit(1719043132.846:29935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6309e9d0a9 code=0x7ffc0000 [ 249.555608][ T29] audit: type=1326 audit(1719043132.856:29936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6309e9d0a9 code=0x7ffc0000 [ 249.579861][ T29] audit: type=1326 audit(1719043132.876:29937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6309e9d0a9 code=0x7ffc0000 [ 249.715302][T13712] loop1: detected capacity change from 0 to 128 [ 249.782567][T13714] sock: sock_timestamping_bind_phc: sock not bind to device [ 249.792208][T13714] loop1: detected capacity change from 0 to 512 [ 249.806091][T13714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.819472][T13714] ext4 filesystem being mounted at /root/syzkaller-testdir1538157954/syzkaller.QxQVoc/46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.836650][T13714] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz-executor.1: Failed to acquire dquot type 0 [ 249.854114][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.748109][T13728] loop1: detected capacity change from 0 to 512 [ 250.755527][T13728] ext4: Unknown parameter 'audit' [ 251.260787][T13743] loop4: detected capacity change from 0 to 1024 [ 251.268693][T13743] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 251.277566][T13743] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 251.288289][T13743] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 251.296475][T13743] System zones: 0-1, 3-36 [ 251.301389][T13743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.316845][T13743] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 251.448722][T13631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.540596][T13748] loop4: detected capacity change from 0 to 256 [ 252.385234][T13762] loop4: detected capacity change from 0 to 512 [ 252.392841][T13762] ext4: Unknown parameter 'audit' [ 252.476338][T13764] loop4: detected capacity change from 0 to 512 [ 252.487608][T13764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.500138][T13764] ext4 filesystem being mounted at /root/syzkaller-testdir3983307001/syzkaller.IbxTqN/9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.522842][T13631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.554181][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 252.554196][ T29] audit: type=1326 audit(1719043647.889:30253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13769 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6309e9d0a9 code=0x7ffc0000 [ 252.586372][ T29] audit: type=1326 audit(1719043647.889:30254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13769 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6309e9d0a9 code=0x7ffc0000 [ 252.610524][ T29] audit: type=1326 audit(1719043647.899:30255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13769 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6309e9d0a9 code=0x7ffc0000 [ 252.634756][ T29] audit: type=1326 audit(1719043647.899:30256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13769 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6309e9d0a9 code=0x7ffc0000 [ 252.658920][ T29] audit: type=1326 audit(1719043647.899:30257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13769 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6309e9d0a9 code=0x7ffc0000 [ 252.683124][ T29] audit: type=1326 audit(1719043647.909:30258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13769 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6309e9d0a9 code=0x7ffc0000 [ 252.709038][ T29] audit: type=1326 audit(1719043647.929:30259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13769 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6309e9d0a9 code=0x7ffc0000 [ 252.733417][ T29] audit: type=1326 audit(1719043647.939:30260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13769 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6309e9a827 code=0x7ffc0000 [ 252.757405][ T29] audit: type=1326 audit(1719043647.939:30261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13769 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6309e604e9 code=0x7ffc0000 [ 252.781718][ T29] audit: type=1326 audit(1719043647.939:30262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13769 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6309e9a827 code=0x7ffc0000 [ 253.595728][T13783] bond1: entered promiscuous mode [ 253.600807][T13783] bond1: entered allmulticast mode [ 253.606214][T13783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.618101][T13783] bond1 (unregistering): Released all slaves [ 253.790737][T13806] vxcan1: MTU too low for tipc bearer [ 253.796222][T13806] tipc: Enabling of bearer rejected, failed to enable media [ 254.673187][T13811] cgroup: fork rejected by pids controller in /syz1 [ 254.786899][T14301] bond1: entered promiscuous mode [ 254.791932][T14301] bond1: entered allmulticast mode [ 254.797163][T14301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.809072][T14301] bond1 (unregistering): Released all slaves [ 255.677083][T14311] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 255.688436][T14311] CPU: 0 PID: 14311 Comm: syz-executor.1 Tainted: G W 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 255.700389][T14311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 255.710477][T14311] Call Trace: [ 255.713736][T14311] [ 255.716646][T14311] dump_stack_lvl+0xf2/0x150 [ 255.721295][T14311] dump_stack+0x15/0x20 [ 255.725462][T14311] dump_header+0x83/0x2d0 [ 255.729772][T14311] oom_kill_process+0x33e/0x4c0 [ 255.734600][T14311] out_of_memory+0x9af/0xbe0 [ 255.739276][T14311] mem_cgroup_out_of_memory+0x13e/0x190 [ 255.744844][T14311] try_charge_memcg+0x745/0xcd0 [ 255.749683][T14311] ? _raw_spin_unlock+0x26/0x50 [ 255.754585][T14311] ? radix_tree_lookup+0xf9/0x150 [ 255.759682][T14311] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 255.765793][T14311] __read_swap_cache_async+0x2b9/0x520 [ 255.771290][T14311] swap_cluster_readahead+0x276/0x3f0 [ 255.776734][T14311] swapin_readahead+0xe2/0x7a0 [ 255.781491][T14311] ? __filemap_get_folio+0x420/0x5b0 [ 255.786758][T14311] ? swap_cache_get_folio+0x6e/0x210 [ 255.792027][T14311] do_swap_page+0x3bc/0x1840 [ 255.796667][T14311] ? cgroup_rstat_updated+0x99/0x550 [ 255.801966][T14311] ? __rcu_read_lock+0x36/0x50 [ 255.806809][T14311] handle_mm_fault+0x809/0x2a80 [ 255.811663][T14311] ? mas_walk+0x204/0x320 [ 255.816010][T14311] exc_page_fault+0x3b9/0x650 [ 255.820667][T14311] asm_exc_page_fault+0x26/0x30 [ 255.825535][T14311] RIP: 0033:0x7f6309ec8463 [ 255.829926][T14311] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 8e fa 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 255.849516][T14311] RSP: 002b:00007fff605e9dd8 EFLAGS: 00010293 [ 255.855573][T14311] RAX: 00000000fffffffa RBX: 00007f6309fd3f80 RCX: 0000000000000000 [ 255.863615][T14311] RDX: 00007fff605e9df0 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.871648][T14311] RBP: 00007f6309fd5980 R08: 00000000268f536d R09: 7fffffffffffffff [ 255.879597][T14311] R10: 0000000000000000 R11: 00007f6309faa080 R12: 000000000003e709 [ 255.887544][T14311] R13: 00007f6309fd405c R14: 0000000000000032 R15: 00007f6309fd5980 [ 255.895496][T14311] [ 255.898708][T14311] memory: usage 307200kB, limit 307200kB, failcnt 3636 [ 255.905574][T14311] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 [ 255.913440][T14311] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 255.920726][T14311] Memory cgroup stats for /syz1: [ 255.920952][T14311] cache 16384 [ 255.929142][T14311] rss 0 [ 255.931877][T14311] shmem 0 [ 255.934802][T14311] mapped_file 4104192 [ 255.938796][T14311] dirty 0 [ 255.941709][T14311] writeback 0 [ 255.944988][T14311] workingset_refault_anon 625 [ 255.949642][T14311] workingset_refault_file 5287 [ 255.954377][T14311] swap 512000 [ 255.958171][T14311] swapcached 4096 [ 255.961782][T14311] pgpgin 210815 [ 255.965285][T14311] pgpgout 210810 [ 255.968859][T14311] pgfault 228319 [ 255.972394][T14311] pgmajfault 268 [ 255.976055][T14311] inactive_anon 4096 [ 255.980103][T14311] active_anon 0 [ 255.983565][T14311] inactive_file 8192 [ 255.987444][T14311] active_file 8192 [ 255.991143][T14311] unevictable 0 [ 255.994608][T14311] hierarchical_memory_limit 314572800 [ 255.999976][T14311] hierarchical_memsw_limit 9223372036854771712 [ 256.006130][T14311] total_cache 16384 [ 256.009909][T14311] total_rss 0 [ 256.013193][T14311] total_shmem 0 [ 256.016684][T14311] total_mapped_file 4104192 [ 256.021181][T14311] total_dirty 0 [ 256.024701][T14311] total_writeback 0 [ 256.028564][T14311] total_workingset_refault_anon 625 [ 256.033733][T14311] total_workingset_refault_file 5287 [ 256.039023][T14311] total_swap 512000 [ 256.042813][T14311] total_swapcached 4096 [ 256.046998][T14311] total_pgpgin 210815 [ 256.050957][T14311] total_pgpgout 210810 [ 256.055150][T14311] total_pgfault 228323 [ 256.059666][T14311] total_pgmajfault 268 [ 256.063847][T14311] total_inactive_anon 4096 [ 256.068352][T14311] total_active_anon 0 [ 256.072308][T14311] total_inactive_file 8192 [ 256.076772][T14311] total_active_file 8192 [ 256.080986][T14311] total_unevictable 0 [ 256.084980][T14311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14311,uid=0 [ 256.100247][T14311] Memory cgroup out of memory: Killed process 14311 (syz-executor.1) total-vm:52760kB, anon-rss:420kB, file-rss:12960kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 256.343051][T14321] loop4: detected capacity change from 0 to 1024 [ 256.351084][T14321] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 256.359969][T14321] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 256.370995][T14321] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 256.379128][T14321] System zones: 0-1, 3-36 [ 256.384229][T14321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.399627][T14321] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 256.530541][T13631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.632542][T14333] loop4: detected capacity change from 0 to 256 [ 257.755042][T14357] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 257.763242][T14357] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.798661][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 257.798674][ T29] audit: type=1326 audit(1719043909.144:30379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14363 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dbf83d0a9 code=0x0 [ 258.214408][T14374] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 258.346742][ T29] audit: type=1400 audit(1719043909.694:30380): avc: denied { listen } for pid=14381 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.441968][T14387] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 258.450189][T14387] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.961979][T14404] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 259.223884][T14417] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 259.232104][T14417] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 259.343567][T14432] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 259.475892][T14442] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 259.484210][T14442] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.563644][T14460] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 263.489641][ T29] audit: type=1326 audit(1719043914.834:30381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14562 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dbf83d0a9 code=0x0 [ 265.493742][T14594] loop4: detected capacity change from 0 to 256 [ 265.980767][ T29] audit: type=1326 audit(1719043917.324:30382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6309e9d0a9 code=0x0 [ 266.530078][T14618] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 266.835740][T14625] loop1: detected capacity change from 0 to 256 [ 267.442573][T14635] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.495126][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.512879][T14644] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 267.598921][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.623519][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.644633][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.728311][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.776326][T14647] chnl_net:caif_netlink_parms(): no params data found [ 267.818751][T14647] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.825889][T14647] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.833262][T14647] bridge_slave_0: entered allmulticast mode [ 267.840349][T14647] bridge_slave_0: entered promiscuous mode [ 267.847127][T14647] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.854305][T14647] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.861697][T14647] bridge_slave_1: entered allmulticast mode [ 267.868424][T14647] bridge_slave_1: entered promiscuous mode [ 267.901280][T14647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.910784][ T28] bridge_slave_1: left allmulticast mode [ 267.916483][ T28] bridge_slave_1: left promiscuous mode [ 267.922194][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.930402][ T28] bridge_slave_0: left allmulticast mode [ 267.936076][ T28] bridge_slave_0: left promiscuous mode [ 267.941722][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.046976][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.057975][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.067952][ T28] bond0 (unregistering): Released all slaves [ 268.077208][T14647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.102183][T14647] team0: Port device team_slave_0 added [ 268.109155][T14647] team0: Port device team_slave_1 added [ 268.126577][T14647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.128381][T14676] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.133506][T14647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.169163][T14647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.180402][T14647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.187393][T14647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.213311][T14647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.230128][ T28] hsr_slave_0: left promiscuous mode [ 268.235771][ T28] hsr_slave_1: left promiscuous mode [ 268.241383][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.248809][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.256195][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.263555][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.272391][ T28] veth1_macvtap: left promiscuous mode [ 268.277947][ T28] veth0_macvtap: left promiscuous mode [ 268.283478][ T28] veth1_vlan: left promiscuous mode [ 268.288689][ T28] veth0_vlan: left promiscuous mode [ 268.364061][ T28] team0 (unregistering): Port device team_slave_1 removed [ 268.374005][ T28] team0 (unregistering): Port device team_slave_0 removed [ 268.420163][T14647] hsr_slave_0: entered promiscuous mode [ 268.426404][T14647] hsr_slave_1: entered promiscuous mode [ 268.432333][T14647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.439898][T14647] Cannot create hsr debugfs directory [ 268.729718][T14647] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.738513][T14647] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.749096][T14647] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.758415][T14647] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.803939][T14647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.820974][T14647] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.838664][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.845862][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.854648][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.861793][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.884294][T14647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.894845][T14647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.964141][T14647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.058330][T14647] veth0_vlan: entered promiscuous mode [ 269.067609][T14647] veth1_vlan: entered promiscuous mode [ 269.087463][T14647] veth0_macvtap: entered promiscuous mode [ 269.098135][T14647] veth1_macvtap: entered promiscuous mode [ 269.110334][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.120803][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.130653][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.141048][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.150837][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.161249][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.171038][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.181536][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.191372][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.201770][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.211585][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.221987][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.231787][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.242193][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.252171][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.262630][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.273758][T14647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.285578][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.296217][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.306016][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.316439][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.326294][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.336699][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.346508][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.356961][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.366841][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.377240][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.387111][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.397526][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.407367][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.417763][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.427609][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.438009][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.448774][T14647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.462034][T14647] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.470957][T14647] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.479776][T14647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.488639][T14647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.542708][T14702] loop4: detected capacity change from 0 to 2048 [ 269.561224][ T29] audit: type=1400 audit(1719043920.904:30383): avc: denied { getopt } for pid=14704 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 269.606416][T14702] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.617823][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.508077][T14720] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.744648][T14745] loop4: detected capacity change from 0 to 256 [ 271.431073][T14751] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.712842][T14772] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 271.721322][T14772] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.728543][T14772] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.739776][T14772] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.746977][T14772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.754203][T14772] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.761256][T14772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.770710][T14772] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 271.997378][T14792] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 272.603104][T14821] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 272.723977][T14824] loop4: detected capacity change from 0 to 512 [ 273.225372][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.289100][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.371620][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.445646][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.576639][ T28] bridge_slave_1: left allmulticast mode [ 273.582361][ T28] bridge_slave_1: left promiscuous mode [ 273.588050][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.598782][ T28] bridge_slave_0: left allmulticast mode [ 273.604546][ T28] bridge_slave_0: left promiscuous mode [ 273.610161][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.739109][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.749578][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.759902][ T28] bond0 (unregistering): Released all slaves [ 273.792968][T14869] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 273.819066][T14841] chnl_net:caif_netlink_parms(): no params data found [ 273.849319][ T28] hsr_slave_0: left promiscuous mode [ 273.855106][ T28] hsr_slave_1: left promiscuous mode [ 273.860914][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.868392][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.876003][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.883439][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.892525][ T28] veth1_macvtap: left promiscuous mode [ 273.898090][ T28] veth0_macvtap: left promiscuous mode [ 273.903682][ T28] veth1_vlan: left promiscuous mode [ 273.908902][ T28] veth0_vlan: left promiscuous mode [ 273.991900][ T28] team0 (unregistering): Port device team_slave_1 removed [ 274.003321][ T28] team0 (unregistering): Port device team_slave_0 removed [ 274.052976][T14841] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.060337][T14841] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.068034][T14841] bridge_slave_0: entered allmulticast mode [ 274.076758][T14841] bridge_slave_0: entered promiscuous mode [ 274.090084][T14841] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.097217][T14841] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.104408][T14841] bridge_slave_1: entered allmulticast mode [ 274.110904][T14841] bridge_slave_1: entered promiscuous mode [ 274.143647][T14841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.156826][T14841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.185703][T14850] chnl_net:caif_netlink_parms(): no params data found [ 274.195093][T14841] team0: Port device team_slave_0 added [ 274.203718][T14841] team0: Port device team_slave_1 added [ 274.226029][T14841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.233017][T14841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.258891][T14841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.270507][T14841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.277478][T14841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.303647][T14841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.338679][T14841] hsr_slave_0: entered promiscuous mode [ 274.344682][T14841] hsr_slave_1: entered promiscuous mode [ 274.361210][T14850] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.368299][T14850] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.375688][T14850] bridge_slave_0: entered allmulticast mode [ 274.382050][T14850] bridge_slave_0: entered promiscuous mode [ 274.388623][T14850] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.395773][T14850] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.403048][T14850] bridge_slave_1: entered allmulticast mode [ 274.409427][T14850] bridge_slave_1: entered promiscuous mode [ 274.433513][T14850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.453946][T14850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.486719][T14850] team0: Port device team_slave_0 added [ 274.495026][T14850] team0: Port device team_slave_1 added [ 274.511221][T14850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.518272][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.544157][T14850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.556487][T14850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.563420][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.589322][T14850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.606857][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.631418][T14850] hsr_slave_0: entered promiscuous mode [ 274.637714][T14850] hsr_slave_1: entered promiscuous mode [ 274.643499][T14850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.651088][T14850] Cannot create hsr debugfs directory [ 274.659981][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.748604][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.815084][T14901] loop4: detected capacity change from 0 to 512 [ 274.828916][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.895133][T14841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 274.904185][T14841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 274.913473][T14841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 274.934893][T14841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 274.953348][ T28] bridge_slave_1: left allmulticast mode [ 274.959087][ T28] bridge_slave_1: left promiscuous mode [ 274.964799][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.972752][ T28] bridge_slave_0: left allmulticast mode [ 274.978757][ T28] bridge_slave_0: left promiscuous mode [ 274.984409][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.078135][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.088162][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.098759][ T28] bond0 (unregistering): Released all slaves [ 275.109372][ T28] bond1 (unregistering): Released all slaves [ 275.157356][T14841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.170351][T14841] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.187119][ T3190] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.194187][ T3190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.203551][ T3190] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.210667][ T3190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.237712][ T28] hsr_slave_0: left promiscuous mode [ 275.243230][ T28] hsr_slave_1: left promiscuous mode [ 275.249116][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.256603][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.264613][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.272083][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.282215][ T28] veth1_macvtap: left promiscuous mode [ 275.287690][ T28] veth0_macvtap: left promiscuous mode [ 275.293278][ T28] veth1_vlan: left promiscuous mode [ 275.298593][ T28] veth0_vlan: left promiscuous mode [ 275.402549][ T28] team0 (unregistering): Port device team_slave_1 removed [ 275.413977][ T28] team0 (unregistering): Port device team_slave_0 removed [ 275.501086][T14841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.576363][T14841] veth0_vlan: entered promiscuous mode [ 275.584605][T14841] veth1_vlan: entered promiscuous mode [ 275.608640][T14841] veth0_macvtap: entered promiscuous mode [ 275.620076][T14850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 275.629793][T14850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 275.640415][T14850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 275.650188][T14841] veth1_macvtap: entered promiscuous mode [ 275.657324][T14850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 275.673172][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.683709][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.693569][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.704041][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.713896][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.724332][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.734179][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.744648][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.754463][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.764968][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.774774][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.785263][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.795073][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.805516][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.817317][T14841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.840313][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.850867][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.860752][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.871221][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.881089][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.891498][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.901396][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.911922][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.921867][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.932313][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.942225][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.952654][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.962545][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.973055][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.984050][T14841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.996583][T14841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.005305][T14841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.013984][T14841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.022821][T14841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.066969][T14850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.080972][T14850] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.098864][ T2782] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.106004][ T2782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.119468][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.126547][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.144196][T14850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.154570][T14850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.233636][T14850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.307828][T14850] veth0_vlan: entered promiscuous mode [ 276.316673][T14850] veth1_vlan: entered promiscuous mode [ 276.331655][T14850] veth0_macvtap: entered promiscuous mode [ 276.339237][T14850] veth1_macvtap: entered promiscuous mode [ 276.351755][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.362240][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.372064][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.382551][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.392367][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.402871][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.412733][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.423195][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.433086][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.443507][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.453336][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.463818][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.473673][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.484112][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.493948][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.504455][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.516919][T14850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.527704][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.538328][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.548145][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.558574][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.568425][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.578858][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.588664][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.599225][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.609649][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.620369][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.630556][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.641127][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.650961][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.661370][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.671163][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.681565][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.694119][T14850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.704081][T14850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.713016][T14850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.720842][T14936] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 276.721706][T14850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.738795][T14850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.809218][T14946] loop4: detected capacity change from 0 to 512 [ 276.818001][T14946] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 276.829980][T14946] EXT4-fs (loop4): 1 truncate cleaned up [ 276.837456][T14946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.852163][T14946] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: overlapping e_value [ 276.874147][T14946] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.4: unable to update i_inline_off [ 276.887207][T14946] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 276.900352][T14946] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: overlapping e_value [ 276.924866][T13631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.957074][T14961] loop3: detected capacity change from 0 to 512 [ 277.025649][T14967] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 277.200817][T14986] loop4: detected capacity change from 0 to 512 [ 277.208322][T14986] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 277.219761][T14986] EXT4-fs (loop4): 1 truncate cleaned up [ 277.226704][T14986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.242626][T14986] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: overlapping e_value [ 277.257223][T14986] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.4: unable to update i_inline_off [ 277.270123][T14986] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: overlapping e_value [ 277.293834][T13631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.918402][T15015] loop3: detected capacity change from 0 to 512 [ 277.926285][T15015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 277.937477][T15015] EXT4-fs (loop3): 1 truncate cleaned up [ 277.943486][T15015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.960070][T15015] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 277.976143][T15015] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.3: unable to update i_inline_off [ 277.989215][T15015] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 277.995395][T15018] loop2: detected capacity change from 0 to 512 [ 278.013979][T14850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.492081][T15045] loop4: detected capacity change from 0 to 512 [ 278.500040][T15045] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 278.511096][T15045] EXT4-fs (loop4): 1 truncate cleaned up [ 278.517255][T15045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.533508][T15045] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: overlapping e_value [ 278.549625][T15045] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.4: unable to update i_inline_off [ 278.562598][T15045] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: overlapping e_value [ 278.585305][T13631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.934089][T15063] loop2: detected capacity change from 0 to 1024 [ 278.941744][T15063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 278.956021][T15063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.979527][T14841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.136120][T15081] loop2: detected capacity change from 0 to 512 [ 279.867374][T15096] loop3: detected capacity change from 0 to 1024 [ 279.875028][T15096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.888025][T15096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.914132][T14850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.947199][T15102] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 280.011998][T15112] loop3: detected capacity change from 0 to 1024 [ 280.027043][T15112] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 280.036784][T15112] System zones: 0-1, 3-12 [ 280.041635][T15112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.071466][T14850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.155733][T15129] loop2: detected capacity change from 0 to 1024 [ 280.163218][T15129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.175518][T15129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.200139][T14841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.272002][T15137] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 280.333635][T15140] loop2: detected capacity change from 0 to 512 [ 280.520881][T15155] loop3: detected capacity change from 0 to 512 [ 280.529158][T15155] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 280.541333][T15155] EXT4-fs (loop3): 1 truncate cleaned up [ 280.547638][T15155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.568459][T15155] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 280.585506][T15155] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.3: unable to update i_inline_off [ 280.600311][T15155] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 280.641508][T14850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.750579][T15164] syzkaller0: entered promiscuous mode [ 280.756149][T15164] syzkaller0: entered allmulticast mode [ 280.813634][T15170] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 280.875347][T15181] loop4: detected capacity change from 0 to 512 [ 280.883162][T15181] EXT4-fs: old and new quota format mixing [ 280.929189][ T29] audit: type=1400 audit(1719043932.274:30384): avc: denied { mount } for pid=15184 comm="syz-executor.3" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 281.139680][T15198] syzkaller0: entered promiscuous mode [ 281.145293][T15198] syzkaller0: entered allmulticast mode [ 281.251763][T15206] loop4: detected capacity change from 0 to 1024 [ 281.280010][T15206] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 281.288450][T15206] System zones: 0-1, 3-12 [ 281.294928][T15206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.302744][T15219] loop2: detected capacity change from 0 to 512 [ 281.312814][T15220] loop3: detected capacity change from 0 to 164 [ 281.315116][T15219] EXT4-fs: old and new quota format mixing [ 281.327418][T15220] Unable to read rock-ridge attributes [ 281.333698][T13631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.412057][T15226] loop3: detected capacity change from 0 to 1024 [ 281.419927][T15226] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.435774][T15226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.459598][T14850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.537196][T15235] loop3: detected capacity change from 0 to 764 [ 281.548713][T15235] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FR]L3 index 0 [ 281.557882][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.706586][T15244] syzkaller0: entered promiscuous mode [ 281.712132][T15244] syzkaller0: entered allmulticast mode [ 281.734509][T15246] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 281.787851][ T29] audit: type=1326 audit(1719043933.134:30385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb1590a9 code=0x0 [ 281.827120][T15255] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 281.850345][T15258] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 281.871425][T15260] 9pnet_fd: Insufficient options for proto=fd [ 281.881335][T15260] team_slave_0: entered promiscuous mode [ 281.886989][T15260] team_slave_1: entered promiscuous mode [ 281.892859][T15260] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 281.893178][ T3190] kernel write not supported for file /virtual_nci (pid: 3190 comm: kworker/0:7) [ 281.910054][T15260] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 281.930560][T15260] bond0: entered promiscuous mode [ 281.936020][T15260] bond_slave_0: entered promiscuous mode [ 281.941909][T15260] bond_slave_1: entered promiscuous mode [ 281.947652][T15260] bridge0: entered promiscuous mode [ 281.952892][T15260] macvlan2: entered promiscuous mode [ 281.958195][T15260] team0: entered promiscuous mode [ 281.991895][T15263] loop4: detected capacity change from 0 to 512 [ 281.999879][T15263] EXT4-fs: old and new quota format mixing [ 282.228917][T15274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.304056][T15277] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 282.393025][T15281] syzkaller0: entered promiscuous mode [ 282.398659][T15281] syzkaller0: entered allmulticast mode [ 282.545731][T15290] loop4: detected capacity change from 0 to 164 [ 282.553532][T15290] Unable to read rock-ridge attributes [ 282.617999][T15294] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 282.724067][T15311] loop4: detected capacity change from 0 to 2048 [ 282.765431][T15311] loop4: p1 < > p4 [ 282.773729][T15311] loop4: p4 size 8388608 extends beyond EOD, truncated [ 282.796527][ T29] audit: type=1326 audit(1719043934.144:30386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15320 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb1590a9 code=0x0 [ 282.841819][T15326] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 282.901772][ T8] kernel write not supported for file /virtual_nci (pid: 8 comm: kworker/0:0) [ 282.914995][T15330] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 283.047639][T15347] 9pnet_fd: Insufficient options for proto=fd [ 283.057113][T15347] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 283.124935][ T8] kernel write not supported for file /ppp (pid: 8 comm: kworker/0:0) [ 283.236741][T15354] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 283.308755][T15357] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 283.362440][T15361] syzkaller0: entered promiscuous mode [ 283.367948][T15361] syzkaller0: entered allmulticast mode [ 283.537552][T15373] loop4: detected capacity change from 0 to 2048 [ 283.544389][ T8] kernel write not supported for file /ppp (pid: 8 comm: kworker/0:0) [ 283.552714][T15373] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 283.620390][T15373] loop4: detected capacity change from 0 to 512 [ 283.629264][T15373] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.646924][T15373] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 283.660890][T15373] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 283.673850][T15373] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.690697][ T29] audit: type=1400 audit(1719043935.034:30387): avc: denied { link } for pid=15372 comm="syz-executor.4" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 283.691493][T15373] EXT4-fs error (device loop4): ext4_find_dest_de:2111: inode #2: block 255: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=0, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 283.754185][T15386] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 283.794162][T13631] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 284.072366][ T29] audit: type=1326 audit(1719043935.414:30388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15410 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb1590a9 code=0x0 [ 284.172951][ T8] kernel write not supported for file /virtual_nci (pid: 8 comm: kworker/0:0) [ 284.763821][T15427] 9pnet_fd: Insufficient options for proto=fd [ 284.767744][T15425] loop2: detected capacity change from 0 to 2048 [ 284.773469][T15427] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 284.783716][T15425] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 284.832326][T15425] loop2: detected capacity change from 0 to 512 [ 284.839470][T15425] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.849146][T15425] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 284.863165][T15425] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 284.875717][T15425] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.895279][T15425] EXT4-fs error (device loop2): ext4_find_dest_de:2111: inode #2: block 255: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 284.914685][ T29] audit: type=1400 audit(1719043936.264:30389): avc: denied { append } for pid=15435 comm="syz-executor.4" name="ptp0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 284.951275][T14841] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 285.030482][T15440] loop2: detected capacity change from 0 to 256 [ 285.039527][ T29] audit: type=1400 audit(1719043936.384:30390): avc: denied { watch watch_reads } for pid=15439 comm="syz-executor.2" path="/root/syzkaller-testdir4049993175/syzkaller.RfqKun/43/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 285.493965][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 285.501559][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 285.540251][ T24] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 286.113341][T15470] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.127638][T15470] macvtap1: entered promiscuous mode [ 286.133637][T15470] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 286.150429][T15470] team0: Device macvtap1 is already an upper device of the team interface [ 286.176352][T15478] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 286.192610][T15477] loop3: detected capacity change from 0 to 512 [ 286.202360][T15477] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 286.216989][T15477] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 286.229826][T15477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.273764][T14850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.319847][T15492] loop4: detected capacity change from 0 to 256 [ 286.391280][T15509] loop4: detected capacity change from 0 to 512 [ 286.398553][T15509] EXT4-fs: old and new quota format mixing [ 286.429261][ T2782] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 286.436707][ T2782] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 286.444400][ T2782] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 286.531222][T15516] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.543930][T15516] macvtap1: entered promiscuous mode [ 286.550046][T15516] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 286.560210][T15516] team0: Device macvtap1 is already an upper device of the team interface [ 286.591895][T15524] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 286.646823][ T29] audit: type=1326 audit(1719043937.994:30391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15522 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1488cff0a9 code=0x0 [ 286.692243][T15529] loop4: detected capacity change from 0 to 128 [ 287.389960][T15552] loop3: detected capacity change from 0 to 2048 [ 287.397733][T15552] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 287.450537][T15552] loop3: detected capacity change from 0 to 512 [ 287.457735][T15552] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.466450][T15552] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 287.482456][T15552] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 287.495246][T15552] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.514224][T15552] EXT4-fs error (device loop3): ext4_find_dest_de:2111: inode #2: block 255: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 287.545323][T14850] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 287.752423][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.831762][T15580] loop4: detected capacity change from 0 to 128 [ 287.883312][ T29] audit: type=1326 audit(1719043939.224:30392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbf83d0a9 code=0x7ffc0000 [ 287.911439][ T29] audit: type=1326 audit(1719043939.224:30393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbf83d0a9 code=0x7ffc0000 [ 287.935656][ T29] audit: type=1326 audit(1719043939.254:30394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1dbf83d0a9 code=0x7ffc0000 [ 287.935751][ T29] audit: type=1326 audit(1719043939.254:30395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbf83d0a9 code=0x7ffc0000 [ 287.935848][ T29] audit: type=1326 audit(1719043939.254:30396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbf83d0a9 code=0x7ffc0000 [ 287.936463][ T29] audit: type=1326 audit(1719043939.254:30397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dbf83d0a9 code=0x7ffc0000 [ 287.936486][ T29] audit: type=1326 audit(1719043939.254:30398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbf83d0a9 code=0x7ffc0000 [ 287.936524][ T29] audit: type=1326 audit(1719043939.254:30399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbf83d0a9 code=0x7ffc0000 [ 287.936550][ T29] audit: type=1326 audit(1719043939.254:30400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dbf83d0a9 code=0x7ffc0000 [ 288.092454][T15591] loop4: detected capacity change from 0 to 2048 [ 288.176579][T15591] loop4: p1 < > p4 [ 288.180956][T15591] loop4: p4 size 8388608 extends beyond EOD, truncated [ 288.338336][T15603] loop3: detected capacity change from 0 to 512 [ 288.380509][ T2782] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 288.387977][ T2782] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 288.397767][ T2782] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 288.448792][T15608] loop4: detected capacity change from 0 to 512 [ 288.460554][T15608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 288.471382][T15608] System zones: 1-12 [ 288.477183][T15608] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.4: invalid block [ 288.489590][T15608] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 1) [ 288.504151][T15608] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 361: padding at end of block bitmap is not set [ 288.522806][T15608] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 288.531921][T15608] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz-executor.4: attempt to clear invalid blocks 33619980 len 1 [ 288.548079][T15608] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 0) [ 288.562979][T15608] EXT4-fs (loop4): 1 truncate cleaned up [ 288.570819][T15608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.589846][T15608] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.613128][T15608] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.637872][T15608] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.654050][T13631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.694411][T15628] loop2: detected capacity change from 0 to 2048 [ 288.710032][T15630] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.736185][T15628] loop2: p1 < > p4 [ 288.741318][T15628] loop2: p4 size 8388608 extends beyond EOD, truncated [ 288.929523][T15652] loop2: detected capacity change from 0 to 512 [ 288.940873][T15652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 288.948858][T15652] System zones: 1-12 [ 288.953074][T15652] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.2: invalid block [ 288.966037][T15652] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 1) [ 288.980542][T15652] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 361: padding at end of block bitmap is not set [ 288.996206][T15652] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 289.005418][T15652] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz-executor.2: attempt to clear invalid blocks 33619980 len 1 [ 289.020779][T15652] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 0) [ 289.035877][T15656] syzkaller0: entered promiscuous mode [ 289.038466][T15652] EXT4-fs (loop2): 1 truncate cleaned up [ 289.041354][T15656] syzkaller0: entered allmulticast mode [ 289.049134][T15652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.067837][T15658] loop4: detected capacity change from 0 to 256 [ 289.075658][T15658] FAT-fs (loop4): Unrecognized mount option "no2^ts" or missing value [ 289.097787][T15652] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.117076][T15652] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.141067][T15652] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.161089][T14841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.237451][T15674] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.432082][T15697] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.576581][T15701] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.597644][T15701] team_slave_0: entered promiscuous mode [ 289.603298][T15701] team_slave_1: entered promiscuous mode [ 289.609230][T15701] macvtap1: entered promiscuous mode [ 289.614552][T15701] team0: entered promiscuous mode [ 289.620655][T15701] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 289.629718][T15701] team0: Device macvtap1 is already an upper device of the team interface [ 289.640226][T15701] team0: left promiscuous mode [ 289.645216][T15701] team_slave_0: left promiscuous mode [ 289.650600][T15701] team_slave_1: left promiscuous mode [ 289.668764][T15702] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 289.982365][T15693] syz-executor.2 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 289.996467][T15714] loop4: detected capacity change from 0 to 512 [ 289.997195][T15693] CPU: 1 PID: 15693 Comm: syz-executor.2 Tainted: G W 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 290.015376][T15693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 290.025426][T15693] Call Trace: [ 290.028712][T15693] [ 290.031648][T15693] dump_stack_lvl+0xf2/0x150 [ 290.036223][T15693] dump_stack+0x15/0x20 [ 290.040376][T15693] dump_header+0x83/0x2d0 [ 290.044688][T15693] oom_kill_process+0x33e/0x4c0 [ 290.049520][T15693] out_of_memory+0x9af/0xbe0 [ 290.054143][T15693] mem_cgroup_out_of_memory+0x13e/0x190 [ 290.059724][T15693] try_charge_memcg+0x745/0xcd0 [ 290.064562][T15693] ? get_page_from_freelist+0x1a2a/0x1a70 [ 290.070273][T15693] obj_cgroup_charge_pages+0xbd/0x1d0 [ 290.075670][T15693] __memcg_kmem_charge_page+0x9d/0x170 [ 290.081113][T15693] __alloc_pages_noprof+0x1bc/0x360 [ 290.086291][T15693] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 290.091696][T15693] alloc_pages_noprof+0xe1/0x100 [ 290.096635][T15693] __vmalloc_node_range_noprof+0x719/0xef0 [ 290.102502][T15693] kvmalloc_node_noprof+0x121/0x170 [ 290.107681][T15693] ? ip_set_alloc+0x1f/0x30 [ 290.112244][T15693] ip_set_alloc+0x1f/0x30 [ 290.116560][T15693] hash_netiface_create+0x273/0x730 [ 290.121764][T15693] ? __nla_parse+0x40/0x60 [ 290.126171][T15693] ? __pfx_hash_netiface_create+0x10/0x10 [ 290.131931][T15693] ip_set_create+0x359/0x8a0 [ 290.136511][T15693] ? memchr+0x1/0x50 [ 290.140386][T15693] ? __nla_parse+0x40/0x60 [ 290.144782][T15693] nfnetlink_rcv_msg+0x4a9/0x570 [ 290.149845][T15693] netlink_rcv_skb+0x12c/0x230 [ 290.154605][T15693] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 290.160064][T15693] nfnetlink_rcv+0x16c/0x15b0 [ 290.164747][T15693] ? kmem_cache_free+0xd8/0x280 [ 290.169580][T15693] ? nlmon_xmit+0x51/0x60 [ 290.173982][T15693] ? __kfree_skb+0x102/0x150 [ 290.178551][T15693] ? consume_skb+0x57/0x180 [ 290.183063][T15693] ? nlmon_xmit+0x51/0x60 [ 290.187384][T15693] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 290.192669][T15693] ? __dev_queue_xmit+0xb21/0x1e50 [ 290.197763][T15693] ? ref_tracker_free+0x3a5/0x410 [ 290.202848][T15693] ? __netlink_deliver_tap+0x495/0x4c0 [ 290.208399][T15693] netlink_unicast+0x58d/0x660 [ 290.213179][T15693] netlink_sendmsg+0x5ca/0x6e0 [ 290.217966][T15693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.223400][T15693] __sock_sendmsg+0x140/0x180 [ 290.228061][T15693] ____sys_sendmsg+0x312/0x410 [ 290.232811][T15693] __sys_sendmsg+0x1e9/0x280 [ 290.237395][T15693] ? futex_wait+0x18e/0x1c0 [ 290.241933][T15693] __x64_sys_sendmsg+0x46/0x50 [ 290.246745][T15693] x64_sys_call+0xb25/0x2d70 [ 290.251316][T15693] do_syscall_64+0xc9/0x1c0 [ 290.255841][T15693] ? clear_bhb_loop+0x55/0xb0 [ 290.260543][T15693] ? clear_bhb_loop+0x55/0xb0 [ 290.265200][T15693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.271121][T15693] RIP: 0033:0x7f1488cff0a9 [ 290.275568][T15693] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 290.295230][T15693] RSP: 002b:00007f14880790c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.303674][T15693] RAX: ffffffffffffffda RBX: 00007f1488e35f80 RCX: 00007f1488cff0a9 [ 290.311676][T15693] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 290.319642][T15693] RBP: 00007f1488d6e074 R08: 0000000000000000 R09: 0000000000000000 [ 290.327591][T15693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.335616][T15693] R13: 000000000000000b R14: 00007f1488e35f80 R15: 00007ffc729ebcc8 [ 290.343656][T15693] [ 290.348915][T15693] memory: usage 307184kB, limit 307200kB, failcnt 484 [ 290.356660][T15693] memory+swap: usage 307292kB, limit 9007199254740988kB, failcnt 0 [ 290.364575][T15693] kmem: usage 306840kB, limit 9007199254740988kB, failcnt 0 [ 290.371866][T15693] Memory cgroup stats for /syz2: [ 290.372751][T15693] cache 176128 [ 290.381083][T15693] rss 176128 [ 290.384285][T15693] shmem 155648 [ 290.387662][T15693] mapped_file 12288 [ 290.391462][T15693] dirty 20480 [ 290.394810][T15693] writeback 0 [ 290.398089][T15693] workingset_refault_anon 152 [ 290.402761][T15693] workingset_refault_file 677 [ 290.407490][T15693] swap 110592 [ 290.410774][T15693] swapcached 0 [ 290.414213][T15693] pgpgin 181418 [ 290.417679][T15693] pgpgout 181332 [ 290.421234][T15693] pgfault 244146 [ 290.424808][T15693] pgmajfault 91 [ 290.428377][T15693] inactive_anon 331776 [ 290.432442][T15693] active_anon 0 [ 290.435939][T15693] inactive_file 16384 [ 290.439930][T15693] active_file 4096 [ 290.443642][T15693] unevictable 0 [ 290.447108][T15693] hierarchical_memory_limit 314572800 [ 290.452492][T15693] hierarchical_memsw_limit 9223372036854771712 [ 290.458775][T15693] total_cache 176128 [ 290.462687][T15693] total_rss 176128 [ 290.466429][T15693] total_shmem 155648 [ 290.470316][T15693] total_mapped_file 12288 [ 290.474698][T15693] total_dirty 20480 [ 290.478497][T15693] total_writeback 0 [ 290.482300][T15693] total_workingset_refault_anon 152 [ 290.487538][T15693] total_workingset_refault_file 677 [ 290.492808][T15693] total_swap 110592 [ 290.496769][T15693] total_swapcached 0 [ 290.500717][T15693] total_pgpgin 181418 [ 290.504724][T15693] total_pgpgout 181332 [ 290.508898][T15693] total_pgfault 244149 [ 290.513044][T15693] total_pgmajfault 91 [ 290.517040][T15693] total_inactive_anon 331776 [ 290.521626][T15693] total_active_anon 0 [ 290.525626][T15693] total_inactive_file 16384 [ 290.530124][T15693] total_active_file 4096 [ 290.534371][T15693] total_unevictable 0 [ 290.538390][T15693] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15692,uid=0 [ 290.553856][T15693] Memory cgroup out of memory: Killed process 15693 (syz-executor.2) total-vm:46440kB, anon-rss:408kB, file-rss:9004kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 290.895677][T15732] macvtap1: entered promiscuous mode [ 290.903276][T15732] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 290.913658][T15735] loop3: detected capacity change from 0 to 256 [ 290.921497][T15732] team0: Device macvtap1 is already an upper device of the team interface [ 290.925810][T15735] FAT-fs (loop3): Unrecognized mount option "no2^ts" or missing value [ 290.939126][T15739] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 291.118461][T15752] loop2: detected capacity change from 0 to 512 [ 291.308979][T15768] loop4: detected capacity change from 0 to 512 [ 291.317377][T15768] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 291.325552][T15768] System zones: 1-12 [ 291.330680][T15768] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.4: invalid block [ 291.343353][T15768] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 1) [ 291.360414][T15768] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 361: padding at end of block bitmap is not set [ 291.375277][T15768] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 291.384105][T15768] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz-executor.4: attempt to clear invalid blocks 33619980 len 1 [ 291.399539][T15768] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 0) [ 291.417261][T15768] EXT4-fs (loop4): 1 truncate cleaned up [ 291.423358][T15768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.483664][T13631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.561230][T15777] macvtap1: entered promiscuous mode [ 291.567695][T15777] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 291.576952][T15777] team0: Device macvtap1 is already an upper device of the team interface [ 291.610365][T15778] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 291.734531][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 291.734579][ T29] audit: type=1326 audit(1719043943.084:30474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb1590a9 code=0x7fc00000 [ 291.769091][ T29] audit: type=1326 audit(1719043943.084:30475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7dbb1590a9 code=0x7fc00000 [ 291.793189][ T29] audit: type=1326 audit(1719043943.084:30476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb1590a9 code=0x7fc00000 [ 291.800394][T15788] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.817373][ T29] audit: type=1326 audit(1719043943.084:30477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb1590a9 code=0x7fc00000 [ 291.850994][ T29] audit: type=1326 audit(1719043943.084:30478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb1590a9 code=0x7fc00000 [ 291.875088][ T29] audit: type=1326 audit(1719043943.084:30479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb1590a9 code=0x7fc00000 [ 291.899157][ T29] audit: type=1326 audit(1719043943.084:30480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb1590a9 code=0x7fc00000 [ 291.923376][ T29] audit: type=1326 audit(1719043943.084:30481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb1590a9 code=0x7fc00000 [ 291.947564][ T29] audit: type=1326 audit(1719043943.084:30482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb1590a9 code=0x7fc00000 [ 291.971646][ T29] audit: type=1326 audit(1719043943.084:30483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbb1590a9 code=0x7fc00000 [ 292.141127][T15810] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.189348][T15812] loop2: detected capacity change from 0 to 256 [ 292.261346][T15817] loop4: detected capacity change from 0 to 512 [ 292.855116][T15798] syz-executor.3 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 292.869955][T15798] CPU: 1 PID: 15798 Comm: syz-executor.3 Tainted: G W 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 292.881953][T15798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 292.892027][T15798] Call Trace: [ 292.895331][T15798] [ 292.898304][T15798] dump_stack_lvl+0xf2/0x150 [ 292.902880][T15798] dump_stack+0x15/0x20 [ 292.907019][T15798] dump_header+0x83/0x2d0 [ 292.911326][T15798] oom_kill_process+0x33e/0x4c0 [ 292.916189][T15798] out_of_memory+0x9af/0xbe0 [ 292.920758][T15798] mem_cgroup_out_of_memory+0x13e/0x190 [ 292.926312][T15798] try_charge_memcg+0x745/0xcd0 [ 292.931202][T15798] ? get_page_from_freelist+0x1a2a/0x1a70 [ 292.936914][T15798] obj_cgroup_charge_pages+0xbd/0x1d0 [ 292.942297][T15798] __memcg_kmem_charge_page+0x9d/0x170 [ 292.947766][T15798] __alloc_pages_noprof+0x1bc/0x360 [ 292.952946][T15798] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 292.958335][T15798] alloc_pages_noprof+0xe1/0x100 [ 292.963265][T15798] __vmalloc_node_range_noprof+0x719/0xef0 [ 292.969056][T15798] kvmalloc_node_noprof+0x121/0x170 [ 292.974234][T15798] ? ip_set_alloc+0x1f/0x30 [ 292.978774][T15798] ip_set_alloc+0x1f/0x30 [ 292.983105][T15798] hash_netiface_create+0x273/0x730 [ 292.988286][T15798] ? __nla_parse+0x40/0x60 [ 292.992682][T15798] ? __pfx_hash_netiface_create+0x10/0x10 [ 292.998422][T15798] ip_set_create+0x359/0x8a0 [ 293.003035][T15798] ? memchr+0x1/0x50 [ 293.006922][T15798] ? __nla_parse+0x40/0x60 [ 293.011346][T15798] nfnetlink_rcv_msg+0x4a9/0x570 [ 293.016306][T15798] ? netlink_rcv_skb+0x40/0x230 [ 293.021171][T15798] netlink_rcv_skb+0x12c/0x230 [ 293.025963][T15798] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 293.031439][T15798] nfnetlink_rcv+0x16c/0x15b0 [ 293.036117][T15798] ? kmem_cache_free+0xd8/0x280 [ 293.040978][T15798] ? nlmon_xmit+0x51/0x60 [ 293.045426][T15798] ? __kfree_skb+0x102/0x150 [ 293.050016][T15798] ? consume_skb+0x57/0x180 [ 293.054590][T15798] ? nlmon_xmit+0x51/0x60 [ 293.058926][T15798] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 293.064269][T15798] ? __dev_queue_xmit+0xb21/0x1e50 [ 293.069366][T15798] ? ref_tracker_free+0x3a5/0x410 [ 293.074464][T15798] ? __netlink_deliver_tap+0x495/0x4c0 [ 293.079926][T15798] netlink_unicast+0x58d/0x660 [ 293.084684][T15798] netlink_sendmsg+0x5ca/0x6e0 [ 293.089442][T15798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.094723][T15798] __sock_sendmsg+0x140/0x180 [ 293.099431][T15798] ____sys_sendmsg+0x312/0x410 [ 293.104189][T15798] __sys_sendmsg+0x1e9/0x280 [ 293.108806][T15798] ? futex_wait+0x18e/0x1c0 [ 293.113324][T15798] __x64_sys_sendmsg+0x46/0x50 [ 293.118079][T15798] x64_sys_call+0xb25/0x2d70 [ 293.122664][T15798] do_syscall_64+0xc9/0x1c0 [ 293.127212][T15798] ? clear_bhb_loop+0x55/0xb0 [ 293.131985][T15798] ? clear_bhb_loop+0x55/0xb0 [ 293.136652][T15798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.142539][T15798] RIP: 0033:0x7f7dbb1590a9 [ 293.146985][T15798] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 293.166641][T15798] RSP: 002b:00007f7dba4d30c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.175144][T15798] RAX: ffffffffffffffda RBX: 00007f7dbb28ff80 RCX: 00007f7dbb1590a9 [ 293.183101][T15798] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 293.191116][T15798] RBP: 00007f7dbb1c8074 R08: 0000000000000000 R09: 0000000000000000 [ 293.199074][T15798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.207188][T15798] R13: 000000000000000b R14: 00007f7dbb28ff80 R15: 00007ffcb4b91178 [ 293.215219][T15798] [ 293.218320][T15798] memory: usage 307184kB, limit 307200kB, failcnt 1254 [ 293.225183][T15798] memory+swap: usage 307464kB, limit 9007199254740988kB, failcnt 0 [ 293.233057][T15798] kmem: usage 306832kB, limit 9007199254740988kB, failcnt 0 [ 293.240422][T15798] Memory cgroup stats for /syz3: [ 293.251753][T15798] cache 184320 [ 293.260166][T15798] rss 176128 [ 293.263364][T15798] shmem 147456 [ 293.266777][T15798] mapped_file 24576 [ 293.270580][T15798] dirty 0 [ 293.273575][T15798] writeback 0 [ 293.276876][T15798] workingset_refault_anon 492 [ 293.281539][T15798] workingset_refault_file 2451 [ 293.286347][T15798] swap 286720 [ 293.289626][T15798] swapcached 0 [ 293.292990][T15798] pgpgin 270008 [ 293.296464][T15798] pgpgout 269920 [ 293.300000][T15798] pgfault 367499 [ 293.303538][T15798] pgmajfault 229 [ 293.307102][T15798] inactive_anon 323584 [ 293.311160][T15798] active_anon 0 [ 293.314732][T15798] inactive_file 20480 [ 293.318706][T15798] active_file 16384 [ 293.319828][T15854] __nla_validate_parse: 13 callbacks suppressed [ 293.319840][T15854] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.322561][T15798] unevictable 0 [ 293.322570][T15798] hierarchical_memory_limit 314572800 [ 293.322579][T15798] hierarchical_memsw_limit 9223372036854771712 [ 293.353285][T15798] total_cache 184320 [ 293.357258][T15798] total_rss 176128 [ 293.360966][T15798] total_shmem 147456 [ 293.364890][T15798] total_mapped_file 24576 [ 293.369278][T15798] total_dirty 0 [ 293.372708][T15798] total_writeback 0 [ 293.376514][T15798] total_workingset_refault_anon 492 [ 293.381683][T15798] total_workingset_refault_file 2451 [ 293.387012][T15798] total_swap 286720 [ 293.390796][T15798] total_swapcached 0 [ 293.394740][T15798] total_pgpgin 270008 [ 293.398731][T15798] total_pgpgout 269920 [ 293.402826][T15798] total_pgfault 367499 [ 293.406888][T15798] total_pgmajfault 229 [ 293.410968][T15798] total_inactive_anon 323584 [ 293.415963][T15798] total_active_anon 0 [ 293.419920][T15798] total_inactive_file 20480 [ 293.424538][T15798] total_active_file 16384 [ 293.428851][T15798] total_unevictable 0 [ 293.432852][T15798] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15797,uid=0 [ 293.448270][T15798] Memory cgroup out of memory: Killed process 15798 (syz-executor.3) total-vm:48488kB, anon-rss:420kB, file-rss:8964kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 293.668304][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.743735][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.784021][T15880] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 293.822262][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.849596][T15884] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.898646][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.960227][T15902] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.975018][ T28] bridge_slave_1: left allmulticast mode [ 293.980736][ T28] bridge_slave_1: left promiscuous mode [ 293.986487][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.994321][ T28] bridge_slave_0: left allmulticast mode [ 294.000004][ T28] bridge_slave_0: left promiscuous mode [ 294.005727][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.096865][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.107914][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.118969][ T28] bond0 (unregistering): Released all slaves [ 294.128556][T15910] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 294.142804][T15907] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 294.199357][T15889] chnl_net:caif_netlink_parms(): no params data found [ 294.225236][ T28] IPVS: stopping master sync thread 13678 ... [ 294.239456][ T28] hsr_slave_1: left promiscuous mode [ 294.245404][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.252870][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.260419][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.267892][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.277121][ T28] veth1_macvtap: left promiscuous mode [ 294.282596][ T28] veth0_macvtap: left promiscuous mode [ 294.288123][ T28] veth1_vlan: left promiscuous mode [ 294.293312][ T28] veth0_vlan: left promiscuous mode [ 294.391005][ T28] team0 (unregistering): Port device team_slave_1 removed [ 294.401426][ T28] team0 (unregistering): Port device team_slave_0 removed [ 294.441006][T15889] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.448106][T15889] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.455476][T15889] bridge_slave_0: entered allmulticast mode [ 294.461892][T15889] bridge_slave_0: entered promiscuous mode [ 294.468684][T15889] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.475764][T15889] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.482927][T15889] bridge_slave_1: entered allmulticast mode [ 294.489310][T15889] bridge_slave_1: entered promiscuous mode [ 294.505558][T15889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.516054][T15889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.533566][T15889] team0: Port device team_slave_0 added [ 294.540921][T15889] team0: Port device team_slave_1 added [ 294.556814][T15889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.563818][T15889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.589733][T15889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.600818][T15889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.607755][T15889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.633722][T15889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.661855][T15889] hsr_slave_0: entered promiscuous mode [ 294.667880][T15889] hsr_slave_1: entered promiscuous mode [ 294.673692][T15889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.681252][T15889] Cannot create hsr debugfs directory [ 295.012131][T15889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 295.022395][T15889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 295.032771][T15889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 295.051797][T15889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 295.131109][T15889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.148222][T15889] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.162530][ T2782] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.169688][ T2782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.193139][ T2782] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.200285][ T2782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.219206][T15889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.229631][T15889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.286128][T15943] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 295.303150][T15889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.388895][T15889] veth0_vlan: entered promiscuous mode [ 295.398186][T15889] veth1_vlan: entered promiscuous mode [ 295.423058][T15889] veth0_macvtap: entered promiscuous mode [ 295.431584][T15889] veth1_macvtap: entered promiscuous mode [ 295.444141][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.454611][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.464400][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.474912][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.484830][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.495285][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.505112][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.515636][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.516282][T15958] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 295.525542][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.545276][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.555094][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.565529][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.575436][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.585993][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.595821][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.606248][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.620142][T15889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.649756][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.660316][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.670198][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.680672][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.690651][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.701142][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.710977][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.721476][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.731297][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.741830][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.751744][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.762174][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.772002][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.782421][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.792237][T15889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.802734][T15889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.817085][T15889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.832595][T15889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.841502][T15889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.850252][T15889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.858964][T15889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.872052][T15965] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 295.883216][T15963] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 295.943632][T15967] loop2: detected capacity change from 0 to 2048 [ 295.951444][T15967] EXT4-fs (loop2): unsupported descriptor size 65535 [ 295.970628][T15970] loop1: detected capacity change from 0 to 256 [ 296.043242][T15975] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.118862][T16067] loop1: detected capacity change from 0 to 512 [ 297.127919][T16067] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 297.141714][T16067] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 297.154308][T16067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.172468][T15889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.466329][T16099] loop4: detected capacity change from 0 to 1024 [ 297.485033][T16099] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 297.498658][T16099] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 297.506383][T16108] loop1: detected capacity change from 0 to 128 [ 297.515190][T16099] EXT4-fs error (device loop4): ext4_get_journal_inode:5752: inode #32: comm syz-executor.4: iget: special inode unallocated [ 297.531548][T16099] EXT4-fs (loop4): no journal found [ 297.592358][T16113] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 297.806893][T16137] unsupported nlmsg_type 40 [ 297.842559][T16141] loop2: detected capacity change from 0 to 512 [ 297.855548][T16141] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 297.869445][T16141] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 297.883527][T16141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.909871][T14841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.980448][T16145] loop2: detected capacity change from 0 to 1024 [ 297.987179][T16145] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 297.996776][T16145] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 298.007665][T16145] EXT4-fs error (device loop2): ext4_get_journal_inode:5752: inode #32: comm syz-executor.2: iget: special inode unallocated [ 298.020841][T16145] EXT4-fs (loop2): no journal found [ 298.160650][ T24] kernel write not supported for file /snd/seq (pid: 24 comm: kworker/1:0) [ 298.286369][T16182] loop1: detected capacity change from 0 to 1024 [ 298.293251][T16182] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 298.303293][T16182] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 298.313797][T16182] EXT4-fs error (device loop1): ext4_get_journal_inode:5752: inode #32: comm syz-executor.1: iget: special inode unallocated [ 298.327305][T16182] EXT4-fs (loop1): no journal found [ 298.650906][T16207] loop1: detected capacity change from 0 to 512 [ 298.688462][T16207] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 298.702394][T16207] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 298.715202][T16207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.739594][T15889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.077935][ T3190] kernel write not supported for file /snd/seq (pid: 3190 comm: kworker/0:7) [ 299.343418][T16258] loop2: detected capacity change from 0 to 2048 [ 299.367089][T16258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.380435][T16258] ext4 filesystem being mounted at /root/syzkaller-testdir4049993175/syzkaller.RfqKun/158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.465119][T14841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.486954][ T6006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.544523][T16265] __nla_validate_parse: 10 callbacks suppressed [ 299.544539][T16265] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 299.628570][ T6006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.688371][ T6006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.760385][ T6006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.905649][ T6006] bridge_slave_1: left allmulticast mode [ 299.911351][ T6006] bridge_slave_1: left promiscuous mode [ 299.914909][T16243] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 299.917026][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.928173][T16243] CPU: 0 PID: 16243 Comm: syz-executor.1 Tainted: G W 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 299.947189][T16243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 299.957224][T16243] Call Trace: [ 299.960482][T16243] [ 299.963389][T16243] dump_stack_lvl+0xf2/0x150 [ 299.968082][T16243] dump_stack+0x15/0x20 [ 299.972213][T16243] dump_header+0x83/0x2d0 [ 299.976572][T16243] oom_kill_process+0x33e/0x4c0 [ 299.981422][T16243] out_of_memory+0x9af/0xbe0 [ 299.985995][T16243] mem_cgroup_out_of_memory+0x13e/0x190 [ 299.991728][T16243] try_charge_memcg+0x745/0xcd0 [ 299.996574][T16243] ? _raw_spin_unlock+0x26/0x50 [ 300.001413][T16243] ? radix_tree_lookup+0xf9/0x150 [ 300.006463][T16243] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 300.012525][T16243] __read_swap_cache_async+0x2b9/0x520 [ 300.017996][T16243] swap_cluster_readahead+0x276/0x3f0 [ 300.023494][T16243] swapin_readahead+0xe2/0x7a0 [ 300.028276][T16243] ? __filemap_get_folio+0x420/0x5b0 [ 300.033658][T16243] ? swap_cache_get_folio+0x6e/0x210 [ 300.038936][T16243] do_swap_page+0x3bc/0x1840 [ 300.043608][T16243] ? cgroup_rstat_updated+0x99/0x550 [ 300.048957][T16243] ? __rcu_read_lock+0x36/0x50 [ 300.053715][T16243] handle_mm_fault+0x809/0x2a80 [ 300.058655][T16243] ? mas_walk+0x204/0x320 [ 300.062980][T16243] exc_page_fault+0x3b9/0x650 [ 300.067646][T16243] asm_exc_page_fault+0x26/0x30 [ 300.072483][T16243] RIP: 0033:0x7f0c096bf0e4 [ 300.076883][T16243] Code: 01 00 00 69 3d d1 e5 ca 00 e8 03 00 00 48 8d 1d b2 ce 17 00 e8 5d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 77 f0 ff ff eb [ 300.096550][T16243] RSP: 002b:00007ffd8f85a720 EFLAGS: 00010206 [ 300.102601][T16243] RAX: 0000000000000000 RBX: 00007f0c0983bf80 RCX: 0000000000000000 [ 300.110608][T16243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555564d2f788 [ 300.118564][T16243] RBP: 00007f0c0983d980 R08: 0000000000000000 R09: 7fffffffffffffff [ 300.126577][T16243] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000049379 [ 300.134533][T16243] R13: 00007f0c0983c05c R14: 0000000000000032 R15: 00007f0c0983d980 [ 300.142592][T16243] [ 300.145849][T16243] memory: usage 307200kB, limit 307200kB, failcnt 4146 [ 300.152695][T16243] memory+swap: usage 307704kB, limit 9007199254740988kB, failcnt 0 [ 300.160814][T16243] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 300.168100][T16243] Memory cgroup stats for /syz1: [ 300.168280][T16243] cache 12288 [ 300.176490][T16243] rss 8192 [ 300.179543][T16243] shmem 0 [ 300.182461][T16243] mapped_file 0 [ 300.185926][T16243] dirty 12288 [ 300.189200][T16243] writeback 0 [ 300.192549][T16243] workingset_refault_anon 762 [ 300.197256][T16243] workingset_refault_file 5295 [ 300.202037][T16243] swap 516096 [ 300.205371][T16243] swapcached 8192 [ 300.209034][T16243] pgpgin 259523 [ 300.212521][T16243] pgpgout 259518 [ 300.216122][T16243] pgfault 283601 [ 300.216289][T16292] loop2: detected capacity change from 0 to 2048 [ 300.219645][T16243] pgmajfault 316 [ 300.219653][T16243] inactive_anon 0 [ 300.219659][T16243] active_anon 0 [ 300.219664][T16243] inactive_file 12288 [ 300.219670][T16243] active_file 0 [ 300.244102][T16243] unevictable 0 [ 300.245532][T16292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.247548][T16243] hierarchical_memory_limit 314572800 [ 300.261620][T16292] ext4 filesystem being mounted at /root/syzkaller-testdir4049993175/syzkaller.RfqKun/163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.264918][T16243] hierarchical_memsw_limit 9223372036854771712 [ 300.264929][T16243] total_cache 12288 [ 300.264936][T16243] total_rss 8192 [ 300.264943][T16243] total_shmem 0 [ 300.296769][T16243] total_mapped_file 0 [ 300.300751][T16243] total_dirty 12288 [ 300.304571][T16243] total_writeback 0 [ 300.308344][T16243] total_workingset_refault_anon 762 [ 300.313510][T16243] total_workingset_refault_file 5295 [ 300.318852][T16243] total_swap 516096 [ 300.322630][T16243] total_swapcached 8192 [ 300.326789][T16243] total_pgpgin 259523 [ 300.330747][T16243] total_pgpgout 259518 [ 300.334801][T16243] total_pgfault 283605 [ 300.338844][T16243] total_pgmajfault 316 [ 300.342882][T16243] total_inactive_anon 0 [ 300.347028][T16243] total_active_anon 0 [ 300.351034][T16243] total_inactive_file 12288 [ 300.355542][T16243] total_active_file 0 [ 300.359500][T16243] total_unevictable 0 [ 300.363461][T16243] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16243,uid=0 [ 300.378691][T16243] Memory cgroup out of memory: Killed process 16243 (syz-executor.1) total-vm:46572kB, anon-rss:520kB, file-rss:8980kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 300.434664][ T6006] bridge_slave_0: left allmulticast mode [ 300.440325][ T6006] bridge_slave_0: left promiscuous mode [ 300.446029][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.497434][T14841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.571883][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.584082][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.595123][ T6006] bond0 (unregistering): Released all slaves [ 300.620465][T16276] chnl_net:caif_netlink_parms(): no params data found [ 300.690830][ T6006] hsr_slave_0: left promiscuous mode [ 300.704929][ T6006] hsr_slave_1: left promiscuous mode [ 300.715255][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.722749][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.730281][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.737780][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.745841][T16245] syz-executor.1 (16245) used greatest stack depth: 7112 bytes left [ 300.753953][ T6006] veth1_macvtap: left promiscuous mode [ 300.759458][ T6006] veth0_macvtap: left promiscuous mode [ 300.765050][ T6006] veth1_vlan: left promiscuous mode [ 300.770481][ T6006] veth0_vlan: left promiscuous mode [ 300.791662][T16315] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 300.902442][ T6006] team0 (unregistering): Port device team_slave_1 removed [ 300.914678][ T6006] team0 (unregistering): Port device team_slave_0 removed [ 300.961392][T16276] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.968693][T16276] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.977123][T16276] bridge_slave_0: entered allmulticast mode [ 300.983617][T16276] bridge_slave_0: entered promiscuous mode [ 301.001663][T16276] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.008740][T16276] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.016145][T16276] bridge_slave_1: entered allmulticast mode [ 301.022559][T16276] bridge_slave_1: entered promiscuous mode [ 301.050368][T16330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16330 comm=syz-executor.1 [ 301.051897][T16276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.082189][T16276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.119260][T16276] team0: Port device team_slave_0 added [ 301.125908][T16276] team0: Port device team_slave_1 added [ 301.147731][T16276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.154730][T16276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.180926][T16276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.192932][T16276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.199977][T16276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.226016][T16276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.253400][T16276] hsr_slave_0: entered promiscuous mode [ 301.259784][T16276] hsr_slave_1: entered promiscuous mode [ 301.265742][T16276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.273333][T16276] Cannot create hsr debugfs directory [ 301.531000][T16276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.531638][T16346] loop2: detected capacity change from 0 to 128 [ 301.545472][T16346] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 301.547684][T16276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.561771][T16276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.571063][T16276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.588095][T16276] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.595151][T16276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.602393][T16276] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.609454][T16276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.639992][T16276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.652538][ T3190] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.664595][ T3190] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.711860][T16276] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.723841][ T3190] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.730985][ T3190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.754536][ T3190] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.761598][ T3190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.818979][T16276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.893339][T16276] veth0_vlan: entered promiscuous mode [ 301.905494][T16276] veth1_vlan: entered promiscuous mode [ 301.924240][T16276] veth0_macvtap: entered promiscuous mode [ 301.936078][T16276] veth1_macvtap: entered promiscuous mode [ 301.952943][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.963465][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.969966][T16362] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 301.973337][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.993820][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.003856][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.014606][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.024444][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.035031][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.045156][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.055634][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.065544][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.075967][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.085780][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.096250][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.106108][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.116559][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.128900][T16276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.137189][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.147919][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.157733][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.168169][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.177975][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.188434][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.198260][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.208894][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.218854][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.229410][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.239295][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.250121][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.259984][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.270481][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.280319][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.290801][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.302667][T16276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.317619][T16276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.326385][T16276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.326838][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 302.326849][ T29] audit: type=1400 audit(1719043953.674:30544): avc: denied { setattr } for pid=16371 comm="syz-executor.2" name="/" dev="configfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.335218][T16276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.372986][T16276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.519043][T16390] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.530236][T16390] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.636127][T16392] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.005960][T16426] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.016000][T16426] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.027784][T16425] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 303.415802][T16466] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 303.549322][T16469] loop1: detected capacity change from 0 to 2048 [ 303.556902][T16472] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 303.579271][T16469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.591393][T16469] ext4 filesystem being mounted at /root/syzkaller-testdir1066917137/syzkaller.yx60ho/70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.676982][T15889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.717960][T16483] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 303.748839][T16487] loop1: detected capacity change from 0 to 128 [ 303.756147][T16487] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 303.914710][T16495] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.948131][T16495] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.975076][T16495] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 304.100520][T16503] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 304.420322][T16512] loop2: detected capacity change from 0 to 2048 [ 304.435463][T16512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.449375][T16512] ext4 filesystem being mounted at /root/syzkaller-testdir4049993175/syzkaller.RfqKun/195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.523155][T16520] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 304.544785][T14841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.884598][T16534] __nla_validate_parse: 1 callbacks suppressed [ 304.884613][T16534] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.913037][T16534] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.958534][T16536] loop2: detected capacity change from 0 to 128 [ 304.969493][T16536] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 304.983762][T16538] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 305.436296][T16568] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.454535][T16568] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.609442][T16581] loop1: detected capacity change from 0 to 128 [ 305.674039][T16583] loop2: detected capacity change from 0 to 128 [ 305.681681][T16584] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 305.695184][T16583] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 306.140646][T16603] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.160218][T16603] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.316357][T16614] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.329214][T16614] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.338579][T16614] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.351393][T16614] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 306.381940][T16615] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 306.387709][T16617] loop2: detected capacity change from 0 to 128 [ 306.405668][T16619] loop1: detected capacity change from 0 to 1024 [ 306.412907][T16617] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 306.482910][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 307.524656][T16647] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 307.556763][T16649] loop1: detected capacity change from 0 to 1024 [ 307.656793][T16663] loop1: detected capacity change from 0 to 128 [ 307.664130][T16663] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 307.683276][T16665] loop2: detected capacity change from 0 to 128 [ 307.746443][T16666] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 307.947396][T16669] loop1: detected capacity change from 0 to 512 [ 307.968155][T16669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.981142][T16669] ext4 filesystem being mounted at /root/syzkaller-testdir1066917137/syzkaller.yx60ho/103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.004947][T15889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.048928][T16666] ================================================================== [ 308.057027][T16666] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 308.064926][T16666] [ 308.067246][T16666] write to 0xffff888107e69668 of 8 bytes by task 16665 on cpu 1: [ 308.074962][T16666] __mark_inode_dirty+0x256/0x7e0 [ 308.079991][T16666] fat_update_time+0x1fe/0x210 [ 308.084749][T16666] touch_atime+0x14f/0x350 [ 308.089176][T16666] filemap_splice_read+0x8b0/0x920 [ 308.094293][T16666] splice_direct_to_actor+0x26c/0x670 [ 308.099680][T16666] do_splice_direct+0xd7/0x150 [ 308.104458][T16666] do_sendfile+0x3ab/0x960 [ 308.108868][T16666] __x64_sys_sendfile64+0x110/0x150 [ 308.114087][T16666] x64_sys_call+0x2c9f/0x2d70 [ 308.118771][T16666] do_syscall_64+0xc9/0x1c0 [ 308.123281][T16666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.129176][T16666] [ 308.131477][T16666] read to 0xffff888107e69668 of 8 bytes by task 16666 on cpu 0: [ 308.139081][T16666] __mark_inode_dirty+0x58/0x7e0 [ 308.144002][T16666] fat_update_time+0x1fe/0x210 [ 308.148742][T16666] touch_atime+0x14f/0x350 [ 308.153140][T16666] filemap_splice_read+0x8b0/0x920 [ 308.158229][T16666] splice_direct_to_actor+0x26c/0x670 [ 308.163581][T16666] do_splice_direct+0xd7/0x150 [ 308.168323][T16666] do_sendfile+0x3ab/0x960 [ 308.172713][T16666] __x64_sys_sendfile64+0x110/0x150 [ 308.177891][T16666] x64_sys_call+0x2c9f/0x2d70 [ 308.182546][T16666] do_syscall_64+0xc9/0x1c0 [ 308.187032][T16666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.192915][T16666] [ 308.195221][T16666] value changed: 0x0000000000000000 -> 0x0000000000000007 [ 308.202309][T16666] [ 308.204616][T16666] Reported by Kernel Concurrency Sanitizer on: [ 308.210743][T16666] CPU: 0 PID: 16666 Comm: syz-executor.2 Tainted: G W 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 308.222690][T16666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 308.232719][T16666] ================================================================== 2024/06/22 08:12:39 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 308.242393][ T29] audit: type=1400 audit(1719043959.586:30545): avc: denied { write } for pid=3074 comm="syz-fuzzer" path="pipe:[1888]" dev="pipefs" ino=1888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1