last executing test programs: 13.478673334s ago: executing program 2 (id=1726): syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000000)='./file1\x00', 0x204419, &(0x7f00000004c0)=ANY=[], 0x2f, 0x5ae, &(0x7f0000001280)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) dup2(r1, r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x785f, 0x55}}}}, [""]}, 0xfdfa}}, 0x4) 13.388442377s ago: executing program 2 (id=1728): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x210481, 0x0) (async) fdatasync(r1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r2, 0xff, 0x0, 0x0, &(0x7f0000000100)) (async) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000003b00)=[{0x2, 0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/136, 0x88}, {&(0x7f0000000280)=""/224, 0xe0}], &(0x7f0000000380)=[0x550c, 0x4, 0xfffffffffffffff7, 0x1, 0x3, 0xfffffffffffffffb, 0x8, 0x6, 0x2b, 0x15]}, {0x2, 0x1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f00000004c0)=""/151, 0x97}], &(0x7f00000000c0)=[0x8, 0x9, 0x100000000, 0x1, 0x8, 0x5]}, {0x2, 0x1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)}], &(0x7f0000000640)=[0x8000, 0x1]}, {0x4, 0x1, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/248, 0xf8}, {&(0x7f0000000780)=""/31, 0x1f}, {&(0x7f00000007c0)=""/7, 0x7}, {&(0x7f0000000800)=""/7, 0x7}], &(0x7f0000000880)=[0xcf, 0x3, 0x5f, 0x0, 0x8, 0x0, 0x3f]}, {0x8, 0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000008c0)=""/82, 0x52}, {&(0x7f0000000940)=""/163, 0xa3}, {&(0x7f0000000a00)=""/220, 0xdc}, {&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000c00)=""/4, 0x4}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/176, 0xb0}], &(0x7f0000001e80)=[0x800, 0x1, 0x72, 0x1000000000000, 0x1000, 0x1000, 0x17e, 0x0]}, {0x4, 0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/11, 0xb}, {&(0x7f0000002f00)=""/41, 0x29}, {&(0x7f0000002f40)=""/139, 0x8b}], &(0x7f0000003040)=[0x200, 0xffffffff, 0x8000000000000000, 0x3ff, 0x6]}, {0xa, 0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003080)=""/57, 0x39}, {&(0x7f00000030c0)=""/149, 0x95}, {&(0x7f0000003180)=""/199, 0xc7}, {&(0x7f0000003280)=""/172, 0xac}, {&(0x7f0000003340)=""/230, 0xe6}, {&(0x7f0000003440)=""/38, 0x26}, {&(0x7f0000003480)=""/65, 0x41}, {&(0x7f0000003500)=""/115, 0x73}, {&(0x7f0000003580)=""/246, 0xf6}, {&(0x7f0000003680)=""/13, 0xd}], &(0x7f0000003780)=[0x3, 0xde, 0xfffffffffffffffa]}, {0x4, 0x1, 0x0, &(0x7f0000003a80)=[{&(0x7f00000037c0)=""/115, 0x73}, {&(0x7f0000003840)=""/45, 0x2d}, {&(0x7f0000003880)=""/218, 0xda}, {&(0x7f0000003980)=""/202, 0xca}], &(0x7f0000003ac0)=[0x2, 0xd09, 0x2, 0x100, 0x7]}], 0x8) 13.281518091s ago: executing program 2 (id=1733): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) (async) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) (async) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) (async) sendmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x9, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x9, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1e, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1e, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @fixed}, 0x8) listen(r2, 0x0) (async) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) (async) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 12.965457234s ago: executing program 2 (id=1735): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12.837926479s ago: executing program 2 (id=1739): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, 0x0, 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffff3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',rans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c756e026d652c7472616e733d6664"]) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.25349829s ago: executing program 4 (id=1896): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe60f27ba1079ed46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x8804, 0x0, 0x0, 0x0, 0x0, 0xdbf0}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000500)=0x9311, 0x4) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000950000002e106f543638ded620f0afc9df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'lo\x00'}) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0x727, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0xed02}, 0x0) 3.25313998s ago: executing program 4 (id=1897): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)={@multicast, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, @empty=0x2, @multicast2}}}}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r6) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xe8820004}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0xfc, r7, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xfc}}, 0x880) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) unshare(0x22020600) r8 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x98, 0x210, 0x210, 0x210, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = fcntl$dupfd(r9, 0x406, r9) getsockopt$inet6_int(r10, 0x29, 0x0, 0x0, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f00000036c0), &(0x7f0000003940)=0x4) ioctl$SIOCX25GCAUSEDIAG(r11, 0x89e6, &(0x7f0000000000)) r12 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r12, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 3.059634508s ago: executing program 3 (id=1901): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf88322f99b8f49bf}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x1e0, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x77, 0xa9, @random="0438c5452be84abbf3dac646e01bdbec361e70c86d5d868b087a06814791c2ed536d5be90d00f01a7ab6c68eefc31e5cedaf8c1db7de512d24c05b764bd7b3241c6324084bc918b50ba49d15d9a48e40836564422e149a8820751e69c268d7789dafc05dcbbab1035b535d4f60b4498f7bfc31"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5641}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe5, 0xa8, @random="d5d2e42926cd77a0c0fc80903ee2abeacb6caae80c94c916ff2408217ac4d4896abfbc3420c08f0f3c38a3f27de0d8ade085fb89cf09194ab310c5a6dbf0b4fadc4e29c15795fdefde6c0d69c2711203b70657afee464e29c5425fbd0d12e02c4a4600c3fd7c5114174812789cf505db81313237bd1903d381ff1ab9880e3483d672bba0765f57469c882080bb5668f0e8a00d263665ea40313fefdf143af1b0b56ca8140c5d29a5f2c68c4954c7c77bf80b6957faa808d076d33119e36edff54fbe2fa201633140b1e712c0009b712e73ad86beef90f8c5d82bd8a6fc56180bb1"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xf5}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x48041}, 0x20008081) sendto$inet(r0, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 2.399900664s ago: executing program 4 (id=1916): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_clone(0x140, 0x0, 0x0, 0x0, 0x0, 0x0) 2.386971115s ago: executing program 4 (id=1917): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0286687, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, 0x0, 0x9}) 2.333584607s ago: executing program 4 (id=1918): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x6c}}, 0x0) 2.228397421s ago: executing program 4 (id=1923): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x1) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00'}, 0x10) ptrace$getenv(0x4203, r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@deltclass={0x68, 0x29, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}, {0xb, 0x10}, {0x6}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0xf7, 0x1}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_RATE={0x6, 0x5, {0xf1, 0x6d}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x68}}, 0x80) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xe6, 0x81, 0x2, 0x8, 0x0, 0x0, 0x12014, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0xa, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r3, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000000000000010000050000000002000000000a70000000000000002e00"], 0x0, 0x34}, 0x20) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64=r4], 0x1, 0x36a, &(0x7f00000004c0)="$eJzs3c2LG3UYwPEn2WxetnSTgygKsg960cuwGz2rQVoQA5ZtI7aCMO1ONGRMlpkQiYi7nryKN/8BwdJjwUNB/Qf24q1evHhyLwVBi4hT5i2bZCdJk6Zsdvf7gd08ye/3zMwvbzxPIJPDD775tFl3jbrZkXReJSUi8lCkJGmJpcKLrCTYl1cv/HX/xavXb7xbqVYvbaterlx7rayq6xs/ffZFIZp2LycHpY8OH5T/OHj24PnD/6990nC14Wqr3VFTb7Z/75g3bUt3Gm7TUL1iW6ZraaPlWk443g7H63Z7d7enZmvn4tquY7mumq2eNq2edtracXpqfmw2WmoYhl5cSzrcMyw/R07t9va2WZlzh7fmzMOi/et53oRhx6mYKyJG4dhI7fZTPS4AALCURur/7+IaoSTpfkGZinqBbBAPtwF+/R/HQf3vNwtH9f+dl37pXHj/7npU/9/LJtX/r/8W5g/V//7eF17//zBy/XhFdOrtzTL5iep/LIeN4Vfkn0cde8Sv//1XQ7+j/+rDO5tBQP0PAAAAAAAAAAAAAAAAAAAAAMBp8NDzip7nFePL+O/oKwTR9fjapC8a49QZ9/jnojMK9J8POJOuXr8h+eCLe5l1Efvrbq1bCy+j8XjiphTlv+D5EAlPOLEfDKqvJD/be93aapSwEvyviKjYYsmWFKU0lB/El9+pXtrSUJgf7H+vW0tl1vz8ujSC/LIU5Znk/HJiflZeeXkg35Ci/HpL2mLLTvQ+Fud/uaX69nvVkfxCMC/Jm0/3IQEAAAAAYOEM1XzUPpeG+9+wfzcM1aRxv5eXwf78+OcD/f56M7E/zxRfyJzs2gEAAAAAOC/c7OdN07Ytx+2NDQoybU4u2trk7SQHmVkm+8H9IFidNGdlYIWPu+Vs9AsaMxy8zLZS07b/zkninRmfwnVoKP8E96ppx+t/jMn5WR8Cx03PvnbLcTf849G5ljMQxB8bjZsjV+bd8rggPnPutMnPffv9P/PtIhWdtXdw6I27+SkrDYLUyC37U560Dzxv6vGsJr9b/DjPj8wAAAAAWBJx0V9w41veOtkDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHFroadLGBCe9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBZPAoAAP//zbj3kg==") ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, r3, 0x2) syz_io_uring_setup(0x1114, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47fb, 0x2, 0x14, 0x0, 0xfffffffffffffcf1) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) socket$kcm(0x2, 0x5, 0x2) 2.174458463s ago: executing program 3 (id=1924): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/171, 0xab}, {0x0}], 0x3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071125d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0xfff}, 0x10) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000500"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000000)) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev}]}}}, @IFLA_MTU={0x8, 0x4, 0x10ff7f}]}, 0x50}}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000080)='./bus\x00', 0x40000001) socket(0x27, 0xa, 0xffffffe0) 1.916420943s ago: executing program 3 (id=1930): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/176, 0xb0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x792, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r3, r3, 0x0, 0x7a680000) 1.662554314s ago: executing program 1 (id=1934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_free_blocks\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100)={[{@nojournal_checksum}]}, 0xfe, 0x490, &(0x7f0000000640)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, "", [@generic="d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a56"]}, 0x2c}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x0, 0x2, 0xc2, 0x0, 0x87}}) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'ip6gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, 'pim6reg1\x00'}}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x4, &(0x7f0000000080)=[{0x0, 0x6b}, {0x0, 0xde, 0x8, 0xee9c}, {0x8, 0xde, 0x8, 0x80000000}, {0xffa9, 0x2, 0x5, 0x1f}]}) sendmsg$nl_route(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000002078000014001a9010fb44800c000a0008000b0000000000"], 0x34}}, 0x4000) r11 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r13) 1.059379897s ago: executing program 3 (id=1944): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f}}, './file0\x00'}) write$cgroup_int(r3, &(0x7f0000000300)=0x5, 0x12) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wg2\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r1, @ANYRES32, @ANYRES8=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route_sched_retired(r3, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xd, 0xfff1}, {0x5, 0xfff1}, {0x3, 0xffff}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x400}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000010}, 0x40) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r6 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f00000000c0)={'fscrypt:', @auto=[0x0, 0x64, 0x65, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x63, 0x35, 0x0, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "d7b2f8d208c061c2196fe04ee90fad7f483a150c350f3de840a800007fb30f069ed90000000000000000c723f3adf3e219fd0d6c53ed1900", 0xfffffffe}, 0x48, r6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) time(0xffffffffffffffff) r8 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @link_id, r9}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000010180)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0xfc}}]}, &(0x7f0000000280)=0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r10, 0x0) shutdown(0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 672.105003ms ago: executing program 1 (id=1947): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x6e503, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_DATA_LEN={0x0, 0x7, 0x1, 0x0, 0x9}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0xdc, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb0, 0x3, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x15c}}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000001bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x40, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x40}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/181, 0xb5, 0x1, &(0x7f00000004c0)=""/68, 0x44}, &(0x7f0000000240)=0x40) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0xffffffffffffff1b}]}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) io_setup(0x20, &(0x7f0000000200)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r9}}, 0x48) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x9, 0x3, 0x0, 0x2}) syncfs(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @loopback, @dev, 0x0, 0x8, 0x0, 0x7ff}}) 663.082773ms ago: executing program 3 (id=1949): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0x7, 0x0, &(0x7f0000000040)=0x4000) 645.970034ms ago: executing program 1 (id=1950): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'dummy0\x00'}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, 0x0, 0x6a) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x8ec3, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x800, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt(0xffffffffffffffff, 0x3f, 0xb, &(0x7f00000002c0)="f9a8ba2e0021f3f2a66d6aaa9a6a3acd", 0x10) setuid(r1) 638.950915ms ago: executing program 2 (id=1911): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000100)="2662f4402b2d7b233a1a177afe57f3c982ddf3731c292fb27eb8d8bc417db73bdcbdc5446c88c1e03b59df6f06dafbb43dd0cc61bbdf54e2fdda2e0fd1cf712d41", 0x0}}, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$RNDADDENTROPY(r5, 0x5452, &(0x7f0000000100)=ANY=[]) dup3(r0, 0xffffffffffffffff, 0x0) r7 = dup(0xffffffffffffffff) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0xb) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000380)={r9, @in={{0x2, 0x0, @multicast1}}}, 0x84) 593.265396ms ago: executing program 3 (id=1951): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b67, &(0x7f0000000080)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async, rerun: 32) socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) unshare(0x42000000) (async) syz_mount_image$vfat(&(0x7f0000008140), &(0x7f0000008180)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="a6178f7f1bfbdfca76e39d91db1e8bf13969224ef32dfd3d3ca74772578c4d05b83a5b294561a3cd7299aa27631e737b641a95d452232aa33554e32956d698d291e36e0e08e41bc6099df201ccb078e1d175d39ba44e67bf2d750eb86f78bad7faf25a"], 0x1, 0x8130, &(0x7f0000008200)="$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") r3 = socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) epoll_create1(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x160, 0xc8, 0x8, 0x0, 0x5803, 0x3d0, 0x2e8, 0x2e8, 0x3d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'veth1_to_hsr\x00', 'geneve1\x00'}, 0x0, 0x118, 0x160, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x0, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x208, 0x270, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private1, @mcast2, @local, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, @dev, @empty, @local, @private2, @local, @remote, @dev]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) time(0xfffffffffffffffc) socket$netlink(0x10, 0x3, 0x15) 522.305309ms ago: executing program 1 (id=1954): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/176, 0xb0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x792, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r3, r3, 0x0, 0x7a680000) 230.859191ms ago: executing program 0 (id=1956): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1901000000000000) 157.745163ms ago: executing program 1 (id=1957): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1200, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c00000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000009000128009000100766c616e0000000080000280040003800c00020004000000020000000c000200540a0000180000000600010001000000580004800c00010000000000680000000c00010005000000ee9500000c00010003000000018000000c000100220b0000000000000c00010004000000010000000c00010081ae0000010000000c000100800000000000000008000500", @ANYRES32=r2], 0xc0}, 0x1, 0xba01}, 0x0) 157.501773ms ago: executing program 0 (id=1958): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="ff00000000000000140012800b000100626174616476"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000130400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4], 0x3c}}, 0x0) 62.155947ms ago: executing program 1 (id=1959): syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x0, 0x0, 0x8, 0x65f4, 0x2, 0x6, 0x2d07, 0xcf, 0x40, 0x29a, 0x1ff, 0xd319, 0x38, 0x2, 0x9, 0x1}, [{0x2, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x6}], "8bfe4e9a5230846da2143d8f708924b24bc84004fe9b656a656144bc4494883b9db3330d34a8e7c6a8e67d6674c84290ac4772e139bf749f3ee19da4a41eba68823960b8b3876ce83734fb7400ca319834dc20d448cfbedfa37751c21290250a665d047d75cc31cced5e6773e53045804db21cee7167bbbbe6e3824d6f599a878649a072c4104fabb481b2854e0379bd1d8b90d955e58a2746b5439f62047f891af9800e3b03ef81d94ee319e08a27f0f9c370727ebf4414f8d51dec738f6e7ae01a6c199fe25ff0f766fa424287aca35adec5c705faa0e0b1fabb04", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x854) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)=@mpls_getroute={0x30, 0x1a, 0x203, 0x70bd29, 0x25dfdbfb, {0x1c, 0x10, 0x80, 0x7f, 0xfc, 0x0, 0xff, 0xb, 0x1a00}, [@RTA_VIA={0x14, 0x12, {0x18, "089da12a3dc630157ce00a7ce47e"}}]}, 0x30}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xffffffffdfffffff, 0x16) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0x1020060c) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00060900004039fa0500"}) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') write$binfmt_elf32(r4, &(0x7f0000000000)=ANY=[], 0x69) close(r4) r5 = syz_open_pts(r3, 0x0) dup3(r5, r3, 0x0) read(r0, &(0x7f00000011c0)=""/189, 0xbd) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r6 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) write$binfmt_misc(r4, &(0x7f00000010c0)=ANY=[@ANYBLOB="73797a302b6f47dbec1fb74cf1573dd7747e32b9941085f98e70efa551a5b8cb92537576eda42a4a2c8850495764103b8882a60861b47be447c608f0ea340320e04ff6cc7b7f8609feaa4120e436d0ae88e3463217561e44c8abc86a2cc22553a2c6ecb6696fe7711e6bf4dbd8d75d46380f943854e89f670498ecee1ebd0075989cea563e6c70e269fffde2411e070bb179fe8d3ae94223f8a99dcd9de423d8cefc1bbf7de59afaa1d5b97eb0fd2e5fd24d5274374801cb86f536931a8bccd6bd45515e499c"], 0x2a) close(r1) sendfile(r6, r6, 0x0, 0xbc) syz_emit_ethernet(0x7a, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x32, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) 61.874617ms ago: executing program 0 (id=1960): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r0}, &(0x7f0000000580), &(0x7f0000000c80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f0000000d00)=""/102400, &(0x7f0000000180)=0x19000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 13.636999ms ago: executing program 0 (id=1961): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x25000000, 0x0}}], 0x1, 0x0, 0x0) 13.303909ms ago: executing program 0 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x25, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1248c}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30004081) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) syz_emit_ethernet(0x17b, 0x0, 0x0) ftruncate(r2, 0x7fff) ftruncate(r2, 0x7ffa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) fsync(r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000003000128009000100620c0002800500"], 0x3c}}, 0x0) r4 = socket$kcm(0x10, 0x7, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80801}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="d80000001e0081054e81f782db4cb9040a1d087b06007c09e8fe55a1180015800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}}, 0x0) 0s ago: executing program 0 (id=1963): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r0, 0x5421, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) kernel console output (not intermixed with test programs): 80.118716][ T29] audit: type=1400 audit(2000000038.794:1192): avc: denied { read } for pid=7115 comm="syz.1.936" path="socket:[17749]" dev="sockfs" ino=17749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.155655][ T3082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.216182][ T7133] loop3: detected capacity change from 0 to 512 [ 80.233241][ T7133] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.940: casefold flag without casefold feature [ 80.246258][ T7133] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.940: couldn't read orphan inode 15 (err -117) [ 80.259995][ T7133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.274622][ T29] audit: type=1400 audit(2000000038.974:1193): avc: denied { write } for pid=7130 comm="syz.2.939" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 80.489476][ T3082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.512526][ T7159] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.878254][ T7172] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 80.894144][ T7176] loop4: detected capacity change from 0 to 256 [ 81.133094][ T7206] 9pnet: Could not find request transport: rdmNr/2y0000000000000400 [ 81.169448][ T7209] loop2: detected capacity change from 0 to 2048 [ 81.183110][ T29] audit: type=1400 audit(2000000039.883:1194): avc: denied { map } for pid=7205 comm="syz.0.964" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.252035][ T7209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.288704][ T7221] loop1: detected capacity change from 0 to 512 [ 81.313497][ T5149] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.338265][ T7221] /dev/loop1: Can't open blockdev [ 81.365399][ T7222] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 65537 (only 8 groups) [ 81.569133][ T7242] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 81.794394][ T29] audit: type=1400 audit(2000000040.483:1195): avc: denied { ioctl } for pid=7256 comm="syz.4.979" path="socket:[17050]" dev="sockfs" ino=17050 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.819839][ T7258] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 81.881388][ T7265] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 81.989021][ T7267] loop4: detected capacity change from 0 to 2048 [ 82.019646][ T7267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.178637][ T7271] __nla_validate_parse: 4 callbacks suppressed [ 82.178651][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.983'. [ 82.193725][ T7271] tipc: Enabling of bearer rejected, failed to enable media [ 82.203830][ T7272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.983'. [ 82.212717][ T7272] tipc: Enabling of bearer rejected, failed to enable media [ 82.243429][ T5287] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.281640][ T29] audit: type=1326 audit(2000000040.972:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.1.988" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f869c5ffb99 code=0x0 [ 82.329086][ T7294] loop4: detected capacity change from 0 to 2048 [ 82.348599][ T7294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.455204][ T29] audit: type=1400 audit(2000000041.152:1197): avc: denied { append } for pid=7307 comm="syz.0.993" name="file0" dev="sda1" ino=1961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 83.280616][ T7308] syz.0.993 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 83.294764][ T7308] CPU: 1 PID: 7308 Comm: syz.0.993 Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 83.304741][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.314813][ T7308] Call Trace: [ 83.318082][ T7308] [ 83.321088][ T7308] dump_stack_lvl+0xf2/0x150 [ 83.325702][ T7308] dump_stack+0x15/0x20 [ 83.329871][ T7308] dump_header+0x83/0x2d0 [ 83.334199][ T7308] oom_kill_process+0x33e/0x4c0 [ 83.339052][ T7308] out_of_memory+0x9af/0xbe0 [ 83.343645][ T7308] mem_cgroup_out_of_memory+0x13e/0x190 [ 83.349191][ T7308] try_charge_memcg+0x745/0xcd0 [ 83.354044][ T7308] ? get_page_from_freelist+0x1a2a/0x1a70 [ 83.359765][ T7308] obj_cgroup_charge_pages+0xbd/0x1d0 [ 83.365147][ T7308] __memcg_kmem_charge_page+0x9d/0x170 [ 83.370627][ T7308] __alloc_pages_noprof+0x1bc/0x360 [ 83.375920][ T7308] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 83.381294][ T7308] alloc_pages_noprof+0xe1/0x100 [ 83.386228][ T7308] __vmalloc_node_range_noprof+0x719/0xef0 [ 83.392033][ T7308] kvmalloc_node_noprof+0x121/0x170 [ 83.397225][ T7308] ? ip_set_alloc+0x1f/0x30 [ 83.401717][ T7308] ip_set_alloc+0x1f/0x30 [ 83.406053][ T7308] hash_netiface_create+0x273/0x730 [ 83.411254][ T7308] ? __nla_parse+0x40/0x60 [ 83.415663][ T7308] ? __pfx_hash_netiface_create+0x10/0x10 [ 83.421390][ T7308] ip_set_create+0x359/0x8a0 [ 83.425978][ T7308] ? memchr+0x1/0x50 [ 83.429863][ T7308] ? __nla_parse+0x40/0x60 [ 83.434443][ T7308] nfnetlink_rcv_msg+0x4a9/0x570 [ 83.439380][ T7308] netlink_rcv_skb+0x12c/0x230 [ 83.444133][ T7308] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 83.449585][ T7308] nfnetlink_rcv+0x16c/0x15b0 [ 83.454292][ T7308] ? kmem_cache_free+0xd8/0x280 [ 83.459136][ T7308] ? nlmon_xmit+0x51/0x60 [ 83.463456][ T7308] ? __kfree_skb+0x102/0x150 [ 83.468032][ T7308] ? consume_skb+0x57/0x180 [ 83.472540][ T7308] ? nlmon_xmit+0x51/0x60 [ 83.476860][ T7308] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 83.482131][ T7308] ? __dev_queue_xmit+0xb21/0x1e50 [ 83.487226][ T7308] ? ref_tracker_free+0x3a5/0x410 [ 83.492244][ T7308] ? __netlink_deliver_tap+0x495/0x4c0 [ 83.497696][ T7308] netlink_unicast+0x58d/0x660 [ 83.502453][ T7308] netlink_sendmsg+0x5ca/0x6e0 [ 83.507296][ T7308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.512573][ T7308] __sock_sendmsg+0x140/0x180 [ 83.517262][ T7308] ____sys_sendmsg+0x312/0x410 [ 83.522013][ T7308] __sys_sendmsg+0x1e9/0x280 [ 83.526589][ T7308] ? futex_wait+0x18e/0x1c0 [ 83.531099][ T7308] __x64_sys_sendmsg+0x46/0x50 [ 83.535850][ T7308] x64_sys_call+0xb25/0x2d70 [ 83.540433][ T7308] do_syscall_64+0xc9/0x1c0 [ 83.544927][ T7308] ? clear_bhb_loop+0x55/0xb0 [ 83.549590][ T7308] ? clear_bhb_loop+0x55/0xb0 [ 83.554253][ T7308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.560142][ T7308] RIP: 0033:0x7f190efedb99 [ 83.564547][ T7308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.584140][ T7308] RSP: 002b:00007f190e26f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.592567][ T7308] RAX: ffffffffffffffda RBX: 00007f190f17bfa0 RCX: 00007f190efedb99 [ 83.600520][ T7308] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 83.608473][ T7308] RBP: 00007f190f06e77e R08: 0000000000000000 R09: 0000000000000000 [ 83.616428][ T7308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.624468][ T7308] R13: 000000000000000b R14: 00007f190f17bfa0 R15: 00007fffeb433588 [ 83.632429][ T7308] [ 83.636459][ T7308] memory: usage 307200kB, limit 307200kB, failcnt 3649 [ 83.639375][ T5287] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.643787][ T7308] memory+swap: usage 318936kB, limit 9007199254740988kB, failcnt 0 [ 83.660249][ T7308] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 83.667576][ T7308] Memory cgroup stats for /syz0: [ 83.667699][ T7308] cache 20480 [ 83.675942][ T7308] rss 0 [ 83.678699][ T7308] shmem 0 [ 83.681626][ T7308] mapped_file 0 [ 83.685129][ T7308] dirty 0 [ 83.688095][ T7308] writeback 4096 [ 83.691656][ T7308] workingset_refault_anon 321 [ 83.696344][ T7308] workingset_refault_file 390 [ 83.701011][ T7308] swap 12017664 [ 83.704537][ T7308] swapcached 8192 [ 83.708225][ T7308] pgpgin 106369 [ 83.711678][ T7308] pgpgout 106362 [ 83.715220][ T7308] pgfault 115471 [ 83.718744][ T7308] pgmajfault 107 [ 83.722329][ T7308] inactive_anon 0 [ 83.725968][ T7308] active_anon 0 [ 83.729420][ T7308] inactive_file 16384 [ 83.733418][ T7308] active_file 4096 [ 83.737149][ T7308] unevictable 0 [ 83.740597][ T7308] hierarchical_memory_limit 314572800 [ 83.745969][ T7308] hierarchical_memsw_limit 9223372036854771712 [ 83.752107][ T7308] total_cache 20480 [ 83.755932][ T7308] total_rss 0 [ 83.759227][ T7308] total_shmem 0 [ 83.762701][ T7308] total_mapped_file 0 [ 83.766708][ T7308] total_dirty 0 [ 83.770180][ T7308] total_writeback 4096 [ 83.774251][ T7308] total_workingset_refault_anon 321 [ 83.779435][ T7308] total_workingset_refault_file 390 [ 83.784655][ T7308] total_swap 12017664 [ 83.788623][ T7308] total_swapcached 8192 [ 83.792804][ T7308] total_pgpgin 106369 [ 83.796829][ T7308] total_pgpgout 106362 [ 83.800880][ T7308] total_pgfault 115471 [ 83.804987][ T7308] total_pgmajfault 107 [ 83.809048][ T7308] total_inactive_anon 0 [ 83.813215][ T7308] total_active_anon 0 [ 83.817198][ T7308] total_inactive_file 16384 [ 83.821691][ T7308] total_active_file 4096 [ 83.826069][ T7308] total_unevictable 0 [ 83.830068][ T7308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.993,pid=7307,uid=0 [ 83.844828][ T7308] Memory cgroup out of memory: Killed process 7307 (syz.0.993) total-vm:83072kB, anon-rss:596kB, file-rss:11932kB, shmem-rss:128kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 83.924230][ T7343] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1005'. [ 83.940432][ T7343] mmap: syz.1.1005 (7343) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.050622][ T7360] loop2: detected capacity change from 0 to 2048 [ 84.052333][ T7359] loop4: detected capacity change from 0 to 2048 [ 84.077478][ T7308] syz.0.993 (7308) used greatest stack depth: 7184 bytes left [ 84.099007][ T7360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.099384][ T7359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.172709][ T5149] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.376356][ T7383] loop2: detected capacity change from 0 to 512 [ 84.425786][ T7383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 84.454263][ T7383] ext4 filesystem being mounted at /root/syzkaller.lipI7a/120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.485174][ T5149] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 84.519557][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 84.519582][ T29] audit: type=1326 audit(2000000043.211:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.1.1018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f869c5ffb99 code=0x0 [ 84.646078][ T7391] can: request_module (can-proto-0) failed. [ 84.949310][ T7401] syzkaller0: entered promiscuous mode [ 84.954862][ T7401] syzkaller0: entered allmulticast mode [ 84.964894][ T7401] netlink: 'syz.0.1022': attribute type 27 has an invalid length. [ 85.033313][ T5287] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.043500][ T29] audit: type=1400 audit(2000000043.731:1208): avc: denied { tracepoint } for pid=7404 comm="syz.3.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 85.081761][ T7406] loop3: detected capacity change from 0 to 512 [ 85.098604][ T7406] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 85.108703][ T7406] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 85.118729][ T7406] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.1025: Failed to acquire dquot type 1 [ 85.130100][ T7401] bridge0: port 2(team0) entered disabled state [ 85.136551][ T7401] bridge0: port 3(bond0) entered disabled state [ 85.142975][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.150979][ T7406] EXT4-fs (loop3): 1 truncate cleaned up [ 85.159273][ T7406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.214737][ T7401] bridge_slave_1: left promiscuous mode [ 85.220417][ T7401] bridge_slave_1: left allmulticast mode [ 85.243744][ T7406] ext4 filesystem being mounted at /root/syzkaller.37ElKW/211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.302084][ T7401] infiniband syz2: set down [ 85.309327][ T7401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.322917][ T7401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.365713][ T3082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.385677][ T7427] loop1: detected capacity change from 0 to 2048 [ 85.428060][ T7427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.459672][ T7401] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.468709][ T7401] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.477595][ T7401] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.486651][ T7401] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.511287][ T7401] syzkaller0: left promiscuous mode [ 85.516654][ T7401] syzkaller0: left allmulticast mode [ 85.562689][ T6351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.691437][ T7457] loop3: detected capacity change from 0 to 2048 [ 85.708057][ T7457] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.762387][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 85.771341][ T7459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.796037][ T7467] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1032: bg 0: block 234: padding at end of block bitmap is not set [ 85.816072][ T7465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1035'. [ 85.826946][ T7459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.836677][ T7467] EXT4-fs (loop3): Remounting filesystem read-only [ 85.862749][ T7457] Illegal XDP return value 4294967274 on prog (id 346) dev syz_tun, expect packet loss! [ 85.956945][ T7484] loop4: detected capacity change from 0 to 512 [ 85.986322][ T7484] ext4 filesystem being mounted at /root/syzkaller.SHmhno/91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.001380][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 86.018124][ T7484] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.1039: corrupted inode contents [ 86.031557][ T7486] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 86.043916][ T7486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=7486 comm=syz.3.1038 [ 86.057659][ T7484] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.1039: mark_inode_dirty error [ 86.070292][ T7484] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.1039: corrupted inode contents [ 86.099796][ T7484] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1039: mark_inode_dirty error [ 86.113657][ T29] audit: type=1400 audit(2000000044.801:1209): avc: denied { ioctl } for pid=7490 comm="syz.3.1040" path="socket:[18293]" dev="sockfs" ino=18293 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.113772][ T7493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1041'. [ 86.141337][ T7492] Unsupported ieee802154 address type: 0 [ 86.192376][ T7495] syzkaller0: entered promiscuous mode [ 86.197943][ T7495] syzkaller0: entered allmulticast mode [ 86.227579][ T7495] netlink: 'syz.3.1042': attribute type 27 has an invalid length. [ 86.377776][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.385098][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.483264][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.509935][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.589284][ T7495] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.598346][ T7495] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.607294][ T7495] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.616372][ T7495] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.636562][ T7495] ip6gre1: left allmulticast mode [ 86.669071][ T7495] ip6gre2: left allmulticast mode [ 86.686196][ T7495] syzkaller0: left promiscuous mode [ 86.691506][ T7495] syzkaller0: left allmulticast mode [ 86.733622][ T7523] loop1: detected capacity change from 0 to 1024 [ 86.826763][ T7523] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 86.844732][ T29] audit: type=1400 audit(2000000045.541:1210): avc: denied { getopt } for pid=7520 comm="syz.1.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.864650][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 86.920592][ T7532] loop3: detected capacity change from 0 to 512 [ 86.936776][ T29] audit: type=1326 audit(2000000045.631:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c5ffb99 code=0x7ffc0000 [ 86.960385][ T29] audit: type=1326 audit(2000000045.631:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c5ffb99 code=0x7ffc0000 [ 86.988088][ T29] audit: type=1326 audit(2000000045.631:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f869c5ffb99 code=0x7ffc0000 [ 87.000140][ T7532] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1053: bg 0: block 288: padding at end of block bitmap is not set [ 87.011556][ T29] audit: type=1326 audit(2000000045.631:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c5ffb99 code=0x7ffc0000 [ 87.027267][ T7532] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 87.059672][ T7532] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1053: attempt to clear invalid blocks 1024 len 1 [ 87.074973][ T7532] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1053: invalid indirect mapped block 1819239214 (level 0) [ 87.089558][ T7532] EXT4-fs (loop3): 1 truncate cleaned up [ 87.127232][ T7545] gretap0: entered promiscuous mode [ 87.145621][ T7545] netlink: 'syz.2.1056': attribute type 2 has an invalid length. [ 87.153459][ T7545] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1056'. [ 87.163130][ T7546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.183030][ T7552] program syz.1.1058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.246857][ T7558] loop1: detected capacity change from 0 to 512 [ 87.258839][ T7556] syzkaller0: entered promiscuous mode [ 87.264543][ T7556] syzkaller0: entered allmulticast mode [ 87.285794][ T7558] EXT4-fs (loop1): orphan cleanup on readonly fs [ 87.292424][ T7558] EXT4-fs error (device loop1): ext4_quota_enable:7034: comm syz.1.1062: inode #65535: comm syz.1.1062: iget: illegal inode # [ 87.314964][ T7558] EXT4-fs error (device loop1): ext4_quota_enable:7037: comm syz.1.1062: Bad quota inode: 65535, type: 2 [ 87.326402][ T7556] netlink: 'syz.3.1061': attribute type 27 has an invalid length. [ 87.336065][ T7558] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=65535). Please run e2fsck to fix. [ 87.352130][ T7556] syzkaller0: left promiscuous mode [ 87.357532][ T7556] syzkaller0: left allmulticast mode [ 87.369028][ T7558] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 87.571175][ T7576] loop2: detected capacity change from 0 to 128 [ 87.625905][ T7586] netlink: 'syz.0.1070': attribute type 3 has an invalid length. [ 87.633699][ T7586] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1070'. [ 87.667569][ T7576] syz.2.1065: attempt to access beyond end of device [ 87.667569][ T7576] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 87.695657][ T7591] gretap0: entered promiscuous mode [ 87.707465][ T7591] netlink: 'syz.1.1072': attribute type 2 has an invalid length. [ 87.715321][ T7591] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1072'. [ 87.724649][ T7576] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1065'. [ 87.733719][ T7595] gretap0: entered promiscuous mode [ 87.739276][ T7595] netlink: 'syz.0.1074': attribute type 2 has an invalid length. [ 87.747017][ T7595] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1074'. [ 88.003750][ T7610] syzkaller0: entered promiscuous mode [ 88.009364][ T7610] syzkaller0: entered allmulticast mode [ 88.026457][ T7610] netlink: 'syz.1.1077': attribute type 27 has an invalid length. [ 88.068303][ T7610] gretap0: left promiscuous mode [ 88.131227][ T7633] loop2: detected capacity change from 0 to 256 [ 88.166646][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.173805][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.239834][ T3312] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 88.253305][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.272542][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.370047][ T7610] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.379106][ T7610] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.388022][ T7610] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.396926][ T7610] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.423780][ T7610] syzkaller0: left promiscuous mode [ 88.429063][ T7610] syzkaller0: left allmulticast mode [ 88.531339][ T7624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.580414][ T7624] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.608959][ T7624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.627066][ T7642] netlink: 'syz.2.1087': attribute type 2 has an invalid length. [ 88.634917][ T7642] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1087'. [ 88.660160][ T7645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1088'. [ 88.669191][ T7645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1088'. [ 88.707809][ T7645] ip6gretap0: entered promiscuous mode [ 88.714033][ T7645] batadv_slave_0: entered promiscuous mode [ 88.721265][ T7645] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 88.723054][ T7650] loop3: detected capacity change from 0 to 2048 [ 88.731594][ T7645] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.792654][ T7652] loop1: detected capacity change from 0 to 1764 [ 88.811909][ T7652] iso9660: Unknown parameter 'ctriat' [ 88.852944][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 88.862472][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 88.863102][ T3312] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 88.909623][ T7652] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 105 (only 8 groups) [ 89.047028][ T7677] loop4: detected capacity change from 0 to 512 [ 89.068826][ T7682] 9pnet_fd: Insufficient options for proto=fd [ 89.076856][ T7688] syzkaller1: entered promiscuous mode [ 89.082395][ T7688] syzkaller1: entered allmulticast mode [ 89.110820][ T7687] loop1: detected capacity change from 0 to 2048 [ 89.155649][ T7700] netlink: 'syz.2.1105': attribute type 2 has an invalid length. [ 89.163477][ T7700] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1105'. [ 89.567429][ T7727] loop2: detected capacity change from 0 to 128 [ 89.783264][ T7726] syz.2.1111: attempt to access beyond end of device [ 89.783264][ T7726] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 89.862341][ T7729] loop1: detected capacity change from 0 to 8192 [ 89.872277][ T7729] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.920289][ T7735] team0: Device hsr_slave_1 failed to register rx_handler [ 89.940161][ T7735] loop2: detected capacity change from 0 to 256 [ 89.985285][ T3308] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 90.001307][ T7743] loop1: detected capacity change from 0 to 2048 [ 90.075761][ T7746] loop2: detected capacity change from 0 to 2048 [ 90.228409][ T7763] loop4: detected capacity change from 0 to 128 [ 90.251775][ T3154] IPVS: starting estimator thread 0... [ 90.374367][ T7768] IPVS: using max 2736 ests per chain, 136800 per kthread [ 90.437073][ T7760] syz.4.1123: attempt to access beyond end of device [ 90.437073][ T7760] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 90.553101][ T7798] syz2: rxe_newlink: already configured on team_slave_1 [ 90.743719][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 90.743732][ T29] audit: type=1326 audit(2000000049.430:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.1.1129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f869c5ffb99 code=0x0 [ 90.851524][ T7799] loop1: detected capacity change from 0 to 2048 [ 90.864810][ T7655] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.936990][ T7799] Alternate GPT is invalid, using primary GPT. [ 90.943399][ T7799] loop1: p2 p3 p7 [ 91.373088][ T7812] loop2: detected capacity change from 0 to 8192 [ 91.380323][ T29] audit: type=1400 audit(2000000050.080:1224): avc: denied { remount } for pid=7811 comm="syz.2.1133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 91.441236][ T7816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7816 comm=syz.2.1135 [ 91.535748][ T7832] loop4: detected capacity change from 0 to 512 [ 91.543570][ T7832] ext4: Unknown parameter 'measure' [ 91.605768][ T29] audit: type=1400 audit(2000000050.300:1225): avc: denied { setopt } for pid=7836 comm="syz.2.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 91.656409][ T29] audit: type=1400 audit(2000000050.350:1226): avc: denied { read } for pid=7831 comm="syz.4.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.682641][ T7849] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 91.684976][ T7832] loop4: detected capacity change from 0 to 512 [ 91.701622][ T7832] EXT4-fs: Ignoring removed nobh option [ 91.720910][ T7832] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.737018][ T7832] EXT4-fs (loop4): 1 truncate cleaned up [ 92.381274][ T29] audit: type=1400 audit(2000000051.070:1227): avc: denied { accept } for pid=7905 comm="syz.1.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.501611][ T7917] Process accounting resumed [ 92.529726][ T29] audit: type=1400 audit(2000000051.220:1228): avc: denied { name_bind 0x1000000 } for pid=7918 comm="syz.2.1170" path="socket:[19078]" dev="sockfs" ino=19078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 92.757689][ T7931] loop2: detected capacity change from 0 to 128 [ 92.853001][ T7934] loop4: detected capacity change from 0 to 2048 [ 93.066832][ T7954] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 93.284631][ T7957] SELinux: Context system_u:object_r:agp_device_t:s0 is not valid (left unmapped). [ 93.337702][ T29] audit: type=1400 audit(2000000052.030:1229): avc: denied { create } for pid=7956 comm="syz.0.1181" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:agp_device_t:s0" [ 93.362108][ T29] audit: type=1400 audit(2000000052.030:1230): avc: denied { mounton } for pid=7956 comm="syz.0.1181" path="/root/syzkaller.yQ1uWW/268/file0" dev="sda1" ino=1992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:agp_device_t:s0" [ 93.390662][ T29] audit: type=1400 audit(2000000052.030:1231): avc: denied { create } for pid=7956 comm="syz.0.1181" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:agp_device_t:s0" [ 93.415298][ T29] audit: type=1400 audit(2000000052.030:1232): avc: denied { associate } for pid=7956 comm="syz.0.1181" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:agp_device_t:s0" [ 93.453293][ T7962] validate_nla: 2 callbacks suppressed [ 93.453381][ T7962] netlink: 'syz.1.1183': attribute type 1 has an invalid length. [ 93.551511][ T7971] loop3: detected capacity change from 0 to 1024 [ 93.567571][ T7971] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.587049][ T7971] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1186: Invalid block bitmap block 0 in block_group 0 [ 93.602117][ T7976] __nla_validate_parse: 11 callbacks suppressed [ 93.602155][ T7976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1188'. [ 93.605264][ T7971] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.1186: Failed to acquire dquot type 0 [ 93.632346][ T7971] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.1186: Freeing blocks not in datazone - block = 0, count = 4096 [ 93.647452][ T7971] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1186: Invalid inode bitmap blk 0 in block_group 0 [ 93.665970][ T6925] EXT4-fs error (device loop3): ext4_release_dquot:6883: comm kworker/u8:25: Failed to release dquot type 0 [ 93.690200][ T7971] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 93.696167][ T7979] loop1: detected capacity change from 0 to 8192 [ 93.706804][ T7979] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.714267][ T7971] EXT4-fs (loop3): 1 orphan inode deleted [ 93.755452][ T7971] EXT4-fs error (device loop3): ext4_lookup:1854: inode #15: comm syz.3.1186: iget: bad extra_isize 65535 (inode size 256) [ 93.826377][ T7985] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7985 comm=syz.1.1191 [ 93.934339][ T7999] loop4: detected capacity change from 0 to 512 [ 93.940359][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 93.941552][ T7999] EXT4-fs: Ignoring removed nobh option [ 93.985822][ T8003] loop1: detected capacity change from 0 to 1024 [ 93.993704][ T8003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.028577][ T7999] ext4 filesystem being mounted at /root/syzkaller.SHmhno/113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.207521][ T8013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1199'. [ 94.267110][ T8016] loop2: detected capacity change from 0 to 256 [ 94.299022][ T8021] loop4: detected capacity change from 0 to 256 [ 94.362161][ T8027] loop1: detected capacity change from 0 to 512 [ 94.374298][ T8027] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.384210][ T8027] EXT4-fs (loop1): invalid inodes per group: 1 [ 94.384210][ T8027] [ 94.409872][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 94.529791][ T8048] loop4: detected capacity change from 0 to 1024 [ 94.551670][ T8048] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 94.571453][ T8048] JBD2: no valid journal superblock found [ 94.577353][ T8048] EXT4-fs (loop4): Could not load journal inode [ 94.590374][ T8054] loop2: detected capacity change from 0 to 2048 [ 94.617675][ T8054] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.635331][ T7995] 9pnet_fd: Insufficient options for proto=fd [ 94.701030][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'. [ 94.713800][ T8062] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 94.834609][ T8072] wg0: entered allmulticast mode [ 94.840452][ T8072] lo: entered allmulticast mode [ 94.862306][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 95.093300][ T8089] loop2: detected capacity change from 0 to 512 [ 95.119349][ T8089] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.1224: casefold flag without casefold feature [ 95.145771][ T8089] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1224: couldn't read orphan inode 15 (err -117) [ 95.270041][ T8096] loop4: detected capacity change from 0 to 512 [ 95.295005][ T8098] loop2: detected capacity change from 0 to 2048 [ 95.316336][ T8096] EXT4-fs mount: 32 callbacks suppressed [ 95.316351][ T8096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.336045][ T8096] ext4 filesystem being mounted at /root/syzkaller.SHmhno/117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.349962][ T8096] tipc: Invalid UDP bearer configuration [ 95.349971][ T8096] tipc: Enabling of bearer rejected, failed to enable media [ 95.356998][ T8098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.378249][ T5287] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.597229][ T8118] usb usb5: usbfs: process 8118 (syz.4.1231) did not claim interface 0 before use [ 95.606659][ T8118] usb usb5: selecting invalid altsetting -1441524564 [ 95.633938][ T8120] 9pnet_fd: Insufficient options for proto=fd [ 95.716286][ T8126] loop3: detected capacity change from 0 to 512 [ 95.733859][ T8126] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1235: casefold flag without casefold feature [ 95.748581][ T8126] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1235: couldn't read orphan inode 15 (err -117) [ 95.761099][ T8126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.861202][ T3082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.930121][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 95.942140][ T8137] sit1: entered promiscuous mode [ 95.947188][ T8137] sit1: entered allmulticast mode [ 95.995170][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 95.995182][ T29] audit: type=1326 audit(2000000054.690:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a0a29b99 code=0x7ffc0000 [ 96.039819][ T29] audit: type=1326 audit(2000000054.720:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a0a29b99 code=0x7ffc0000 [ 96.040750][ T8146] loop3: detected capacity change from 0 to 256 [ 96.063367][ T29] audit: type=1326 audit(2000000054.720:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f93a0a29b99 code=0x7ffc0000 [ 96.093143][ T29] audit: type=1326 audit(2000000054.720:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a0a29b99 code=0x7ffc0000 [ 96.095985][ T8146] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 96.116742][ T29] audit: type=1326 audit(2000000054.720:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f93a0a29b99 code=0x7ffc0000 [ 96.147792][ T29] audit: type=1326 audit(2000000054.720:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a0a29b99 code=0x7ffc0000 [ 96.171271][ T29] audit: type=1326 audit(2000000054.720:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a0a29b99 code=0x7ffc0000 [ 96.194674][ T29] audit: type=1326 audit(2000000054.720:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a0a29b99 code=0x7ffc0000 [ 96.257906][ T3312] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 96.321328][ T29] audit: type=1400 audit(2000000055.010:1289): avc: denied { create } for pid=8145 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 96.347801][ T8152] 9pnet_fd: Insufficient options for proto=fd [ 96.414741][ T8163] loop3: detected capacity change from 0 to 512 [ 96.430943][ T5149] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.452025][ T8163] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1247: casefold flag without casefold feature [ 96.465096][ T8163] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1247: couldn't read orphan inode 15 (err -117) [ 96.477848][ T8163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.490596][ T8166] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 96.502140][ T8166] wg0: entered promiscuous mode [ 96.507143][ T8166] vlan2: entered promiscuous mode [ 96.523170][ T8166] wg0: left promiscuous mode [ 96.555830][ T8172] netlink: 'syz.0.1249': attribute type 10 has an invalid length. [ 96.563665][ T8172] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1249'. [ 96.573392][ T8172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.593398][ T8172] netlink: 'syz.0.1249': attribute type 10 has an invalid length. [ 96.604427][ T8172] syz_tun: entered promiscuous mode [ 96.609673][ T8172] syz_tun: entered allmulticast mode [ 96.617250][ T8172] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 96.639497][ T29] audit: type=1326 audit(2000000055.330:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c5ffb99 code=0x7ffc0000 [ 96.683321][ T8183] loop1: detected capacity change from 0 to 2048 [ 96.684728][ T3082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.701695][ T8179] bond_slave_0: entered promiscuous mode [ 96.707399][ T8179] bond_slave_1: entered promiscuous mode [ 96.719570][ T8179] vlan2: entered promiscuous mode [ 96.724744][ T8179] bond0: entered promiscuous mode [ 96.733343][ T8183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.736489][ T8186] loop4: detected capacity change from 0 to 2048 [ 96.926263][ T8207] usb usb5: usbfs: process 8207 (syz.0.1256) did not claim interface 0 before use [ 96.937242][ T8207] usb usb5: selecting invalid altsetting -1441524564 [ 97.695946][ T8223] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 97.782140][ T8227] loop3: detected capacity change from 0 to 512 [ 97.808137][ T8227] ext4: Unknown parameter 'measure' [ 97.840279][ T6351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.919310][ T8242] syz2: rxe_newlink: already configured on team_slave_1 [ 98.217192][ T2993] printk: udevd: 727 output lines suppressed due to ratelimiting [ 98.260751][ T8288] 9pnet_fd: Insufficient options for proto=fd [ 98.267930][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 98.277408][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 98.301289][ T8293] netlink: 'syz.3.1289': attribute type 4 has an invalid length. [ 98.301703][ T8290] loop1: detected capacity change from 0 to 128 [ 98.322186][ T8293] netlink: 'syz.3.1289': attribute type 39 has an invalid length. [ 98.353627][ T8296] loop3: detected capacity change from 0 to 128 [ 98.401785][ T8296] FAT-fs (loop3): Unrecognized mount option "00000000000000000009" or missing value [ 98.470997][ T8304] FAULT_INJECTION: forcing a failure. [ 98.470997][ T8304] name failslab, interval 1, probability 0, space 0, times 1 [ 98.483703][ T8304] CPU: 1 PID: 8304 Comm: syz.3.1293 Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 98.493853][ T8304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 98.503982][ T8304] Call Trace: [ 98.507273][ T8304] [ 98.510217][ T8304] dump_stack_lvl+0xf2/0x150 [ 98.514874][ T8304] dump_stack+0x15/0x20 [ 98.519167][ T8304] should_fail_ex+0x229/0x230 [ 98.523845][ T8304] ? __alloc_skb+0x10b/0x300 [ 98.528419][ T8304] __should_failslab+0x92/0xa0 [ 98.533168][ T8304] should_failslab+0x9/0x20 [ 98.537672][ T8304] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 98.543481][ T8304] __alloc_skb+0x10b/0x300 [ 98.547886][ T8304] netlink_alloc_large_skb+0xad/0xe0 [ 98.553162][ T8304] netlink_sendmsg+0x3b4/0x6e0 [ 98.557991][ T8304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.563358][ T8304] __sock_sendmsg+0x140/0x180 [ 98.568036][ T8304] ____sys_sendmsg+0x312/0x410 [ 98.572824][ T8304] __sys_sendmsg+0x1e9/0x280 [ 98.577417][ T8304] __x64_sys_sendmsg+0x46/0x50 [ 98.582218][ T8304] x64_sys_call+0xb25/0x2d70 [ 98.586825][ T8304] do_syscall_64+0xc9/0x1c0 [ 98.591332][ T8304] ? clear_bhb_loop+0x55/0xb0 [ 98.595997][ T8304] ? clear_bhb_loop+0x55/0xb0 [ 98.600666][ T8304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.606588][ T8304] RIP: 0033:0x7f93a0a29b99 [ 98.611024][ T8304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.630674][ T8304] RSP: 002b:00007f939fcab048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.639075][ T8304] RAX: ffffffffffffffda RBX: 00007f93a0bb7fa0 RCX: 00007f93a0a29b99 [ 98.647032][ T8304] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 98.655069][ T8304] RBP: 00007f939fcab0a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.663026][ T8304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.670983][ T8304] R13: 000000000000000b R14: 00007f93a0bb7fa0 R15: 00007ffe04b2f808 [ 98.678943][ T8304] [ 99.925017][ T8339] loop2: detected capacity change from 0 to 512 [ 99.932101][ T8339] EXT4-fs: Ignoring removed nobh option [ 99.939184][ T8339] ext4: Unknown parameter 'audit' [ 100.012374][ T8341] loop2: detected capacity change from 0 to 2048 [ 100.025959][ T8341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.039782][ T8341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.094318][ C1] sched: RT throttling activated [ 100.126184][ T8348] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 100.139292][ T8348] Invalid ELF header magic: != ELF [ 100.210107][ T8352] IPVS: Unknown mcast interface: vcan0 [ 100.316769][ T8360] tipc: Started in network mode [ 100.321660][ T8360] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 100.328853][ T8360] tipc: Enabled bearer , priority 10 [ 100.351350][ T8363] loop2: detected capacity change from 0 to 2048 [ 100.361366][ T8360] loop1: detected capacity change from 0 to 2048 [ 100.375680][ T8363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.472091][ T8360] loop1: p1 < > p3 p4 < > [ 100.480234][ T8360] loop1: p3 start 4284289 is beyond EOD, truncated [ 100.621635][ T8383] loop4: detected capacity change from 0 to 1024 [ 100.642482][ T8383] ext4: Bad value for 'debug_want_extra_isize' [ 100.657110][ T8385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1320'. [ 100.710606][ T8383] loop4: detected capacity change from 0 to 512 [ 100.717322][ T8383] EXT4-fs: Ignoring removed bh option [ 100.723247][ T8383] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 100.733340][ T8383] EXT4-fs (loop4): 1 truncate cleaned up [ 100.740516][ T8383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.805295][ T8383] loop4: detected capacity change from 512 to 64 [ 100.813974][ T8383] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 138:freeing already freed block (bit 137); block bitmap corrupt. [ 100.828640][ T8383] EXT4-fs (loop4): pa ffff888106862460: logic 0, phys. 42, len 128 [ 100.836588][ T8383] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5368: group 0, free 44, pa_free 43 [ 100.848414][ T8383] EXT4-fs error (device loop4): ext4_free_branches:1043: inode #18: block 41: comm syz.4.1318: Read failure [ 100.875399][ T8383] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.926142][ T8395] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 100.942702][ T5149] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.167464][ T8410] program syz.0.1327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.336081][ T8416] usb usb5: usbfs: process 8416 (syz.0.1328) did not claim interface 0 before use [ 101.345817][ T8416] usb usb5: selecting invalid altsetting -1441524564 [ 101.454423][ T7420] tipc: Node number set to 10005162 [ 101.538742][ T8419] 9pnet_fd: Insufficient options for proto=fd [ 101.607000][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.709104][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.716614][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.724195][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.731806][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.739234][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.746734][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.754607][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.762350][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.769912][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.777476][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.784954][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.792455][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.799868][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.807364][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.814788][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.822309][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.829776][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.837206][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.844721][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.852195][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.859718][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.867253][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.874817][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.882240][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.889655][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.897250][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.904717][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.912095][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.919475][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.926879][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.934250][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.941667][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.949095][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.956540][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.963896][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.971314][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.978700][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.986073][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.993455][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.000825][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.008302][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.015663][ T7420] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.023512][ T7420] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 102.161447][ T8450] loop1: detected capacity change from 0 to 512 [ 102.171217][ T8450] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.1340: casefold flag without casefold feature [ 102.551602][ T8450] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1340: couldn't read orphan inode 15 (err -117) [ 102.567266][ T8450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.700374][ T8463] loop3: detected capacity change from 0 to 2048 [ 102.709254][ T6351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.720332][ T8463] EXT4-fs (loop3): failed to initialize system zone (-117) [ 102.727984][ T8463] EXT4-fs (loop3): mount failed [ 102.883768][ T8473] usb usb5: usbfs: process 8473 (syz.2.1345) did not claim interface 0 before use [ 102.894765][ T8473] usb usb5: selecting invalid altsetting -1441524564 [ 102.993176][ T8485] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.002365][ T8485] vhci_hcd: invalid port number 23 [ 103.033756][ T8490] usb usb5: usbfs: process 8490 (syz.3.1353) did not claim interface 0 before use [ 103.047891][ T8490] loop3: detected capacity change from 0 to 512 [ 103.066347][ T8490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.079211][ T8490] ext4 filesystem being mounted at /root/syzkaller.37ElKW/266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.111218][ T3082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.581323][ T8505] loop4: detected capacity change from 0 to 512 [ 103.588198][ T8505] ext3: Unknown parameter 'func' [ 103.665222][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 103.665237][ T29] audit: type=1326 audit(2000000062.360:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4728e5bb99 code=0x7ffc0000 [ 103.695174][ T29] audit: type=1326 audit(2000000062.390:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4728e5bb99 code=0x7ffc0000 [ 103.718945][ T29] audit: type=1326 audit(2000000062.390:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4728e5bb99 code=0x7ffc0000 [ 103.747574][ T29] audit: type=1326 audit(2000000062.440:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4728e5bb99 code=0x7ffc0000 [ 103.771234][ T29] audit: type=1326 audit(2000000062.440:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4728e5bb99 code=0x7ffc0000 [ 103.799456][ T29] audit: type=1326 audit(2000000062.490:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4728e5bb99 code=0x7ffc0000 [ 103.822915][ T29] audit: type=1326 audit(2000000062.490:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4728e5bbd3 code=0x7ffc0000 [ 103.847767][ T29] audit: type=1326 audit(2000000062.520:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4728e5bbd3 code=0x7ffc0000 [ 103.871147][ T29] audit: type=1326 audit(2000000062.550:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4728e5bb99 code=0x7ffc0000 [ 103.894560][ T29] audit: type=1326 audit(2000000062.550:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8512 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4728e5bb99 code=0x7ffc0000 [ 103.963874][ T8534] loop2: detected capacity change from 0 to 1024 [ 104.076422][ T8550] usb usb5: usbfs: process 8550 (syz.1.1369) did not claim interface 0 before use [ 104.090860][ T8550] usb usb5: selecting invalid altsetting -1441524564 [ 104.097674][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 104.128284][ T8554] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 104.206019][ T8562] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 104.415351][ T8578] loop4: detected capacity change from 0 to 512 [ 104.439034][ T8578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.453518][ T8578] ext4 filesystem being mounted at /root/syzkaller.SHmhno/144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.473579][ T5287] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.648187][ T8608] loop4: detected capacity change from 0 to 512 [ 104.686732][ T8608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.703674][ T8608] ext4 filesystem being mounted at /root/syzkaller.SHmhno/146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.738354][ T8614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1389'. [ 104.936280][ T8622] syz2: rxe_newlink: already configured on team_slave_1 [ 104.980590][ T8627] loop3: detected capacity change from 0 to 512 [ 104.988517][ T8627] EXT4-fs (loop3): fragment/cluster size (4096) != block size (1024) [ 105.180464][ T8632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1396'. [ 105.258154][ T8636] loop3: detected capacity change from 0 to 512 [ 105.265976][ T8636] ext4: Unknown parameter 'measure' [ 105.308840][ T8638] syzkaller0: entered promiscuous mode [ 105.314364][ T8638] syzkaller0: entered allmulticast mode [ 105.338389][ T8638] netlink: 'syz.2.1398': attribute type 27 has an invalid length. [ 105.349617][ T8640] loop3: detected capacity change from 0 to 256 [ 105.356367][ T8641] --map-set only usable from mangle table [ 105.377199][ T8638] gretap0: left promiscuous mode [ 105.421625][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.428851][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.451623][ T8638] bond0: left promiscuous mode [ 105.456471][ T8638] bond_slave_0: left promiscuous mode [ 105.461961][ T8638] bond_slave_1: left promiscuous mode [ 105.462369][ T5287] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.560396][ T8638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.572218][ T8638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.584906][ T8648] usb usb5: usbfs: process 8648 (syz.3.1401) did not claim interface 0 before use [ 105.601724][ T8648] usb usb5: selecting invalid altsetting -1441524564 [ 105.624692][ T8638] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.633192][ T8638] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.641706][ T8638] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.650146][ T8638] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.663043][ T8638] vlan2: left promiscuous mode [ 105.675613][ T8638] syzkaller0: left promiscuous mode [ 105.680853][ T8638] syzkaller0: left allmulticast mode [ 105.752724][ T8642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.761498][ T8642] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.772253][ T8642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.834785][ T8661] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.840509][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'. [ 105.851247][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'. [ 106.003583][ T8686] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 106.014284][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.024871][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.156561][ T8697] syzkaller0: entered promiscuous mode [ 106.162073][ T8697] syzkaller0: entered allmulticast mode [ 106.191114][ T8697] netlink: 'syz.2.1417': attribute type 27 has an invalid length. [ 106.241576][ T8697] syzkaller0: left promiscuous mode [ 106.247011][ T8697] syzkaller0: left allmulticast mode [ 106.300142][ T8699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.308846][ T8699] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.334521][ T8699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.399273][ T8706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1419'. [ 106.461569][ T8717] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 106.613260][ T8729] usb usb5: usbfs: process 8729 (syz.2.1428) did not claim interface 0 before use [ 106.622794][ T8729] usb usb5: selecting invalid altsetting -1441524564 [ 107.122631][ T8744] loop4: detected capacity change from 0 to 164 [ 107.134387][ T8743] netlink: 'syz.4.1433': attribute type 1 has an invalid length. [ 107.146637][ T8743] bond1: entered promiscuous mode [ 107.152258][ T8744] bond0: (slave bond_slave_0): Releasing backup interface [ 107.205501][ T8748] loop4: detected capacity change from 0 to 512 [ 107.227313][ T8748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.233260][ T8753] netlink: 'syz.1.1436': attribute type 10 has an invalid length. [ 107.240227][ T8748] ext4 filesystem being mounted at /root/syzkaller.SHmhno/155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.248590][ T8753] team0: Port device netdevsim1 added [ 107.288203][ T8762] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 107.304134][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 107.716633][ T8780] loop2: detected capacity change from 0 to 512 [ 107.722849][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'. [ 107.736333][ T8780] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 107.737098][ T8785] loop3: detected capacity change from 0 to 512 [ 107.746165][ T8780] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 107.753341][ T8785] ext4: Unknown parameter 'measure' [ 107.760148][ T8780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.780469][ T8780] EXT4-fs error (device loop2): ext4_map_blocks:580: inode #2: block 3: comm syz.2.1443: lblock 0 mapped to illegal pblock 3 (length 1) [ 107.794647][ T8780] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz.2.1443: error -117 reading directory block [ 107.802287][ T8790] xt_bpf: check failed: parse error [ 107.819220][ T5149] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.928918][ T8803] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 108.346287][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811264ae00: rx timeout, send abort [ 108.354537][ C0] vcan0: j1939_tp_rxtimer: 0xffff888112666000: rx timeout, send abort [ 108.362796][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811264ae00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.377090][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888112666000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.393319][ T5287] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.441236][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1455'. [ 108.464983][ T8813] pim6reg1: entered promiscuous mode [ 108.470296][ T8813] pim6reg1: entered allmulticast mode [ 108.580171][ T8818] loop4: detected capacity change from 0 to 512 [ 108.587533][ T8818] ext4: Unknown parameter 'measure' [ 108.612936][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.620387][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.627961][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.635450][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.643023][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.650662][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.658127][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.665521][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.672905][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.680360][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.687791][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.695235][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.702593][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.709994][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.717439][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.724840][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.732264][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.739833][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.747224][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.754612][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.761984][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.769410][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.776806][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.784216][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.791627][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.799001][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.806391][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.813766][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.821482][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.828913][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.836309][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.843670][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.851109][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.858492][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.865983][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.873389][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.880798][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.888169][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.895606][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.902975][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.910405][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.917824][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.925233][ T7429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.975346][ T7429] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 108.995078][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1464'. [ 109.142807][ T8871] syzkaller0: entered promiscuous mode [ 109.148358][ T8871] syzkaller0: entered allmulticast mode [ 109.158181][ T8871] netlink: 'syz.1.1475': attribute type 27 has an invalid length. [ 109.170822][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 109.170836][ T29] audit: type=1400 audit(2000000067.860:1805): avc: denied { execute } for pid=8867 comm="syz.2.1477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.270799][ T8871] syzkaller0: left promiscuous mode [ 109.276106][ T8871] syzkaller0: left allmulticast mode [ 109.282133][ T29] audit: type=1400 audit(2000000067.970:1806): avc: denied { ioctl } for pid=8876 comm="syz.2.1478" path="socket:[23790]" dev="sockfs" ino=23790 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.402308][ T8878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.410460][ T8878] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.422203][ T8878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.497552][ T29] audit: type=1400 audit(2000000068.190:1807): avc: denied { mounton } for pid=8886 comm="syz.4.1480" path="/root/syzkaller.SHmhno/164/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 109.522836][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 109.539926][ T8891] loop2: detected capacity change from 0 to 1024 [ 109.548483][ T8891] EXT4-fs: Ignoring removed nobh option [ 109.554433][ T8891] EXT4-fs: quotafile must be on filesystem root [ 109.596745][ T8891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1482'. [ 109.640431][ T29] audit: type=1326 audit(2000000068.330:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.0.1481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f190efe4be7 code=0x0 [ 109.931707][ T8912] sd 0:0:1:0: device reset [ 110.046557][ T29] audit: type=1400 audit(2000000068.740:1809): avc: denied { ioctl } for pid=8914 comm="syz.2.1489" path="socket:[22756]" dev="sockfs" ino=22756 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.328646][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 110.420389][ T29] audit: type=1400 audit(2000000069.110:1810): avc: denied { create } for pid=8941 comm="syz.0.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 110.517445][ T6924] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.641415][ T6924] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.669633][ T29] audit: type=1326 audit(2000000069.360:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190efedb99 code=0x7ffc0000 [ 110.693149][ T29] audit: type=1326 audit(2000000069.360:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.0.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190efedb99 code=0x7ffc0000 [ 110.755837][ T8987] syzkaller0: entered promiscuous mode [ 110.761343][ T8987] syzkaller0: entered allmulticast mode [ 110.771658][ T8987] netlink: 'syz.0.1513': attribute type 27 has an invalid length. [ 110.779589][ T8987] gretap0: left promiscuous mode [ 110.801832][ T8987] syzkaller0: left promiscuous mode [ 110.807123][ T8987] syzkaller0: left allmulticast mode [ 110.840148][ T8987] bridge0: port 3(bond0) entered blocking state [ 110.846519][ T8987] bridge0: port 3(bond0) entered forwarding state [ 110.853144][ T8987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.861977][ T8987] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.869977][ T8987] dummy0: left promiscuous mode [ 110.876681][ T8987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.897847][ T6924] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.946327][ T6924] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.020453][ T8967] chnl_net:caif_netlink_parms(): no params data found [ 111.070725][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.077914][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.085352][ T8967] bridge_slave_0: entered allmulticast mode [ 111.091810][ T8967] bridge_slave_0: entered promiscuous mode [ 111.099263][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.106351][ T8967] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.113734][ T8967] bridge_slave_1: entered allmulticast mode [ 111.120341][ T8967] bridge_slave_1: entered promiscuous mode [ 111.155485][ T8967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.166012][ T8967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.175400][ T6924] team0: left allmulticast mode [ 111.180323][ T6924] team_slave_0: left allmulticast mode [ 111.185900][ T6924] team_slave_1: left allmulticast mode [ 111.191541][ T6924] bridge0: port 1(team0) entered disabled state [ 111.248600][ T6924] bridge_slave_1: left allmulticast mode [ 111.254275][ T6924] bridge_slave_1: left promiscuous mode [ 111.259947][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.458092][ T6924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.469276][ T6924] bond0 (unregistering): Released all slaves [ 111.495543][ T6924] bond1 (unregistering): Released all slaves [ 111.538983][ T8967] team0: Port device team_slave_0 added [ 111.555558][ T8967] team0: Port device team_slave_1 added [ 111.581741][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.588732][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.614698][ T8967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.676005][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.683022][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.708934][ T8967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.746510][ T9004] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 111.762145][ T8967] hsr_slave_0: entered promiscuous mode [ 111.770030][ T8967] hsr_slave_1: entered promiscuous mode [ 111.776601][ T8967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.784239][ T8967] Cannot create hsr debugfs directory [ 111.806307][ T6924] hsr_slave_0: left promiscuous mode [ 111.814978][ T6924] hsr_slave_1: left promiscuous mode [ 111.828460][ T6924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.835969][ T6924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.843697][ T6924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.851254][ T6924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.866699][ T6924] veth1_macvtap: left promiscuous mode [ 111.872311][ T6924] veth0_macvtap: left promiscuous mode [ 111.877881][ T6924] veth0_vlan: left promiscuous mode [ 112.009031][ T6924] team_slave_1 (unregistering): left promiscuous mode [ 112.026932][ T6924] team0 (unregistering): Port device team_slave_1 removed [ 112.047541][ T6924] team_slave_0 (unregistering): left promiscuous mode [ 112.056977][ T6924] team0 (unregistering): Port device team_slave_0 removed [ 112.279633][ T9014] SELinux: Context system_u:object_r:smartcard_device_t:s0 is not valid (left unmapped). [ 112.290086][ T29] audit: type=1400 audit(2000000070.980:1813): avc: denied { relabelto } for pid=9013 comm="syz.1.1520" name="file0" dev="sda1" ino=1987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:smartcard_device_t:s0" [ 112.323999][ T29] audit: type=1400 audit(2000000071.010:1814): avc: denied { rmdir } for pid=6351 comm="syz-executor" name="file0" dev="sda1" ino=1987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:smartcard_device_t:s0" [ 112.381152][ T9018] ieee802154 phy1 wpan1: encryption failed: -90 [ 112.429667][ T9022] xt_hashlimit: size too large, truncated to 1048576 [ 112.436546][ T9022] xt_hashlimit: overflow, try lower: 0/0 [ 112.558773][ T8967] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.567369][ T8967] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.578240][ T8967] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.596349][ T8967] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.644997][ T8967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.661337][ T8967] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.670539][ T9036] __nla_validate_parse: 4 callbacks suppressed [ 112.670554][ T9036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1527'. [ 112.696026][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.703375][ T7420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.712359][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.719477][ T7420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.735169][ T8967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.745620][ T8967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.782949][ T9039] loop3: detected capacity change from 0 to 2048 [ 112.806946][ T9039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.825080][ T9039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.829834][ T8967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.963592][ T8967] veth0_vlan: entered promiscuous mode [ 112.977384][ T8967] veth1_vlan: entered promiscuous mode [ 112.993422][ T8967] veth0_macvtap: entered promiscuous mode [ 113.004963][ T8967] veth1_macvtap: entered promiscuous mode [ 113.019223][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.031539][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.042891][ T8967] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.051761][ T8967] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.060605][ T8967] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.069370][ T8967] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.407384][ T9062] sd 0:0:1:0: device reset [ 113.454505][ T9077] tmpfs: Bad value for 'mpol' [ 113.584664][ T9081] loop4: detected capacity change from 0 to 2048 [ 113.636545][ T9081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.664746][ T9081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.733971][ T9086] loop3: detected capacity change from 0 to 512 [ 113.770139][ T9086] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 113.776790][ T9086] EXT4-fs (loop3): mount failed [ 113.900795][ T9092] loop4: detected capacity change from 0 to 2048 [ 113.917143][ T9092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.929901][ T9092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.014015][ T9109] loop2: detected capacity change from 0 to 1024 [ 114.021845][ T9109] EXT4-fs: Ignoring removed orlov option [ 114.027579][ T9109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.043994][ T9109] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 114.062568][ T9109] System zones: 0-1, 3-36 [ 114.071044][ T9109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.094849][ T9114] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.153638][ T9115] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1544'. [ 114.184070][ T5149] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.235000][ T9117] loop4: detected capacity change from 0 to 512 [ 114.243789][ T9117] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.266769][ T9117] __quota_error: 8 callbacks suppressed [ 114.266782][ T9117] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 114.282727][ T9117] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 114.320764][ T8967] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 114.350388][ T9125] loop2: detected capacity change from 0 to 2048 [ 114.367149][ T9125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.380384][ T9125] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.582576][ T9141] loop2: detected capacity change from 0 to 2048 [ 114.593711][ T9143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.601275][ T9143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.611534][ T9141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.625653][ T9143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.633224][ T9143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.641099][ T9141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.770368][ T9152] random: crng reseeded on system resumption [ 114.770337][ T29] audit: type=1400 audit(2000000073.460:1823): avc: denied { write } for pid=9151 comm="syz.3.1559" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 114.829051][ T29] audit: type=1400 audit(2000000073.460:1824): avc: denied { open } for pid=9151 comm="syz.3.1559" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 114.858144][ T29] audit: type=1400 audit(2000000073.530:1825): avc: denied { shutdown } for pid=9151 comm="syz.3.1559" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.924942][ T9157] loop2: detected capacity change from 0 to 2048 [ 114.962271][ T9161] loop3: detected capacity change from 0 to 512 [ 114.992423][ T9161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.011142][ T9161] ext4 filesystem being mounted at /root/syzkaller.37ElKW/306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.040096][ T3082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.109061][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 115.123081][ T9181] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 115.259286][ T9189] loop2: detected capacity change from 0 to 2048 [ 115.276854][ T9189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.290533][ T9189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.583271][ T9209] x_tables: duplicate underflow at hook 3 [ 115.595304][ T9209] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 115.601832][ T9209] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 115.609544][ T9209] vhci_hcd vhci_hcd.0: Device attached [ 115.616044][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1578'. [ 115.631509][ T9211] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 115.638881][ T9212] usbip_core: unknown command [ 115.643559][ T9212] vhci_hcd: unknown pdu 589373486 [ 115.648648][ T9212] usbip_core: unknown command [ 115.660884][ T6925] vhci_hcd: stop threads [ 115.665163][ T6925] vhci_hcd: release socket [ 115.669720][ T6925] vhci_hcd: disconnect device [ 115.688145][ T9215] loop2: detected capacity change from 0 to 2048 [ 115.715247][ T9215] EXT4-fs (loop2): failed to initialize system zone (-117) [ 115.722544][ T9215] EXT4-fs (loop2): mount failed [ 115.861601][ T9218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1579'. [ 116.066438][ T9227] loop3: detected capacity change from 0 to 2048 [ 116.076476][ T9227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.090832][ T9227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.257315][ T9242] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 116.390876][ T9255] xt_recent: hitcount (14045) is larger than allowed maximum (255) [ 116.548888][ T9258] loop2: detected capacity change from 0 to 256 [ 116.721849][ T29] audit: type=1400 audit(2000000075.410:1826): avc: denied { read } for pid=9257 comm="syz.2.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 117.169923][ T9262] loop3: detected capacity change from 0 to 512 [ 117.186646][ T9262] EXT4-fs: dax option not supported [ 117.273631][ T9275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1597'. [ 117.350396][ T9279] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 117.600595][ T9295] loop2: detected capacity change from 0 to 256 [ 117.616538][ T9295] FAT-fs (loop2): Unrecognized mount option "umask=000000000000000000042eck=strict" or missing value [ 117.655322][ T9295] xt_recent: hitcount (14045) is larger than allowed maximum (255) [ 118.089284][ T9302] loop4: detected capacity change from 0 to 2048 [ 118.117646][ T9302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.130627][ T9302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.214847][ T9306] usb usb5: usbfs: process 9306 (syz.3.1610) did not claim interface 0 before use [ 118.224254][ T9306] usb usb5: selecting invalid altsetting -1441524564 [ 118.456106][ T9317] loop4: detected capacity change from 0 to 512 [ 118.489866][ T9317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.504829][ T9317] ext4 filesystem being mounted at /root/syzkaller.oHhTWm/12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.588973][ T8967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.762915][ T29] audit: type=1400 audit(2000000077.450:1827): avc: denied { append } for pid=9337 comm="syz.4.1618" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 118.777666][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'. [ 118.847981][ T9340] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 118.897121][ T9342] usb usb5: usbfs: process 9342 (syz.4.1621) did not claim interface 0 before use [ 118.940425][ T9342] usb usb5: selecting invalid altsetting -1441524564 [ 118.956387][ T9344] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1622'. [ 119.265196][ T9360] syzkaller0: entered promiscuous mode [ 119.270852][ T9360] syzkaller0: entered allmulticast mode [ 119.294337][ T9365] netlink: 'syz.1.1628': attribute type 27 has an invalid length. [ 119.398521][ T9365] syzkaller0: left promiscuous mode [ 119.403798][ T9365] syzkaller0: left allmulticast mode [ 119.436202][ T9373] usb usb5: usbfs: process 9373 (syz.4.1633) did not claim interface 0 before use [ 119.476754][ T9373] usb usb5: selecting invalid altsetting -1441524564 [ 119.525662][ T9360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.536594][ T9360] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.561510][ T9360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.577432][ T9375] netlink: 'syz.2.1634': attribute type 4 has an invalid length. [ 119.594519][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1632'. [ 119.620174][ T9376] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 119.673173][ T29] audit: type=1400 audit(2000000078.360:1828): avc: denied { ioctl } for pid=9382 comm="syz.3.1637" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x5523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 119.713855][ T9386] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 119.741110][ T9388] batadv_slave_1: entered promiscuous mode [ 119.763967][ T9388] x_tables: duplicate underflow at hook 3 [ 119.791524][ T9396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1644'. [ 119.847618][ T9387] batadv_slave_1: left promiscuous mode [ 119.868482][ T9401] usb usb5: usbfs: process 9401 (syz.4.1645) did not claim interface 0 before use [ 119.881698][ T9401] usb usb5: selecting invalid altsetting -1441524564 [ 119.917530][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1647'. [ 119.937477][ T9407] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 120.039590][ T9418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1650'. [ 120.055549][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1651'. [ 120.134801][ T9425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1653'. [ 120.193678][ T9436] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 120.238219][ T9438] loop3: detected capacity change from 0 to 1024 [ 120.272792][ T9438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.371450][ T3082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.382539][ T9450] loop2: detected capacity change from 0 to 512 [ 120.424637][ T9450] EXT4-fs: Invalid want_extra_isize 256 [ 120.506999][ T9452] usb usb5: usbfs: process 9452 (syz.3.1658) did not claim interface 0 before use [ 120.554410][ T9452] usb usb5: selecting invalid altsetting -1441524564 [ 120.661274][ T29] audit: type=1400 audit(2000000079.340:1829): avc: denied { read } for pid=9459 comm="syz.3.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.701165][ T9463] usb usb5: usbfs: process 9463 (syz.2.1661) did not claim interface 0 before use [ 120.740945][ T9463] usb usb5: selecting invalid altsetting -1441524564 [ 120.845354][ T9470] Process accounting resumed [ 121.008223][ T9493] 9pnet_fd: Insufficient options for proto=fd [ 121.065233][ T9499] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 121.149163][ T9509] usb usb5: usbfs: process 9509 (syz.1.1670) did not claim interface 0 before use [ 121.158628][ T9509] usb usb5: selecting invalid altsetting -1441524564 [ 121.211624][ T7911] bond0: (slave syz_tun): Releasing backup interface [ 121.229187][ T7911] syz_tun (unregistering): left promiscuous mode [ 121.235685][ T7911] syz_tun (unregistering): left allmulticast mode [ 121.321369][ T9530] usb usb5: usbfs: process 9530 (syz.4.1672) did not claim interface 0 before use [ 121.344462][ T9530] usb usb5: selecting invalid altsetting -1441524564 [ 121.411955][ T9552] x_tables: duplicate underflow at hook 1 [ 121.563798][ T9586] 9pnet_fd: Insufficient options for proto=fd [ 121.579826][ T6928] team0: left allmulticast mode [ 121.584738][ T6928] team_slave_0: left allmulticast mode [ 121.590216][ T6928] team_slave_1: left allmulticast mode [ 121.595778][ T6928] team0: left promiscuous mode [ 121.600541][ T6928] team_slave_0: left promiscuous mode [ 121.606007][ T6928] team_slave_1: left promiscuous mode [ 121.611552][ T6928] bridge0: port 2(team0) entered disabled state [ 121.657130][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'. [ 121.672040][ T6928] bond0: left allmulticast mode [ 121.676979][ T6928] bond_slave_0: left allmulticast mode [ 121.682452][ T6928] bond_slave_1: left allmulticast mode [ 121.688025][ T6928] bond0: left promiscuous mode [ 121.692917][ T6928] bond_slave_0: left promiscuous mode [ 121.693115][ T9615] usb usb5: usbfs: process 9615 (syz.3.1680) did not claim interface 0 before use [ 121.698507][ T6928] bond_slave_1: left promiscuous mode [ 121.698721][ T6928] bridge0: port 3(bond0) entered disabled state [ 121.712023][ T9615] usb usb5: selecting invalid altsetting -1441524564 [ 121.713577][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'. [ 121.738013][ T9620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9620 comm=syz.1.1679 [ 121.750808][ T6928] bridge_slave_0: left allmulticast mode [ 121.756479][ T6928] bridge_slave_0: left promiscuous mode [ 121.762082][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.788642][ T6928] ip6gretap0 (unregistering): left promiscuous mode [ 121.798090][ T9622] loop3: detected capacity change from 0 to 2048 [ 121.910330][ T6928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.930469][ T6928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.950480][ T6928] bond0 (unregistering): Released all slaves [ 121.972722][ T9627] hsr_slave_0: left promiscuous mode [ 121.980657][ T9627] hsr_slave_1: left promiscuous mode [ 121.999132][ T6928] tipc: Left network mode [ 122.052137][ T9518] chnl_net:caif_netlink_parms(): no params data found [ 122.119497][ T6928] batadv_slave_0: left promiscuous mode [ 122.132674][ T6928] hsr_slave_0: left promiscuous mode [ 122.139881][ T9655] usb usb5: usbfs: process 9655 (syz.3.1691) did not claim interface 0 before use [ 122.149254][ T6928] hsr_slave_1: left promiscuous mode [ 122.150860][ T9655] usb usb5: selecting invalid altsetting -1441524564 [ 122.188036][ T9657] loop3: detected capacity change from 0 to 2048 [ 122.222100][ T6928] team0 (unregistering): Port device team_slave_1 removed [ 122.231385][ T6953] smc: removing ib device syz2 [ 122.236459][ T6928] team0 (unregistering): Port device team_slave_0 removed [ 122.385038][ T9518] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.392253][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.421403][ T9518] bridge_slave_0: entered allmulticast mode [ 122.429906][ T9674] tmpfs: Unsupported parameter 'huge' [ 122.436431][ T9518] bridge_slave_0: entered promiscuous mode [ 122.456342][ T9518] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.463556][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.488671][ T9518] bridge_slave_1: entered allmulticast mode [ 122.505200][ T9518] bridge_slave_1: entered promiscuous mode [ 122.557066][ T9518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.571548][ T9681] usb usb5: usbfs: process 9681 (syz.3.1701) did not claim interface 0 before use [ 122.584713][ T9518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.614446][ T9681] usb usb5: selecting invalid altsetting -1441524564 [ 122.630580][ T9518] team0: Port device team_slave_0 added [ 122.655472][ T9518] team0: Port device team_slave_1 added [ 122.675537][ T9683] vhci_hcd: default hub control req: 0006 v0000 i0000 l0 [ 122.697738][ T9683] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 122.714503][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.721473][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.747610][ T9518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.761865][ T6928] IPVS: stop unused estimator thread 0... [ 122.768244][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.775237][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.801255][ T9518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.869081][ T9694] loop4: detected capacity change from 0 to 128 [ 122.881938][ T9518] hsr_slave_0: entered promiscuous mode [ 122.889086][ T9518] hsr_slave_1: entered promiscuous mode [ 122.901997][ T9695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.906731][ T9691] loop2: detected capacity change from 0 to 2048 [ 123.008183][ T9710] usb usb5: usbfs: process 9710 (syz.1.1711) did not claim interface 0 before use [ 123.017862][ T9710] usb usb5: selecting invalid altsetting -1441524564 [ 123.053029][ T29] audit: type=1400 audit(2000000081.740:1830): avc: denied { getopt } for pid=9715 comm="syz.4.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.092953][ T9717] netlink: 'syz.2.1712': attribute type 10 has an invalid length. [ 123.158156][ T9722] infiniband syz2: set active [ 123.162843][ T9722] infiniband syz2: added team_slave_1 [ 123.173421][ T9722] RDS/IB: syz2: added [ 123.184368][ T9722] smc: adding ib device syz2 with port count 1 [ 123.185891][ T9518] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.193330][ T9722] smc: ib device syz2 port 1 has pnetid [ 123.215827][ T9518] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.226388][ T9518] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.235165][ T9518] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.259812][ T9518] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.266909][ T9518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.298151][ T9518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.311406][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.338866][ T9518] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.358693][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.365829][ T7514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.397763][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.404921][ T7514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.427982][ T9518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.438449][ T9518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.546393][ T9518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.675341][ T9518] veth0_vlan: entered promiscuous mode [ 123.683718][ T9518] veth1_vlan: entered promiscuous mode [ 123.710087][ T9743] loop4: detected capacity change from 0 to 2048 [ 123.728828][ T9518] veth0_macvtap: entered promiscuous mode [ 123.744723][ T9518] veth1_macvtap: entered promiscuous mode [ 123.757380][ T9743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.766440][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.783875][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.793822][ T9518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.802703][ T9518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.811425][ T9518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.820544][ T9518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.897382][ T9749] vlan2: entered allmulticast mode [ 123.993046][ T9756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.029839][ T9759] xt_recent: hitcount (14045) is larger than allowed maximum (255) [ 124.071337][ T29] audit: type=1400 audit(2000000082.760:1831): avc: denied { create } for pid=9762 comm="syz.0.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 124.101608][ T9770] __nla_validate_parse: 3 callbacks suppressed [ 124.101623][ T9770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1727'. [ 124.117373][ T9772] loop2: detected capacity change from 0 to 164 [ 124.212778][ T9780] vlan2: entered promiscuous mode [ 124.303225][ T29] audit: type=1400 audit(2000000082.990:1832): avc: denied { listen } for pid=9790 comm="syz.2.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.323265][ T29] audit: type=1400 audit(2000000082.990:1833): avc: denied { accept } for pid=9790 comm="syz.2.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.776343][ T9804] loop3: detected capacity change from 0 to 256 [ 124.791842][ T9804] FAT-fs (loop3): Unrecognized mount option "umask=000000000000000000042eck=strict" or missing value [ 124.886924][ T9801] xt_recent: hitcount (14045) is larger than allowed maximum (255) [ 124.929981][ T8967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.115374][ T9827] usb usb8: usbfs: process 9827 (syz.4.1747) did not claim interface 0 before use [ 125.221690][ T29] audit: type=1400 audit(2000000083.910:1834): avc: denied { listen } for pid=9817 comm="syz.0.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 125.308881][ T9827] loop4: detected capacity change from 0 to 512 [ 125.431756][ T29] audit: type=1326 audit(2000000084.010:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c5ffb99 code=0x7ffc0000 [ 125.455268][ T29] audit: type=1326 audit(2000000084.010:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c5ffb99 code=0x7ffc0000 [ 125.478670][ T29] audit: type=1326 audit(2000000084.010:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f869c5ffb99 code=0x7ffc0000 [ 125.502313][ T29] audit: type=1326 audit(2000000084.010:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c5ffb99 code=0x7ffc0000 [ 125.525869][ T29] audit: type=1326 audit(2000000084.010:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c5ffb99 code=0x7ffc0000 [ 125.549326][ T29] audit: type=1326 audit(2000000084.010:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f869c5ffb99 code=0x7ffc0000 [ 125.572913][ T29] audit: type=1326 audit(2000000084.010:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c5ffb99 code=0x7ffc0000 [ 125.596310][ T29] audit: type=1326 audit(2000000084.010:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f869c5fe5d0 code=0x7ffc0000 [ 125.619752][ T29] audit: type=1326 audit(2000000084.010:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f869c601327 code=0x7ffc0000 [ 125.676740][ T9827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.754476][ T9827] ext4 filesystem being mounted at /root/syzkaller.oHhTWm/44/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.945192][ T8967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.982088][ T9856] vhci_hcd: default hub control req: 0006 v0000 i0000 l0 [ 126.009638][ T9856] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 126.321765][ T9866] xt_recent: hitcount (14045) is larger than allowed maximum (255) [ 126.376493][ T9877] loop4: detected capacity change from 0 to 256 [ 126.782158][ T9881] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.850521][ T9881] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 127.074868][ T9893] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1760'. [ 127.316617][ T9903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.337974][ T9903] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.375473][ T9903] batman_adv: batadv0: Interface activated: team0 [ 127.414215][ T9903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.489576][ T9910] block device autoloading is deprecated and will be removed. [ 127.540055][ T9918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.641482][ T9921] loop3: detected capacity change from 0 to 512 [ 127.657621][ T9915] loop4: detected capacity change from 0 to 256 [ 127.666737][ T9915] FAT-fs (loop4): Unrecognized mount option "umask=000000000000000000042eck=strict" or missing value [ 127.687184][ T9921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.700608][ T9921] ext4 filesystem being mounted at /root/syzkaller.37ElKW/359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.736034][ T9915] xt_recent: hitcount (14045) is larger than allowed maximum (255) [ 127.786846][ T9930] vhci_hcd: default hub control req: 0006 v0000 i0000 l0 [ 127.798736][ T9930] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 127.818628][ T3082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.341652][ T9953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.637401][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'. [ 128.766111][ T9981] loop0: detected capacity change from 0 to 2048 [ 129.000141][ T9993] loop0: detected capacity change from 0 to 1024 [ 129.013635][ T9993] EXT4-fs (loop0): blocks per group (131072) and clusters per group (8192) inconsistent [ 129.073113][ T9993] loop0: detected capacity change from 0 to 512 [ 129.189054][T10004] lo speed is unknown, defaulting to 1000 [ 129.195473][T10004] lo speed is unknown, defaulting to 1000 [ 129.201418][T10004] lo speed is unknown, defaulting to 1000 [ 129.232764][T10004] infiniband syz0: set active [ 129.237654][T10004] infiniband syz0: added lo [ 129.242459][ T7418] lo speed is unknown, defaulting to 1000 [ 129.256514][T10004] RDS/IB: syz0: added [ 129.260536][T10004] smc: adding ib device syz0 with port count 1 [ 129.266761][T10004] smc: ib device syz0 port 1 has pnetid [ 129.272859][T10004] lo speed is unknown, defaulting to 1000 [ 129.303525][T10004] lo speed is unknown, defaulting to 1000 [ 129.333848][T10004] lo speed is unknown, defaulting to 1000 [ 129.357301][T10014] loop4: detected capacity change from 0 to 512 [ 129.365886][T10004] lo speed is unknown, defaulting to 1000 [ 129.379115][T10014] EXT4-fs: Ignoring removed orlov option [ 129.407669][T10014] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 3: comm syz.4.1801: lblock 0 mapped to illegal pblock 3 (length 1) [ 129.443513][T10015] syzkaller0: entered promiscuous mode [ 129.449020][T10015] syzkaller0: entered allmulticast mode [ 129.457853][T10014] EXT4-fs (loop4): Remounting filesystem read-only [ 129.464479][T10014] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz.4.1801: error -117 reading directory block [ 129.482226][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1799'. [ 129.482314][T10014] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 129.491212][T10018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1799'. [ 129.491249][T10004] lo speed is unknown, defaulting to 1000 [ 129.520333][T10014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.521232][T10020] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 285212781 (only 8 groups) [ 129.532998][T10014] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 129.554792][ T7418] lo speed is unknown, defaulting to 1000 [ 129.555886][T10014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.039424][T10039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.218951][T10049] loop0: detected capacity change from 0 to 1024 [ 130.235938][T10049] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 130.265459][T10052] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.1812'. [ 130.314660][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 130.314672][ T29] audit: type=1400 audit(2000000089.010:1877): avc: denied { write } for pid=10054 comm="syz.4.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 130.355966][T10057] 9pnet_fd: Insufficient options for proto=fd [ 130.364008][ T29] audit: type=1400 audit(2000000089.050:1878): avc: denied { ioctl } for pid=10056 comm="syz.0.1814" path="socket:[27240]" dev="sockfs" ino=27240 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 130.417590][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 130.444196][T10063] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 130.513345][T10067] loop0: detected capacity change from 0 to 512 [ 130.527964][T10070] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20002 [ 130.539744][T10071] xt_recent: hitcount (14045) is larger than allowed maximum (255) [ 130.542213][T10067] EXT4-fs: Ignoring removed orlov option [ 130.562598][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 130.590223][T10067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.603375][T10067] ext4 filesystem being mounted at /root/syzkaller.2PhyUc/31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.606313][T10080] loop4: detected capacity change from 0 to 256 [ 130.638164][T10081] IPVS: Unknown mcast interface: vcan0 [ 130.679557][ T9518] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.693868][T10073] lo speed is unknown, defaulting to 1000 [ 130.769813][T10086] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 130.957532][T10097] loop0: detected capacity change from 0 to 128 [ 131.060807][T10099] loop0: detected capacity change from 0 to 256 [ 131.144036][ T29] audit: type=1400 audit(2000000089.830:1879): avc: denied { mounton } for pid=10098 comm="syz.0.1829" path="/root/syzkaller.2PhyUc/35/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 131.180712][T10099] vlan2: entered promiscuous mode [ 131.185903][T10099] macvtap0: entered promiscuous mode [ 131.191411][T10099] vlan2: entered allmulticast mode [ 131.196554][T10099] macvtap0: entered allmulticast mode [ 131.201959][T10099] veth0_macvtap: entered allmulticast mode [ 131.225595][T10099] team0: Device vlan2 is up. Set it down before adding it as a team port [ 131.254410][T10099] macvtap0: left allmulticast mode [ 131.259546][T10099] veth0_macvtap: left allmulticast mode [ 131.265160][T10099] macvtap0: left promiscuous mode [ 131.619446][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1835'. [ 131.629945][T10120] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1836'. [ 131.665658][T10120] netlink: 'syz.1.1836': attribute type 11 has an invalid length. [ 131.687343][T10123] syz2: rxe_newlink: already configured on team_slave_1 [ 131.721956][T10128] loop0: detected capacity change from 0 to 128 [ 131.883754][T10138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.952646][T10145] loop4: detected capacity change from 0 to 2048 [ 131.998373][T10145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.044849][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'. [ 132.088325][T10151] netlink: 'syz.0.1846': attribute type 1 has an invalid length. [ 132.096152][T10151] netlink: 'syz.0.1846': attribute type 2 has an invalid length. [ 132.103898][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1846'. [ 132.191695][T10151] loop0: detected capacity change from 0 to 512 [ 132.244883][T10151] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 132.273454][T10160] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 132.378767][ T29] audit: type=1400 audit(2000000091.070:1880): avc: denied { mounton } for pid=10163 comm="syz.1.1852" path="/root/syzkaller.5Tvyic/238/file0" dev="hugetlbfs" ino=27487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 132.915210][T10017] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 132.937645][T10187] xt_socket: unknown flags 0x50 [ 133.093174][ T8967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.240338][ T29] audit: type=1400 audit(2000000091.930:1881): avc: denied { mounton } for pid=10209 comm="syz.0.1871" path="/proc/10209/cgroup" dev="proc" ino=28221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 133.250475][T10208] loop4: detected capacity change from 0 to 8192 [ 133.274942][ T29] audit: type=1400 audit(2000000091.930:1882): avc: denied { remount } for pid=10209 comm="syz.0.1871" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 133.308246][ T29] audit: type=1400 audit(2000000092.000:1883): avc: denied { write } for pid=10211 comm="syz.0.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.348761][T10208] program syz.4.1870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.705984][ T29] audit: type=1326 audit(2000000092.380:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.0.1880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee4a999b99 code=0x0 [ 133.823248][T10263] bridge0: entered allmulticast mode [ 133.892380][T10266] EXT4-fs warning (device sda1): verify_group_input:159: Reserved blocks too high (64) [ 133.903664][ T29] audit: type=1326 audit(2000000092.550:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.0.1880" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee4a999b99 code=0x0 [ 134.114424][T10271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1892'. [ 134.138760][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.160770][T10271] bridge_slave_0 (unregistering): left allmulticast mode [ 134.167868][T10271] bridge_slave_0 (unregistering): left promiscuous mode [ 134.174845][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.390703][T10288] IPVS: Error connecting to the multicast addr [ 134.414954][T10286] xt_socket: unknown flags 0x50 [ 134.574683][T10301] __nla_validate_parse: 2 callbacks suppressed [ 134.574722][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1904'. [ 134.978464][T10325] lo speed is unknown, defaulting to 1000 [ 135.068471][ T6928] bridge_slave_1: left allmulticast mode [ 135.074129][ T6928] bridge_slave_1: left promiscuous mode [ 135.079848][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.087498][ T6928] bridge_slave_0: left allmulticast mode [ 135.093139][ T6928] bridge_slave_0: left promiscuous mode [ 135.098992][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.201111][ T6928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.210753][ T6928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.220018][ T6928] bond0 (unregistering): Released all slaves [ 135.233152][T10325] chnl_net:caif_netlink_parms(): no params data found [ 135.270944][T10364] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 135.274436][T10367] loop4: detected capacity change from 0 to 128 [ 135.293570][T10364] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 135.294742][T10364] bond1: (slave batadv3): Enslaving as a backup interface with an up link [ 135.344165][T10325] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.351364][T10325] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.363974][T10325] bridge_slave_0: entered allmulticast mode [ 135.384755][T10325] bridge_slave_0: entered promiscuous mode [ 135.391540][T10325] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.398644][T10325] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.406260][T10325] bridge_slave_1: entered allmulticast mode [ 135.412689][T10325] bridge_slave_1: entered promiscuous mode [ 135.437013][ T6928] hsr_slave_0: left promiscuous mode [ 135.442783][ T6928] hsr_slave_1: left promiscuous mode [ 135.448440][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.457112][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.508957][ T6928] team0 (unregistering): Port device team_slave_1 removed [ 135.521639][ T6928] team0 (unregistering): Port device team_slave_0 removed [ 135.543732][ T6928] wg0 (unregistering): left allmulticast mode [ 135.564165][ T6928] lo (unregistering): left allmulticast mode [ 135.586153][T10325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.600411][T10325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.629282][T10325] team0: Port device team_slave_0 added [ 135.636544][T10325] team0: Port device team_slave_1 added [ 135.668590][T10325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.675600][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.701587][T10325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.718433][T10325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.725616][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.726441][T10396] loop3: detected capacity change from 0 to 2048 [ 135.751790][T10325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.782213][T10325] hsr_slave_0: entered promiscuous mode [ 135.790516][T10325] hsr_slave_1: entered promiscuous mode [ 135.796630][T10325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.804445][T10325] Cannot create hsr debugfs directory [ 135.814613][T10396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.838965][T10399] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 135.889255][ T29] audit: type=1326 audit(2000000094.580:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10406 comm="syz.1.1934" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f869c5ffb99 code=0x0 [ 136.207412][T10325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.221797][T10325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.236535][T10325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.247487][T10325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.270400][T10425] syzkaller1: entered promiscuous mode [ 136.276023][T10425] syzkaller1: entered allmulticast mode [ 136.322958][T10325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.336257][T10325] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.346840][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.354039][ T7432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.366445][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.373533][ T7429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.390001][T10429] netlink: 'syz.0.1943': attribute type 7 has an invalid length. [ 136.397826][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1943'. [ 136.421390][T10325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.431884][T10325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.516599][T10325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.582747][T10435] netlink: 'syz.0.1945': attribute type 10 has an invalid length. [ 136.590871][T10435] veth0_macvtap: left promiscuous mode [ 136.613593][T10435] veth0_macvtap: entered promiscuous mode [ 136.622638][T10435] team0: Device macvtap0 failed to register rx_handler [ 136.629863][T10435] veth0_macvtap: left promiscuous mode [ 136.644635][ T3082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.664894][T10325] veth0_vlan: entered promiscuous mode [ 136.673342][T10325] veth1_vlan: entered promiscuous mode [ 136.687918][T10325] veth0_macvtap: entered promiscuous mode [ 136.698967][T10325] veth1_macvtap: entered promiscuous mode [ 136.711522][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.722146][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.732835][T10325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.743738][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.754722][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.765396][T10325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.774249][T10325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.783009][T10325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.791771][T10325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.800574][T10325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.816870][T10450] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 136.825702][T10448] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1947'. [ 136.837219][T10448] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1947'. [ 136.846432][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1947'. [ 136.847726][T10452] program syz.0.1948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.923794][T10463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1952'. [ 137.060639][T10464] lo speed is unknown, defaulting to 1000 [ 137.170311][T10478] usb usb5: usbfs: process 10478 (syz.0.1955) did not claim interface 0 before use [ 137.210932][T10478] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 137.395894][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 137.410187][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 137.427514][T10486] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 137.446743][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1958'. [ 137.581655][T10498] ================================================================== [ 137.589759][T10498] BUG: KCSAN: data-race in n_tty_close / pty_close [ 137.596262][T10498] [ 137.598588][T10498] write to 0xffff888111b609d5 of 1 bytes by task 10488 on cpu 0: [ 137.606310][T10498] pty_close+0x124/0x280 [ 137.610553][T10498] tty_release+0x20c/0x940 [ 137.614972][T10498] __fput+0x2c2/0x660 [ 137.618951][T10498] ____fput+0x15/0x20 [ 137.619787][T10471] loop3: detected capacity change from 0 to 65536 [ 137.622916][T10498] task_work_run+0x13a/0x1a0 [ 137.622945][T10498] syscall_exit_to_user_mode+0xbe/0x130 [ 137.622965][T10498] do_syscall_64+0xd6/0x1c0 [ 137.622986][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.631273][T10471] FAT-fs (loop3): Unrecognized mount option "v㝑9i"N-= 0x00 [ 137.729528][T10498] [ 137.731826][T10498] Reported by Kernel Concurrency Sanitizer on: [ 137.737946][T10498] CPU: 1 PID: 10498 Comm: syz.1.1959 Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 137.748076][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 137.758116][T10498] ==================================================================