last executing test programs: 2m11.826471624s ago: executing program 32 (id=95): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) 1m57.57855436s ago: executing program 33 (id=350): pipe(&(0x7f00000001c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 1m50.660047727s ago: executing program 34 (id=492): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) 1m49.736260267s ago: executing program 35 (id=516): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x1a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x9}]}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x28100, 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1}) 1m49.080218598s ago: executing program 3 (id=529): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x709) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 1m49.03790005s ago: executing program 3 (id=531): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0xffff, 0xfff9}, {0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, r3, 0x0, 0x440}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x0) 1m48.807185477s ago: executing program 3 (id=537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m48.700938251s ago: executing program 3 (id=540): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b141a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 1m48.669233432s ago: executing program 3 (id=542): socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'veth0_to_hsr\x00', @random="810036e9c1ef"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320081", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x5, 0x5c, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m48.146657199s ago: executing program 3 (id=543): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m48.142393639s ago: executing program 36 (id=543): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m9.879079402s ago: executing program 9 (id=1181): openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m9.812160874s ago: executing program 9 (id=1183): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0x6}, {0x2}, {0xa, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x6c0c4844) 1m9.755222136s ago: executing program 9 (id=1186): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 1m9.699201918s ago: executing program 9 (id=1189): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1m9.571854992s ago: executing program 9 (id=1195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 1m9.422477477s ago: executing program 9 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 1m9.422326337s ago: executing program 37 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 37.453387954s ago: executing program 8 (id=1736): gettid() pipe(&(0x7f0000000340)) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0) 37.355917707s ago: executing program 8 (id=1740): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5421, &(0x7f0000000940)=0x707987cd) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) 37.303594789s ago: executing program 8 (id=1741): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7, 0x7fff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 37.051595087s ago: executing program 8 (id=1746): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) unshare(0x24020400) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) lseek(r1, 0x1000000007f, 0x0) 36.981252399s ago: executing program 8 (id=1748): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 36.838598794s ago: executing program 8 (id=1752): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000860000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @val=@tracing={0x0, 0x2}}, 0x1c) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[], 0x0) 21.742274788s ago: executing program 38 (id=1752): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000860000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @val=@tracing={0x0, 0x2}}, 0x1c) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[], 0x0) 12.285232708s ago: executing program 0 (id=1923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x5, 0xc, 0xffffffff, 0x1, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 12.22716995s ago: executing program 0 (id=1924): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) lseek(r0, 0x2000, 0x1) 11.61167089s ago: executing program 0 (id=1940): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000}, 0x1c) close(0x3) 11.590020521s ago: executing program 0 (id=1941): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2253043, 0x0) 11.546640452s ago: executing program 0 (id=1944): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 10.770861378s ago: executing program 0 (id=1954): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) futex(&(0x7f0000000440)=0x1, 0x6, 0x2, &(0x7f00000002c0)={r1, r2+60000000}, 0x0, 0x0) 10.759189138s ago: executing program 39 (id=1954): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) futex(&(0x7f0000000440)=0x1, 0x6, 0x2, &(0x7f00000002c0)={r1, r2+60000000}, 0x0, 0x0) 10.310219803s ago: executing program 1 (id=1964): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 9.740762841s ago: executing program 1 (id=1970): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) syz_pidfd_open(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 9.379942963s ago: executing program 1 (id=1977): unshare(0x6a040000) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 8.780889073s ago: executing program 1 (id=1985): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8.650582897s ago: executing program 1 (id=1986): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) uname(&(0x7f0000000000)=""/36) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$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") 8.278603369s ago: executing program 1 (id=1989): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) 8.278485419s ago: executing program 40 (id=1989): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) 2.554403947s ago: executing program 2 (id=2084): syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0d01000409000008250592d20700006a3b01096b241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "0000000000000400f7ff00"}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.732632744s ago: executing program 6 (id=2091): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1289, &(0x7f00000048c0)=ANY=[], 0x0) 1.710948374s ago: executing program 6 (id=2092): setpriority(0x2, 0x0, 0x5) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x2c9, &(0x7f00000005c0)="$eJzs3b9rJFUcAPDvbGYne6TYFFYiOMUVNobkWgtzSAQxlbKFP0APLwdHdjlIYOFUXK66v8DCwv/Dzl6x8T8QLCztPCTwZGb2dveyexs35+YkfD7V4/u+33nv7bxkA8O8fP7a4Pjug9N7j77+LTqdLFr7sR9PstiOVjyVxgIAuBaepBR/Xur7PW+ta04AwHrNfP+3n5OyOR96e93TAgDW6MOPPn7/9uHhwQdl2Yn4+fGwl0XE4PGw1/Tfvhf3ox9HsRvd2Jg+C0ipab/73uFB5GVlO24ORsNeVTn47JdJahF1/V50Y3tx/V7ZmKkfDfP6L48si7i/X03kVnTjlbn6qv/g1oL66BXxRme8yGr8nejGr1/Eg+jH3fqZRl2/WY3/TRHlO+nbv776pEqu6rPRsLdZ502ljau+NwAAAAAAAAAAAAAAAAAAAAAAXF875cR23BxUoeb8nd7GWd2/80x/fb5Oq+5v6rOIom7sRjfOpufzjFJ835zvE/luWZYpa/In5/vcyOPVPPKXtnAAAAAAAAAAAAAAAAAAAAD4Hzl9+OXxnX7/6OQ/aYxf8p+81n/Z6+zPRF6P5cmbK40VG+P0aq7nc/Z++nQwiVSLuMzkh+0yYtmc23ORG9V8Lr7y3ymllGURL3ab2tE/yufWvlpja3lO9QH/+N3Wm8d3sos+w87TG/fDbFcRJ6cPz93TyJYPevZMJK20/YolOcV4x/yr62y94A/RW783g40j2QWraM9E2uNGPG/7dVbaz1f3OwgAAAAAAAAAAAAAAAAAAGhMX/pd0PloaWlrbZMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCs2/f//00bMRc41RvFHXbw4J6U0mkSKODl92WsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+vsnAAD//7NtasQ=") getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1.624384627s ago: executing program 6 (id=2094): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000240)={0x40001012}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) close_range(r0, r1, 0x0) 1.5430136s ago: executing program 6 (id=2095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.52225444s ago: executing program 2 (id=2096): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x6) mknod$loop(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0) 1.472675562s ago: executing program 2 (id=2097): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x3) 1.439813103s ago: executing program 6 (id=2098): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 1.416582294s ago: executing program 6 (id=2099): perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@data_err_ignore}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) 965.797949ms ago: executing program 7 (id=2111): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@errors_remount}, {@nomblk_io_submit}]}, 0xfe, 0x483, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000180)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[], 0x3c, 0x2e4, &(0x7f0000000c40)="$eJzs3M9r02AYwPGnXbd1HVt7EEFF9qIXvYSt3oUiG4gFZa7iDxCyNdXS2JamTCri6smr/4Zlx90GOv+AXbx58iJedhG8DHRW0mQu3TL7Y6tb6fcD432aN0+SlzcdTwN5t+6/fZbLWFpGL0swrCQoUpUdkZgdeQUk4DQjzuew01Tl6viPzxeViCSSydl5peYSC9fiSqnJqffPX65e2iiP31ubXB+Vzdjjre/xr5tnN89t/V54mrVU1lL5QlnparHwpawvmoZKZ62cptQd09AtQ2XzllFy+gtl97RSLFaUnk9PRIolw7KUnq+onFFR5YIqlypKf6Jn80rTNDURkcGxPdVoip3mpWrz83qiy5MudZmHY7fxz95SaffL87He3JOq9e6aAADAaeVb/2831/8Btw16639XVap2/X/3wcNbbdT/6yOH1P+FlvV/oz9jFqj/uxU+uClVG+q+/kefKI2J1FZl7xv9+tHqdCOg/gcAAAAAAAAAAAAAAAAAAAAAoB9s1+vRer0etdugOLH9N+q+MLL7+aSvE73hnX9nrkP2rDP/A8Lz4l5YxHyznFpOOa3Tn8hIVkwxZFqi8qtxP7iceO5mcjagGmLywVxx81eWU0PN+TMSlZh//oyTr5rzhyXizY9LVM7458d980fkymVPviZR+bQkBTEl3biv9/JfzSh143ZyX/6YpH3emAMAAAAAoB9p6i/f3++adli/k9/O84Fp39/nITkfOtmxAwAAAAAwKKzKi5xumkapZfDOzWi58zd3x7aPfNRguINRdBYEenbkowa7azJ3nu4+nlk5DaPoiyBk3/SeLZFDd54ccmel7VOMuqsy21t26vv2ub524WfL44SOZ6TVA1v++78iAAAAAD22V/Sf9JUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADC4erBemkigab00VhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXH8CAAD///VGHGY=") 883.275491ms ago: executing program 5 (id=2112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 858.798442ms ago: executing program 4 (id=2113): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xdd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 819.953804ms ago: executing program 7 (id=2114): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x4040000) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) 725.986297ms ago: executing program 7 (id=2115): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) open(0x0, 0x66042, 0x70) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x0, 0x0, 0x0) 518.432923ms ago: executing program 2 (id=2116): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) close_range(r0, 0xffffffffffffffff, 0x0) 468.765885ms ago: executing program 7 (id=2117): futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 417.697957ms ago: executing program 2 (id=2118): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x151, 0xa832}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}]}, 0x28}}, 0x0) 395.673828ms ago: executing program 4 (id=2119): open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012"], 0x28}}, 0x802) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 385.515158ms ago: executing program 5 (id=2120): msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @loopback}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x18, {0x2, 0x0, @empty}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 355.783289ms ago: executing program 2 (id=2121): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2008404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0x100000002, 0x1000000000000000, 0x4}) 308.75562ms ago: executing program 5 (id=2122): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40080, 0x8) lchown(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0xffffffffffffffff) 308.25399ms ago: executing program 4 (id=2123): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 230.344403ms ago: executing program 7 (id=2124): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 170.646605ms ago: executing program 5 (id=2125): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1006, &(0x7f0000002500)=""/4102, 0x0, 0xc}, 0x94) 170.413045ms ago: executing program 4 (id=2126): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x208010, &(0x7f00000005c0)=ANY=[@ANYBLOB="646f733178666c259b343fd685792c0081b970078cc79a45f710a205e736e7d5c6a83a342ca3a9e4573f6a2b226f296215dc2c1f3a05ff21e745e594cd9b6badb7564e315f633cbfd46029080e9b9bba2287e278bb20501b89b2cec93e6bc2a60858cc0b40a6df"], 0x0, 0x217, &(0x7f0000000380)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) 114.075457ms ago: executing program 5 (id=2127): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x800) 66.043118ms ago: executing program 4 (id=2128): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 64.992788ms ago: executing program 5 (id=2129): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001300)={0x420, 0x3f4, 0x100, 0x70bd29, 0x25dfdbfe, {0x3, 0x1, 0x3c, [0x7a, 0x18, 0x5, 0x2, 0x5, 0x80, 0x0, 0xdb, 0x8, 0xffff, 0x1, 0x2, 0x7, 0xff, 0x5, 0x20000, 0xe, 0x1ff, 0x5, 0x0, 0x6, 0x9, 0x3, 0x3, 0xffff0be9, 0x5, 0x0, 0x8, 0x728, 0xa4b, 0x7, 0x7, 0x2, 0x5, 0x5aa2, 0x9, 0x80000001, 0x2, 0xffff, 0x6, 0x4, 0x101, 0x4, 0x0, 0x6e4, 0x65f, 0x3, 0x6, 0x10, 0x1a, 0x6, 0x3, 0x3, 0x5, 0xfffffffa, 0x9, 0x1, 0x4, 0x981, 0x10001, 0x5, 0x5, 0x0, 0x28], [0xa01, 0x1, 0x36d8, 0xff, 0x7, 0x1, 0x9, 0x335, 0xfffffffa, 0x7f, 0x4, 0x0, 0x4, 0xe81, 0x7863b657, 0x6, 0x3, 0x4, 0x7fffffff, 0x48, 0xfff, 0x5, 0x86b, 0x8, 0x4, 0xc, 0x381, 0x1, 0x1, 0x6, 0x8, 0x6, 0xa2, 0x9, 0xc, 0x5, 0x1, 0x0, 0x5a53, 0x4, 0x2, 0xb7, 0xffffff40, 0x5, 0x10000, 0x3, 0x6, 0x6, 0x8, 0x10000000, 0x6, 0x2, 0xffffffff, 0x1, 0x7, 0x6, 0x3, 0x2, 0x4, 0x80000001, 0x8, 0x3, 0xfff, 0x1], [0x4, 0xfffffff8, 0x4, 0x7fffffff, 0x10000, 0x3, 0x3, 0x6, 0x3, 0xaf3, 0x8, 0x2ab3, 0x9, 0x80, 0x9, 0x0, 0x8000, 0x84, 0x4, 0x5, 0x6, 0xe, 0xbd, 0xfffffffa, 0xc, 0x101, 0x9, 0x0, 0x1, 0x8, 0x7d, 0x6, 0x0, 0x7, 0x4, 0x8, 0x0, 0x7, 0xd, 0x6, 0x0, 0x5, 0xb, 0x2, 0x6d, 0x41, 0x8, 0xfffffff7, 0xfffffff0, 0x2, 0xf, 0x1ff, 0xdab8, 0x7, 0x1, 0x3, 0x4, 0x1, 0x7, 0x7, 0x5, 0x400, 0xabe, 0x4], [0x24b, 0x8, 0x6, 0x7, 0x7f, 0x133723ac, 0xe1b, 0x2d8, 0x2, 0xc5, 0x1, 0x9, 0x3, 0x9, 0xb, 0x3, 0x1, 0x100, 0x0, 0x8, 0xcabe, 0x7, 0x48, 0x8048, 0x100, 0x7, 0xbaec, 0x0, 0x5, 0x9, 0x9, 0x3, 0x0, 0xfffffff9, 0x5, 0x1000, 0x0, 0x4, 0x2, 0x4, 0x80, 0x3ff, 0x7, 0x9d, 0x1, 0x6, 0xfffffffa, 0x3, 0xfffffffe, 0x7, 0x82, 0x400, 0x2, 0xbfe5, 0x7, 0x7, 0x3, 0x7, 0x4, 0xb, 0x6, 0x1, 0x7, 0x4]}, [""]}, 0x420}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffefef7b, 0x0, 0x2, 0x10, "1b09000040000000000000e678000000101000"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 7.00534ms ago: executing program 7 (id=2130): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="61030100000201"], 0xa) 0s ago: executing program 4 (id=2131): socket(0x22, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): total_writeback 0 [ 80.994511][ T6446] total_workingset_refault_anon 7 [ 81.024249][ T6446] total_workingset_refault_file 0 [ 81.029434][ T6446] total_swap 180224 [ 81.033327][ T6446] total_swapcached 4407296 [ 81.037865][ T6446] total_pgpgin 37073 [ 81.041901][ T6446] total_pgpgout 37072 [ 81.046066][ T6446] total_pgfault 25434 [ 81.050081][ T6446] total_pgmajfault 6 [ 81.054021][ T6446] total_inactive_anon 0 [ 81.058261][ T6446] total_active_anon 4096 [ 81.062772][ T6446] total_inactive_file 0 [ 81.067527][ T6446] total_active_file 0 [ 81.071772][ T6446] total_unevictable 0 [ 81.075943][ T6446] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.908,pid=6446,uid=0 [ 81.134105][ T6446] Memory cgroup out of memory: Killed process 6446 (syz.7.908) total-vm:96080kB, anon-rss:1224kB, file-rss:22108kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 81.254225][ T6485] loop0: detected capacity change from 0 to 1024 [ 81.289678][ T6485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.326639][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 81.326656][ T28] audit: type=1400 audit(1774904580.463:449): avc: denied { execute } for pid=6484 comm="syz.0.925" path="/202/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.419496][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.820085][ T6512] loop9: detected capacity change from 0 to 8192 [ 81.837183][ T6512] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.877653][ T28] audit: type=1400 audit(1774904580.993:450): avc: denied { append } for pid=6511 comm="syz.9.935" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.884078][ T6518] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6518 comm=syz.6.938 [ 81.979122][ T6524] ªªªªªª: renamed from vlan0 [ 82.520096][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.8.953'. [ 82.740653][ T28] audit: type=1400 audit(1774904581.873:451): avc: denied { bind } for pid=6570 comm="syz.8.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.772087][ T28] audit: type=1400 audit(1774904581.903:452): avc: denied { setopt } for pid=6570 comm="syz.8.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.841672][ T6573] loop8: detected capacity change from 0 to 1024 [ 82.889127][ T6573] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.928465][ T5020] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.358071][ T28] audit: type=1400 audit(1774904582.493:453): avc: denied { ioctl } for pid=6608 comm="syz.6.977" path="socket:[15648]" dev="sockfs" ino=15648 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.388430][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.977'. [ 83.599947][ T6604] loop8: detected capacity change from 0 to 32768 [ 83.658994][ T3301] loop8: p1 p3 < > [ 83.666083][ T6604] loop8: p1 p3 < > [ 83.687704][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.7.989'. [ 83.732461][ T28] audit: type=1400 audit(1774904582.863:454): avc: denied { setopt } for pid=6637 comm="syz.8.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.921259][ T5004] udevd[5004]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 83.934536][ T28] audit: type=1400 audit(1774904583.063:455): avc: denied { unmount } for pid=6650 comm="syz.8.998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.937896][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 84.031227][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 84.037164][ T5004] udevd[5004]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 84.295653][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1003'. [ 84.711335][ T6659] syz.0.999 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 84.812163][ T6659] CPU: 1 UID: 0 PID: 6659 Comm: syz.0.999 Tainted: G W syzkaller #0 PREEMPT(full) [ 84.812222][ T6659] Tainted: [W]=WARN [ 84.812230][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.812244][ T6659] Call Trace: [ 84.812250][ T6659] [ 84.812257][ T6659] __dump_stack+0x1d/0x30 [ 84.812345][ T6659] dump_stack_lvl+0x95/0xd0 [ 84.812371][ T6659] dump_stack+0x15/0x1b [ 84.812397][ T6659] dump_header+0x80/0x240 [ 84.812422][ T6659] oom_kill_process+0x295/0x350 [ 84.812462][ T6659] out_of_memory+0x97d/0xb80 [ 84.812490][ T6659] try_charge_memcg+0x62e/0xa10 [ 84.812556][ T6659] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 84.812654][ T6659] __swap_cache_prepare_and_add+0x67/0x460 [ 84.812690][ T6659] ? alloc_pages_mpol+0x217/0x260 [ 84.812724][ T6659] swap_cache_alloc_folio+0xa2/0x120 [ 84.812823][ T6659] swap_cluster_readahead+0x26e/0x3d0 [ 84.812885][ T6659] swapin_readahead+0xde/0x840 [ 84.812918][ T6659] ? _raw_spin_unlock+0x9/0x30 [ 84.812949][ T6659] ? swap_put_entries_cluster+0x385/0x3a0 [ 84.812996][ T6659] ? swap_put_entries_cluster+0x71/0x3a0 [ 84.813029][ T6659] ? __rcu_read_unlock+0x4e/0x70 [ 84.813051][ T6659] ? swap_cache_get_folio+0x26f/0x280 [ 84.813161][ T6659] do_swap_page+0x2fe/0x21e0 [ 84.813196][ T6659] ? css_rstat_updated+0xbb/0x280 [ 84.813224][ T6659] ? __rcu_read_lock+0x36/0x50 [ 84.813277][ T6659] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 84.813314][ T6659] handle_mm_fault+0xb46/0x3020 [ 84.813377][ T6659] ? vma_start_read+0x1c7/0x2c0 [ 84.813411][ T6659] do_user_addr_fault+0x62f/0x1050 [ 84.813444][ T6659] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 84.813525][ T6659] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 84.813702][ T6659] ? trace_page_fault_user+0x1f/0xe0 [ 84.813737][ T6659] exc_page_fault+0x62/0xa0 [ 84.813760][ T6659] asm_exc_page_fault+0x26/0x30 [ 84.813779][ T6659] RIP: 0033:0x7f64d1b87943 [ 84.813801][ T6659] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 6e 5d 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 84.813822][ T6659] RSP: 002b:00007ffc669c2df0 EFLAGS: 00010246 [ 84.813842][ T6659] RAX: 0000000000000000 RBX: 00005555866c8500 RCX: 0000000000000000 [ 84.813858][ T6659] RDX: 00007ffc669c2e30 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.813930][ T6659] RBP: 00007f64d1e47da0 R08: 0000000000000000 R09: 0000000000000000 [ 84.813945][ T6659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000014c16 [ 84.813959][ T6659] R13: 00007f64d1e45fac R14: 000000000001491a R15: 00007ffc669c2f60 [ 84.813983][ T6659] [ 85.095813][ T6659] memory: usage 243468kB, limit 307200kB, failcnt 299 [ 85.102726][ T6659] memory+swap: usage 243740kB, limit 9007199254740988kB, failcnt 0 [ 85.193183][ T6659] kmem: usage 218824kB, limit 9007199254740988kB, failcnt 0 [ 85.208482][ T6659] Memory cgroup stats for /syz0: [ 85.208753][ T6659] cache 315392 [ 85.235798][ T6659] rss 8192 [ 85.239214][ T6659] shmem 0 [ 85.242165][ T6659] mapped_file 12288 [ 85.268794][ T6659] dirty 0 [ 85.271969][ T6659] writeback 4096 [ 85.275672][ T6659] workingset_refault_anon 47 [ 85.288991][ T6659] workingset_refault_file 641 [ 85.307443][ T6659] swap 278528 [ 85.316043][ T6659] swapcached 487424 [ 85.340666][ T6659] pgpgin 26249 [ 85.352827][ T6659] pgpgout 26168 [ 85.365246][ T6659] pgfault 37381 [ 85.375974][ T6659] pgmajfault 43 [ 85.412594][ T6659] inactive_anon 16384 [ 85.428203][ T6659] active_anon 0 [ 85.439764][ T6659] inactive_file 286720 [ 85.455208][ T6659] active_file 28672 [ 85.471154][ T6659] unevictable 0 [ 85.483634][ T6659] hierarchical_memory_limit 314572800 [ 85.509390][ T6659] hierarchical_memsw_limit 9223372036854771712 [ 85.537580][ T6659] total_cache 315392 [ 85.556902][ T6659] total_rss 8192 [ 85.566986][ T6659] total_shmem 0 [ 85.576035][ T6659] total_mapped_file 12288 [ 85.611123][ T6659] total_dirty 0 [ 85.626123][ T6659] total_writeback 4096 [ 85.654822][ T6659] total_workingset_refault_anon 47 [ 85.660341][ T6659] total_workingset_refault_file 641 [ 85.668572][ T6659] total_swap 278528 [ 85.673082][ T6659] total_swapcached 487424 [ 85.680631][ T6659] total_pgpgin 26249 [ 85.684541][ T6659] total_pgpgout 26168 [ 85.698866][ T6659] total_pgfault 37381 [ 85.702883][ T6659] total_pgmajfault 43 [ 85.715865][ T6659] total_inactive_anon 16384 [ 85.720396][ T6659] total_active_anon 0 [ 85.724386][ T6659] total_inactive_file 286720 [ 85.756027][ T6659] total_active_file 28672 [ 85.760477][ T6659] total_unevictable 0 [ 85.775925][ T6659] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.999,pid=6659,uid=0 [ 85.808992][ T6659] Memory cgroup out of memory: Killed process 6659 (syz.0.999) total-vm:96080kB, anon-rss:1224kB, file-rss:22084kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 86.012446][ T6734] loop0: detected capacity change from 0 to 512 [ 86.056135][ T6734] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 86.102219][ T6734] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #13: comm syz.0.1033: inode has both inline data and extents flags [ 86.125510][ T6734] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 86.125820][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 86.141459][ C1] EXT4-fs (loop0): initial error at time 1774904585: ext4_orphan_get:1397: inode 13 [ 86.150987][ C1] EXT4-fs (loop0): last error at time 1774904585: ext4_orphan_get:1397: inode 13 [ 86.160401][ T6734] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1033: couldn't read orphan inode 13 (err -117) [ 86.172562][ T6734] loop0: lost filesystem error report for type 5 error -117 [ 86.175153][ T6734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.214382][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.224107][ T28] audit: type=1400 audit(1774904585.333:456): avc: denied { create } for pid=6733 comm="syz.0.1033" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 87.329403][ T10] IPVS: starting estimator thread 0... [ 87.440490][ T6787] IPVS: using max 2640 ests per chain, 132000 per kthread [ 87.645682][ T28] audit: type=1400 audit(1774904586.773:457): avc: denied { read } for pid=6804 comm="syz.7.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.770773][ T6815] loop9: detected capacity change from 0 to 512 [ 87.779558][ T6815] EXT4-fs: Ignoring removed oldalloc option [ 87.813802][ T6815] EXT4-fs (loop9): 1 truncate cleaned up [ 87.849502][ T6815] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.629222][ T5148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.778461][ T6847] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 88.824983][ T6847] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 88.860012][ T6847] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 89.119330][ T6921] loop8: detected capacity change from 0 to 512 [ 89.158003][ T6921] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 89.172015][ T6921] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #13: comm syz.8.1075: inode has both inline data and extents flags [ 89.187667][ T6921] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 89.187909][ T6921] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1075: couldn't read orphan inode 13 (err -117) [ 89.197275][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 89.197298][ C0] EXT4-fs (loop8): initial error at time 1774904588: ext4_orphan_get:1397: inode 13 [ 89.197330][ C0] EXT4-fs (loop8): last error at time 1774904588: ext4_orphan_get:1397: inode 13 [ 89.234838][ T6921] loop8: lost filesystem error report for type 5 error -117 [ 89.235398][ T6921] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.283225][ T5020] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.596573][ T6955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.645862][ T6955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.819303][ T6955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.856928][ T6955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.878134][ T28] audit: type=1400 audit(1774904589.013:458): avc: denied { create } for pid=6975 comm="syz.8.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.020978][ T6955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.104864][ T6955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.135360][ T28] audit: type=1400 audit(1774904589.103:459): avc: denied { bind } for pid=6975 comm="syz.8.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.154782][ T28] audit: type=1400 audit(1774904589.143:460): avc: denied { write } for pid=6975 comm="syz.8.1096" path="socket:[16221]" dev="sockfs" ino=16221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.179283][ T28] audit: type=1400 audit(1774904589.263:461): avc: denied { read } for pid=6975 comm="syz.8.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.293289][ T6955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.303787][ T6955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.460790][ T6912] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.485817][ T6912] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.509427][ T6912] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.538115][ T6912] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.568441][ T6912] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.591221][ T6912] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.615952][ T6912] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.634344][ T6912] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.680364][ T6989] all: renamed from veth0_to_hsr [ 90.775296][ T7004] batman_adv: batadv0: Adding interface: dummy0 [ 90.791975][ T7004] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.855902][ T7004] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 91.316210][ T7018] loop9: detected capacity change from 0 to 256 [ 91.346819][ T7055] rdma_op ffff88811baf3580 conn xmit_rdma 0000000000000000 [ 91.476818][ T7018] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.526644][ T7065] loop0: detected capacity change from 0 to 512 [ 91.570549][ T7065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.682861][ T7065] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.767073][ T7087] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1125'. [ 91.928246][ T28] audit: type=1400 audit(1774904591.053:462): avc: denied { write } for pid=7119 comm="syz.9.1127" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.193561][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.558744][ T28] audit: type=1326 audit(1774904592.693:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7210 comm="syz.8.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 93.765842][ T28] audit: type=1326 audit(1774904592.693:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7210 comm="syz.8.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 93.814538][ T28] audit: type=1326 audit(1774904592.713:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7210 comm="syz.8.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 93.874289][ T28] audit: type=1326 audit(1774904592.713:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7210 comm="syz.8.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 93.915803][ T28] audit: type=1326 audit(1774904592.713:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7210 comm="syz.8.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 93.959684][ T28] audit: type=1326 audit(1774904592.713:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7210 comm="syz.8.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 93.996351][ T28] audit: type=1326 audit(1774904592.713:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7210 comm="syz.8.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 94.032319][ T28] audit: type=1326 audit(1774904592.713:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7210 comm="syz.8.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 94.057816][ T7176] loop9: detected capacity change from 0 to 2048 [ 94.070827][ T28] audit: type=1326 audit(1774904592.723:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7210 comm="syz.8.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 94.094699][ T28] audit: type=1326 audit(1774904592.723:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7210 comm="syz.8.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 94.247278][ T7176] Alternate GPT is invalid, using primary GPT. [ 94.289633][ T7176] loop9: p2 p3 p7 [ 94.356612][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1169'. [ 94.422525][ T7250] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 94.429169][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.443537][ T7250] vhci_hcd vhci_hcd.0: Device attached [ 94.450602][ T7255] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 94.457238][ T7255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.476032][ T7255] vhci_hcd vhci_hcd.0: Device attached [ 94.495948][ T7250] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(5) [ 94.502498][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 94.513649][ T7250] vhci_hcd vhci_hcd.0: Device attached [ 94.538471][ T7250] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(9) [ 94.545026][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.590462][ T7255] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(12) [ 94.597100][ T7255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.607993][ T7255] vhci_hcd vhci_hcd.0: Device attached [ 94.656364][ T7255] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 94.695986][ T3582] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 94.703622][ T7250] vhci_hcd vhci_hcd.0: Device attached [ 94.731715][ T7255] vhci_hcd vhci_hcd.0: pdev(8) rhport(6) sockfd(16) [ 94.738381][ T7255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.761639][ T7255] vhci_hcd vhci_hcd.0: Device attached [ 94.778939][ T7258] vhci_hcd: connection closed [ 94.779200][ T7264] vhci_hcd: connection closed [ 94.781557][ T6912] vhci_hcd vhci_hcd.8: stop threads [ 94.784480][ T7256] vhci_hcd: connection closed [ 94.788891][ T6912] vhci_hcd vhci_hcd.8: release socket [ 94.794527][ T7266] vhci_hcd: connection closed [ 94.799046][ T7251] vhci_hcd: connection reset by peer [ 94.814953][ T7262] vhci_hcd: connection closed [ 94.817878][ T6912] vhci_hcd vhci_hcd.8: disconnect device [ 94.831420][ T6912] vhci_hcd vhci_hcd.8: stop threads [ 94.836826][ T6912] vhci_hcd vhci_hcd.8: release socket [ 94.842293][ T6912] vhci_hcd vhci_hcd.8: disconnect device [ 94.848353][ T6912] vhci_hcd vhci_hcd.8: stop threads [ 94.853699][ T6912] vhci_hcd vhci_hcd.8: release socket [ 94.859516][ T6912] vhci_hcd vhci_hcd.8: disconnect device [ 94.866451][ T6912] vhci_hcd vhci_hcd.8: stop threads [ 94.873289][ T6912] vhci_hcd vhci_hcd.8: release socket [ 94.881169][ T6912] vhci_hcd vhci_hcd.8: disconnect device [ 94.887358][ T6912] vhci_hcd vhci_hcd.8: stop threads [ 94.892640][ T6912] vhci_hcd vhci_hcd.8: release socket [ 94.899389][ T6912] vhci_hcd vhci_hcd.8: disconnect device [ 94.905157][ T6912] vhci_hcd vhci_hcd.8: stop threads [ 94.910560][ T6912] vhci_hcd vhci_hcd.8: release socket [ 94.916209][ T6912] vhci_hcd vhci_hcd.8: disconnect device [ 94.950109][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.961619][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.092626][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 95.121565][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 95.209734][ T7303] netlink: 'syz.9.1186': attribute type 29 has an invalid length. [ 95.218899][ T7303] netlink: 'syz.9.1186': attribute type 29 has an invalid length. [ 95.228837][ T7303] netlink: 500 bytes leftover after parsing attributes in process `syz.9.1186'. [ 95.274625][ T7307] loop9: detected capacity change from 0 to 1024 [ 95.283421][ T7307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.299147][ T7307] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.335947][ T7307] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 95.356081][ T7307] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 95.386778][ T5148] EXT4-fs error (device loop9): ext4_iget_extra_inode:5040: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 95.404519][ T5148] EXT4-fs error (device loop9): ext4_iget_extra_inode:5040: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 95.815233][ T7331] chnl_net:caif_netlink_parms(): no params data found [ 95.872655][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.879946][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.887280][ T7331] bridge_slave_0: entered allmulticast mode [ 95.893899][ T7331] bridge_slave_0: entered promiscuous mode [ 95.901389][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.916586][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.923907][ T7331] bridge_slave_1: entered allmulticast mode [ 95.930995][ T7331] bridge_slave_1: entered promiscuous mode [ 95.959969][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.039898][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.064843][ T7331] team0: Port device team_slave_0 added [ 96.071765][ T7331] team0: Port device team_slave_1 added [ 96.092898][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.102901][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.129574][ T7331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.147077][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.154488][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.181296][ T7331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.232075][ T7331] hsr_slave_0: entered promiscuous mode [ 96.238408][ T7331] hsr_slave_1: entered promiscuous mode [ 96.244308][ T7331] debugfs: 'hsr0' already exists in 'hsr' [ 96.260240][ T7331] Cannot create hsr debugfs directory [ 96.355324][ T7364] netlink: 'syz.7.1208': attribute type 4 has an invalid length. [ 96.372611][ T7364] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1208'. [ 96.387901][ T7364] .`: renamed from bond0 [ 96.523419][ T7382] SELinux: security_context_str_to_sid (¬) failed with errno=-22 [ 96.581732][ T7331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.592704][ T7331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.612648][ T7331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.628552][ T7331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.656824][ T7392] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1211'. [ 96.759224][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.798077][ T7331] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.818064][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.825180][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.861772][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.868906][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.000932][ T7331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.132362][ T7331] veth0_vlan: entered promiscuous mode [ 97.148492][ T7331] veth1_vlan: entered promiscuous mode [ 97.224087][ T7331] veth0_macvtap: entered promiscuous mode [ 97.238277][ T7331] veth1_macvtap: entered promiscuous mode [ 97.262930][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.297881][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.333931][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.370351][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.388869][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.403432][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.847243][ T7545] loop8: detected capacity change from 0 to 128 [ 97.889801][ T7545] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.920910][ T7553] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 97.945003][ T7545] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.042259][ T7559] bond4: (slave geneve2): making interface the new active one [ 98.108270][ T7559] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 98.129383][ T7596] tls_set_device_offload: netdev not found [ 98.161006][ T6890] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.184332][ T5020] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.194089][ T6890] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.204019][ T6890] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.224674][ T6890] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.725253][ T7636] Process accounting resumed [ 99.035415][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1252'. [ 99.357185][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 99.357205][ T28] audit: type=1400 audit(1774904854.498:522): avc: denied { watch } for pid=7691 comm="syz.7.1256" path="/" dev="hugetlbfs" ino=21370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 99.579453][ T7714] netlink: 'syz.0.1260': attribute type 4 has an invalid length. [ 99.615857][ T7714] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1260'. [ 99.669552][ T7714] .`: renamed from bond0 (while UP) [ 99.788555][ T3582] usb 17-1: enqueue for inactive port 0 [ 99.794282][ T3582] usb 17-1: enqueue for inactive port 0 [ 99.886674][ T3582] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 100.053806][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1269'. [ 100.099160][ T28] audit: type=1400 audit(1774904855.238:523): avc: denied { name_bind } for pid=7762 comm="syz.8.1270" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 100.224380][ T7775] xt_hashlimit: size too large, truncated to 1048576 [ 100.726510][ T28] audit: type=1326 audit(1774904855.868:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.8.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 100.790629][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.798083][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.805346][ T28] audit: type=1326 audit(1774904855.868:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.8.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 100.832432][ T7801] bridge0: entered allmulticast mode [ 100.886613][ T28] audit: type=1326 audit(1774904855.888:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.8.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 100.920394][ T7800] bridge_slave_1: left allmulticast mode [ 100.935844][ T7800] bridge_slave_1: left promiscuous mode [ 100.947174][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.951900][ T28] audit: type=1326 audit(1774904855.888:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.8.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 100.993125][ T7800] bridge_slave_0: left allmulticast mode [ 101.011052][ T28] audit: type=1326 audit(1774904855.898:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.8.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 101.013456][ T7800] bridge_slave_0: left promiscuous mode [ 101.076025][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.084450][ T28] audit: type=1326 audit(1774904855.898:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.8.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 101.147122][ T28] audit: type=1326 audit(1774904855.898:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.8.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 101.235830][ T28] audit: type=1326 audit(1774904855.898:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7797 comm="syz.8.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87e8ac819 code=0x7ffc0000 [ 101.801573][ T7839] tipc: Failed to remove unknown binding: 66,1,1/0:3887170131/3887170133 [ 101.822531][ T7839] tipc: Failed to remove unknown binding: 66,1,1/0:3887170131/3887170133 [ 101.970607][ T7844] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 101.977231][ T7844] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.995156][ T7852] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 102.001805][ T7852] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.026249][ T7844] vhci_hcd vhci_hcd.0: Device attached [ 102.044462][ T7852] vhci_hcd vhci_hcd.0: Device attached [ 102.144291][ T7859] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 102.150939][ T7859] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.168230][ T7844] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(5) [ 102.174792][ T7844] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.184174][ T7866] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1305'. [ 102.193469][ T7866] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 102.195482][ T7873] netlink: 'syz.7.1306': attribute type 10 has an invalid length. [ 102.202192][ T7859] vhci_hcd vhci_hcd.0: Device attached [ 102.241978][ T7844] vhci_hcd vhci_hcd.0: Device attached [ 102.247569][ T7873] team0: Device vxcan1 is of different type [ 102.256400][ T7852] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 102.263049][ T7852] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.275908][ T7852] vhci_hcd vhci_hcd.0: Device attached [ 102.285815][ T10] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 102.323812][ T7844] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.338513][ T7883] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1310'. [ 102.358664][ T7844] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 102.365445][ T7844] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.376043][ T7844] vhci_hcd vhci_hcd.0: Device attached [ 102.382561][ T7875] vhci_hcd: connection closed [ 102.382647][ T7885] vhci_hcd: connection closed [ 102.387180][ T108] vhci_hcd vhci_hcd.0: stop threads [ 102.387860][ T7854] vhci_hcd: connection closed [ 102.393037][ T108] vhci_hcd vhci_hcd.0: release socket [ 102.404829][ T7846] vhci_hcd: connection reset by peer [ 102.408283][ T7861] vhci_hcd: connection closed [ 102.413388][ T7868] vhci_hcd: connection closed [ 102.414080][ T108] vhci_hcd vhci_hcd.0: disconnect device [ 102.428943][ T108] vhci_hcd vhci_hcd.0: stop threads [ 102.434179][ T108] vhci_hcd vhci_hcd.0: release socket [ 102.439772][ T108] vhci_hcd vhci_hcd.0: disconnect device [ 102.445593][ T108] vhci_hcd vhci_hcd.0: stop threads [ 102.459888][ T108] vhci_hcd vhci_hcd.0: release socket [ 102.466936][ T108] vhci_hcd vhci_hcd.0: disconnect device [ 102.505083][ T43] Bluetooth: hci0: sending frame failed (-49) [ 102.507738][ T108] vhci_hcd vhci_hcd.0: stop threads [ 102.511573][ T3567] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 102.524407][ T108] vhci_hcd vhci_hcd.0: release socket [ 102.530022][ T108] vhci_hcd vhci_hcd.0: disconnect device [ 102.536313][ T108] vhci_hcd vhci_hcd.0: stop threads [ 102.541629][ T108] vhci_hcd vhci_hcd.0: release socket [ 102.547183][ T108] vhci_hcd vhci_hcd.0: disconnect device [ 102.552963][ T108] vhci_hcd vhci_hcd.0: stop threads [ 102.558421][ T108] vhci_hcd vhci_hcd.0: release socket [ 102.565190][ T108] vhci_hcd vhci_hcd.0: disconnect device [ 102.679334][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1320'. [ 102.780808][ T7920] loop8: detected capacity change from 0 to 512 [ 102.803839][ T7920] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.824467][ T7920] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.858865][ T7933] ip6tnl2: entered promiscuous mode [ 102.865987][ T7933] ip6tnl2: entered allmulticast mode [ 102.876844][ T5020] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.980161][ T7940] loop0: detected capacity change from 0 to 128 [ 103.120805][ T7954] netlink: 'syz.8.1334': attribute type 1 has an invalid length. [ 103.138898][ T7957] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 103.145557][ T7957] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.168945][ T7954] bond2: entered allmulticast mode [ 103.174518][ T7954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.187067][ T7957] vhci_hcd vhci_hcd.0: Device attached [ 103.198951][ T7962] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 103.205495][ T7962] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.215342][ T7949] bio_check_eod: 105 callbacks suppressed [ 103.215358][ T7949] syz.0.1331: attempt to access beyond end of device [ 103.215358][ T7949] loop0: rw=2049, sector=361, nr_sectors = 680 limit=128 [ 103.217700][ T7954] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 103.232330][ T7962] vhci_hcd vhci_hcd.0: Device attached [ 103.249954][ T7954] bond2: (slave batadv1): making interface the new active one [ 103.255785][ T7957] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 103.257612][ T7954] batadv1: entered allmulticast mode [ 103.263973][ T7957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.264089][ T7957] vhci_hcd vhci_hcd.0: Device attached [ 103.270442][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1334'. [ 103.281406][ T7954] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 103.284994][ T7957] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 103.306708][ T7957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.314988][ T7957] vhci_hcd vhci_hcd.0: Device attached [ 103.326320][ T7957] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 103.333033][ T7957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.340637][ T7957] vhci_hcd vhci_hcd.0: Device attached [ 103.346420][ T7970] bond2 (unregistering): (slave batadv1): Releasing active interface [ 103.355116][ T7970] batadv1: left allmulticast mode [ 103.358168][ T7957] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 103.366806][ T7957] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 103.374856][ T7957] vhci_hcd vhci_hcd.0: Device attached [ 103.381872][ T7970] bond2 (unregistering): Released all slaves [ 103.388460][ T7957] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 103.395229][ T7957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.403197][ T7957] vhci_hcd vhci_hcd.0: Device attached [ 103.410783][ T7977] vhci_hcd: connection closed [ 103.410997][ T7971] vhci_hcd: connection closed [ 103.415959][ T7975] vhci_hcd: connection closed [ 103.420691][ T7973] vhci_hcd: connection closed [ 103.423599][ T6890] vhci_hcd vhci_hcd.2: stop threads [ 103.430631][ T7964] vhci_hcd: connection closed [ 103.435341][ T7968] vhci_hcd: connection closed [ 103.435834][ T23] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 103.443976][ T6890] vhci_hcd vhci_hcd.2: release socket [ 103.445856][ T7958] vhci_hcd: connection closed [ 103.452259][ T7960] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 103.459853][ T6890] vhci_hcd vhci_hcd.2: disconnect device [ 103.475173][ T6890] vhci_hcd vhci_hcd.2: stop threads [ 103.480461][ T6890] vhci_hcd vhci_hcd.2: release socket [ 103.486261][ T6890] vhci_hcd vhci_hcd.2: disconnect device [ 103.492084][ T6890] vhci_hcd vhci_hcd.2: stop threads [ 103.497546][ T6890] vhci_hcd vhci_hcd.2: release socket [ 103.503025][ T6890] vhci_hcd vhci_hcd.2: disconnect device [ 103.510150][ T6890] vhci_hcd vhci_hcd.2: stop threads [ 103.515502][ T6890] vhci_hcd vhci_hcd.2: release socket [ 103.521156][ T6890] vhci_hcd vhci_hcd.2: disconnect device [ 103.527463][ T6890] vhci_hcd vhci_hcd.2: stop threads [ 103.532767][ T6890] vhci_hcd vhci_hcd.2: release socket [ 103.538515][ T6890] vhci_hcd vhci_hcd.2: disconnect device [ 103.544970][ T6890] vhci_hcd vhci_hcd.2: stop threads [ 103.550410][ T6890] vhci_hcd vhci_hcd.2: release socket [ 103.556339][ T6890] vhci_hcd vhci_hcd.2: disconnect device [ 103.562131][ T6890] vhci_hcd vhci_hcd.2: stop threads [ 103.567838][ T6890] vhci_hcd vhci_hcd.2: release socket [ 103.573375][ T6890] vhci_hcd vhci_hcd.2: disconnect device [ 103.586769][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1342'. [ 103.716658][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1349'. [ 103.726210][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1349'. [ 104.226372][ T8031] netlink: 'syz.7.1361': attribute type 1 has an invalid length. [ 104.312237][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1362'. [ 105.215456][ T8059] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1374'. [ 105.251761][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1374'. [ 105.401208][ T8059] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1374'. [ 105.571930][ T8059] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1374'. [ 105.762175][ T8059] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1374'. [ 105.992093][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 106.022447][ T8077] team1: entered promiscuous mode [ 106.036575][ T8077] team1: entered allmulticast mode [ 106.047143][ T8077] 8021q: adding VLAN 0 to HW filter on device team1 [ 106.090353][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 106.104588][ T8079] team2: entered promiscuous mode [ 106.145869][ T8079] team2: entered allmulticast mode [ 106.162920][ T8079] 8021q: adding VLAN 0 to HW filter on device team2 [ 106.171074][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 106.171089][ T28] audit: type=1400 audit(1774904861.308:638): avc: denied { write } for pid=8082 comm="syz.8.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.401052][ T8096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.427122][ T6890] bond1: (slave dummy0): link status up again after 0 ms [ 106.445788][ T12] bond1: (slave dummy0): link status up again after 0 ms [ 106.459328][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 106.596016][ T108] bond1: (slave dummy0): failed to get link speed/duplex [ 106.609095][ T8112] loop2: detected capacity change from 0 to 7 [ 106.626044][ T8112] loop2: [ 106.669220][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1395'. [ 106.678439][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1395'. [ 106.705814][ T108] bond1: (slave dummy0): failed to get link speed/duplex [ 106.773766][ T8117] loop0: detected capacity change from 0 to 1024 [ 106.780847][ T8117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.815839][ T6914] bond1: (slave dummy0): failed to get link speed/duplex [ 106.839400][ T8117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.891785][ T8117] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.905209][ T8117] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 106.926254][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 107.033467][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.045823][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 107.107241][ T28] audit: type=1400 audit(1774904862.248:639): avc: denied { accept } for pid=8130 comm="syz.7.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 107.268249][ T3796] net_ratelimit: 1 callbacks suppressed [ 107.268269][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 107.321841][ T10] usb 1-1: enqueue for inactive port 0 [ 107.331284][ T10] usb 1-1: enqueue for inactive port 0 [ 107.405787][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 107.417555][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 107.515888][ T28] audit: type=1400 audit(1774904862.648:640): avc: denied { sqpoll } for pid=8169 comm="syz.7.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.535980][ T6890] bond1: (slave dummy0): failed to get link speed/duplex [ 107.636049][ T8187] tipc: Failed to remove unknown binding: 66,1,1/0:2651389435/2651389437 [ 107.645909][ T6890] bond1: (slave dummy0): failed to get link speed/duplex [ 107.773926][ T28] audit: type=1400 audit(1774904862.908:641): avc: denied { mounton } for pid=8196 comm="syz.8.1428" path="/208/file0" dev="tmpfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 107.797512][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 107.906214][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 108.015884][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 108.119137][ T8212] netlink: 'syz.0.1434': attribute type 83 has an invalid length. [ 108.128757][ T6890] bond1: (slave dummy0): failed to get link speed/duplex [ 108.197063][ T28] audit: type=1400 audit(1774904863.338:642): avc: denied { lock } for pid=8215 comm="syz.0.1436" path="socket:[22079]" dev="sockfs" ino=22079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.288900][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 108.405903][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 108.575803][ T23] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 108.733095][ T8228] loop8: detected capacity change from 0 to 4096 [ 108.756430][ T8228] EXT4-fs: test_dummy_encryption option not supported [ 108.777391][ T8228] xt_hashlimit: size too large, truncated to 1048576 [ 109.009138][ T28] audit: type=1400 audit(1774904864.148:643): avc: denied { connect } for pid=8248 comm="syz.8.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.314080][ T8254] .`: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.334384][ T8254] .`: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 109.351721][ T8254] .`: (slave ipvlan2): Error -95 calling set_mac_address [ 109.588881][ T35] IPVS: starting estimator thread 0... [ 109.676326][ T8265] IPVS: using max 2640 ests per chain, 132000 per kthread [ 110.138896][ T8287] mmap: syz.6.1461 (8287) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.271418][ T8294] netlink: 'syz.6.1464': attribute type 29 has an invalid length. [ 110.280503][ T8294] netlink: 'syz.6.1464': attribute type 29 has an invalid length. [ 110.290058][ T8294] __nla_validate_parse: 2 callbacks suppressed [ 110.290128][ T8294] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1464'. [ 110.658931][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1472'. [ 110.764821][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1477'. [ 110.778935][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1477'. [ 110.779336][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.802536][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.813649][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.824022][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.841640][ T8333] netlink: 'syz.6.1479': attribute type 1 has an invalid length. [ 110.856239][ T8333] bond2: entered allmulticast mode [ 110.861807][ T8333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.888104][ T8333] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 110.897276][ T8333] bond2: (slave batadv1): making interface the new active one [ 110.904862][ T8333] batadv1: entered allmulticast mode [ 110.911903][ T8333] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 110.931676][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1479'. [ 110.943741][ T8333] bond2 (unregistering): (slave batadv1): Releasing active interface [ 110.952090][ T8333] batadv1: left allmulticast mode [ 110.958573][ T8333] bond2 (unregistering): Released all slaves [ 111.141797][ T28] audit: type=1400 audit(1774904866.278:644): avc: denied { map } for pid=8348 comm="syz.7.1487" path="socket:[20397]" dev="sockfs" ino=20397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 112.326837][ T6890] net_ratelimit: 31 callbacks suppressed [ 112.326854][ T6890] bond1: (slave dummy0): failed to get link speed/duplex [ 112.445796][ T6890] bond1: (slave dummy0): failed to get link speed/duplex [ 112.542676][ T8372] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1495'. [ 112.553344][ T8372] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1495'. [ 112.575799][ T6898] bond1: (slave dummy0): failed to get link speed/duplex [ 112.685794][ T6898] bond1: (slave dummy0): failed to get link speed/duplex [ 112.795803][ T6890] bond1: (slave dummy0): failed to get link speed/duplex [ 112.905839][ T6898] bond1: (slave dummy0): failed to get link speed/duplex [ 113.015791][ T6890] bond1: (slave dummy0): failed to get link speed/duplex [ 113.125793][ T6898] bond1: (slave dummy0): failed to get link speed/duplex [ 113.235885][ T6890] bond1: (slave dummy0): failed to get link speed/duplex [ 113.345771][ T6898] bond1: (slave dummy0): failed to get link speed/duplex [ 114.247900][ T28] audit: type=1326 audit(1774904869.378:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d1bcc819 code=0x7ffc0000 [ 114.284852][ T28] audit: type=1326 audit(1774904869.378:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d1bcc819 code=0x7ffc0000 [ 114.311879][ T28] audit: type=1326 audit(1774904869.388:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d1bcc819 code=0x7ffc0000 [ 114.337125][ T28] audit: type=1326 audit(1774904869.388:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d1bcc819 code=0x7ffc0000 [ 114.379012][ T28] audit: type=1326 audit(1774904869.408:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f64d1bcc819 code=0x7ffc0000 [ 114.414149][ T28] audit: type=1326 audit(1774904869.408:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d1bcc819 code=0x7ffc0000 [ 114.484575][ T28] audit: type=1326 audit(1774904869.408:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d1bcc819 code=0x7ffc0000 [ 114.555775][ T28] audit: type=1326 audit(1774904869.408:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d1bcc819 code=0x7ffc0000 [ 114.615827][ T28] audit: type=1326 audit(1774904869.408:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d1bcc819 code=0x7ffc0000 [ 114.650083][ T28] audit: type=1326 audit(1774904869.408:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d1bcc819 code=0x7ffc0000 [ 114.831255][ T8407] gretap2: entered promiscuous mode [ 114.893886][ T8414] netlink: 'syz.0.1516': attribute type 5 has an invalid length. [ 114.929686][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'. [ 114.984984][ T8426] ipip0: entered promiscuous mode [ 115.101601][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1525'. [ 116.043086][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1533'. [ 116.067723][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1533'. [ 116.381461][ T8489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.407346][ T8489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.422181][ T8497] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1560'. [ 116.485438][ T8501] tipc: Enabling of bearer rejected, failed to enable media [ 116.765085][ T8508] loop2: detected capacity change from 0 to 2048 [ 116.902854][ T8508] Alternate GPT is invalid, using primary GPT. [ 116.912635][ T8508] loop2: p2 p3 p7 [ 117.068399][ T8540] xt_hashlimit: size too large, truncated to 1048576 [ 117.351103][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1575'. [ 117.405793][ T108] net_ratelimit: 35 callbacks suppressed [ 117.405812][ T108] bond1: (slave dummy0): failed to get link speed/duplex [ 117.476714][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1580'. [ 117.526815][ T6898] bond1: (slave dummy0): failed to get link speed/duplex [ 117.656830][ T108] bond1: (slave dummy0): failed to get link speed/duplex [ 117.773952][ T8575] loop0: detected capacity change from 0 to 128 [ 117.780565][ T108] bond1: (slave dummy0): failed to get link speed/duplex [ 117.880786][ T8575] syz.0.1584: attempt to access beyond end of device [ 117.880786][ T8575] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 117.894689][ T8575] syz.0.1584: attempt to access beyond end of device [ 117.894689][ T8575] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 117.918451][ T6890] bond1: (slave dummy0): failed to get link speed/duplex [ 117.967528][ T8575] syz.0.1584: attempt to access beyond end of device [ 117.967528][ T8575] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 118.047035][ T6898] bond1: (slave dummy0): failed to get link speed/duplex [ 118.086613][ T8575] syz.0.1584: attempt to access beyond end of device [ 118.086613][ T8575] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 118.100709][ T8575] syz.0.1584: attempt to access beyond end of device [ 118.100709][ T8575] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 118.115391][ T8575] syz.0.1584: attempt to access beyond end of device [ 118.115391][ T8575] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 118.166114][ T6890] bond1: (slave dummy0): failed to get link speed/duplex [ 118.174675][ T8575] syz.0.1584: attempt to access beyond end of device [ 118.174675][ T8575] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 118.246468][ T8575] syz.0.1584: attempt to access beyond end of device [ 118.246468][ T8575] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 118.275861][ T6890] bond1: (slave dummy0): failed to get link speed/duplex [ 118.312575][ T8575] syz.0.1584: attempt to access beyond end of device [ 118.312575][ T8575] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 118.357961][ T8575] syz.0.1584: attempt to access beyond end of device [ 118.357961][ T8575] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 118.386023][ T6898] bond1: (slave dummy0): failed to get link speed/duplex [ 118.435270][ T8584] loop8: detected capacity change from 0 to 512 [ 118.449190][ T8584] EXT4-fs: Ignoring removed i_version option [ 118.496159][ T6890] bond1: (slave dummy0): failed to get link speed/duplex [ 118.569438][ T8584] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.680904][ T5020] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.809537][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 119.189957][ T8624] loop2: detected capacity change from 0 to 764 [ 119.232213][ T8624] Symlink component flag not implemented [ 119.246243][ T8624] Symlink component flag not implemented (15) [ 119.302898][ T8630] loop8: detected capacity change from 0 to 128 [ 119.364001][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 119.364020][ T28] audit: type=1400 audit(1774904874.498:721): avc: denied { remount } for pid=8629 comm="syz.8.1604" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 119.470683][ T8638] loop2: detected capacity change from 0 to 512 [ 119.508659][ T8638] EXT4-fs: Ignoring removed nobh option [ 119.631424][ T8638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.679272][ T8638] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.873216][ T7331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.118679][ T8661] loop0: detected capacity change from 0 to 4096 [ 120.150097][ T8661] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 120.165762][ T8661] System zones: 0-5 [ 120.177511][ T8661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.388506][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.425406][ T8630] syz.8.1604 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 120.441410][ T8630] CPU: 0 UID: 0 PID: 8630 Comm: syz.8.1604 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.441453][ T8630] Tainted: [W]=WARN [ 120.441461][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.441474][ T8630] Call Trace: [ 120.441481][ T8630] [ 120.441489][ T8630] __dump_stack+0x1d/0x30 [ 120.441582][ T8630] dump_stack_lvl+0x95/0xd0 [ 120.441604][ T8630] dump_stack+0x15/0x1b [ 120.441624][ T8630] dump_header+0x80/0x240 [ 120.441671][ T8630] oom_kill_process+0x295/0x350 [ 120.441694][ T8630] out_of_memory+0x97d/0xb80 [ 120.441732][ T8630] try_charge_memcg+0x62e/0xa10 [ 120.441771][ T8630] obj_cgroup_charge_pages+0x23/0xc0 [ 120.441846][ T8630] __memcg_kmem_charge_page+0x9e/0x170 [ 120.441879][ T8630] __alloc_frozen_pages_noprof+0x18a/0x360 [ 120.441909][ T8630] alloc_pages_mpol+0xb3/0x260 [ 120.441942][ T8630] alloc_pages_noprof+0x8f/0x140 [ 120.442052][ T8630] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 120.442143][ T8630] __kvmalloc_node_noprof+0x3d4/0x650 [ 120.442174][ T8630] ? futex_hash_allocate+0x190/0x9d0 [ 120.442253][ T8630] ? futex_hash_allocate+0x190/0x9d0 [ 120.442281][ T8630] futex_hash_allocate+0x190/0x9d0 [ 120.442337][ T8630] ? cap_task_prctl+0x13f/0x6e0 [ 120.442363][ T8630] futex_hash_prctl+0xd8/0xf0 [ 120.442466][ T8630] __se_sys_prctl+0xa3d/0x13f0 [ 120.442500][ T8630] __x64_sys_prctl+0x67/0x80 [ 120.442595][ T8630] x64_sys_call+0x2533/0x3020 [ 120.442665][ T8630] do_syscall_64+0x12c/0x370 [ 120.442692][ T8630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.442724][ T8630] RIP: 0033:0x7fe87e8ac819 [ 120.442745][ T8630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.442848][ T8630] RSP: 002b:00007fe87d2ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 120.442880][ T8630] RAX: ffffffffffffffda RBX: 00007fe87eb25fa0 RCX: 00007fe87e8ac819 [ 120.442898][ T8630] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 120.442915][ T8630] RBP: 00007fe87e942c91 R08: 0000000000000000 R09: 0000000000000000 [ 120.442930][ T8630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.442942][ T8630] R13: 00007fe87eb26038 R14: 00007fe87eb25fa0 R15: 00007ffdcc02aad8 [ 120.442965][ T8630] [ 120.442974][ T8630] memory: usage 307200kB, limit 307200kB, failcnt 194 [ 120.666842][ T8680] loop2: detected capacity change from 0 to 512 [ 120.690622][ T8680] EXT4-fs: Ignoring removed nobh option [ 120.703249][ T8630] memory+swap: usage 307552kB, limit 9007199254740988kB, failcnt 0 [ 120.711601][ T8630] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 120.719281][ T8680] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.719600][ T8630] Memory cgroup stats for /syz8: [ 120.740365][ T8630] cache 0 [ 120.750174][ T8630] rss 0 [ 120.752958][ T8630] shmem 0 [ 120.756099][ T8630] mapped_file 0 [ 120.757273][ T8680] EXT4-fs (loop2): 1 truncate cleaned up [ 120.759644][ T8630] dirty 0 [ 120.759655][ T8630] writeback 0 [ 120.771592][ T8630] workingset_refault_anon 482 [ 120.772182][ T8680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.776605][ T8630] workingset_refault_file 0 [ 120.792917][ T8630] swap 360448 [ 120.796304][ T8630] swapcached 4407296 [ 120.800223][ T8630] pgpgin 72270 [ 120.803652][ T8630] pgpgout 72270 [ 120.808533][ T8630] pgfault 88701 [ 120.812141][ T8630] pgmajfault 91 [ 120.815720][ T8630] inactive_anon 0 [ 120.829992][ T8630] active_anon 0 [ 120.833470][ T8630] inactive_file 0 [ 120.837823][ T8630] active_file 0 [ 120.841428][ T8630] unevictable 0 [ 120.855248][ T8630] hierarchical_memory_limit 314572800 [ 120.863495][ T8630] hierarchical_memsw_limit 9223372036854771712 [ 120.869972][ T8630] total_cache 0 [ 120.873449][ T8630] total_rss 0 [ 120.877032][ T8630] total_shmem 0 [ 120.880528][ T8630] total_mapped_file 0 [ 120.884551][ T8630] total_dirty 0 [ 120.888370][ T8630] total_writeback 0 [ 120.892259][ T8630] total_workingset_refault_anon 482 [ 120.897708][ T8630] total_workingset_refault_file 0 [ 120.902807][ T8630] total_swap 360448 [ 120.907006][ T8630] total_swapcached 4407296 [ 120.911528][ T8630] total_pgpgin 72270 [ 120.915466][ T8630] total_pgpgout 72270 [ 120.919847][ T8630] total_pgfault 88701 [ 120.923852][ T8630] total_pgmajfault 91 [ 120.928184][ T8630] total_inactive_anon 0 [ 120.932610][ T8630] total_active_anon 0 [ 120.937022][ T8630] total_inactive_file 0 [ 120.941271][ T8630] total_active_file 0 [ 120.945324][ T8630] total_unevictable 0 [ 120.949738][ T8630] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1604,pid=8629,uid=0 [ 120.964575][ T8630] Memory cgroup out of memory: Killed process 8629 (syz.8.1604) total-vm:96080kB, anon-rss:1232kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 121.017947][ T8630] syz.8.1604 (8630) used greatest stack depth: 8552 bytes left [ 121.112021][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1631'. [ 121.697366][ T7331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.770415][ T28] audit: type=1400 audit(1774904876.908:722): avc: denied { bind } for pid=8707 comm="syz.7.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.801966][ T8710] loop0: detected capacity change from 0 to 256 [ 121.835438][ T8710] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 121.917978][ T8706] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 121.933536][ T8706] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 121.951759][ T8706] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 122.186952][ T8727] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1649'. [ 122.196921][ T8727] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1649'. [ 122.229998][ T28] audit: type=1400 audit(1774904877.368:723): avc: denied { read } for pid=8729 comm="syz.0.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.291355][ T8734] syzkaller0: entered promiscuous mode [ 122.296982][ T8734] syzkaller0: entered allmulticast mode [ 122.455802][ T6914] net_ratelimit: 22 callbacks suppressed [ 122.455880][ T6914] bond1: (slave dummy0): failed to get link speed/duplex [ 122.575855][ T6912] bond1: (slave dummy0): failed to get link speed/duplex [ 122.685793][ T6912] bond1: (slave dummy0): failed to get link speed/duplex [ 122.808723][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 122.935831][ T6914] bond1: (slave dummy0): failed to get link speed/duplex [ 123.057917][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1657'. [ 123.066509][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 123.067244][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1657'. [ 123.202165][ T8759] loop0: detected capacity change from 0 to 2048 [ 123.237852][ T8759] FAT-fs (loop0): FAT read failed (blocknr 1056) [ 123.308029][ T8757] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.333777][ T8757] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 123.346173][ T3796] nci: nci_ntf_packet: unknown ntf opcode 0x403 [ 123.348573][ T8757] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 123.435812][ T6912] bond1: (slave dummy0): failed to get link speed/duplex [ 123.546025][ T6912] bond1: (slave dummy0): failed to get link speed/duplex [ 123.656544][ T6912] bond1: (slave dummy0): failed to get link speed/duplex [ 123.765794][ T6912] bond1: (slave dummy0): failed to get link speed/duplex [ 124.076057][ T8763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.228405][ T8794] dvmrp0: entered allmulticast mode [ 124.422829][ T8794] dvmrp0: left allmulticast mode [ 124.604914][ T8817] tipc: Started in network mode [ 124.618784][ T8817] tipc: Node identity 4, cluster identity 4711 [ 124.635232][ T8817] tipc: Node number set to 4 [ 124.692735][ T28] audit: type=1400 audit(1774904879.828:724): avc: denied { connect } for pid=8821 comm="syz.6.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.556068][ T28] audit: type=1400 audit(1774904880.688:725): avc: denied { setopt } for pid=8836 comm="syz.2.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.741251][ T8830] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 125.759251][ T8830] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 125.801414][ T8830] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 126.207771][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1695'. [ 126.226113][ T8851] vxlan0: entered promiscuous mode [ 126.232697][ T6912] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.246582][ T6912] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.255375][ T6912] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.276237][ T6912] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.403608][ T8855] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1699'. [ 126.413522][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1699'. [ 126.508185][ T8866] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1705'. [ 126.518410][ T8866] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1705'. [ 126.563249][ T8875] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 126.656745][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1711'. [ 126.666883][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1711'. [ 127.091342][ T8912] xt_hashlimit: size too large, truncated to 1048576 [ 127.291118][ T8921] loop2: detected capacity change from 0 to 128 [ 127.315615][ T8925] veth0: entered promiscuous mode [ 127.349767][ T8927] loop0: detected capacity change from 0 to 512 [ 127.366655][ T8925] veth0: left promiscuous mode [ 127.404081][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1731'. [ 127.506351][ T108] net_ratelimit: 26 callbacks suppressed [ 127.506398][ T108] bond1: (slave dummy0): failed to get link speed/duplex [ 127.525604][ T8945] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1736'. [ 127.551202][ T8945] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1736'. [ 127.656389][ T6914] bond1: (slave dummy0): failed to get link speed/duplex [ 127.681222][ T8959] netlink: 'syz.7.1751': attribute type 12 has an invalid length. [ 127.738499][ T8959] netlink: 'syz.7.1751': attribute type 29 has an invalid length. [ 127.783721][ T8959] netlink: 'syz.7.1751': attribute type 2 has an invalid length. [ 127.799662][ T8959] netlink: 'syz.7.1751': attribute type 3 has an invalid length. [ 127.892260][ T6914] bond1: (slave dummy0): failed to get link speed/duplex [ 127.993840][ T28] audit: type=1400 audit(1774904883.128:726): avc: denied { mounton } for pid=8976 comm="syz.8.1748" path="/263/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 128.029043][ T6912] bond1: (slave dummy0): failed to get link speed/duplex [ 128.155776][ T108] bond1: (slave dummy0): failed to get link speed/duplex [ 128.285875][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 128.341667][ T28] audit: type=1400 audit(1774904883.478:727): avc: denied { bind } for pid=8997 comm="syz.7.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.365984][ T8920] syz.2.1726 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 128.395800][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 128.404162][ T8920] CPU: 1 UID: 0 PID: 8920 Comm: syz.2.1726 Tainted: G W syzkaller #0 PREEMPT(full) [ 128.404242][ T8920] Tainted: [W]=WARN [ 128.404249][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.404261][ T8920] Call Trace: [ 128.404267][ T8920] [ 128.404274][ T8920] __dump_stack+0x1d/0x30 [ 128.404304][ T8920] dump_stack_lvl+0x95/0xd0 [ 128.404331][ T8920] dump_stack+0x15/0x1b [ 128.404398][ T8920] dump_header+0x80/0x240 [ 128.404419][ T8920] oom_kill_process+0x295/0x350 [ 128.404501][ T8920] out_of_memory+0x97d/0xb80 [ 128.404589][ T8920] try_charge_memcg+0x62e/0xa10 [ 128.404692][ T8920] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 128.404762][ T8920] __swap_cache_prepare_and_add+0x67/0x460 [ 128.404798][ T8920] ? alloc_pages_mpol+0x217/0x260 [ 128.404917][ T8920] swap_cache_alloc_folio+0xa2/0x120 [ 128.404977][ T8920] swap_cluster_readahead+0x26e/0x3d0 [ 128.405017][ T8920] swapin_readahead+0xde/0x840 [ 128.405108][ T8920] ? _raw_spin_unlock+0x9/0x30 [ 128.405133][ T8920] ? swap_put_entries_cluster+0x385/0x3a0 [ 128.405241][ T8920] ? __rcu_read_unlock+0x4e/0x70 [ 128.405267][ T8920] ? swap_cache_get_folio+0x26f/0x280 [ 128.405296][ T8920] do_swap_page+0x2fe/0x21e0 [ 128.405388][ T8920] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 128.405452][ T8920] ? __rcu_read_lock+0x36/0x50 [ 128.405471][ T8920] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 128.405534][ T8920] handle_mm_fault+0xb46/0x3020 [ 128.405567][ T8920] ? vma_start_read+0x1c7/0x2c0 [ 128.405696][ T8920] do_user_addr_fault+0x62f/0x1050 [ 128.405729][ T8920] ? arch_exit_work+0x30/0x40 [ 128.405750][ T8920] ? irqentry_exit+0x3c/0x520 [ 128.405834][ T8920] ? trace_page_fault_user+0x1f/0xe0 [ 128.405867][ T8920] exc_page_fault+0x62/0xa0 [ 128.405887][ T8920] asm_exc_page_fault+0x26/0x30 [ 128.405953][ T8920] RIP: 0033:0x7f63b81518cb [ 128.405973][ T8920] Code: fa 03 48 0f bd d2 48 63 d2 48 01 d2 e8 8e b3 ff ff 49 81 fc 80 00 00 00 0f 87 94 00 00 00 48 8b 3c 24 48 89 ee e8 35 b5 ff ff <48> 8b 14 24 eb 1d 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 [ 128.405994][ T8920] RSP: 002b:00007fff94ebf000 EFLAGS: 00010246 [ 128.406021][ T8920] RAX: 00007f63b80d6ff0 RBX: 00007f63b9025720 RCX: ffffffff859cddec [ 128.406038][ T8920] RDX: ffffffff859cddec RSI: 00007f63b80d6ff8 RDI: 00007f63b7cd7008 [ 128.406055][ T8920] RBP: 00007f63b80d7000 R08: 00007f63b84e0000 R09: 00007f63b84f6038 [ 128.406070][ T8920] R10: 0000000000000001 R11: 0000000000000006 R12: 00007f63b80d7000 [ 128.406085][ T8920] R13: 00007f63b84f6038 R14: 00007f63b7cd7008 R15: 0000000000000001 [ 128.406172][ T8920] ? xa_load+0xac/0xe0 [ 128.406246][ T8920] ? xa_load+0xac/0xe0 [ 128.406275][ T8920] [ 128.668701][ T6912] bond1: (slave dummy0): failed to get link speed/duplex [ 128.685789][ T28] audit: type=1400 audit(1774904883.528:728): avc: denied { ioctl } for pid=8999 comm="syz.7.1761" path="socket:[23427]" dev="sockfs" ino=23427 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.748903][ T8920] memory: usage 307200kB, limit 307200kB, failcnt 266 [ 128.755718][ T8920] memory+swap: usage 307452kB, limit 9007199254740988kB, failcnt 0 [ 128.782046][ T8920] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 128.792148][ T6912] bond1: (slave dummy0): failed to get link speed/duplex [ 128.813773][ T9006] netlink: 'syz.0.1764': attribute type 10 has an invalid length. [ 128.822012][ T8920] Memory cgroup stats for /syz2: [ 128.822364][ T8920] cache 0 [ 128.826464][ T9006] team0: Failed to send options change via netlink (err -105) [ 128.835824][ T8920] rss 0 [ 128.842613][ T8920] shmem 0 [ 128.852723][ T8920] mapped_file 0 [ 128.855860][ T9006] team0: Port device dummy0 added [ 128.856365][ T8920] dirty 0 [ 128.872683][ T9006] netlink: 'syz.0.1764': attribute type 10 has an invalid length. [ 128.874294][ T8920] writeback 0 [ 128.886273][ T9006] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 128.894580][ T8920] workingset_refault_anon 70 [ 128.904736][ T8920] workingset_refault_file 1 [ 128.914823][ T8920] swap 258048 [ 128.918272][ T8920] swapcached 6811648 [ 128.928217][ T8920] pgpgin 30771 [ 128.931630][ T8920] pgpgout 30770 [ 128.935387][ T9006] team0: Failed to send options change via netlink (err -105) [ 128.943277][ T9006] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 128.945364][ T8920] pgfault 45588 [ 128.952687][ T9006] team0: Port device dummy0 removed [ 128.962615][ T8920] pgmajfault 49 [ 128.963441][ T9006] .`: (slave dummy0): Enslaving as an active interface with an up link [ 128.975846][ T8920] inactive_anon 0 [ 128.979498][ T8920] active_anon 4096 [ 128.983226][ T8920] inactive_file 0 [ 128.995896][ T6912] bond1: (slave dummy0): failed to get link speed/duplex [ 129.005312][ T8920] active_file 0 [ 129.009153][ T8920] unevictable 0 [ 129.012625][ T8920] hierarchical_memory_limit 314572800 [ 129.033600][ T8920] hierarchical_memsw_limit 9223372036854771712 [ 129.038479][ T9014] loop0: detected capacity change from 0 to 512 [ 129.045781][ T8920] total_cache 0 [ 129.050210][ T8920] total_rss 0 [ 129.053512][ T8920] total_shmem 0 [ 129.057349][ T9014] EXT4-fs: Ignoring removed nobh option [ 129.071904][ T9014] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.073885][ T8920] total_mapped_file 0 [ 129.104535][ T9014] EXT4-fs (loop0): 1 truncate cleaned up [ 129.117249][ T9014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.117349][ T8920] total_dirty 0 [ 129.117411][ T8920] total_writeback 0 [ 129.117420][ T8920] total_workingset_refault_anon 70 [ 129.117430][ T8920] total_workingset_refault_file 1 [ 129.117439][ T8920] total_swap 258048 [ 129.117447][ T8920] total_swapcached 6811648 [ 129.117456][ T8920] total_pgpgin 30771 [ 129.252427][ T8920] total_pgpgout 30770 [ 129.265824][ T8920] total_pgfault 45588 [ 129.276832][ T8920] total_pgmajfault 49 [ 129.285851][ T8920] total_inactive_anon 0 [ 129.290013][ T8920] total_active_anon 4096 [ 129.294261][ T8920] total_inactive_file 0 [ 129.326440][ T8920] total_active_file 0 [ 129.330543][ T8920] total_unevictable 0 [ 129.354767][ T8920] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1726,pid=8920,uid=0 [ 129.395879][ T8920] Memory cgroup out of memory: Killed process 8920 (syz.2.1726) total-vm:96080kB, anon-rss:1224kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 129.899073][ T9026] bond0: (slave bond_slave_0): Releasing backup interface [ 129.913044][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.958087][ T9026] bond0: (slave bond_slave_1): Releasing backup interface [ 129.984245][ T9034] loop0: detected capacity change from 0 to 512 [ 129.997547][ T9026] team0: Port device team_slave_0 removed [ 130.020539][ T9026] team0: Port device team_slave_1 removed [ 130.043599][ T9026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.052135][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.060187][ T9034] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 130.071768][ T9034] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 130.073451][ T9026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.082050][ T9034] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1773: Corrupt directory, running e2fsck is recommended [ 130.101098][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.111510][ T9034] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 130.120201][ T9034] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.1773: corrupted in-inode xattr: e_name out of bounds [ 130.145398][ T9034] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.145676][ T9034] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1773: couldn't read orphan inode 15 (err -117) [ 130.145756][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 130.173301][ C1] EXT4-fs (loop0): initial error at time 1774904885: ext4_iget_extra_inode:5040: inode 15 [ 130.183333][ C1] EXT4-fs (loop0): last error at time 1774904885: ext4_iget_extra_inode:5040: inode 15 [ 130.215972][ T9034] loop0: lost filesystem error report for type 5 error -117 [ 130.216551][ T9034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.320183][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.546962][ T6912] net_ratelimit: 28 callbacks suppressed [ 132.546982][ T6912] bond1: (slave dummy0): failed to get link speed/duplex [ 132.665900][ T6912] bond1: (slave dummy0): failed to get link speed/duplex [ 132.776819][ T6912] bond1: (slave dummy0): failed to get link speed/duplex [ 132.886928][ T6914] bond1: (slave dummy0): failed to get link speed/duplex [ 133.005836][ T6914] bond1: (slave dummy0): failed to get link speed/duplex [ 133.117015][ T6914] bond1: (slave dummy0): failed to get link speed/duplex [ 133.225981][ T6914] bond1: (slave dummy0): failed to get link speed/duplex [ 133.346841][ T6914] bond1: (slave dummy0): failed to get link speed/duplex [ 133.465814][ T6914] bond1: (slave dummy0): failed to get link speed/duplex [ 133.576830][ T6914] bond1: (slave dummy0): failed to get link speed/duplex [ 137.595798][ T3796] net_ratelimit: 35 callbacks suppressed [ 137.595819][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 137.715899][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 137.825853][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 137.935955][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 138.046183][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 138.155827][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 138.265831][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 138.375838][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 138.485843][ T6914] bond1: (slave dummy0): failed to get link speed/duplex [ 138.596284][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 142.686282][ T3796] net_ratelimit: 36 callbacks suppressed [ 142.686301][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 142.805866][ T3796] bond1: (slave dummy0): failed to get link speed/duplex [ 142.916286][ T6898] bond1: (slave dummy0): failed to get link speed/duplex [ 143.025805][ T6898] bond1: (slave dummy0): failed to get link speed/duplex [ 143.135815][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 143.256208][ T6898] bond1: (slave dummy0): failed to get link speed/duplex [ 143.358819][ T9068] chnl_net:caif_netlink_parms(): no params data found [ 143.392939][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.400155][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.407340][ T9068] bridge_slave_0: entered allmulticast mode [ 143.413782][ T9068] bridge_slave_0: entered promiscuous mode [ 143.420446][ T9068] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.427704][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.434871][ T9068] bridge_slave_1: entered allmulticast mode [ 143.441362][ T9068] bridge_slave_1: entered promiscuous mode [ 143.459193][ T3796] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.469675][ T3796] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.482273][ T9068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.491759][ T6898] bond1: (slave dummy0): failed to get link speed/duplex [ 143.500326][ T9068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.518007][ T9068] team0: Port device team_slave_0 added [ 143.524331][ T9068] team0: Port device team_slave_1 added [ 143.540701][ T3796] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.551170][ T3796] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.562646][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.569815][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.596449][ T9068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.607711][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.614755][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.641203][ T9068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.657788][ T3796] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.668095][ T3796] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.690385][ T9068] hsr_slave_0: entered promiscuous mode [ 143.696410][ T9068] hsr_slave_1: entered promiscuous mode [ 143.702164][ T9068] debugfs: 'hsr0' already exists in 'hsr' [ 143.708942][ T9068] Cannot create hsr debugfs directory [ 143.716547][ T6898] bond1: (slave dummy0): failed to get link speed/duplex [ 143.742309][ T3796] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.752781][ T3796] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.898804][ T3796] bridge_slave_1: left allmulticast mode [ 143.904621][ T3796] bridge_slave_1: left promiscuous mode [ 143.910659][ T3796] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.926848][ T3796] bridge_slave_0: left allmulticast mode [ 143.935014][ T3796] bridge_slave_0: left promiscuous mode [ 143.941398][ T3796] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.128058][ T3796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.138006][ T3796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.147756][ T3796] bond0 (unregistering): Released all slaves [ 144.155671][ T3796] bond1 (unregistering): (slave dummy0): Removing an active aggregator [ 144.164313][ T3796] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 144.172974][ T3796] bond1 (unregistering): Released all slaves [ 144.221753][ T3796] hsr_slave_0: left promiscuous mode [ 144.227576][ T3796] hsr_slave_1: left promiscuous mode [ 144.233318][ T3796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.240895][ T3796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.248486][ T3796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.256779][ T3796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.267632][ T3796] veth1_macvtap: left promiscuous mode [ 144.273169][ T3796] veth0_macvtap: left promiscuous mode [ 144.278875][ T3796] veth1_vlan: left promiscuous mode [ 144.284190][ T3796] veth0_vlan: left promiscuous mode [ 144.347860][ T3796] team0 (unregistering): Port device team_slave_1 removed [ 144.357820][ T3796] team0 (unregistering): Port device team_slave_0 removed [ 145.036337][ T9068] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.045578][ T9068] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.054647][ T9068] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.064723][ T9068] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 145.115016][ T9068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.130399][ T9068] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.139840][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.147104][ T6914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.167895][ T9068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.178761][ T9068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.191622][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.198714][ T6914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.262707][ T9068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.340464][ T9068] veth0_vlan: entered promiscuous mode [ 145.351510][ T9068] veth1_vlan: entered promiscuous mode [ 145.368755][ T9068] veth0_macvtap: entered promiscuous mode [ 145.376872][ T9068] veth1_macvtap: entered promiscuous mode [ 145.388124][ T9068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.400100][ T9068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.410706][ T6914] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.421291][ T6914] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.431136][ T6914] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.442670][ T6914] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.498432][ T9295] loop0: detected capacity change from 0 to 512 [ 145.509847][ T9294] loop1: detected capacity change from 0 to 512 [ 145.535330][ T28] audit: type=1400 audit(1774904900.658:729): avc: denied { setopt } for pid=9300 comm="syz.7.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.556259][ T9295] EXT4-fs: Ignoring removed nobh option [ 145.558985][ T9294] EXT4-fs: Ignoring removed nobh option [ 145.581752][ T9294] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.596408][ T9294] EXT4-fs (loop1): 1 truncate cleaned up [ 145.602594][ T9294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.619231][ T9295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.642212][ T9295] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.673221][ T28] audit: type=1400 audit(1774904900.808:730): avc: denied { execute } for pid=9292 comm="syz.0.1805" path="/330/file0/blkio.bfq.io_serviced_recursive" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 145.736340][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.371845][ T9068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.463254][ T9380] __nla_validate_parse: 4 callbacks suppressed [ 146.463298][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'. [ 146.730470][ T28] audit: type=1326 audit(1774904901.868:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b827c819 code=0x7ffc0000 [ 146.790103][ T9399] xt_hashlimit: size too large, truncated to 1048576 [ 146.797404][ T28] audit: type=1326 audit(1774904901.868:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b827c819 code=0x7ffc0000 [ 146.828211][ T28] audit: type=1326 audit(1774904901.868:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b827c819 code=0x7ffc0000 [ 146.852633][ T28] audit: type=1326 audit(1774904901.868:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b827c819 code=0x7ffc0000 [ 146.876704][ T28] audit: type=1326 audit(1774904901.868:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f63b827c819 code=0x7ffc0000 [ 146.900544][ T28] audit: type=1326 audit(1774904901.898:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b827c819 code=0x7ffc0000 [ 146.929320][ T28] audit: type=1326 audit(1774904901.898:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b827c819 code=0x7ffc0000 [ 146.953926][ T28] audit: type=1326 audit(1774904901.918:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b827c819 code=0x7ffc0000 [ 147.113553][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1817'. [ 147.122840][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1817'. [ 147.915319][ T9441] bridge1: entered promiscuous mode [ 147.922579][ T9441] bridge1: entered allmulticast mode [ 147.945908][ T9446] veth1_to_bond: entered allmulticast mode [ 147.961126][ T9445] veth1_to_bond: left allmulticast mode [ 148.051557][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1839'. [ 148.150314][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1846'. [ 148.180586][ T3796] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.190095][ T3796] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.205886][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1846'. [ 148.235178][ T3796] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.264821][ T3796] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.673962][ T9514] loop1: detected capacity change from 0 to 128 [ 148.685385][ T9514] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.720861][ T9514] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.844851][ T9068] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.870141][ T9523] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1863'. [ 148.885858][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 149.149913][ T9549] loop0: detected capacity change from 0 to 512 [ 149.170678][ T9549] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.205542][ T9549] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 149.225849][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 149.232315][ C0] EXT4-fs (loop0): initial error at time 1774904904: ext4_mb_generate_buddy:1317 [ 149.241481][ C0] EXT4-fs (loop0): last error at time 1774904904: ext4_mb_generate_buddy:1317 [ 149.275314][ T9549] EXT4-fs (loop0): 1 truncate cleaned up [ 149.324273][ T9549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.453524][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.547162][ T9571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9571 comm=syz.1.1885 [ 149.673609][ T9581] loop0: detected capacity change from 0 to 512 [ 149.700552][ T9583] netlink: 'syz.2.1891': attribute type 10 has an invalid length. [ 149.708627][ T9581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.727123][ T9583] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 149.759760][ T9583] team0: Failed to send options change via netlink (err -105) [ 149.767664][ T9583] team0: Port device netdevsim1 added [ 149.776569][ T6912] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 149.795370][ T9581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.807984][ T9581] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.852055][ T9590] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1892'. [ 150.167809][ T9584] loop1: detected capacity change from 0 to 32768 [ 150.773103][ T9602] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.780275][ T9602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.787617][ T9602] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.794794][ T9602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.848470][ T9581] syz.0.1890 (9581) used greatest stack depth: 6664 bytes left [ 150.866900][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.943247][ T9602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.989503][ T9612] batman_adv: batadv0: Adding interface: ip6gretap1 [ 150.996488][ T9612] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.049856][ T9612] batman_adv: batadv0: Interface activated: ip6gretap1 [ 151.157343][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 151.157362][ T28] audit: type=1400 audit(1774904906.298:765): avc: denied { read } for pid=9618 comm="syz.2.1904" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 151.264545][ T28] audit: type=1400 audit(1774904906.298:766): avc: denied { open } for pid=9618 comm="syz.2.1904" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 152.651497][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1921'. [ 152.711562][ T9664] netlink: 'syz.6.1922': attribute type 10 has an invalid length. [ 152.809287][ T9664] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.838335][ T9664] bond0: (slave team0): Enslaving as an active interface with an up link [ 152.988843][ T9679] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1931'. [ 153.003487][ T9679] netlink: 196 bytes leftover after parsing attributes in process `syz.7.1931'. [ 153.026609][ T9679] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1931'. [ 153.036262][ T9683] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1932'. [ 153.045877][ T9679] netlink: 196 bytes leftover after parsing attributes in process `syz.7.1931'. [ 153.319540][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1939'. [ 153.448629][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 153.553851][ T9718] loop1: detected capacity change from 0 to 512 [ 153.576192][ T9718] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #3: comm syz.1.1947: corrupted inode contents [ 153.639675][ T9718] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 153.645759][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 153.661324][ C1] EXT4-fs (loop1): initial error at time 1774904908: ext4_do_update_inode:5602: inode 3 [ 153.671119][ C1] EXT4-fs (loop1): last error at time 1774904908: ext4_do_update_inode:5602: inode 3 [ 153.699796][ T9718] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #3: comm syz.1.1947: mark_inode_dirty error [ 153.745779][ T9718] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 153.746556][ T9718] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #3: comm syz.1.1947: corrupted inode contents [ 153.796155][ T9718] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 153.796414][ T9718] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.1947: mark_inode_dirty error [ 153.845776][ T9718] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 153.846058][ T9718] Quota error (device loop1): write_blk: dquota write failed [ 153.885865][ T9718] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 153.915782][ T9718] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.1947: Failed to acquire dquot type 0 [ 153.925583][ T9727] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1950'. [ 153.935652][ T9718] loop1: lost filesystem error report for type 5 error -117 [ 153.946543][ T9718] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.1947: corrupted inode contents [ 153.965777][ T9718] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 153.965958][ T9718] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #16: comm syz.1.1947: mark_inode_dirty error [ 153.986588][ T9718] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 153.986789][ T9718] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.1947: corrupted inode contents [ 154.016004][ T9718] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 154.016888][ T9718] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1947: mark_inode_dirty error [ 154.040804][ T9718] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 154.042152][ T9718] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.1947: corrupted inode contents [ 154.064642][ T9718] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 154.064873][ T9718] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 154.076993][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1951'. [ 154.082960][ T9718] loop1: lost filesystem error report for type 5 error -117 [ 154.092369][ T9718] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.1947: corrupted inode contents [ 154.112290][ T9718] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 154.112986][ T9718] EXT4-fs error (device loop1): ext4_truncate:4602: inode #16: comm syz.1.1947: mark_inode_dirty error [ 154.127418][ T9731] erspan0: entered promiscuous mode [ 154.139898][ T9718] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 154.149579][ T9718] loop1: lost filesystem error report for type 5 error -117 [ 154.152167][ T9718] EXT4-fs (loop1): 1 truncate cleaned up [ 154.166226][ T9718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.171208][ T9731] macvtap1: entered promiscuous mode [ 154.181660][ T9718] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.204544][ T9731] macvtap1: entered allmulticast mode [ 154.217195][ T9731] erspan0: entered allmulticast mode [ 154.246736][ T9734] macvtap1: left promiscuous mode [ 154.251865][ T9734] macvtap1: left allmulticast mode [ 154.258811][ T9734] erspan0: left allmulticast mode [ 154.290432][ T9718] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #3: comm syz.1.1947: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 154.290432][ T9718] [ 154.367563][ T9754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9754 comm=syz.6.1959 [ 154.388625][ T9754] netlink: 'syz.6.1959': attribute type 1 has an invalid length. [ 154.398423][ T28] audit: type=1400 audit(1774904909.528:767): avc: denied { bind } for pid=9756 comm="syz.2.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.437491][ T9068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.446795][ T9760] loop2: detected capacity change from 0 to 1024 [ 154.457256][ T9760] EXT4-fs: Ignoring removed i_version option [ 154.459196][ T9754] bond2: (slave bridge1): making interface the new active one [ 154.463386][ T9760] EXT4-fs: Ignoring removed bh option [ 154.482292][ T9754] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 154.524078][ T9760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.600315][ T9742] chnl_net:caif_netlink_parms(): no params data found [ 154.660009][ T7331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.671257][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.678674][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.686449][ T9742] bridge_slave_0: entered allmulticast mode [ 154.693068][ T9742] bridge_slave_0: entered promiscuous mode [ 154.700523][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.707917][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.715226][ T9742] bridge_slave_1: entered allmulticast mode [ 154.722278][ T9742] bridge_slave_1: entered promiscuous mode [ 154.771388][ T9742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.795388][ T9742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.832281][ T9742] team0: Port device team_slave_0 added [ 155.090836][ T9742] team0: Port device team_slave_1 added [ 155.108627][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.117296][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.144828][ T9742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.157262][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.164309][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.192325][ T9742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.205479][ T9788] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.216718][ T9788] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.238408][ T9788] .` (unregistering): Released all slaves [ 155.277942][ T9742] hsr_slave_0: entered promiscuous mode [ 155.284023][ T9742] hsr_slave_1: entered promiscuous mode [ 155.302132][ T9742] debugfs: 'hsr0' already exists in 'hsr' [ 155.309318][ T9742] Cannot create hsr debugfs directory [ 155.357591][ T9801] loop2: detected capacity change from 0 to 512 [ 155.387465][ T9801] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1973: invalid indirect mapped block 256 (level 2) [ 155.409706][ T9801] EXT4-fs (loop2): 2 truncates cleaned up [ 155.415782][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 155.422259][ C1] EXT4-fs (loop2): initial error at time 1774904910: ext4_free_branches:1023: inode 11 [ 155.425162][ T9801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.432025][ C1] EXT4-fs (loop2): last error at time 1774904910: ext4_free_branches:1023: inode 11 [ 155.484046][ T9801] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1973: bg 0: block 5: invalid block bitmap [ 155.498404][ T9801] EXT4-fs error (device loop2) in ext4_setattr:6028: error 28 [ 155.548038][ T7331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.680321][ T9742] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.710535][ T9835] loop2: detected capacity change from 0 to 512 [ 155.721765][ T9742] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.746917][ T9742] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.747765][ T9835] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.778124][ T9742] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.785163][ T9835] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.795680][ T9835] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.821723][ T9835] EXT4-fs (loop2): 1 truncate cleaned up [ 155.856988][ T9835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.019924][ T9850] bridge2: entered promiscuous mode [ 156.045984][ T9850] bridge2: entered allmulticast mode [ 156.082621][ T9742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.112698][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.142239][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.149509][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.184894][ T9873] loop1: detected capacity change from 0 to 1024 [ 156.187275][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.198427][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.222057][ T9873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.247308][ T9742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.311578][ T9742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.385545][ T7331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.596915][ T9878] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.621155][ T9742] veth0_vlan: entered promiscuous mode [ 156.647524][ T9742] veth1_vlan: entered promiscuous mode [ 156.698266][ T9742] veth0_macvtap: entered promiscuous mode [ 156.729558][ T9742] veth1_macvtap: entered promiscuous mode [ 156.769515][ T9742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.793956][ T9742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.821298][ T6898] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.860157][ T6898] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.885058][ T6898] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.903664][ T6898] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.983956][ T28] audit: type=1326 audit(1774904912.118:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eadf9c819 code=0x7ffc0000 [ 157.017699][ T28] audit: type=1326 audit(1774904912.118:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eadf9c819 code=0x7ffc0000 [ 157.044945][ T28] audit: type=1326 audit(1774904912.148:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eadf9c819 code=0x7ffc0000 [ 157.116524][ T28] audit: type=1326 audit(1774904912.148:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eadf9c819 code=0x7ffc0000 [ 157.173506][ T28] audit: type=1326 audit(1774904912.148:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2eadf9c819 code=0x7ffc0000 [ 157.197340][ T28] audit: type=1326 audit(1774904912.148:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eadf9c819 code=0x7ffc0000 [ 157.220868][ T28] audit: type=1326 audit(1774904912.148:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eadf9c819 code=0x7ffc0000 [ 157.246017][ T28] audit: type=1326 audit(1774904912.158:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eadf9c819 code=0x7ffc0000 [ 157.269575][ T28] audit: type=1326 audit(1774904912.158:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2eadf9c819 code=0x7ffc0000 [ 157.270305][ T9928] chnl_net:caif_netlink_parms(): no params data found [ 157.293155][ T28] audit: type=1326 audit(1774904912.158:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eadf9c819 code=0x7ffc0000 [ 157.334548][ T9971] atomic_op ffff888129769528 conn xmit_atomic 0000000000000000 [ 157.412481][ T9982] loop2: detected capacity change from 0 to 512 [ 157.444719][ T9982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.457939][ T9982] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.510207][ T7331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.582785][ T9928] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.616604][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.624920][ T9928] bridge_slave_0: entered allmulticast mode [ 157.634747][ T9928] bridge_slave_0: entered promiscuous mode [ 157.660510][ T9928] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.705842][ T9928] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.713175][ T9928] bridge_slave_1: entered allmulticast mode [ 157.733955][ T9928] bridge_slave_1: entered promiscuous mode [ 157.774510][ T9928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.785345][ T9928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.841171][ T9928] team0: Port device team_slave_0 added [ 157.861616][ T9928] team0: Port device team_slave_1 added [ 157.904540][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.921028][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.987977][ T9928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.007977][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.023188][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.132686][ T9928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.161993][ T9928] hsr_slave_0: entered promiscuous mode [ 158.208138][ T9928] hsr_slave_1: entered promiscuous mode [ 158.220508][ T9928] debugfs: 'hsr0' already exists in 'hsr' [ 158.226926][ T9928] Cannot create hsr debugfs directory [ 158.591596][T10052] loop5: detected capacity change from 0 to 8192 [ 158.614117][T10052] FAT-fs (loop5): error, invalid access to FAT (entry 0x00004614) [ 158.635645][T10052] FAT-fs (loop5): Filesystem has been set read-only [ 158.642667][T10052] FAT-fs (loop5): error, invalid access to FAT (entry 0x00004614) [ 158.704062][T10052] FAT-fs (loop5): error, invalid access to FAT (entry 0x00004614) [ 158.723584][T10052] bio_check_eod: 67 callbacks suppressed [ 158.723600][T10052] syz.5.2011: attempt to access beyond end of device [ 158.723600][T10052] loop5: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 158.744253][ T9928] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.760107][ T9928] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.767216][T10052] Buffer I/O error on dev loop5, logical block 18010, async page read [ 158.778551][T10052] FAT-fs (loop5): error, invalid access to FAT (entry 0x00004614) [ 158.795901][ T9928] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.810122][ T9928] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.825440][T10052] FAT-fs (loop5): error, invalid access to FAT (entry 0x00004614) [ 158.847339][T10052] FAT-fs (loop5): error, invalid access to FAT (entry 0x00004614) [ 158.870707][T10052] FAT-fs (loop5): error, invalid access to FAT (entry 0x00004614) [ 158.891074][T10052] FAT-fs (loop5): error, invalid access to FAT (entry 0x00004614) [ 158.916344][T10052] FAT-fs (loop5): error, invalid access to FAT (entry 0x00004614) [ 158.936875][ T9928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.943658][T10052] syz.5.2011: attempt to access beyond end of device [ 158.943658][T10052] loop5: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 158.967343][ T9928] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.984183][T10052] Buffer I/O error on dev loop5, logical block 18010, async page read [ 158.996982][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.004110][ T6914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.016133][T10052] FAT-fs (loop5): error, invalid access to FAT (entry 0x00004614) [ 159.028557][T10052] syz.5.2011: attempt to access beyond end of device [ 159.028557][T10052] loop5: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 159.054959][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.062148][ T6912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.079294][T10052] Buffer I/O error on dev loop5, logical block 18010, async page read [ 159.097821][ T9928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.108885][T10052] syz.5.2011: attempt to access beyond end of device [ 159.108885][T10052] loop5: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 159.136045][ T9928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.162955][T10052] Buffer I/O error on dev loop5, logical block 18010, async page read [ 159.191853][T10052] syz.5.2011: attempt to access beyond end of device [ 159.191853][T10052] loop5: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 159.231101][T10052] Buffer I/O error on dev loop5, logical block 18010, async page read [ 159.255606][T10052] syz.5.2011: attempt to access beyond end of device [ 159.255606][T10052] loop5: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 159.271590][T10052] Buffer I/O error on dev loop5, logical block 18010, async page read [ 159.291047][T10052] syz.5.2011: attempt to access beyond end of device [ 159.291047][T10052] loop5: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 159.313008][ T9928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.335847][T10052] Buffer I/O error on dev loop5, logical block 18010, async page read [ 159.354150][T10052] syz.5.2011: attempt to access beyond end of device [ 159.354150][T10052] loop5: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 159.405829][T10052] Buffer I/O error on dev loop5, logical block 18010, async page read [ 159.610915][ T9928] veth0_vlan: entered promiscuous mode [ 159.651532][ T9928] veth1_vlan: entered promiscuous mode [ 159.754185][ T9928] veth0_macvtap: entered promiscuous mode [ 159.777813][ T9928] veth1_macvtap: entered promiscuous mode [ 159.834929][ T9928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.869549][ T9928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.895539][ T3796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.907462][ T3796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.916497][ T3796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.925315][ T3796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.004547][T10220] loop5: detected capacity change from 0 to 128 [ 160.137671][T10229] __nla_validate_parse: 4 callbacks suppressed [ 160.137690][T10229] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2038'. [ 160.170985][T10231] Invalid ELF header magic: != ELF [ 160.779711][T10286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.805619][T10286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.523866][T10301] loop2: detected capacity change from 0 to 1024 [ 161.549691][T10301] EXT4-fs: inline encryption not supported [ 161.565917][T10301] EXT4-fs: Ignoring removed nobh option [ 161.596465][T10301] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 161.614792][T10301] System zones: 0-1, 3-12 [ 161.621943][T10301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.777758][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2072'. [ 161.795434][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.828405][T10323] bridge_slave_0 (unregistering): left allmulticast mode [ 161.851934][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.339660][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2081'. [ 162.375695][ T7331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.424169][T10353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.448573][T10353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.459259][T10350] loop4: detected capacity change from 0 to 4096 [ 162.497638][T10355] cgroup: noprefix used incorrectly [ 162.514284][T10350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.520061][T10355] loop5: detected capacity change from 0 to 512 [ 162.533495][T10355] ext4: Bad value for 'max_batch_time' [ 162.549176][T10355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.558253][T10355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.710162][ T9928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.286395][T10378] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.294216][T10378] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 163.327701][T10378] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2093'. [ 163.342446][T10378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.353487][T10378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.364834][T10378] bond0 (unregistering): Released all slaves [ 163.472312][T10382] loop5: detected capacity change from 0 to 8192 [ 163.868242][T10407] loop4: detected capacity change from 0 to 512 [ 163.885960][T10407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.913245][T10407] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.969684][ T9928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.036662][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 164.036682][ T28] audit: type=1400 audit(1774904919.178:812): avc: denied { write } for pid=10419 comm="syz.4.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.587493][T10446] netlink: 'syz.5.2120': attribute type 4 has an invalid length. [ 164.617876][T10448] loop2: detected capacity change from 0 to 512 [ 164.640478][T10448] EXT4-fs: Ignoring removed nobh option [ 164.658176][T10448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.666685][T10451] loop5: detected capacity change from 0 to 128 [ 164.695032][T10448] EXT4-fs (loop2): 1 truncate cleaned up [ 164.725076][T10448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.817376][T10463] loop4: detected capacity change from 0 to 128 [ 164.846078][T10463] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 165.023644][ T28] audit: type=1400 audit(1774904920.158:813): avc: denied { read } for pid=10474 comm="syz.4.2131" path="socket:[29285]" dev="sockfs" ino=29285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 165.047198][ T28] ================================================================== [ 165.055286][ T28] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 165.063016][ T28] [ 165.065361][ T28] write to 0xffffffff86e3b418 of 8 bytes by task 10474 on cpu 1: [ 165.073229][ T28] console_flush_all+0x38c/0x6c0 [ 165.078257][ T28] console_unlock+0xa1/0x280 [ 165.082860][ T28] vprintk_emit+0x3e4/0x600 [ 165.087366][ T28] vprintk_default+0x26/0x30 [ 165.091985][ T28] vprintk+0x1d/0x30 [ 165.095903][ T28] _printk+0x79/0xa0 [ 165.099812][ T28] base_sock_release+0x3a/0x1f0 [ 165.104685][ T28] sock_close+0x6b/0x150 [ 165.109055][ T28] __fput+0x29b/0x650 [ 165.113156][ T28] ____fput+0x1c/0x30 [ 165.117156][ T28] task_work_run+0x130/0x1a0 [ 165.121760][ T28] exit_to_user_mode_loop+0x1f4/0x6f0 [ 165.127148][ T28] do_syscall_64+0x249/0x370 [ 165.131763][ T28] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.137673][ T28] [ 165.140008][ T28] read to 0xffffffff86e3b418 of 8 bytes by task 28 on cpu 0: [ 165.147391][ T28] console_flush_all+0x548/0x6c0 [ 165.152348][ T28] console_unlock+0xa1/0x280 [ 165.156940][ T28] vprintk_emit+0x3e4/0x600 [ 165.161449][ T28] vprintk_default+0x26/0x30 [ 165.166045][ T28] vprintk+0x1d/0x30 [ 165.169951][ T28] _printk+0x79/0xa0 [ 165.173958][ T28] kauditd_hold_skb+0x1b1/0x1c0 [ 165.178816][ T28] kauditd_send_queue+0x273/0x2c0 [ 165.183859][ T28] kauditd_thread+0x444/0x670 [ 165.188548][ T28] kthread+0x22a/0x280 [ 165.192618][ T28] ret_from_fork+0x150/0x360 [ 165.197222][ T28] ret_from_fork_asm+0x1a/0x30 [ 165.201999][ T28] [ 165.204323][ T28] value changed: 0x00000000000010af -> 0x00000000000010b0 [ 165.211439][ T28] [ 165.213769][ T28] Reported by Kernel Concurrency Sanitizer on: [ 165.219917][ T28] CPU: 0 UID: 0 PID: 28 Comm: kauditd Tainted: G W syzkaller #0 PREEMPT(full) [ 165.230338][ T28] Tainted: [W]=WARN [ 165.234138][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.244279][ T28] ================================================================== [ 165.264978][ T7331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.