last executing test programs: 21.733733207s ago: executing program 0: bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r0 = socket$inet6(0xa, 0x3, 0xff) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x62880, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000, 0x0, 0x1}, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700000000000000040000000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000006c0)={0x0, @broadcast, @remote}, &(0x7f0000000700)=0xc) socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x2, @dev}, 0x10) sendfile(r8, r7, 0x0, 0xffefffff) sendto$packet(r8, &(0x7f0000000280)="687a4b43665649388998dbefb0127f773b796fa3367fb4b9ca15cedbec60e9d14d481e96685d335d4dadae26e3ba60d45fcff88fb420f266a86649ef19cf2b0fa001e32e5cf964c811717c252b8afa8ee35a432749f0e7625379efbe5e36b5941f34424923a01b5f37d530981eb7882ec864780b3353e93165291548e67b96bac85c8388f78dc4e18bf3581f3c4511fac55f2ccc9d85a3ef2371f0cd8112c4b5b8eb6a98efd1c130d4ba3aaf3cd420c8640e4614ec05cc23f17eb1629143750ee469375abf4062d132fa16ca3c6f6c728bacf4f794fedf7501bb14ee2924b86fc38020bcd4f5c7a255529cacc464a3ce", 0xf0, 0x4010, &(0x7f0000000380)={0x11, 0x1c, 0x0, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 21.312971352s ago: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20080) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000100)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x7, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001400)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) socket$inet(0x2, 0x80001, 0x84) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)={0x1, 'netdevsim0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2778) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) set_mempolicy(0x8000, &(0x7f00000000c0)=0x8, 0x8) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x1, 0x0, 0x9, 0x22a4, 0xffffffffffffffff, 0xfffff497, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x1, 0x3}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x7fe2, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) 21.058929851s ago: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x2500, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 20.841547174s ago: executing program 0: socketpair(0xc, 0x0, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001f80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000002140)={0x0, 0xc00, &(0x7f0000002100)={&(0x7f0000001fc0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x0) 20.677276699s ago: executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKTRACESETUP(r0, 0x4b49, 0x0) 20.482110099s ago: executing program 0: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x20}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) getsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f00000000c0), &(0x7f0000000340)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) bpf$BPF_PROG_QUERY(0x14, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$netlink(0x10, 0x3, 0xf) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, 0x0, 0xfffffecc) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040), &(0x7f00000005c0)) fcntl$setpipe(r2, 0x407, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x0, 0xc}, @jmp={0x6, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 13.280863823s ago: executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000000000006005, 0x1) (async) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x40) (async) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, 0x0) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) (async) fstat(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r13, &(0x7f0000000340), 0x0}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r13, 0xffffffffffffffff}, 0x4) (async) lstat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r14, 0x0, r15) (async) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32=r10, @ANYBLOB="02000300", @ANYRES32=r11, @ANYBLOB="04000100000000000800050015aa213a7aac4acef49346ee0c160a3dfcc83368061a7113258bee671630d7c1063bf2767f0b5fe819e0bbbbdbacc69ebedecbdfc0bad09c949d6239fef7eb80cc1f1668cf28696aa4d810563a62617ef85af00cfab30c71fd7c2851acbb185805e2576c21f85e69d75fba485e14ed58ca7adcdf1dd8f5bc4daf48f84347cc23559a54fdd16429ef95abe97e8bcc356c0e576cf89c6efebdb50ba5fc45df1106a92692224a80bed5e53ab2685a5fb646d5f92ef364f58b9e269732ae842d8cbc1e3c1aae5e719ad60fcd55bb673eff630d59f4a3cc9f20dacb064ffb56ccb7087b25123469a008003a65", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB="10000500000000002000000000000000"], 0x44, 0x1) io_uring_enter(r7, 0x6256, 0x0, 0x0, 0x0, 0x0) (async) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) (async) readv(r1, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 12.952699484s ago: executing program 1: unshare(0x42000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x0, @dev}, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 12.672323847s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x2060, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0) 12.461586259s ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a320000000009000100730100000000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b657400001400028008000240000000000800014000000003140000001100010000000000000000000000000a"], 0xc4}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x34}}, 0x0) gettid() r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x0, 0x0) lseek(r3, 0xffffffffffffffff, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000080), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) r6 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2289, &(0x7f0000001200)) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001080)=0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201"], 0x268}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000001280)=[{}, {0x35}, {0x6}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.369791927s ago: executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000d00)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f00000002c0)=0xc) r2 = getpid() r3 = getpgid(r2) r4 = getpgrp(r3) r5 = syz_open_procfs(r4, &(0x7f0000000240)='net/sco\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') socket$inet6(0xa, 0x3, 0x106) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/188, 0xbc}], 0x1, 0x1, 0x0) r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r7, r5, 0x0, 0x3000000) creat(&(0x7f0000000080)='./file0\x00', 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_io_uring_setup(0x6d09, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x0, 0x80000000}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f0000000840)={0x0, 0x0, 0x1, 0x0, 0x358, 0x0, r7}, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r11, r10, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2000, @fd=r0, 0x100000001, &(0x7f00000007c0)="46a7e16a9458d909050078040fde23b781438c6a01e22d7d41d9e0f36496fc7b95b8e3a8b42b0c759721a3fc938dcc5eedf8756d6e68f14ed54d88d78a41e6e8fe473b9ec0be614584ad71578a6f9b32259ae14a38c9c03b7d45ae4b614b77a19b79b66989c5caad92efa60d940efb805c57750ff3952c0ca7", 0x79, 0x18}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r12 = getpid() sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x7) io_uring_enter(r9, 0x184c, 0x0, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000006140)=[{{&(0x7f0000000480)=@xdp, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000a00)=""/86, 0x56}, 0x7ff}, {{&(0x7f0000000a80)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000b00)=""/186, 0xba}, {&(0x7f0000000bc0)=""/62, 0x3e}, {&(0x7f0000000c00)=""/55, 0x37}, {&(0x7f0000000c40)=""/130, 0x82}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/108, 0x6c}, {&(0x7f0000000dc0)}, {&(0x7f0000006300)=""/4096, 0x1000}], 0x8}, 0x7fffffff}, {{&(0x7f0000001e80)=@qipcrtr, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001f00)=""/18, 0x12}], 0x1, &(0x7f0000001f80)=""/95, 0x5f}, 0x5}, {{&(0x7f0000002000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002080)=""/27, 0x1b}, {&(0x7f00000020c0)=""/184, 0xb8}, {&(0x7f0000002180)=""/94, 0x5e}, {&(0x7f0000002200)=""/63, 0x3f}, {&(0x7f0000002280)=""/128, 0x80}, {&(0x7f0000002300)=""/194, 0xc2}, {&(0x7f0000002400)=""/236, 0xec}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x8, &(0x7f0000003580)=""/164, 0xa4}, 0xffff7fff}, {{&(0x7f0000003640)=@caif, 0x80, &(0x7f0000004a80)=[{&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/51, 0x33}, {&(0x7f0000004700)=""/168, 0xa8}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f0000004800)=""/217, 0xd9}, {&(0x7f0000004900)=""/45, 0x2d}, {&(0x7f0000004940)=""/247, 0xf7}, {&(0x7f0000004a40)=""/57, 0x39}], 0x8, &(0x7f0000004b00)=""/10, 0xa}, 0x80000001}, {{&(0x7f0000004b40)=@qipcrtr, 0x80, &(0x7f0000005d80)=[{&(0x7f0000004bc0)=""/111, 0x6f}, {&(0x7f0000004c40)=""/37, 0x25}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/114, 0x72}, {&(0x7f0000005d00)=""/102, 0x66}], 0x5, &(0x7f0000005e00)=""/61, 0x3d}, 0xa3}, {{0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000005e40)=""/221, 0xdd}], 0x1}, 0x5703ae93}], 0x7, 0x0, 0x0) 10.329470196s ago: executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x9}, 0x0, 0x4, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x3, 0x600, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) r7 = epoll_create1(0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0xfffffffd, 0x18, 0x0, 0x5c}}) dup3(r8, r7, 0x0) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000100)=""/154, 0x4}, {0x0, 0x2}], 0x2) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x200, @local, 0x149a}, 0x1c) socket(0x10, 0x3, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000400)='FROZEN\x00', 0x7) 7.020284244s ago: executing program 4: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100), 0x8) mlock(&(0x7f00002cb000/0x2000)=nil, 0x2000) 6.769630492s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x182080a, &(0x7f0000000040)={[{@dioread_nolock}, {@journal_async_commit}, {@nombcache}, {@journal_async_commit}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@seclabel}]}, 0x0, 0x67c, &(0x7f0000000a40)="$eJzs3c9rVNsdAPDvnR9JTNomSmlrKVUoRaE1MVGLlEIVuhSxP3btJpoo1mjEpLQRwUjtptBdF0JXXdT+GRXc+g90USili1KQ0ufi+Z4853HvzE0myZ3JJJOZicnnA2POOXfmnnMHv3POnHvunQAOrZMRMRkRxyPifhIx3rStkv1byp6UPu/N/x/dSB9J1Go//V8Sjx4nq837Shp/xxov/my8XnSsvLXepZWHd2YXFuYfNPJTy3fvTy2tPDxz++7srflb8/dmvjdz8cL5Cxenz3Z1fEeb0lee/vLX47+/+vO//OldMv3Xf1xN4lJ6dJn0uDa/drirmtP37GTU6t42l6fv68Uu971ffDye/z9Zl2wuYN+q1CM8qhHx1RiPclZSj+Tx+N2PB90+oHdqSeR9FHDoJLuK/5G9bwjQZ/k4IP9uX/Q9uEDBN3rgQ/P6cn0SoB771YjI47+SzflFjGRzA6Nvkg3zPElEdDczV5fW8erl1afpI1rMwwG9sfokn+Xe3P8nWWxOxEiWG31T2hD/paZHWv6Tzqv8bdOwo/EZs078Q/+sPomIrzX6/6HoNP7L+enBPP6v77J+8Q8AAAAAAAB758XliPhu0fq/0tr6n6GC9T9jEXFpD+rf/vxfKb9EL9mD6oAmry9H/KBw/W8edjFRbuS+mK0HqCY3by/Mn42IL0XE6agOp/npTfstNaXP/OHYs1b1N6//Sx9p/a9eNi8vLv23sulC3LnZ5VmfBtC9108ivp6t/z3RKNm4/ift/5OC/j+N7/sd1nHs28+vNedrtdrjPF0c//W1wG3c+bTDuoHWan+OOFXY/693sEn7+3NMZeOBqXxUsNU33zWv+N1ol/EP7IG0/x9tiv/yxvgfjh/Vc2v361na2f6HIuLcSqVV+HcQ/8Xj/6HkZ+V8/6nfzC4vP5iOGEqubC2f2Vmb4aDK4yGPlzT+T3+r/fzf2vi/KQ6PRMRqh3V+5f3Yv1pt0//D4KTxP9d+/D+RNPr/yPr/tYFAx4mZ5xN/y/ZUcF+4ax31/+ezPv10oySb/wMaSltKOg3QgTQXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5wpYj4QiSlybV0qTQ5GTEWEV+O0dLC4tLyd24u/ureXLot+/3/Uv5Lv+P1fJL//v9EU35mU/5cRByNiD+Wj2T5yRuLC3ODPngAAAAAAAAAAAAAAAAAAADYJ8aya/5rw5uv/0/9pzzo1gE9V2n83SbeR/rRFqC/Krt+ZW14TxsC9F2n8Z/0uB1A/3Xe/1d72g6g/1rH/9t3tUyeTzYMAT7qcbuA3msR/5f63Q6g/3Y5/+f0IBwABfF/chDtAPqt7Zzes7VUwdn/b1zvSYOAPtr9+X8AAAAAAGAfOnrixd+TiFj9/pHskRpqbLPYHw620qAbAAyMNbxweFUWd/Z8twCAg6P9d/zVvrUDGJz1fv2TWtH21vf+MyIAAAAAAAAAAAAAgH45dbyD6/+HBtU6oJfaX/9vbT8cZG2u/y8KfrcLgAOk9U9/6PvhoKtGrfB6X+Dw2K63d/0/AAAAAAAAAAAAAOwDIw/vzC4szD9YWukyERH/rCUR3e6nReIXBZt+uLHk39Wd7XmkkyeXu2t8dUvJ6mxP3p+BJt73Zs/ViNgfB7jHiXi/zXPyO24MsKkD/lwCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADWfB4AAP//ySUvlg==") unshare(0x2000400) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40104593, &(0x7f0000000040)={0x0, 0x15, 0x0, 0x0, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0)=0x7933, 0x4) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r4 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000380)=0x0) r6 = socket(0x40000000015, 0x5, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, "30ab617e4e70f4f389e9"}}}}}}}, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x200, 0x2, 0x8f}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r9, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3b67, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0x5c87, &(0x7f0000000280), &(0x7f0000000440), &(0x7f00000000c0)) 6.439676633s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x3, 0x0, 0x8001, 0x1, 0x7, 0x3}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x100) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)=""/96) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 6.379102232s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x304001a, &(0x7f0000001800)=ANY=[@ANYRES8=0x0, @ANYBLOB="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"], 0xf, 0x2b2, &(0x7f0000000540)="$eJzs3UGLG2UYB/Bnkkl21EOCeFEEB/Tgael69bKrVBD3pERQDxpsC5KEQgsBVzDtqZ/Ao9/Dj+DZbyB4Fby1h5WRycw0E5pNa41Z2P5+p4d55//OO++7ZE958s2bs8mN20ncf/h7ZFkSneM4jkdJDKMTjXuRBgBwdTwqivireJ5k2tn9agCAfaj+/1cuey0AwH589sWXn5ycnl7/NM+zeH3wYD5KImL2IKnHT27FdzGNm3EtBnEeUTxW1R99fHo90rw0jHdmi/loPoqYfd1v8n9GLPNHMYjh5vxRXmnlF/NRL16OPE5u9ZqlDuK1zfn3WvluVPkY9ePdt1vrP4xB/PZt3I5p3Igyu8r/eJTnHxY/Pfzhq/IxZT7pxOhged9K0d3jsQAAAAAAAAAAAAAAAAAAAAAAcMUd5nlSte9Z9u8pL9X9d7rny/HDvDFc789T5Zs+QXV/oCLqFj2LIn5u+utcy/O8qG9c5dN4I/XDAgAAAAAAAAAAAAAAAAAAAFC6+/3ZZDyd3ryzk6LpBtB8rf955zluXXkrzibj7sUTHmx7Vrb2gu1uA+Vaty4j0jR2tC1PK14q17PzmQ9W7/55VEVzMP9+wt5FqV68+kE16dlknNdDzSZPxsnTnpU1B/dLe6gf/3UTiuWfxHmxfqbZ46Wup/o72vn+KxuH/i6K4tnmef+PSCO5V25deSVZtth4tqf36mLjC5ZF9uRZ/HrxhGsfE51W3d3dpw8AAAAAAAAAAAAAAAAAANC2+tLvhsH7W6Od/21RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBnq9//b4osItavPFEs6vC2e+qiH3fuXvIrAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8AL4JwAA//9GlEpb") r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x2f}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000000002020200000f892a9315ce53293518d6b9dd18a13a9fb00000000bfa100000000000007010000f8ffffffb702008500000071ab89988e28c61b1f000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x8ec0, 0x0) dup3(r4, r5, 0xb) fcntl$setpipe(r6, 0x407, 0x100000) dup2(r5, r6) sendmsg$key(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000440)=ANY=[], 0x118}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './cgroup', [], 0xa, "ce4597c05f0065035956fafe07e9d0b42761c17f066f8f05846f54aa796288487b909992141018395e9b812230fa8dd5390eaea16d18b218d19121be3e7fea52b1362bf55b5932f1107f421c320d225d352136f8c0140b94613348d3d59e92d6f79d37"}, 0x6f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x30, 0xffffffffffffffff, 0x0) socket(0x1, 0x803, 0x0) mbind(&(0x7f000035e000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000002c0)=0x7, 0xffffffffffffffff, 0x0) r7 = geteuid() ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000980)) mount$9p_virtio(&(0x7f0000000280), &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340), 0xc8240, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="95", @ANYBLOB=',seclabel,euid=', @ANYRESDEC, @ANYRESHEX=r0, @ANYRESDEC=r7, @ANYBLOB=',euid<', @ANYRES16, @ANYRES8]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r8, 0x114, 0x6, &(0x7f0000000000), 0x4) setreuid(0x0, 0x0) 6.145524248s ago: executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 5.953880637s ago: executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_buf(r6, 0x29, 0x0, &(0x7f0000000000)="a2a246816bc615dc16728f4488d4998f9ddb1d32b404d8b0ade10013acaa7ec4eb4cf2c1d835a1aa50a4805909dd52ea35a780b90664f741cb43867eeec435e14ad72f5ad96752533e99e2d4a5579f2e1d98812016efd89ad4735c72605dd54fa128d2fcfded7f1b1d", 0x69) r7 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x9) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0xfce3) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f00000003c0), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f00000001c0)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0xa4}}, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r4, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000420029"], 0x14}}, 0x0) recvmmsg(r10, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000000fc0)}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) 5.801628201s ago: executing program 3: r0 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file0', './file0'}}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0) 5.719876963s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'vlan1\x00', {0x3}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe71) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000040)=0x7, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 5.632765976s ago: executing program 3: writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 2.992328712s ago: executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) open$dir(0x0, 0x1008, 0x0) 2.696012317s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x0, 0x1}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) dup2(0xffffffffffffffff, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0}, @call]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xd0, &(0x7f00000003c0)=""/208}, 0x21) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 2.662685002s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000340)=@deltclass={0x54, 0x29, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8, 0x9}, {0x8, 0xffff}, {0x4, 0x7}}, [@tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_multiq={0xb}]}, 0x54}}, 0x4010) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800500000000000000000000d00007f954b4e0d9e936a8dcc52ba3a79c586c24b4b02f332ba1eedc9d3bb694802bf85290ba7517ac55633e0d32bf9aa88abea7d5947d24fcb4f3e2a5835"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', r2}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x64) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r4}, 0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) setgroups(0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1408, 0x103) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r4}, 0x4) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x241}], 0x1}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x20, 0x0, 0xffffffffffffffff, @link_id}, 0x20) sendto$inet(r9, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f00000002c0)={0x0, 'ipvlan0\x00', {0x3}, 0xfffd}) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x84}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000400)=ANY=[], 0x50}}, 0x0) 1.491977902s ago: executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 1.056811539s ago: executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20080) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000100)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x7, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001400)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) socket$inet(0x2, 0x80001, 0x84) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)={0x1, 'netdevsim0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2778) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) set_mempolicy(0x8000, &(0x7f00000000c0)=0x8, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x1, 0x0, 0x9, 0x22a4, 0xffffffffffffffff, 0xfffff497, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x1, 0x3}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x7fe2, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) 700.791653ms ago: executing program 4: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x2500, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 589.23551ms ago: executing program 2: listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/32, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7800, 0x7, 0x30000, 0x6, {{0xb, 0x4, 0x1, 0x16, 0x2c, 0x65, 0x0, 0xdf, 0x2f, 0x0, @remote, @local, {[@timestamp={0x44, 0x8, 0xf1, 0x0, 0x4, [0x80]}, @ra={0x94, 0x4, 0x7}, @timestamp_addr={0x44, 0x63, 0xd0, 0x1, 0x4}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x2}]}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', r0, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r3, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r4) r5 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x4002410) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000d40)=ANY=[@ANYBLOB="c8030000", @ANYRES16=0x0, @ANYBLOB="215927bd7000fedbdf254700000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x3c8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 220.636926ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="189e9638c25736df6c00000000000000000000000000000025000000000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0, 0x100) faccessat2(r0, &(0x7f0000000400)='./bus\x00', 0x142, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x400000, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098ee0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4e5531c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r3 = open(&(0x7f00000001c0)='./bus/file0\x00', 0x541340, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1000, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) write$binfmt_aout(r2, &(0x7f0000000600)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1e) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x14e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x6256, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) pipe2(&(0x7f0000012c00), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000000080006400000200208000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 2: r0 = socket(0x2, 0x5, 0x10001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='stack\x00') lseek(r2, 0xfffffffffffffffe, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10", 0x1, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @multicast2, r5}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1) close(r1) r7 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x9e, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r8 = msgget$private(0x0, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000100)=0x0) msgctl$IPC_SET(r8, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x87, 0xfffc}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300008d32be8949de0b764ebb6fdfff0000000000"], 0x600, 0x0) msgctl$IPC_SET(r8, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) msgsnd(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x001'], 0x8, 0x0) msgctl$IPC_RMID(r8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x4, 0x5, 0x9, 0x401, 0x8001, 0xe99, 0xff}, 0x1c) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): 256 [ 1640.476311][T23115] loop1: detected capacity change from 0 to 128 [ 1640.605107][T23124] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1640.615652][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 1640.615665][ T29] audit: type=1326 audit(1719115603.944:107883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaf48f00a9 code=0x0 [ 1640.928242][T23133] vhci_hcd: invalid port number 0 [ 1640.998410][ T9983] kworker/u8:22: attempt to access beyond end of device [ 1640.998410][ T9983] loop1: rw=1, sector=153, nr_sectors = 96 limit=128 [ 1641.018395][ T29] audit: type=1326 audit(1719115604.344:107884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23132 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x0 [ 1641.232796][T23145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1641.242140][T23145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1641.594093][ T29] audit: type=1326 audit(1719115604.924:107885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ec760a9 code=0x7ffc0000 [ 1641.618306][ T29] audit: type=1326 audit(1719115604.924:107886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a0ec74ca0 code=0x7ffc0000 [ 1641.642942][ T29] audit: type=1326 audit(1719115604.974:107887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ec760a9 code=0x7ffc0000 [ 1641.667221][ T29] audit: type=1326 audit(1719115604.974:107888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ec760a9 code=0x7ffc0000 [ 1641.671394][T23157] loop1: detected capacity change from 0 to 164 [ 1641.692019][ T29] audit: type=1326 audit(1719115604.974:107889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a0ec760a9 code=0x7ffc0000 [ 1641.721884][ T29] audit: type=1326 audit(1719115604.974:107890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ec760a9 code=0x7ffc0000 [ 1641.746071][ T29] audit: type=1326 audit(1719115604.974:107891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4a0ec760a9 code=0x7ffc0000 [ 1641.770394][ T29] audit: type=1326 audit(1719115604.974:107892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a0ec760e3 code=0x7ffc0000 [ 1641.794633][T23157] iso9660: Unknown parameter '' [ 1641.825131][T23159] loop4: detected capacity change from 0 to 1024 [ 1641.853253][T23159] EXT4-fs: Ignoring removed nobh option [ 1641.858918][T23159] EXT4-fs: quotafile must be on filesystem root [ 1641.893895][T23159] loop4: detected capacity change from 0 to 128 [ 1642.034975][T23173] loop0: detected capacity change from 0 to 256 [ 1642.118467][T23173] loop0: detected capacity change from 0 to 128 [ 1642.231644][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1642.231644][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 1642.245015][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1642.918053][ T9975] kworker/u8:12: attempt to access beyond end of device [ 1642.918053][ T9975] loop0: rw=1, sector=153, nr_sectors = 96 limit=128 [ 1643.079131][T23215] loop1: detected capacity change from 0 to 2048 [ 1643.122956][T23215] Alternate GPT is invalid, using primary GPT. [ 1643.129238][T23215] loop1: p1 p2 p3 [ 1643.139082][T23222] loop0: detected capacity change from 0 to 512 [ 1643.156888][T23222] journal_path: Lookup failure for './file1' [ 1643.162923][T23222] EXT4-fs: error: could not find journal device path [ 1643.230804][T23231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=23231 comm=syz-executor.3 [ 1643.409086][T23235] vlan2: entered promiscuous mode [ 1643.414269][T23235] bridge0: entered promiscuous mode [ 1643.423450][T23235] bridge0: left promiscuous mode [ 1643.577574][T23252] loop1: detected capacity change from 0 to 512 [ 1643.613759][T23252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1643.626411][T23252] ext4 filesystem being mounted at /root/syzkaller-testdir2124639444/syzkaller.eC9WHj/218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1643.641782][T23252] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz-executor.1: corrupted xattr block 32: invalid header [ 1643.655830][T23252] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 1643.665163][T23252] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz-executor.1: corrupted xattr block 32: invalid header [ 1643.680474][T23252] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz-executor.1: corrupted xattr block 32: invalid header [ 1643.694476][T23252] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 1643.704327][T23252] EXT4-fs error (device loop1): ext4_get_inode_usage:901: inode #15: comm syz-executor.1: corrupted xattr block 32: invalid header [ 1643.797193][T17777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.934689][T23265] loop4: detected capacity change from 0 to 256 [ 1644.001457][T23265] loop4: detected capacity change from 0 to 128 [ 1644.028584][T23278] loop1: detected capacity change from 0 to 256 [ 1644.051450][T23281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1644.062778][T23281] 9pnet_fd: Insufficient options for proto=fd [ 1644.081139][T23278] loop1: detected capacity change from 0 to 128 [ 1644.439582][T23296] loop0: detected capacity change from 0 to 2048 [ 1644.473706][T23300] vlan2: entered promiscuous mode [ 1644.485689][T23296] Alternate GPT is invalid, using primary GPT. [ 1644.492044][T23296] loop0: p1 p2 p3 [ 1644.780490][ T9983] kworker/u8:22: attempt to access beyond end of device [ 1644.780490][ T9983] loop4: rw=1, sector=153, nr_sectors = 96 limit=128 [ 1644.880435][T23325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23325 comm=syz-executor.0 [ 1644.893638][T23325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7348 sclass=netlink_route_socket pid=23325 comm=syz-executor.0 [ 1644.927377][ T9975] kworker/u8:12: attempt to access beyond end of device [ 1644.927377][ T9975] loop1: rw=1, sector=153, nr_sectors = 96 limit=128 [ 1645.161895][T23337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1645.174477][T23337] 9pnet_fd: Insufficient options for proto=fd [ 1645.383770][T23351] loop0: detected capacity change from 0 to 2048 [ 1645.423780][T23351] Alternate GPT is invalid, using primary GPT. [ 1645.430158][T23351] loop0: p1 p2 p3 [ 1645.671724][T23363] loop4: detected capacity change from 0 to 256 [ 1645.696039][T23363] FAT-fs (loop4): Unrecognized mount option "OL rumask=00000000000000000000000" or missing value [ 1645.857765][T23382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23382 comm=syz-executor.3 [ 1645.871340][T23382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7348 sclass=netlink_route_socket pid=23382 comm=syz-executor.3 [ 1646.120558][T23392] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1646.132337][T23392] 9pnet_fd: Insufficient options for proto=fd [ 1646.431986][T23407] loop1: detected capacity change from 0 to 512 [ 1646.454418][T23407] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1646.471018][T23407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 1646.479937][T23407] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1646.492601][T23407] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 1646.510105][T23407] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 1646.520344][T23407] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz-executor.1: attempt to clear invalid blocks 33619980 len 1 [ 1646.538366][T23407] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1811939328 (level 0) [ 1646.555770][T23407] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 2185560079 (level 1) [ 1646.570797][T23407] EXT4-fs (loop1): 1 truncate cleaned up [ 1646.577056][T23407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1646.591943][T23407] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz-executor.1: dx entry: limit 0 != root limit 125 [ 1646.604122][T23407] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 1646.622701][T23407] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 5: comm syz-executor.1: path /root/syzkaller-testdir2124639444/syzkaller.eC9WHj/222/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1646.736746][T17777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1647.029020][T23423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23423 comm=syz-executor.0 [ 1647.046835][T23423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7348 sclass=netlink_route_socket pid=23423 comm=syz-executor.0 [ 1647.106814][T23425] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1647.238209][T23428] vlan2: entered promiscuous mode [ 1647.243288][T23428] bridge0: entered promiscuous mode [ 1647.254912][T23428] bridge0: left promiscuous mode [ 1647.275131][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1647.275131][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 1647.288579][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1647.525063][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 1647.525077][ T29] audit: type=1326 audit(1719115610.854:107966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23438 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1647.555482][ T29] audit: type=1326 audit(1719115610.854:107967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23438 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1647.579717][ T29] audit: type=1326 audit(1719115610.854:107968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23438 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06bc827ca0 code=0x7ffc0000 [ 1647.604088][ T29] audit: type=1326 audit(1719115610.854:107969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23438 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1647.630250][ T29] audit: type=1326 audit(1719115610.934:107970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23438 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1647.654778][ T29] audit: type=1326 audit(1719115610.964:107971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23438 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1647.678942][ T29] audit: type=1326 audit(1719115610.964:107972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23438 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1647.703126][ T29] audit: type=1326 audit(1719115610.964:107973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23438 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1647.727439][ T29] audit: type=1326 audit(1719115610.964:107974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23438 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f06bc8290e3 code=0x7ffc0000 [ 1647.751491][ T29] audit: type=1326 audit(1719115610.964:107975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23438 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f06bc827def code=0x7ffc0000 [ 1648.174444][T23456] loop1: detected capacity change from 0 to 8192 [ 1648.212323][T23456] loop1: p1 p4 < > [ 1648.216243][T23456] loop1: partition table partially beyond EOD, truncated [ 1648.223405][T23456] loop1: p1 size 8388608 extends beyond EOD, truncated [ 1648.230767][T23456] loop1: p4 start 50689 is beyond EOD, truncated [ 1648.264324][T23465] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1648.534007][T23482] vlan2: entered promiscuous mode [ 1648.539108][T23482] bridge0: entered promiscuous mode [ 1648.548526][T23482] bridge0: left promiscuous mode [ 1648.707122][T23493] loop4: detected capacity change from 0 to 512 [ 1648.724383][T23493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1648.737171][T23493] ext4 filesystem being mounted at /root/syzkaller-testdir186132723/syzkaller.ugG3Cj/202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1648.800034][T18494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.059438][T23511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1649.071295][T23511] 9pnet_fd: Insufficient options for proto=fd [ 1649.204313][T23517] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1649.449552][T23543] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1649.869002][T23554] bridge0: entered promiscuous mode [ 1649.874517][T23554] vlan2: entered promiscuous mode [ 1649.884732][T23554] bridge0: left promiscuous mode [ 1650.058660][T23563] loop0: detected capacity change from 0 to 2048 [ 1650.102592][T23563] Alternate GPT is invalid, using primary GPT. [ 1650.108946][T23563] loop0: p1 p2 p3 [ 1650.290654][T23580] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1650.302092][T23580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23580 comm=syz-executor.1 [ 1650.351300][T23583] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 1650.360316][T23583] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1650.535863][T23595] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1651.156496][T23619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1651.169478][T23619] 9pnet_fd: Insufficient options for proto=fd [ 1651.874793][T23648] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1652.312520][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1652.312520][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 1652.325952][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1652.338641][T25641] EXT4-fs error (device loop2): kmmpd:186: comm kmmpd-loop2: Error writing to MMP block [ 1652.348527][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1652.348527][T25641] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 1652.362565][T25641] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 1652.370936][T25641] EXT4-fs (loop2): I/O error while writing superblock [ 1652.404141][T23660] loop4: detected capacity change from 0 to 2048 [ 1652.426388][T23663] vlan2: entered promiscuous mode [ 1652.439127][T23660] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1652.450967][T23660] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1652.464474][T23660] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 1652.465800][T23671] loop0: detected capacity change from 0 to 164 [ 1652.487917][T23660] System zones: 0-19 [ 1652.494165][T23660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1652.512368][T23671] iso9660: Unknown parameter '' [ 1652.555696][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 1652.555709][ T29] audit: type=1326 audit(1719115615.884:108047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5e7f579f9a code=0x7ffc0000 [ 1652.588852][ T29] audit: type=1326 audit(1719115615.894:108048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1652.613729][ T29] audit: type=1326 audit(1719115615.904:108049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1652.638184][ T29] audit: type=1326 audit(1719115615.904:108050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1652.662922][ T29] audit: type=1326 audit(1719115615.904:108051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1652.687138][ T29] audit: type=1326 audit(1719115615.904:108052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1652.711943][ T29] audit: type=1326 audit(1719115615.904:108053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1652.736121][ T29] audit: type=1326 audit(1719115615.904:108054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1652.760874][ T29] audit: type=1326 audit(1719115615.904:108055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1652.785698][ T29] audit: type=1326 audit(1719115615.904:108056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23662 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1652.814583][T18494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.085688][T23687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1653.097318][T23687] 9pnet_fd: Insufficient options for proto=fd [ 1653.431386][T23699] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1653.619809][T23707] loop0: detected capacity change from 0 to 256 [ 1653.747966][T23711] bridge0: entered promiscuous mode [ 1653.755171][T23711] vlan2: entered promiscuous mode [ 1653.763513][T23711] bridge0: left promiscuous mode [ 1654.351847][T23724] loop4: detected capacity change from 0 to 2048 [ 1654.407011][T23724] Alternate GPT is invalid, using primary GPT. [ 1654.413543][T23724] loop4: p1 p2 p3 [ 1654.734651][T23743] loop0: detected capacity change from 0 to 512 [ 1654.745464][T23742] loop1: detected capacity change from 0 to 512 [ 1654.757837][T23743] EXT4-fs: Ignoring removed nobh option [ 1654.758211][T23742] EXT4-fs: Ignoring removed nobh option [ 1654.784309][T23743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1654.785169][T23742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1654.797689][T23743] ext4 filesystem being mounted at /root/syzkaller-testdir3180829071/syzkaller.rw7Ctl/568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1654.815610][T23742] ext4 filesystem being mounted at /root/syzkaller-testdir2124639444/syzkaller.eC9WHj/247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1654.829919][T23743] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 224: padding at end of block bitmap is not set [ 1654.859677][T23743] EXT4-fs (loop0): Remounting filesystem read-only [ 1654.861669][T23742] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 224: padding at end of block bitmap is not set [ 1654.875932][T23743] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 1654.881684][T23742] EXT4-fs (loop1): Remounting filesystem read-only [ 1654.909032][T23742] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 1654.962692][ T9834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.984253][T17777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1655.593858][T23774] tipc: Started in network mode [ 1655.598748][T23774] tipc: Node identity ac1414aa, cluster identity 4711 [ 1655.606366][T23774] tipc: New replicast peer: 100.1.1.1 [ 1655.611816][T23774] tipc: Enabled bearer , priority 10 [ 1655.620909][T23774] loop1: detected capacity change from 0 to 512 [ 1655.647347][T23774] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.1: invalid block [ 1655.660301][T23774] EXT4-fs (loop1): Remounting filesystem read-only [ 1655.667995][T23774] EXT4-fs (loop1): 2 truncates cleaned up [ 1655.675825][T23774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1655.688484][T23774] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 1655.696651][T23774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.163636][T23793] loop4: detected capacity change from 0 to 2048 [ 1656.184954][T23799] loop1: detected capacity change from 0 to 164 [ 1656.204229][T23793] Alternate GPT is invalid, using primary GPT. [ 1656.210493][T23793] loop4: p1 p2 p3 [ 1656.215047][T23799] iso9660: Unknown parameter '' [ 1656.409699][T23812] loop0: detected capacity change from 0 to 512 [ 1656.433227][T23812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1656.445898][T23812] ext4 filesystem being mounted at /root/syzkaller-testdir3180829071/syzkaller.rw7Ctl/571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1656.532773][ T9834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.741948][ T9577] tipc: Node number set to 2886997162 [ 1657.079264][T23838] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1657.368958][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1657.368958][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 1657.382395][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1657.449652][T23846] loop4: detected capacity change from 0 to 128 [ 1657.880821][T23855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8703 sclass=netlink_route_socket pid=23855 comm=syz-executor.4 [ 1658.356103][T23872] vlan2: entered promiscuous mode [ 1658.490065][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 1658.490078][ T29] audit: type=1400 audit(1719115621.814:108171): avc: denied { create } for pid=23877 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 1658.637563][T23889] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1658.738630][T23893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1659.049551][T23901] 8021q: VLANs not supported on ipvlan0 [ 1659.293466][ T29] audit: type=1400 audit(1719115622.624:108172): avc: denied { accept } for pid=23913 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1659.315324][T23915] loop0: detected capacity change from 0 to 128 [ 1659.375834][ T29] audit: type=1326 audit(1719115622.704:108173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x0 [ 1659.603139][T23925] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1659.885075][T23937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1660.159824][T23950] loop4: detected capacity change from 0 to 512 [ 1660.182258][T23950] journal_path: Lookup failure for './file1' [ 1660.188277][T23950] EXT4-fs: error: could not find journal device path [ 1660.372695][T23961] loop0: detected capacity change from 0 to 128 [ 1660.440317][T23965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1660.564825][T23969] loop4: detected capacity change from 0 to 164 [ 1660.664420][T23976] loop1: detected capacity change from 0 to 128 [ 1660.679471][T23976] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1660.691796][T23976] ext4 filesystem being mounted at /root/syzkaller-testdir2124639444/syzkaller.eC9WHj/258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1660.768226][T17777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1660.875908][T23984] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1661.200088][T23987] loop1: detected capacity change from 0 to 512 [ 1661.217999][T23987] EXT4-fs: Ignoring removed nobh option [ 1661.233007][T23987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1661.246385][T23987] ext4 filesystem being mounted at /root/syzkaller-testdir2124639444/syzkaller.eC9WHj/260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1661.262882][T23987] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 224: padding at end of block bitmap is not set [ 1661.279700][T23987] EXT4-fs (loop1): Remounting filesystem read-only [ 1661.365471][T17777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1661.375855][ T3425] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1661.388923][ T3425] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1661.404926][T23993] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1661.575532][ T29] audit: type=1326 audit(1719115624.904:108174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23994 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x0 [ 1661.676981][T24009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1661.759448][ T29] audit: type=1400 audit(1719115625.084:108175): avc: denied { getopt } for pid=24006 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1661.978897][T24023] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1662.402174][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1662.402174][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 1662.415528][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1662.469037][T24043] loop1: detected capacity change from 0 to 256 [ 1662.487829][T24043] FAT-fs (loop1): Directory bread(block 64) failed [ 1662.495163][T24043] FAT-fs (loop1): Directory bread(block 65) failed [ 1662.501976][T24043] FAT-fs (loop1): Directory bread(block 66) failed [ 1662.508559][T24043] FAT-fs (loop1): Directory bread(block 67) failed [ 1662.515245][T24043] FAT-fs (loop1): Directory bread(block 68) failed [ 1662.521827][T24043] FAT-fs (loop1): Directory bread(block 69) failed [ 1662.528341][T24043] FAT-fs (loop1): Directory bread(block 70) failed [ 1662.535070][T24043] FAT-fs (loop1): Directory bread(block 71) failed [ 1662.541682][T24043] FAT-fs (loop1): Directory bread(block 72) failed [ 1662.548196][T24043] FAT-fs (loop1): Directory bread(block 73) failed [ 1662.566511][T24043] syz-executor.1: attempt to access beyond end of device [ 1662.566511][T24043] loop1: rw=2049, sector=1296, nr_sectors = 4 limit=256 [ 1662.580954][T24043] syz-executor.1: attempt to access beyond end of device [ 1662.580954][T24043] loop1: rw=2051, sector=1224, nr_sectors = 96 limit=256 [ 1662.583243][ T29] audit: type=1326 audit(1719115625.904:108176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24044 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1662.596206][T24043] x_tables: unsorted underflow at hook 3 [ 1662.623891][ T29] audit: type=1326 audit(1719115625.954:108177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24044 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd388dd5ca0 code=0x7ffc0000 [ 1662.661819][ T29] audit: type=1326 audit(1719115625.984:108178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24042 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ec760a9 code=0x7ffc0000 [ 1662.719939][T24048] vlan2: entered promiscuous mode [ 1662.725062][T24048] ip6gretap0: entered promiscuous mode [ 1662.734856][T24048] ip6gretap0: left promiscuous mode [ 1663.200061][T24073] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1663.287910][T24079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1664.140224][T24126] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1664.158876][T24126] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1664.169252][T24126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1665.170176][T24196] cgroup: none used incorrectly [ 1665.182945][T24196] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1665.189557][T24196] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1665.197484][T24196] vhci_hcd vhci_hcd.0: Device attached [ 1665.222810][T24196] loop0: detected capacity change from 0 to 512 [ 1665.229447][T24196] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 1665.343011][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 1665.343030][ T29] audit: type=1326 audit(1719115628.674:108315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1665.374038][ T29] audit: type=1326 audit(1719115628.674:108316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1665.398335][ T29] audit: type=1326 audit(1719115628.674:108317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd388dd5ca0 code=0x7ffc0000 [ 1665.423076][ T29] audit: type=1326 audit(1719115628.724:108318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1665.448452][ T29] audit: type=1326 audit(1719115628.724:108319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1665.472639][ T29] audit: type=1326 audit(1719115628.754:108320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1665.497857][ T29] audit: type=1326 audit(1719115628.754:108321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd388dd70e3 code=0x7ffc0000 [ 1665.499985][ T29] audit: type=1326 audit(1719115628.754:108322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd388dd5def code=0x7ffc0000 [ 1665.523575][ T6690] vhci_hcd: vhci_device speed not set [ 1665.546620][ T29] audit: type=1326 audit(1719115628.754:108323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd388dd7137 code=0x7ffc0000 [ 1665.576028][ T29] audit: type=1326 audit(1719115628.754:108324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd388dd5ca0 code=0x7ffc0000 [ 1665.621578][ T6690] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 1665.936914][T24198] vhci_hcd: connection reset by peer [ 1665.943579][ T3425] vhci_hcd: stop threads [ 1665.947827][ T3425] vhci_hcd: release socket [ 1665.953077][ T3425] vhci_hcd: disconnect device [ 1666.197427][T24220] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1666.233192][T24220] syzkaller0: entered promiscuous mode [ 1666.238746][T24220] syzkaller0: entered allmulticast mode [ 1666.275102][T24229] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1666.867588][T24254] vlan2: entered promiscuous mode [ 1666.872830][T24254] ip6gretap0: entered promiscuous mode [ 1666.886009][T24254] ip6gretap0: left promiscuous mode [ 1666.988000][T24263] loop1: detected capacity change from 0 to 164 [ 1667.009141][T24263] iso9660: Unknown parameter '' [ 1667.157411][T24269] loop4: detected capacity change from 0 to 512 [ 1667.183529][T24271] loop0: detected capacity change from 0 to 164 [ 1667.201015][T24270] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1667.212921][T24271] iso9660: Unknown parameter '' [ 1667.431894][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1667.431894][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 1667.446507][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1667.530447][T24285] loop0: detected capacity change from 0 to 256 [ 1667.591279][T24285] loop0: detected capacity change from 0 to 128 [ 1667.677496][T24301] cgroup: Bad value for 'name' [ 1667.790150][T24306] netlink: 44302 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1667.853928][T24308] loop1: detected capacity change from 0 to 256 [ 1667.869345][T24308] FAT-fs (loop1): Unrecognized mount option "18446744073709551615XG mOb>Tk46}" or missing value [ 1668.177649][T24315] loop4: detected capacity change from 0 to 512 [ 1668.195967][T24315] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 1668.223741][ T3425] kworker/u8:14: attempt to access beyond end of device [ 1668.223741][ T3425] loop0: rw=1, sector=153, nr_sectors = 96 limit=128 [ 1668.246267][T24315] loop4: detected capacity change from 0 to 512 [ 1668.269502][T24315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1668.280532][T24315] EXT4-fs (loop4): 1 truncate cleaned up [ 1668.288128][T24315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1668.301365][T24315] EXT4-fs error (device loop4): ext4_generic_delete_entry:2676: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1668.329297][T24315] EXT4-fs (loop4): Remounting filesystem read-only [ 1668.335875][T24315] EXT4-fs warning (device loop4): ext4_rename_delete:3738: inode #2: comm syz-executor.4: Deleting old file: nlink 4, error=-117 [ 1668.360200][T24315] bond1: entered promiscuous mode [ 1668.365381][T24315] bond1: entered allmulticast mode [ 1668.370817][T24315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1668.428559][T18494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1668.441346][T24363] loop0: detected capacity change from 0 to 164 [ 1668.468930][T24363] iso9660: Unknown parameter '' [ 1668.699911][T24374] loop0: detected capacity change from 0 to 128 [ 1669.146393][T24393] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1669.661591][T24419] loop4: detected capacity change from 0 to 164 [ 1669.684396][T24419] iso9660: Unknown parameter '' [ 1669.781534][T24424] loop1: detected capacity change from 0 to 256 [ 1669.802493][T24424] FAT-fs (loop1): Unrecognized mount option "OL rumask=00000000000000000000000" or missing value [ 1669.916897][T24431] loop0: detected capacity change from 0 to 2048 [ 1669.953918][T24431] Alternate GPT is invalid, using primary GPT. [ 1669.960222][T24431] loop0: p1 p2 p3 [ 1670.406716][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 1670.406730][ T29] audit: type=1326 audit(1719115633.734:108647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24463 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ec760a9 code=0x0 [ 1670.642795][ T6690] usb 1-1: enqueue for inactive port 0 [ 1670.648528][ T6690] usb 1-1: enqueue for inactive port 0 [ 1670.732777][ T6690] vhci_hcd: vhci_device speed not set [ 1670.889795][T24483] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 1670.941144][T24487] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1671.112155][T24492] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1671.122316][T24492] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1671.130603][T24492] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1671.380828][T24498] pimreg: entered allmulticast mode [ 1671.412004][ T29] audit: type=1326 audit(1719115634.744:108648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24499 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ec760a9 code=0x7ffc0000 [ 1671.436897][ T29] audit: type=1326 audit(1719115634.744:108649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24499 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a0ec74ca0 code=0x7ffc0000 [ 1671.461332][ T29] audit: type=1326 audit(1719115634.794:108650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24499 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ec760a9 code=0x7ffc0000 [ 1671.485923][T24502] loop1: detected capacity change from 0 to 164 [ 1671.493171][ T29] audit: type=1326 audit(1719115634.794:108651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24499 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a0ec760a9 code=0x7ffc0000 [ 1671.517800][ T29] audit: type=1326 audit(1719115634.794:108652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24499 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ec760a9 code=0x7ffc0000 [ 1671.542507][ T29] audit: type=1326 audit(1719115634.794:108653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24499 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0ec760a9 code=0x7ffc0000 [ 1671.566867][ T29] audit: type=1326 audit(1719115634.794:108654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24499 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4a0ec760a9 code=0x7ffc0000 [ 1671.591676][ T29] audit: type=1326 audit(1719115634.794:108655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24499 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a0ec760e3 code=0x7ffc0000 [ 1671.616346][ T29] audit: type=1326 audit(1719115634.794:108656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24499 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4a0ec74def code=0x7ffc0000 [ 1671.642387][T24502] iso9660: Unknown parameter '' [ 1671.898232][T24514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=24514 comm=syz-executor.2 [ 1671.948671][T24515] loop4: detected capacity change from 0 to 256 [ 1672.018272][T24515] loop4: detected capacity change from 0 to 128 [ 1672.101436][T24525] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1672.172002][T24497] pimreg: left allmulticast mode [ 1672.445657][T24532] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1672.458168][T24540] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1672.459635][T24541] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1672.478465][T24541] vlan3: entered promiscuous mode [ 1672.484186][T24541] bond0: entered promiscuous mode [ 1672.484861][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1672.484861][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 1672.489253][T24541] bond_slave_0: entered promiscuous mode [ 1672.503715][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1672.508147][T24541] bond_slave_1: entered promiscuous mode [ 1672.524765][T24540] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1672.533017][T24540] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1672.820443][ T9983] kworker/u8:22: attempt to access beyond end of device [ 1672.820443][ T9983] loop4: rw=1, sector=153, nr_sectors = 96 limit=128 [ 1672.958672][T24554] loop0: detected capacity change from 0 to 2048 [ 1673.002884][T24554] Alternate GPT is invalid, using primary GPT. [ 1673.009228][T24554] loop0: p1 p2 p3 [ 1673.094302][T24567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=24567 comm=syz-executor.4 [ 1673.342455][T24584] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1673.420408][T24588] loop1: detected capacity change from 0 to 164 [ 1673.437676][T24588] iso9660: Unknown parameter '' [ 1673.946548][T24620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=24620 comm=syz-executor.2 [ 1673.973537][T24618] loop0: detected capacity change from 0 to 2048 [ 1673.974741][T24622] loop4: detected capacity change from 0 to 256 [ 1674.001332][T24622] FAT-fs (loop4): Unrecognized mount option "OL rumask=00000000000000000000000" or missing value [ 1674.024185][T24618] Alternate GPT is invalid, using primary GPT. [ 1674.030429][T24618] loop0: p1 p2 p3 [ 1674.144529][T24631] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1674.156750][T24631] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1674.163426][T24631] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1674.190308][T24631] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1674.201060][T24634] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1674.405410][T24638] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1674.415382][T24638] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1674.423575][T24638] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1674.561378][T24649] loop1: detected capacity change from 0 to 128 [ 1674.708580][T24657] 8021q: VLANs not supported on ipvlan0 [ 1675.515604][T24684] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1675.629043][T24687] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1675.640137][T24687] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1675.646790][T24687] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.672878][T24687] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1675.696623][T24688] loop0: detected capacity change from 0 to 2048 [ 1675.733730][T24688] Alternate GPT is invalid, using primary GPT. [ 1675.740109][T24688] loop0: p1 p2 p3 [ 1675.854928][T24701] 8021q: VLANs not supported on ipvlan0 [ 1675.866471][T24701] loop4: detected capacity change from 0 to 512 [ 1675.891110][T24701] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 1675.905976][T24701] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 1675.919715][T24701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1675.929597][T24707] loop1: detected capacity change from 0 to 512 [ 1675.956897][T24707] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 1676.207996][T24724] loop1: detected capacity change from 0 to 512 [ 1676.220610][T24724] EXT4-fs: quotafile must be on filesystem root [ 1676.384203][T24735] loop0: detected capacity change from 0 to 128 [ 1676.456806][T24743] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1676.471373][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 1676.471385][ T29] audit: type=1326 audit(1719115639.794:108733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x0 [ 1676.693179][T18494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.696430][T24750] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1676.713739][T24750] batman_adv: batadv0: Adding interface: ip6gretap2 [ 1676.720394][T24750] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.746523][T24750] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 1677.060472][T24761] loop4: detected capacity change from 0 to 2048 [ 1677.092839][T24761] Alternate GPT is invalid, using primary GPT. [ 1677.099132][T24761] loop4: p1 p2 p3 [ 1677.511982][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1677.511982][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 1677.526475][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1677.553167][T24788] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1677.764183][T24795] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1677.777486][T24795] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1677.784189][T24795] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.811026][T24795] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1677.843061][T24798] loop1: detected capacity change from 0 to 256 [ 1677.860268][T24798] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1678.046103][T24803] loop4: detected capacity change from 0 to 2048 [ 1678.083307][T24803] Alternate GPT is invalid, using primary GPT. [ 1678.089646][T24803] loop4: p1 p2 p3 [ 1678.297153][T24820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24820 comm=syz-executor.2 [ 1678.299566][ T29] audit: type=1326 audit(1719115641.624:108734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24777 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7fc00000 [ 1678.335609][ T29] audit: type=1326 audit(1719115641.624:108735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24777 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f5e7f57b0a9 code=0x7fc00000 [ 1678.359888][ T29] audit: type=1326 audit(1719115641.624:108736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24777 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7fc00000 [ 1678.384743][ T29] audit: type=1326 audit(1719115641.624:108737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24777 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7fc00000 [ 1678.408984][ T29] audit: type=1326 audit(1719115641.624:108738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24777 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7fc00000 [ 1678.433606][ T29] audit: type=1326 audit(1719115641.624:108739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24777 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7fc00000 [ 1678.457965][ T29] audit: type=1326 audit(1719115641.624:108740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24777 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7fc00000 [ 1678.482656][ T29] audit: type=1326 audit(1719115641.624:108741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24777 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7fc00000 [ 1678.506912][ T29] audit: type=1326 audit(1719115641.624:108742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24777 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7fc00000 [ 1678.768680][T24833] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1678.990483][T24844] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1679.020686][T24844] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1679.027988][T24844] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1679.054893][T24844] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1679.375331][T24853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1679.762732][T24878] loop1: detected capacity change from 0 to 512 [ 1679.782734][T24875] syzkaller0: entered promiscuous mode [ 1679.788240][T24875] syzkaller0: entered allmulticast mode [ 1679.793895][T24878] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1679.793913][T24878] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 1679.855457][T24878] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1680.069510][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1680.086379][T24895] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 1680.097559][T24895] batman_adv: batadv0: Adding interface: ip6gretap3 [ 1680.104214][T24895] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1680.130272][T24895] batman_adv: batadv0: Not using interface ip6gretap3 (retrying later): interface not active [ 1680.388572][T24908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24908 comm=syz-executor.0 [ 1680.408002][T24907] loop4: detected capacity change from 0 to 512 [ 1680.430354][T24907] EXT4-fs: Ignoring removed nobh option [ 1680.447142][T24907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1680.460581][T24907] ext4 filesystem being mounted at /root/syzkaller-testdir186132723/syzkaller.ugG3Cj/268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1680.477219][T24907] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 224: padding at end of block bitmap is not set [ 1680.492618][T24907] EXT4-fs (loop4): Remounting filesystem read-only [ 1680.586910][T18494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1680.657824][T24917] bridge0: entered promiscuous mode [ 1680.667026][T24917] vlan2: entered promiscuous mode [ 1680.677332][T24917] bridge0: left promiscuous mode [ 1680.831348][T24933] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1680.863262][T24934] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap4 [ 1680.874219][T24934] batman_adv: batadv0: Adding interface: ip6gretap4 [ 1680.880859][T24934] batman_adv: batadv0: The MTU of interface ip6gretap4 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1680.907222][T24934] batman_adv: batadv0: Not using interface ip6gretap4 (retrying later): interface not active [ 1681.050437][T24949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1681.164897][T24968] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1681.174637][T24968] netem: invalid attributes len -24 [ 1681.179830][T24968] netem: change failed [ 1681.204352][T24970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24970 comm=syz-executor.2 [ 1681.354396][T24973] loop1: detected capacity change from 0 to 512 [ 1681.372895][T24973] EXT4-fs: Ignoring removed nobh option [ 1681.394380][T24973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1681.394562][T24977] loop0: detected capacity change from 0 to 164 [ 1681.410935][T24973] ext4 filesystem being mounted at /root/syzkaller-testdir2124639444/syzkaller.eC9WHj/311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1681.431869][T24973] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 224: padding at end of block bitmap is not set [ 1681.446752][T24973] EXT4-fs (loop1): Remounting filesystem read-only [ 1681.455570][T24977] iso9660: Unknown parameter '' [ 1681.502414][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 1681.502427][ T29] audit: type=1326 audit(1719115644.834:108973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5e7f579f9a code=0x7ffc0000 [ 1681.533781][ T29] audit: type=1326 audit(1719115644.834:108974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1681.558049][ T29] audit: type=1326 audit(1719115644.834:108975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1681.583666][ T29] audit: type=1326 audit(1719115644.834:108976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1681.607981][ T29] audit: type=1326 audit(1719115644.834:108977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1681.632152][ T29] audit: type=1326 audit(1719115644.834:108978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1681.657722][ T29] audit: type=1326 audit(1719115644.834:108979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1681.683018][ T29] audit: type=1326 audit(1719115644.834:108980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1681.707275][ T29] audit: type=1326 audit(1719115644.834:108981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1681.732761][ T29] audit: type=1326 audit(1719115644.834:108982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1681.736353][T17777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1681.990607][T24990] bridge0: entered promiscuous mode [ 1681.996807][T24990] vlan2: entered promiscuous mode [ 1682.003702][T24990] bridge0: left promiscuous mode [ 1682.083194][T24999] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1682.093827][T24999] batman_adv: batadv0: Adding interface: ip6gretap2 [ 1682.100416][T24999] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1682.127163][T24999] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 1682.259140][T25007] loop0: detected capacity change from 0 to 128 [ 1682.295675][T25007] syz-executor.0: attempt to access beyond end of device [ 1682.295675][T25007] loop0: rw=0, sector=97, nr_sectors = 128 limit=128 [ 1682.370511][T25010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25010 comm=syz-executor.4 [ 1682.374455][T25011] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1682.434455][ T9983] kworker/u8:22: attempt to access beyond end of device [ 1682.434455][ T9983] loop0: rw=1, sector=225, nr_sectors = 816 limit=128 [ 1682.551691][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1682.551691][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 1682.565583][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1682.634022][T25029] loop4: detected capacity change from 0 to 164 [ 1682.673777][T25029] iso9660: Unknown parameter '' [ 1683.019693][T25047] bridge0: entered promiscuous mode [ 1683.026197][T25047] vlan1: entered promiscuous mode [ 1683.033481][T25047] bridge0: left promiscuous mode [ 1683.052322][T25050] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 1683.129637][T25056] loop1: detected capacity change from 0 to 512 [ 1683.153751][T25056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1683.168488][T25056] ext4 filesystem being mounted at /root/syzkaller-testdir2124639444/syzkaller.eC9WHj/315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1683.259389][T17777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1683.342503][T25064] loop0: detected capacity change from 0 to 256 [ 1683.360749][T25066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=25066 comm=syz-executor.4 [ 1683.383683][T25064] FAT-fs (loop0): Unrecognized mount option "OL rumask=00000000000000000000000" or missing value [ 1683.610163][T25073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25073 comm=syz-executor.1 [ 1683.843603][T25081] loop1: detected capacity change from 0 to 164 [ 1683.875119][T25081] iso9660: Unknown parameter '' [ 1684.011874][T25079] loop2: detected capacity change from 0 to 11 [ 1684.160672][T25105] bridge0: entered promiscuous mode [ 1684.166084][T25105] vlan1: entered promiscuous mode [ 1684.176217][T25105] bridge0: left promiscuous mode [ 1684.281644][T25114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=25114 comm=syz-executor.2 [ 1684.759399][T25134] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1684.945246][T25142] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1684.966000][T25142] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1684.975419][T25142] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1684.984906][ T9593] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1685.005683][T25143] loop4: detected capacity change from 0 to 512 [ 1685.019525][T25143] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1685.035239][T25143] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1685.044002][T25143] EXT4-fs (loop4): 1 truncate cleaned up [ 1685.049980][T25143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1685.064587][T25143] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz-executor.4: Logical block already allocated [ 1685.079495][T25143] EXT4-fs (loop4): Remounting filesystem read-only [ 1685.337671][T25157] vlan0: entered promiscuous mode [ 1685.342717][T25157] bridge0: entered promiscuous mode [ 1685.349280][T25157] bridge0: left promiscuous mode [ 1685.387561][T25163] x_tables: duplicate underflow at hook 1 [ 1685.569070][T25166] pim6reg1: entered promiscuous mode [ 1685.574563][T25166] pim6reg1: entered allmulticast mode [ 1685.717213][T25180] 8021q: VLANs not supported on ipvlan0 [ 1685.747738][T25180] loop0: detected capacity change from 0 to 512 [ 1685.764270][T25180] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 1685.780497][T25180] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 1685.794598][T25180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1685.875263][T18494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1685.875310][T25189] ipt_ECN: cannot use operation on non-tcp rule [ 1685.893571][ T9834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1685.992785][ T9598] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1686.062708][T25202] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1686.192293][T25221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=25221 comm=syz-executor.3 [ 1686.435110][T25227] loop0: detected capacity change from 0 to 512 [ 1686.461075][T25233] loop4: detected capacity change from 0 to 512 [ 1686.493385][T25228] syzkaller0: entered promiscuous mode [ 1686.498878][T25228] syzkaller0: entered allmulticast mode [ 1686.526269][T25233] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1686.545283][T25233] EXT4-fs (loop4): 1 truncate cleaned up [ 1686.551778][T25233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1686.616798][T18494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.812217][T25258] loop4: detected capacity change from 0 to 256 [ 1686.835241][T25258] FAT-fs (loop4): Unrecognized mount option "OL rumask=00000000000000000000000" or missing value [ 1687.112327][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 1687.112339][ T29] audit: type=1326 audit(1719115650.444:109305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1687.144092][ T29] audit: type=1326 audit(1719115650.444:109306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd388dd5ca0 code=0x7ffc0000 [ 1687.170444][ T29] audit: type=1326 audit(1719115650.444:109307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1687.196062][ T29] audit: type=1326 audit(1719115650.444:109308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1687.220347][ T29] audit: type=1326 audit(1719115650.444:109309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1687.245530][ T29] audit: type=1326 audit(1719115650.444:109310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1687.245577][ T29] audit: type=1326 audit(1719115650.444:109311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1687.293916][ T29] audit: type=1326 audit(1719115650.444:109312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd388dd70e3 code=0x7ffc0000 [ 1687.319174][ T29] audit: type=1326 audit(1719115650.444:109313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd388dd5def code=0x7ffc0000 [ 1687.344632][ T29] audit: type=1326 audit(1719115650.444:109314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25265 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd388dd7137 code=0x7ffc0000 [ 1687.592182][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1687.592182][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 1687.605650][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1687.669077][T25277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=25277 comm=syz-executor.3 [ 1687.689068][T25276] loop1: detected capacity change from 0 to 256 [ 1687.798084][T25276] loop1: detected capacity change from 0 to 128 [ 1687.966202][ T9598] IPVS: starting estimator thread 0... [ 1688.028677][T25295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1688.071590][T25296] IPVS: using max 3216 ests per chain, 160800 per kthread [ 1688.554634][T25315] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1688.569315][ T9972] kworker/u8:7: attempt to access beyond end of device [ 1688.569315][ T9972] loop1: rw=1, sector=153, nr_sectors = 96 limit=128 [ 1688.823436][T25324] serio: Serial port pts0 [ 1688.873892][T25326] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1689.190020][T25358] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1689.359316][T25366] loop4: detected capacity change from 0 to 256 [ 1689.384494][T25368] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1689.425871][T25374] loop0: detected capacity change from 0 to 256 [ 1689.487806][T25374] loop0: detected capacity change from 0 to 128 [ 1689.642975][T25390] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1689.808422][T25397] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1689.820924][T25398] loop1: detected capacity change from 0 to 512 [ 1689.839833][T25398] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 1689.853739][T25398] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 1689.866406][T25398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1689.880944][T25398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1689.924476][T17777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1690.296507][ T9972] kworker/u8:7: attempt to access beyond end of device [ 1690.296507][ T9972] loop0: rw=1, sector=153, nr_sectors = 96 limit=128 [ 1690.599579][T25426] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1690.608562][T25426] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1690.793884][ T6690] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1691.031710][ T6690] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1691.490829][T25456] vlan0: entered promiscuous mode [ 1691.495926][T25456] bridge0: entered promiscuous mode [ 1691.503941][T25456] bridge0: left promiscuous mode [ 1691.565399][T25462] pim6reg1: entered promiscuous mode [ 1691.570712][T25462] pim6reg1: entered allmulticast mode [ 1691.756487][T25470] loop1: detected capacity change from 0 to 512 [ 1691.768815][T25470] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1691.779327][T25470] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 1691.788623][T25470] System zones: 0-2, 18-18, 34-34 [ 1691.793853][T25470] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1691.800503][T25470] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1691.816749][T25470] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 408: padding at end of block bitmap is not set [ 1691.831902][T25470] EXT4-fs (loop1): Remounting filesystem read-only [ 1691.838430][T25470] EXT4-fs (loop1): 1 truncate cleaned up [ 1691.846487][T25470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1691.859081][T25470] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 1691.865993][T25470] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1692.164106][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 1692.164121][ T29] audit: type=1326 audit(1719115655.494:109405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25490 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1692.195796][ T29] audit: type=1326 audit(1719115655.494:109406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25490 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1692.195891][ T29] audit: type=1326 audit(1719115655.494:109407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25490 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd388dd5ca0 code=0x7ffc0000 [ 1692.205815][T25492] loop0: detected capacity change from 0 to 2048 [ 1692.253617][ T29] audit: type=1326 audit(1719115655.554:109408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25490 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1692.279311][ T29] audit: type=1326 audit(1719115655.554:109409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25490 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1692.305021][ T29] audit: type=1326 audit(1719115655.554:109410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25490 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd388dd70a9 code=0x7ffc0000 [ 1692.329293][ T29] audit: type=1326 audit(1719115655.554:109411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25490 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd388dd70e3 code=0x7ffc0000 [ 1692.354779][ T29] audit: type=1326 audit(1719115655.554:109412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25490 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd388dd5def code=0x7ffc0000 [ 1692.379076][ T29] audit: type=1326 audit(1719115655.554:109413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25490 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd388dd7137 code=0x7ffc0000 [ 1692.403950][ T29] audit: type=1326 audit(1719115655.554:109414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25490 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd388dd5ca0 code=0x7ffc0000 [ 1692.465091][T25492] Alternate GPT is invalid, using primary GPT. [ 1692.471414][T25492] loop0: p1 p2 p3 [ 1692.633320][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1692.633320][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 1692.646776][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1692.669621][T25503] loop1: detected capacity change from 0 to 512 [ 1692.689529][T25504] vlan4: entered promiscuous mode [ 1692.711880][T25503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1692.725342][T25503] ext4 filesystem being mounted at /root/syzkaller-testdir2124639444/syzkaller.eC9WHj/341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1692.833905][T17777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1693.009224][ T9598] IPVS: starting estimator thread 0... [ 1693.029949][T25533] pim6reg1: entered promiscuous mode [ 1693.035335][T25533] pim6reg1: entered allmulticast mode [ 1693.101570][T25526] IPVS: using max 3024 ests per chain, 151200 per kthread [ 1693.365614][T25558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25558 comm=syz-executor.2 [ 1693.454384][T25563] loop1: detected capacity change from 0 to 164 [ 1693.475854][T25563] iso9660: Unknown parameter '' [ 1693.776453][T25573] vlan4: entered promiscuous mode [ 1693.805511][T25576] loop1: detected capacity change from 0 to 512 [ 1693.819672][T25576] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1693.828774][T25576] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1693.841244][T25576] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1693.850198][T25576] System zones: 0-2, 18-18, 34-34 [ 1693.857899][T25576] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1693.878733][T25576] EXT4-fs (loop1): 1 truncate cleaned up [ 1693.886039][T25576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1693.898149][T25582] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1694.011150][T25587] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1694.065249][T25591] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 1694.067655][T25587] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1694.183469][T25595] pim6reg1: entered promiscuous mode [ 1694.188901][T25595] pim6reg1: entered allmulticast mode [ 1694.295187][T25602] syzkaller0: entered promiscuous mode [ 1694.302497][T25602] syzkaller0 (unregistering): left promiscuous mode [ 1694.382561][T25613] bridge0: port 3(gretap0) entered blocking state [ 1694.389057][T25613] bridge0: port 3(gretap0) entered disabled state [ 1694.396518][T25613] gretap0: entered allmulticast mode [ 1694.403855][T25613] gretap0: entered promiscuous mode [ 1694.465286][T25616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25616 comm=syz-executor.0 [ 1694.664822][T25623] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1694.698567][T17777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.815067][T25627] vlan0: entered promiscuous mode [ 1694.820102][T25627] bridge0: entered promiscuous mode [ 1694.826824][T25627] bridge0: left promiscuous mode [ 1695.217350][T25656] loop1: detected capacity change from 0 to 2048 [ 1695.281400][T25656] Alternate GPT is invalid, using primary GPT. [ 1695.288909][T25656] loop1: p1 p2 p3 [ 1695.682912][T25676] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1696.335789][T25698] cgroup: Bad value for 'name' [ 1696.909357][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1697.215035][T25729] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1697.683547][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1697.683547][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 1697.697023][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1697.982101][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 1697.982114][ T29] audit: type=1326 audit(1719115661.314:109732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1698.014567][ T29] audit: type=1326 audit(1719115661.314:109733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1698.014591][ T29] audit: type=1326 audit(1719115661.314:109734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e7f579ca0 code=0x7ffc0000 [ 1698.076197][ T29] audit: type=1326 audit(1719115661.404:109735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1698.100481][ T29] audit: type=1326 audit(1719115661.404:109736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1698.133669][ T29] audit: type=1326 audit(1719115661.404:109737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1698.159791][ T29] audit: type=1326 audit(1719115661.454:109738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1698.185775][ T29] audit: type=1326 audit(1719115661.454:109739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7f57b0a9 code=0x7ffc0000 [ 1698.210076][ T29] audit: type=1326 audit(1719115661.464:109740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e7f579ca0 code=0x7ffc0000 [ 1698.236183][ T29] audit: type=1326 audit(1719115661.464:109741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5e7f57c837 code=0x7ffc0000 [ 1698.686248][T25781] bridge0: entered promiscuous mode [ 1698.692785][T25781] vlan1: entered promiscuous mode [ 1698.699568][T25781] bridge0: left promiscuous mode [ 1698.715994][T25784] pim6reg1: entered promiscuous mode [ 1698.721373][T25784] pim6reg1: entered allmulticast mode [ 1698.835224][T25798] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1698.975181][T25804] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1699.044211][T25808] loop1: detected capacity change from 0 to 256 [ 1699.096493][T25808] loop1: detected capacity change from 0 to 128 [ 1699.318447][T25822] cgroup: Bad value for 'name' [ 1699.592569][T25832] vlan0: entered promiscuous mode [ 1699.597704][T25832] bridge0: entered promiscuous mode [ 1699.605346][T25832] bridge0: left promiscuous mode [ 1699.647963][T25838] vlan0: entered promiscuous mode [ 1699.653045][T25838] bridge0: entered promiscuous mode [ 1699.659461][T25838] bridge0: left promiscuous mode [ 1699.927596][ T9972] kworker/u8:7: attempt to access beyond end of device [ 1699.927596][ T9972] loop1: rw=1, sector=153, nr_sectors = 96 limit=128 [ 1700.313773][T25869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25869 comm=syz-executor.1 [ 1700.359120][T25865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1700.498834][T25877] vlan0: entered promiscuous mode [ 1700.505223][T25877] bridge0: entered promiscuous mode [ 1700.512480][T25877] bridge0: left promiscuous mode [ 1700.579840][T25885] 8021q: VLANs not supported on ipvlan0 [ 1700.637887][T25888] loop4: detected capacity change from 0 to 256 [ 1700.694485][T25888] loop4: detected capacity change from 0 to 128 [ 1700.775908][ T9971] kworker/u8:6: attempt to access beyond end of device [ 1700.775908][ T9971] loop4: rw=1, sector=153, nr_sectors = 96 limit=128 [ 1701.121637][ T9593] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1701.195064][T25910] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1701.530604][T25915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25915 comm=syz-executor.2 [ 1701.600286][ T9598] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1701.611269][T25919] loop4: detected capacity change from 0 to 164 [ 1701.631106][T25919] iso9660: Unknown parameter '' [ 1701.863929][T25926] vlan0: entered promiscuous mode [ 1701.869003][T25926] bridge0: entered promiscuous mode [ 1701.876219][T25926] bridge0: left promiscuous mode [ 1701.948707][T25932] loop4: detected capacity change from 0 to 764 [ 1701.970992][T25932] iso9660: Unknown parameter ' ' [ 1702.066199][T25936] loop4: detected capacity change from 0 to 2048 [ 1702.112932][T25936] Alternate GPT is invalid, using primary GPT. [ 1702.119185][T25936] loop4: p1 p2 p3 [ 1702.474533][T25956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=25956 comm=syz-executor.1 [ 1702.535595][T25959] pim6reg1: entered promiscuous mode [ 1702.540922][T25959] pim6reg1: entered allmulticast mode [ 1702.629780][T25967] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1702.721828][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1702.721828][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 1702.736963][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1702.837637][T25970] 8021q: VLANs not supported on ipvlan0 [ 1703.018951][T25974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25974 comm=syz-executor.4 [ 1703.051874][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 1703.051887][ T29] audit: type=1326 audit(1719115666.384:109964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1703.084048][ T29] audit: type=1326 audit(1719115666.384:109965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06bc827ca0 code=0x7ffc0000 [ 1703.109952][ T29] audit: type=1326 audit(1719115666.434:109966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1703.136134][ T29] audit: type=1326 audit(1719115666.434:109967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1703.161242][ T29] audit: type=1326 audit(1719115666.474:109968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1703.187219][ T29] audit: type=1326 audit(1719115666.474:109969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1703.213285][ T29] audit: type=1326 audit(1719115666.474:109970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1703.237509][ T29] audit: type=1326 audit(1719115666.474:109971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1703.263353][ T29] audit: type=1326 audit(1719115666.474:109972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1703.287640][ T29] audit: type=1326 audit(1719115666.474:109973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06bc8290a9 code=0x7ffc0000 [ 1703.537715][T25987] 8021q: VLANs not supported on ipvlan0 [ 1703.549788][T25987] loop4: detected capacity change from 0 to 512 [ 1703.574417][T25987] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 1703.589068][T25987] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 1703.607562][T25987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1703.780440][T25996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=25996 comm=syz-executor.2 [ 1703.954032][T26000] pim6reg1: entered promiscuous mode [ 1703.959357][T26000] pim6reg1: entered allmulticast mode [ 1704.403287][T18494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1704.536182][T26016] chnl_net:caif_netlink_parms(): no params data found [ 1704.583770][T26016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.590822][T26016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.598183][T26016] bridge_slave_0: entered allmulticast mode [ 1704.606654][T26016] bridge_slave_0: entered promiscuous mode [ 1704.613882][T26016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.620905][T26016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.628276][T26016] bridge_slave_1: entered allmulticast mode [ 1704.636932][T26016] bridge_slave_1: entered promiscuous mode [ 1704.656892][T26016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1704.670060][T26016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1704.692608][T26016] team0: Port device team_slave_0 added [ 1704.698079][T26187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26187 comm=syz-executor.4 [ 1704.699493][T26016] team0: Port device team_slave_1 added [ 1704.734341][T26016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1704.741337][T26016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.769108][T26016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1704.781044][T26016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1704.788084][T26016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.815337][T26016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1704.849483][T26016] hsr_slave_0: entered promiscuous mode [ 1704.855867][T26016] hsr_slave_1: entered promiscuous mode [ 1704.861942][T26016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1704.869490][T26016] Cannot create hsr debugfs directory [ 1704.941196][T26016] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.008049][T26016] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.067545][T26016] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.119906][T26016] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.187655][T26016] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1705.196774][T26016] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1705.206821][T26016] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1705.215778][T26016] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1705.233580][T26374] dccp_v6_rcv: dropped packet with invalid checksum [ 1705.280595][T26016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1705.297792][T26016] 8021q: adding VLAN 0 to HW filter on device team0 [ 1705.308262][T11539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.315332][T11539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1705.328151][ T9593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.335239][ T9593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1705.366347][T26381] pim6reg1: entered promiscuous mode [ 1705.371782][T26381] pim6reg1: entered allmulticast mode [ 1705.446544][T26016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1705.548129][T26016] veth0_vlan: entered promiscuous mode [ 1705.558753][T26016] veth1_vlan: entered promiscuous mode [ 1705.585591][T26016] veth0_macvtap: entered promiscuous mode [ 1705.605787][T26016] veth1_macvtap: entered promiscuous mode [ 1705.619055][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.630855][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.640809][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.651238][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.662678][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.673464][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.683325][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.695068][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.705248][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.715848][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.727046][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.737680][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.747615][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.759401][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.769217][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.779633][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.790610][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.801062][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.810923][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.822724][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.832599][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.843120][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.854085][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.864581][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.874414][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.886305][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.896188][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.906843][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.917869][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.928322][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.938144][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.949858][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.959698][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.970189][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.983875][T26016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1705.996264][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.007537][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.017347][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.027796][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.038476][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.048903][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.058891][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.070174][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.080301][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.090796][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.101663][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.112113][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.122285][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.133359][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.143235][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.154090][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.164630][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.175079][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.185293][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.196204][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.206022][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.216864][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.227168][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.237645][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.248125][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.259162][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.261433][T26402] loop4: detected capacity change from 0 to 512 [ 1706.269072][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.286663][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.296529][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.307768][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.318414][T26016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.328933][T26016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.339704][T26402] EXT4-fs: Ignoring removed nobh option [ 1706.343034][T26016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.354527][T26016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.363922][T26016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.373315][T26016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.382104][T26016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.406015][T26402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1706.419357][T26402] ext4 filesystem being mounted at /root/syzkaller-testdir186132723/syzkaller.ugG3Cj/320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1706.438342][T26402] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 224: padding at end of block bitmap is not set [ 1706.454214][T26402] EXT4-fs (loop4): Remounting filesystem read-only [ 1706.569582][T18494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1706.591278][T26411] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1706.940032][T26422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26422 comm=syz-executor.2 [ 1707.239954][T26434] loop1: detected capacity change from 0 to 512 [ 1707.251729][T26434] EXT4-fs: Ignoring removed i_version option [ 1707.259745][T26434] /dev/loop1: Can't open blockdev [ 1707.265875][ C0] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 0 [ 1707.428503][T26440] pim6reg1: entered promiscuous mode [ 1707.433948][T26440] pim6reg1: entered allmulticast mode [ 1707.753598][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1707.753598][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 1707.767123][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1708.224279][T26500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26500 comm=syz-executor.2 [ 1708.384870][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 1708.384883][ T29] audit: type=1326 audit(1719115671.714:110022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26503 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf8a6e80a9 code=0x0 [ 1708.559318][T26515] pim6reg1: entered promiscuous mode [ 1708.564636][T26515] pim6reg1: entered allmulticast mode [ 1708.866399][T26529] macsec0: entered promiscuous mode [ 1708.875644][T26529] macsec0 (unregistering): left promiscuous mode [ 1709.448081][T26542] loop1: detected capacity change from 0 to 128 [ 1709.461675][ T29] audit: type=1400 audit(1719115672.784:110023): avc: denied { mounton } for pid=26541 comm="syz-executor.1" path="/root/syzkaller-testdir1925483101/syzkaller.lARu10/7/file0" dev="sda1" ino=1974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 1710.032155][T26561] pim6reg1: entered promiscuous mode [ 1710.037470][T26561] pim6reg1: entered allmulticast mode [ 1710.169289][T26573] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1710.318214][ T29] audit: type=1326 audit(1719115673.644:110024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26577 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06bc8290a9 code=0x0 [ 1710.566739][T26584] loop4: detected capacity change from 0 to 2048 [ 1710.612775][T26584] Alternate GPT is invalid, using primary GPT. [ 1710.619051][T26584] loop4: p1 p2 p3 [ 1711.518102][T26604] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1712.229074][T26620] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1712.320837][T26623] loop4: detected capacity change from 0 to 164 [ 1712.336409][T26623] iso9660: Unknown parameter '' [ 1712.751771][T26635] 8021q: VLANs not supported on ipvlan0 [ 1712.760952][T26635] loop4: detected capacity change from 0 to 512 [ 1712.779023][T26635] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 1712.793415][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1712.793415][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 1712.793831][T26635] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 1712.808869][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1712.826101][T26635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1713.181125][T26644] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap4 [ 1713.587199][T18494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.056092][T26672] loop4: detected capacity change from 0 to 1024 [ 1714.176414][T26672] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 1714.489106][T26681] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 1714.499473][ T29] audit: type=1400 audit(1719115677.834:110025): avc: denied { relabelto } for pid=26679 comm="syz-executor.2" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 1714.529371][ T29] audit: type=1400 audit(1719115677.834:110026): avc: denied { associate } for pid=26679 comm="syz-executor.2" name="loop7" dev="devtmpfs" ino=107 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 1714.579567][T26684] loop4: detected capacity change from 0 to 256 [ 1714.608035][T26685] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap5 [ 1715.661337][T26701] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1715.673085][T26701] CPU: 1 PID: 26701 Comm: syz-executor.3 Tainted: G W 6.10.0-rc4-syzkaller-00283-g563a50672d8a #0 [ 1715.685126][T26701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1715.695210][T26701] Call Trace: [ 1715.698467][T26701] [ 1715.701372][T26701] dump_stack_lvl+0xf2/0x150 [ 1715.705959][T26701] dump_stack+0x15/0x20 [ 1715.710091][T26701] dump_header+0x83/0x2d0 [ 1715.714399][T26701] oom_kill_process+0x33e/0x4c0 [ 1715.719256][T26701] out_of_memory+0x9af/0xbe0 [ 1715.723837][T26701] mem_cgroup_out_of_memory+0x13e/0x190 [ 1715.729388][T26701] try_charge_memcg+0x745/0xcd0 [ 1715.734230][T26701] ? _raw_spin_unlock+0x26/0x50 [ 1715.739074][T26701] ? radix_tree_lookup+0xf9/0x150 [ 1715.744079][T26701] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 1715.750125][T26701] __read_swap_cache_async+0x2b9/0x520 [ 1715.755572][T26701] swap_cluster_readahead+0x276/0x3f0 [ 1715.760926][T26701] swapin_readahead+0xe2/0x7a0 [ 1715.765737][T26701] ? __filemap_get_folio+0x420/0x5b0 [ 1715.771011][T26701] ? swap_cache_get_folio+0x6e/0x210 [ 1715.776276][T26701] do_swap_page+0x3bc/0x1840 [ 1715.780847][T26701] ? exc_page_fault+0x32e/0x650 [ 1715.785684][T26701] ? __rcu_read_lock+0x36/0x50 [ 1715.790491][T26701] handle_mm_fault+0x809/0x2a80 [ 1715.795368][T26701] ? mas_walk+0x204/0x320 [ 1715.799706][T26701] exc_page_fault+0x3b9/0x650 [ 1715.804361][T26701] asm_exc_page_fault+0x26/0x30 [ 1715.809265][T26701] RIP: 0033:0x7f06bc7e30e4 [ 1715.813654][T26701] Code: 01 00 00 69 3d d1 e5 ca 00 e8 03 00 00 48 8d 1d b2 ce 17 00 e8 5d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 77 f0 ff ff eb [ 1715.833243][T26701] RSP: 002b:00007ffd58ddbd40 EFLAGS: 00010202 [ 1715.839306][T26701] RAX: 0000000000000000 RBX: 00007f06bc95ff80 RCX: 0000000000000000 [ 1715.847340][T26701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555561856788 [ 1715.855366][T26701] RBP: 00007f06bc961980 R08: 0000000000000000 R09: 7fffffffffffffff [ 1715.863317][T26701] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000001a3223 [ 1715.871263][T26701] R13: 00007f06bc95ff8c R14: 0000000000000032 R15: 00007f06bc961980 [ 1715.879269][T26701] [ 1715.883765][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888118c21200: rx timeout, send abort [ 1715.892041][T26701] memory: usage 307200kB, limit 307200kB, failcnt 1260 [ 1715.898867][T26701] memory+swap: usage 308724kB, limit 9007199254740988kB, failcnt 0 [ 1715.906765][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888118c21200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1715.922402][T26701] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 1715.922416][T26701] Memory cgroup stats for /syz3: [ 1715.922603][T26701] cache 24576 [ 1715.922611][T26701] rss 0 [ 1715.922617][T26701] shmem 0 [ 1715.922624][T26701] mapped_file 0 [ 1715.922631][T26701] dirty 0 [ 1715.922638][T26701] writeback 4096 [ 1715.922645][T26701] workingset_refault_anon 412 [ 1715.922654][T26701] workingset_refault_file 45 [ 1715.922662][T26701] swap 1560576 [ 1715.922669][T26701] swapcached 4096 [ 1715.922675][T26701] pgpgin 1200539 [ 1715.922682][T26701] pgpgout 1200531 [ 1715.922689][T26701] pgfault 1465345 [ 1715.922746][T26701] pgmajfault 200 [ 1715.922753][T26701] inactive_anon 0 [ 1715.922760][T26701] active_anon 0 [ 1715.922822][T26701] inactive_file 0 [ 1715.922830][T26701] active_file 28672 [ 1715.922836][T26701] unevictable 0 [ 1715.922842][T26701] hierarchical_memory_limit 314572800 [ 1715.922848][T26701] hierarchical_memsw_limit 9223372036854771712 [ 1715.922858][T26701] total_cache 24576 [ 1715.922865][T26701] total_rss 0 [ 1715.922872][T26701] total_shmem 0 [ 1715.922879][T26701] total_mapped_file 0 [ 1715.922887][T26701] total_dirty 0 [ 1715.922907][T26701] total_writeback 4096 [ 1715.922915][T26701] total_workingset_refault_anon 412 [ 1715.922923][T26701] total_workingset_refault_file 45 [ 1715.922930][T26701] total_swap 1560576 [ 1715.922937][T26701] total_swapcached 4096 [ 1715.922945][T26701] total_pgpgin 1200539 [ 1715.922953][T26701] total_pgpgout 1200531 [ 1715.922960][T26701] total_pgfault 1465345 [ 1715.922968][T26701] total_pgmajfault 200 [ 1715.922976][T26701] total_inactive_anon 0 [ 1715.922987][T26701] total_active_anon 0 [ 1715.923052][T26701] total_inactive_file 0 [ 1715.923060][T26701] total_active_file 28672 [ 1715.923067][T26701] total_unevictable 0 [ 1715.923075][T26701] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=25861,uid=0 [ 1715.923213][T26701] Memory cgroup out of memory: Killed process 25862 (syz-executor.3) total-vm:46440kB, anon-rss:548kB, file-rss:9000kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1717.843575][T25641] kmmpd-loop2: attempt to access beyond end of device [ 1717.843575][T25641] loop2: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 1717.857017][T25641] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 1717.992923][ T30] oom_reaper: reaped process 25862 (syz-executor.3), now anon-rss:24kB, file-rss:8196kB, shmem-rss:0kB [ 1718.009320][T10954] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1718.020401][T10954] CPU: 1 PID: 10954 Comm: syz-executor.3 Tainted: G W 6.10.0-rc4-syzkaller-00283-g563a50672d8a #0 [ 1718.032366][T10954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1718.042431][T10954] Call Trace: [ 1718.045703][T10954] [ 1718.048624][T10954] dump_stack_lvl+0xf2/0x150 [ 1718.053262][T10954] dump_stack+0x15/0x20 [ 1718.057429][T10954] dump_header+0x83/0x2d0 [ 1718.061756][T10954] oom_kill_process+0x33e/0x4c0 [ 1718.066659][T10954] out_of_memory+0x9af/0xbe0 [ 1718.071240][T10954] mem_cgroup_out_of_memory+0x13e/0x190 [ 1718.076849][T10954] try_charge_memcg+0x745/0xcd0 [ 1718.081724][T10954] ? _raw_spin_unlock+0x26/0x50 [ 1718.086572][T10954] ? radix_tree_lookup+0xf9/0x150 [ 1718.091592][T10954] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 1718.097659][T10954] __read_swap_cache_async+0x2b9/0x520 [ 1718.103193][T10954] swap_cluster_readahead+0x276/0x3f0 [ 1718.108721][T10954] swapin_readahead+0xe2/0x7a0 [ 1718.113485][T10954] ? __filemap_get_folio+0x420/0x5b0 [ 1718.118766][T10954] ? swap_cache_get_folio+0x6e/0x210 [ 1718.124048][T10954] do_swap_page+0x3bc/0x1840 [ 1718.128639][T10954] ? __rcu_read_lock+0x36/0x50 [ 1718.133386][T10954] handle_mm_fault+0x809/0x2a80 [ 1718.138228][T10954] exc_page_fault+0x296/0x650 [ 1718.142881][T10954] asm_exc_page_fault+0x26/0x30 [ 1718.147709][T10954] RIP: 0010:__get_user_8+0x11/0x20 [ 1718.152843][T10954] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 1718.172521][T10954] RSP: 0018:ffffc9002801fe38 EFLAGS: 00050202 [ 1718.178633][T10954] RAX: 0000555561856da8 RBX: ffffc9002801fe40 RCX: ffffffff814b1b64 [ 1718.186582][T10954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88818593cbf0 [ 1718.194527][T10954] RBP: ffffc9002801fef0 R08: 000188818593cbf7 R09: 0000000000000000 [ 1718.202520][T10954] R10: 0001ffffffffffff R11: 000000000000d7c8 R12: ffff88818593c200 [ 1718.210523][T10954] R13: ffff88818593cbf0 R14: ffffc9002801ff58 R15: ffffc9002801ffd8 [ 1718.218471][T10954] ? __rseq_handle_notify_resume+0xb4/0xc00 [ 1718.224359][T10954] __rseq_handle_notify_resume+0xc8/0xc00 [ 1718.230155][T10954] ? mem_cgroup_handle_over_high+0x2d/0x1d0 [ 1718.236048][T10954] syscall_exit_to_user_mode+0x90/0x130 [ 1718.241618][T10954] do_syscall_64+0xd6/0x1c0 [ 1718.246115][T10954] ? clear_bhb_loop+0x55/0xb0 [ 1718.250783][T10954] ? clear_bhb_loop+0x55/0xb0 [ 1718.255466][T10954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.261425][T10954] RIP: 0033:0x7f06bc854473 [ 1718.265873][T10954] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 8e fa 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 1718.285471][T10954] RSP: 002b:00007ffd58ddbed8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 1718.293860][T10954] RAX: 0000000000000000 RBX: 00000000000006bd RCX: 00007f06bc854473 [ 1718.301827][T10954] RDX: 00007ffd58ddbef0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1718.309905][T10954] RBP: 00007ffd58ddbf6c R08: 0000000010850740 R09: 7fffffffffffffff [ 1718.317867][T10954] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 1718.325823][T10954] R13: 00000000001a2eea R14: 00000000001a2ecc R15: 0000000000000002 [ 1718.333806][T10954] [ 1718.338037][T10954] memory: usage 307200kB, limit 307200kB, failcnt 11314 [ 1718.345160][T10954] memory+swap: usage 308468kB, limit 9007199254740988kB, failcnt 0 [ 1718.353069][T10954] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 1718.360329][T10954] Memory cgroup stats for /syz3: [ 1718.360449][T10954] cache 8192 [ 1718.369523][T10954] rss 0 [ 1718.372285][T10954] shmem 0 [ 1718.375304][T10954] mapped_file 0 [ 1718.378734][T10954] dirty 0 [ 1718.381679][T10954] writeback 0 [ 1718.384992][T10954] workingset_refault_anon 420 [ 1718.389685][T10954] workingset_refault_file 45 [ 1718.396077][T10954] swap 1298432 [ 1718.399558][T10954] swapcached 8192 [ 1718.403223][T10954] pgpgin 1200547 [ 1718.406752][T10954] pgpgout 1200542 [ 1718.410374][T10954] pgfault 1465358 [ 1718.414025][T10954] pgmajfault 204 [ 1718.417549][T10954] inactive_anon 8192 [ 1718.421414][T10954] active_anon 0 [ 1718.425676][T10954] inactive_file 12288 [ 1718.429642][T10954] active_file 0 [ 1718.433131][T10954] unevictable 0 [ 1718.436662][T10954] hierarchical_memory_limit 314572800 [ 1718.442091][T10954] hierarchical_memsw_limit 9223372036854771712 [ 1718.448212][T10954] total_cache 8192 [ 1718.453284][T10954] total_rss 0 [ 1718.456565][T10954] total_shmem 0 [ 1718.460023][T10954] total_mapped_file 0 [ 1718.464099][T10954] total_dirty 0 [ 1718.467551][T10954] total_writeback 0 [ 1718.471326][T10954] total_workingset_refault_anon 420 [ 1718.476641][T10954] total_workingset_refault_file 45 [ 1718.482861][T10954] total_swap 1298432 [ 1718.486738][T10954] total_swapcached 8192 [ 1718.490860][T10954] total_pgpgin 1200547 [ 1718.494982][T10954] total_pgpgout 1200542 [ 1718.499134][T10954] total_pgfault 1465358 [ 1718.503282][T10954] total_pgmajfault 204 [ 1718.507319][T10954] total_inactive_anon 8192 [ 1718.512876][T10954] total_active_anon 0 [ 1718.516873][T10954] total_inactive_file 12288 [ 1718.521381][T10954] total_active_file 0 [ 1718.525403][T10954] total_unevictable 0 [ 1718.529411][T10954] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9637,uid=0 [ 1718.545428][T10954] Memory cgroup out of memory: Killed process 9644 (syz-executor.3) total-vm:43128kB, anon-rss:416kB, file-rss:9004kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1718.768762][T26719] 8021q: VLANs not supported on ipvlan0 [ 1719.037017][T26720] team0: Failed to send options change via netlink (err -105) [ 1719.044717][T26720] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1719.055852][T26720] team0: Port device team_slave_0 removed [ 1719.762716][T26723] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 1720.335744][T26730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26730 comm=syz-executor.2 [ 1720.634460][ T30] oom_reaper: reaped process 9644 (syz-executor.3), now anon-rss:0kB, file-rss:8196kB, shmem-rss:0kB [ 1720.646466][T26702] syz-executor.3 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1720.660969][T26702] CPU: 0 PID: 26702 Comm: syz-executor.3 Tainted: G W 6.10.0-rc4-syzkaller-00283-g563a50672d8a #0 [ 1720.672947][T26702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1720.682987][T26702] Call Trace: [ 1720.686251][T26702] [ 1720.689230][T26702] dump_stack_lvl+0xf2/0x150 [ 1720.693820][T26702] dump_stack+0x15/0x20 [ 1720.698043][T26702] dump_header+0x83/0x2d0 [ 1720.702365][T26702] oom_kill_process+0x33e/0x4c0 [ 1720.707214][T26702] out_of_memory+0x9af/0xbe0 [ 1720.711864][T26702] mem_cgroup_out_of_memory+0x13e/0x190 [ 1720.717413][T26702] try_charge_memcg+0x745/0xcd0 [ 1720.722253][T26702] ? get_page_from_freelist+0x1a2a/0x1a70 [ 1720.727961][T26702] obj_cgroup_charge_pages+0xbd/0x1d0 [ 1720.733330][T26702] __memcg_kmem_charge_page+0x9d/0x170 [ 1720.738970][T26702] __alloc_pages_noprof+0x1bc/0x360 [ 1720.744161][T26702] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 1720.749594][T26702] alloc_pages_noprof+0xe1/0x100 [ 1720.754611][T26702] __vmalloc_node_range_noprof+0x719/0xef0 [ 1720.760435][T26702] kvmalloc_node_noprof+0x121/0x170 [ 1720.765622][T26702] ? ip_set_alloc+0x1f/0x30 [ 1720.770123][T26702] ip_set_alloc+0x1f/0x30 [ 1720.774445][T26702] hash_netiface_create+0x273/0x730 [ 1720.779637][T26702] ? __nla_parse+0x40/0x60 [ 1720.784087][T26702] ? __pfx_hash_netiface_create+0x10/0x10 [ 1720.789797][T26702] ip_set_create+0x359/0x8a0 [ 1720.794422][T26702] ? memchr+0x1/0x50 [ 1720.798420][T26702] ? __nla_parse+0x40/0x60 [ 1720.802827][T26702] nfnetlink_rcv_msg+0x4a9/0x570 [ 1720.807789][T26702] netlink_rcv_skb+0x12c/0x230 [ 1720.812552][T26702] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1720.818104][T26702] nfnetlink_rcv+0x16c/0x15b0 [ 1720.822781][T26702] ? _raw_spin_unlock_bh+0x36/0x40 [ 1720.827886][T26702] ? selinux_nlmsg_lookup+0x228/0x800 [ 1720.833255][T26702] ? __rcu_read_unlock+0x34/0x70 [ 1720.838222][T26702] ? __netlink_lookup+0x253/0x290 [ 1720.843247][T26702] netlink_unicast+0x58d/0x660 [ 1720.848082][T26702] netlink_sendmsg+0x5ca/0x6e0 [ 1720.852887][T26702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1720.858168][T26702] __sock_sendmsg+0x140/0x180 [ 1720.862868][T26702] ____sys_sendmsg+0x312/0x410 [ 1720.867624][T26702] __sys_sendmsg+0x1e9/0x280 [ 1720.872253][T26702] ? futex_wait+0x18e/0x1c0 [ 1720.876803][T26702] __x64_sys_sendmsg+0x46/0x50 [ 1720.881611][T26702] x64_sys_call+0xb25/0x2d70 [ 1720.886226][T26702] do_syscall_64+0xc9/0x1c0 [ 1720.890725][T26702] ? clear_bhb_loop+0x55/0xb0 [ 1720.895536][T26702] ? clear_bhb_loop+0x55/0xb0 [ 1720.900253][T26702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.906135][T26702] RIP: 0033:0x7f06bc8290a9 [ 1720.910538][T26702] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1720.930180][T26702] RSP: 002b:00007f06bbba30c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1720.938604][T26702] RAX: ffffffffffffffda RBX: 00007f06bc95ff80 RCX: 00007f06bc8290a9 [ 1720.946625][T26702] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1720.954593][T26702] RBP: 00007f06bc898074 R08: 0000000000000000 R09: 0000000000000000 [ 1720.962697][T26702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1720.970655][T26702] R13: 000000000000000b R14: 00007f06bc95ff80 R15: 00007ffd58ddbc58 [ 1720.978618][T26702] [ 1720.984219][T26702] memory: usage 307200kB, limit 307200kB, failcnt 21265 [ 1720.991165][T26702] memory+swap: usage 308472kB, limit 9007199254740988kB, failcnt 0 [ 1720.999167][T26702] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1721.006465][T26702] Memory cgroup stats for /syz3: [ 1721.006624][T26702] cache 8192 [ 1721.016562][T26702] rss 0 [ 1721.019373][T26702] shmem 0 [ 1721.022336][T26702] mapped_file 0 [ 1721.025814][T26702] dirty 0 [ 1721.028769][T26702] writeback 4096 [ 1721.032334][T26702] workingset_refault_anon 421 [ 1721.036999][T26702] workingset_refault_file 45 [ 1721.043417][T26702] swap 1302528 [ 1721.046831][T26702] swapcached 4096 [ 1721.050515][T26702] pgpgin 1200548 [ 1721.053951][T26736] bridge0: entered promiscuous mode [ 1721.054067][T26702] pgpgout 1200544 [ 1721.059235][T26736] vlan1: entered promiscuous mode [ 1721.062937][T26702] pgfault 1465359 [ 1721.062947][T26702] pgmajfault 205 [ 1721.062953][T26702] inactive_anon 0 [ 1721.062959][T26702] active_anon 0 [ 1721.063036][T26702] inactive_file 12288 [ 1721.063044][T26702] active_file 0 [ 1721.063051][T26702] unevictable 0 [ 1721.063057][T26702] hierarchical_memory_limit 314572800 [ 1721.063067][T26702] hierarchical_memsw_limit 9223372036854771712 [ 1721.063075][T26702] total_cache 8192 [ 1721.063082][T26702] total_rss 0 [ 1721.063126][T26702] total_shmem 0 [ 1721.063133][T26702] total_mapped_file 0 [ 1721.063141][T26702] total_dirty 0 [ 1721.063149][T26702] total_writeback 4096 [ 1721.063207][T26702] total_workingset_refault_anon 421 [ 1721.063216][T26702] total_workingset_refault_file 45 [ 1721.063224][T26702] total_swap 1302528 [ 1721.063232][T26702] total_swapcached 4096 [ 1721.063288][T26702] total_pgpgin 1200548 [ 1721.063294][T26702] total_pgpgout 1200544 [ 1721.063301][T26702] total_pgfault 1465359 [ 1721.063309][T26702] total_pgmajfault 205 [ 1721.063317][T26702] total_inactive_anon 0 [ 1721.063324][T26702] total_active_anon 0 [ 1721.063331][T26702] total_inactive_file 12288 [ 1721.063339][T26702] total_active_file 0 [ 1721.063424][T26702] total_unevictable 0 [ 1721.063431][T26702] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2610,uid=0 [ 1721.063515][T26702] Memory cgroup out of memory: Killed process 2613 (syz-executor.3) total-vm:48620kB, anon-rss:420kB, file-rss:8868kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1721.135836][T26702] ================================================================== [ 1721.225912][T26702] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 1721.235719][T26702] [ 1721.238024][T26702] read-write to 0xffffffff860079c0 of 8 bytes by interrupt on cpu 1: [ 1721.246073][T26702] tick_do_update_jiffies64+0x112/0x1b0 [ 1721.251616][T26702] tick_nohz_handler+0x7c/0x2d0 [ 1721.256455][T26702] __hrtimer_run_queues+0x20d/0x5e0 [ 1721.261643][T26702] hrtimer_interrupt+0x210/0x7b0 [ 1721.266568][T26702] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 1721.272458][T26702] sysvec_apic_timer_interrupt+0x6e/0x80 [ 1721.278090][T26702] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1721.284063][T26702] console_flush_all+0x4fc/0x710 [ 1721.288990][T26702] console_unlock+0x7b/0x280 [ 1721.293564][T26702] vprintk_emit+0x3ed/0x5e0 [ 1721.298052][T26702] vprintk_default+0x26/0x30 [ 1721.302628][T26702] vprintk+0x75/0x80 [ 1721.306522][T26702] _printk+0x7a/0xa0 [ 1721.310497][T26702] __netdev_printk+0x2d1/0x3e0 [ 1721.315260][T26702] netdev_info+0x99/0xc0 [ 1721.319499][T26702] __dev_set_promiscuity+0x165/0x340 [ 1721.324781][T26702] __dev_change_flags+0x1ed/0x410 [ 1721.329799][T26702] rtnl_newlink+0x121e/0x1690 [ 1721.334465][T26702] rtnetlink_rcv_msg+0x85e/0x910 [ 1721.339395][T26702] netlink_rcv_skb+0x12c/0x230 [ 1721.344155][T26702] rtnetlink_rcv+0x1c/0x30 [ 1721.348561][T26702] netlink_unicast+0x58d/0x660 [ 1721.353317][T26702] netlink_sendmsg+0x5ca/0x6e0 [ 1721.358074][T26702] __sock_sendmsg+0x140/0x180 [ 1721.362745][T26702] ____sys_sendmsg+0x312/0x410 [ 1721.367497][T26702] __sys_sendmsg+0x1e9/0x280 [ 1721.372074][T26702] __x64_sys_sendmsg+0x46/0x50 [ 1721.376826][T26702] x64_sys_call+0xb25/0x2d70 [ 1721.381406][T26702] do_syscall_64+0xc9/0x1c0 [ 1721.385901][T26702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.391783][T26702] [ 1721.394094][T26702] read to 0xffffffff860079c0 of 8 bytes by task 26702 on cpu 0: [ 1721.401710][T26702] mem_cgroup_flush_stats_ratelimited+0x29/0x100 [ 1721.408031][T26702] count_shadow_nodes+0x6b/0x230 [ 1721.412963][T26702] do_shrink_slab+0x5a/0x690 [ 1721.417543][T26702] shrink_slab+0x4ed/0x860 [ 1721.421951][T26702] shrink_node+0xa0d/0x13c0 [ 1721.426447][T26702] do_try_to_free_pages+0x3c6/0xc50 [ 1721.431633][T26702] try_to_free_mem_cgroup_pages+0x1eb/0x4e0 [ 1721.437513][T26702] try_charge_memcg+0x27a/0xcd0 [ 1721.442352][T26702] obj_cgroup_charge_pages+0xbd/0x1d0 [ 1721.447720][T26702] __memcg_kmem_charge_page+0x9d/0x170 [ 1721.453173][T26702] __alloc_pages_noprof+0x1bc/0x360 [ 1721.458356][T26702] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 1721.463723][T26702] alloc_pages_noprof+0xe1/0x100 [ 1721.468650][T26702] __vmalloc_node_range_noprof+0x719/0xef0 [ 1721.474445][T26702] kvmalloc_node_noprof+0x121/0x170 [ 1721.479630][T26702] ip_set_alloc+0x1f/0x30 [ 1721.483951][T26702] hash_netiface_create+0x273/0x730 [ 1721.489143][T26702] ip_set_create+0x359/0x8a0 [ 1721.493726][T26702] nfnetlink_rcv_msg+0x4a9/0x570 [ 1721.498653][T26702] netlink_rcv_skb+0x12c/0x230 [ 1721.503409][T26702] nfnetlink_rcv+0x16c/0x15b0 [ 1721.508076][T26702] netlink_unicast+0x58d/0x660 [ 1721.512827][T26702] netlink_sendmsg+0x5ca/0x6e0 [ 1721.517582][T26702] __sock_sendmsg+0x140/0x180 [ 1721.522253][T26702] ____sys_sendmsg+0x312/0x410 [ 1721.527004][T26702] __sys_sendmsg+0x1e9/0x280 [ 1721.531579][T26702] __x64_sys_sendmsg+0x46/0x50 [ 1721.536337][T26702] x64_sys_call+0xb25/0x2d70 [ 1721.540919][T26702] do_syscall_64+0xc9/0x1c0 [ 1721.545414][T26702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.551318][T26702] [ 1721.553627][T26702] value changed: 0x0000000100022b51 -> 0x0000000100022b52 [ 1721.560716][T26702] [ 1721.563020][T26702] Reported by Kernel Concurrency Sanitizer on: [ 1721.569149][T26702] CPU: 0 PID: 26702 Comm: syz-executor.3 Tainted: G W 6.10.0-rc4-syzkaller-00283-g563a50672d8a #0 2024/06/23 04:08:04 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1721.581108][T26702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1721.591147][T26702] ================================================================== [ 1721.632774][ T29] audit: type=1400 audit(1719115684.924:110027): avc: denied { write } for pid=3071 comm="syz-fuzzer" path="pipe:[1663]" dev="pipefs" ino=1663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1