last executing test programs: 1m55.5041856s ago: executing program 32 (id=276): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000ea070000080045b4"], 0x0) 1m54.746966467s ago: executing program 33 (id=287): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x5, 0x10000000}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x2}}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 1m22.50332632s ago: executing program 3 (id=1287): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xa3000000}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 1m22.435373943s ago: executing program 3 (id=1289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) 1m22.434997933s ago: executing program 3 (id=1293): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}], 0x20}, 0x0) 1m22.321450219s ago: executing program 3 (id=1298): mkdir(&(0x7f0000000280)='./file0\x00', 0x112) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) rmdir(&(0x7f00000000c0)='./file0\x00') 1m22.321182939s ago: executing program 3 (id=1301): r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x18) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x81}, 0x106200, 0x10004, 0x20da, 0x1, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xf7ffffffffffffff, r1, 0x2) 1m22.199726145s ago: executing program 0 (id=1309): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m22.020688084s ago: executing program 0 (id=1315): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x3c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xc5, @remote, 0x4}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r1, 0x8001, 0x4, 0x6, 0xfffffff7}, 0x14) 1m21.984488286s ago: executing program 3 (id=1318): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x418fb, 0x10b80}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x801, 0x0, 0x0, 0xfffffff9}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4015}, 0x20002000) 1m21.956759857s ago: executing program 34 (id=1318): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x418fb, 0x10b80}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x801, 0x0, 0x0, 0xfffffff9}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4015}, 0x20002000) 1m21.952791207s ago: executing program 0 (id=1320): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x11}, 0x60) listen(r0, 0xf5f) accept(r0, 0x0, 0x0) 1m21.09041239s ago: executing program 0 (id=1333): mkdir(&(0x7f0000000280)='./file0\x00', 0x112) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) rmdir(&(0x7f00000000c0)='./file0\x00') 1m21.064321721s ago: executing program 0 (id=1335): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m20.767595556s ago: executing program 0 (id=1350): unshare(0x62000000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRESDEC], 0x1, 0x11ae, &(0x7f0000002440)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)=0x28) 1m20.713692409s ago: executing program 35 (id=1350): unshare(0x62000000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRESDEC], 0x1, 0x11ae, &(0x7f0000002440)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)=0x28) 1m15.155189395s ago: executing program 8 (id=1480): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000006c0)=""/127, 0x7f}], 0x1, 0x6, 0x4) 1m15.078468579s ago: executing program 8 (id=1484): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000003fc0)=@assoc_value={0x0, 0x7}, &(0x7f0000004000)=0x8) 1m14.897884588s ago: executing program 8 (id=1488): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nodots,nodots,errors=continue,dots,nfs=nostale_ro,dots,nodots,usefree,sys_immutable,gid=', @ANYRESHEX, @ANYBLOB=',nfs,tz=UTC,nodots,dots,nodots,usefree,nodots,nodots,nodots,nfs=stal,\x00'], 0x1, 0x201, &(0x7f0000001a00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000020000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) 1m14.876002299s ago: executing program 5 (id=1490): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x17f2, &(0x7f0000000040)={0x0, 0x4965, 0x100, 0x0, 0x225}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002bc0), 0x1) 1m14.84994277s ago: executing program 5 (id=1491): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) read(r0, &(0x7f0000000400)=""/198, 0xc6) 1m14.818714382s ago: executing program 5 (id=1493): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) 1m14.756916105s ago: executing program 5 (id=1494): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000300)={r1}, 0x8) setsockopt$sock_attach_bpf(r0, 0x107, 0xe, &(0x7f0000000000)=r2, 0x4) 1m14.735678056s ago: executing program 5 (id=1496): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1m14.703752678s ago: executing program 5 (id=1497): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x64}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) 1m14.630920881s ago: executing program 8 (id=1501): r0 = syz_io_uring_setup(0x1108, &(0x7f0000001540)={0x0, 0x2, 0x80, 0x3, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x100, 0x104, 0x7}, &(0x7f00000015c0)='./file0\x00', 0xfffffffffffffec6, 0x0, 0x23456}) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) 1m14.406846463s ago: executing program 8 (id=1507): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1m14.345628915s ago: executing program 8 (id=1511): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 59.442714056s ago: executing program 36 (id=1497): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x64}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) 58.96914539s ago: executing program 37 (id=1511): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 14.034129023s ago: executing program 4 (id=2806): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x8}) 13.968522976s ago: executing program 4 (id=2810): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c5"], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 13.88787275s ago: executing program 4 (id=2812): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x26) 13.840418113s ago: executing program 4 (id=2813): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) 13.613313574s ago: executing program 4 (id=2819): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000e40)="f94d45", 0xfdef}], 0x1) 13.245285662s ago: executing program 4 (id=2825): chdir(&(0x7f0000000000)='./cgroup\x00') r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, r1) stat(&(0x7f0000001280)='./cgroup\x00', 0x0) 13.229385283s ago: executing program 38 (id=2825): chdir(&(0x7f0000000000)='./cgroup\x00') r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, r1) stat(&(0x7f0000001280)='./cgroup\x00', 0x0) 3.556223293s ago: executing program 6 (id=3078): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x850) 3.513655576s ago: executing program 6 (id=3080): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 1.551165903s ago: executing program 7 (id=3150): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1.512083365s ago: executing program 7 (id=3151): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000100)="00f3ff00"/14, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.449634209s ago: executing program 7 (id=3152): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.367095722s ago: executing program 7 (id=3154): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) 1.363885093s ago: executing program 7 (id=3156): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00') preadv(r0, 0x0, 0x0, 0x30, 0xf5) socket$caif_seqpacket(0x25, 0x5, 0x2) unshare(0x22020600) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) 1.351420763s ago: executing program 7 (id=3157): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) 923.730874ms ago: executing program 6 (id=3181): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x800007fc, 0x9141, 0x0, 0x0, 0x80f42, 0x8, 0x4}, {0x0, 0x2000000000000000, 0x0, 0xffffffffffffff85}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@remote, 0x4, 0x33}, 0xa, @in=@multicast1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 872.891807ms ago: executing program 6 (id=3185): r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='wchan\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd022}]}, &(0x7f0000000200)=0x10) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 556.420243ms ago: executing program 1 (id=3206): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x3, 0x40, 0x6, 0x0, 0x0, 0x19280, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0x6, 0x5}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x80000000000000, 0x800, 0x0, 0x8100000, 0x3}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close(0x4) 461.645327ms ago: executing program 2 (id=3212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 440.031908ms ago: executing program 1 (id=3213): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x282, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x3, 0x0, 0x0, "06000000000200"}}, 0x48}}, 0x0) 411.777869ms ago: executing program 1 (id=3215): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x2081) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) 379.643741ms ago: executing program 2 (id=3217): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x2, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fb, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 242.361488ms ago: executing program 9 (id=3220): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e20, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfffffffffffffffd, 0x9, 0x6, 0xffff, 0x8251c, 0x9, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x4, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 218.577479ms ago: executing program 9 (id=3221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) 218.101949ms ago: executing program 2 (id=3222): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffd, 0x10000, @empty, 0xffffffff}, {0xa, 0x1c, 0x2, @empty, 0x9}, r1, 0x73}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 169.381462ms ago: executing program 1 (id=3223): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x81) 169.069902ms ago: executing program 2 (id=3224): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@errors_remount}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf251500000008000300", @ANYRES32=r2, @ANYBLOB="28002b801c00038006000300feff000006000100039658fadc00020002000000080001"], 0x44}, 0x1, 0x0, 0x0, 0xc884}, 0x4010084) 168.895712ms ago: executing program 9 (id=3225): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) 168.611202ms ago: executing program 1 (id=3226): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000002c0)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 149.245203ms ago: executing program 9 (id=3227): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x7800, 0x7f, 0xfffffffb, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r3, 0x0, 0x0, 0x1, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x42}, @local, 0x10, 0x0, 0xfffffffc}}) 123.046974ms ago: executing program 2 (id=3228): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x4000000) mkdir(&(0x7f0000000280)='./file0\x00', 0x112) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x418103, 0x4, 0xf}, 0x18) rmdir(&(0x7f00000000c0)='./file0\x00') 99.521875ms ago: executing program 9 (id=3229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x1, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x20002, 0xa2d}}, @TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x3, 0xa0e, 0x4, 0x5, 0x7, 0x1, 0x89, 0x3, 0x4, 0xa58e, 0x8, 0x100, 0x6, 0x0, 0x7fffffff, 0x10, 0xf, 0xc00000, 0x8, 0xcd5, 0x1000, 0x8, 0x4, 0xef47, 0xffffff7f, 0x2, 0x7, 0x1, 0x544a, 0x7, 0x9, 0x4, 0x1, 0x7, 0x9, 0x101, 0x4000001, 0x800, 0x3, 0x6, 0x4, 0x959, 0x0, 0x2, 0x733, 0x200, 0x19, 0x100, 0x642e36ee, 0x4, 0x5, 0x3, 0x4, 0x0, 0x4, 0x4, 0x5, 0xa0, 0x8dca, 0xf9d67b2, 0x5, 0x56996efc, 0x9, 0x1, 0x2, 0x5, 0x8, 0xffff, 0x7ff, 0x0, 0x2, 0x2a, 0x192, 0x1ff, 0x7, 0xa, 0x0, 0x9, 0x5, 0x9, 0x6604, 0x80000000, 0x8, 0x8, 0xffff0000, 0x40007, 0x9, 0x80000001, 0x100, 0x8, 0x7, 0xfffffffd, 0xff, 0x7, 0x10001, 0x1, 0x800, 0x8001, 0x8, 0x100, 0x5, 0x5edfd482, 0x42, 0x0, 0x3, 0x10000, 0x626, 0xffff, 0x400, 0x400, 0x7, 0x0, 0xf3, 0x5, 0x5, 0x6, 0x1, 0x9, 0xfffffffc, 0x3dafc201, 0x9, 0x81, 0x280, 0x8, 0xb3, 0x5, 0xffffff5f, 0x2, 0xee, 0x3, 0x5, 0x8, 0xf31, 0x6f, 0x100, 0x8, 0x1, 0xfc8, 0x7fff, 0x3, 0x9a8, 0x1, 0x8001, 0x1, 0x8000, 0xe7, 0x57, 0x1, 0x4, 0x7, 0xff, 0x18, 0x6, 0x5, 0x7, 0xfffffff9, 0x5, 0x8, 0xfffffffe, 0x1, 0xffffffff, 0x1, 0x7, 0x0, 0x9, 0x4, 0x6, 0x7, 0x8, 0x1, 0xf, 0x1, 0xb, 0x8, 0x9, 0x4, 0xb, 0x3, 0xd6, 0x4, 0x2, 0x2, 0x7, 0x280, 0x0, 0x6, 0x3, 0x3, 0x3, 0xae, 0xa56, 0x6, 0x5, 0x2, 0x1, 0x8, 0xffffffff, 0x10000, 0x7, 0x8, 0x7, 0x4, 0xff40, 0x4, 0x5, 0x0, 0x2, 0x3, 0x48000000, 0x5, 0x1, 0x0, 0x663d4cf3, 0xffff4f57, 0xffff67f3, 0x5, 0xfffffff7, 0x0, 0xe8, 0x50f3, 0x4000100, 0x1, 0x6, 0x7fff, 0xfffffff3, 0x9, 0xfffffffa, 0x2, 0x5389, 0xc, 0x7, 0x8, 0xdfd, 0x7fff, 0x2, 0x2860, 0x6, 0xff, 0x4000000, 0x8, 0xa4da, 0x5, 0x7, 0xd48, 0xa177, 0x6, 0x80000000, 0x4, 0x6, 0x9, 0x4, 0x7, 0x6, 0x3, 0x2]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 65.400287ms ago: executing program 9 (id=3230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd53}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 65.208607ms ago: executing program 1 (id=3231): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 64.923967ms ago: executing program 2 (id=3232): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r1, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 405.47µs ago: executing program 6 (id=3233): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) read(r0, &(0x7f0000002040)=""/76, 0x4c) 0s ago: executing program 6 (id=3234): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}]) write(r0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) kernel console output (not intermixed with test programs): ][ T7675] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 93.871980][ T7675] bond1 (unregistering): Released all slaves [ 93.904414][ T7678] tap0: tun_chr_ioctl cmd 1074812118 [ 94.304325][ T7695] loop7: detected capacity change from 0 to 4096 [ 94.321341][ T7695] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 95.858218][ T28] audit: type=1326 audit(1774432882.486:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.7.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 95.914738][ T28] audit: type=1326 audit(1774432882.486:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.7.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 96.766851][ T7831] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1612'. [ 96.776765][ T7831] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1612'. [ 105.216078][ T7929] loop4: detected capacity change from 0 to 1024 [ 105.269041][ T7929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.297999][ T7929] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.384201][ T7946] loop7: detected capacity change from 0 to 512 [ 105.392671][ T7946] EXT4-fs: Ignoring removed nobh option [ 105.404643][ T7946] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 105.417205][ T7946] EXT4-fs (loop7): 1 truncate cleaned up [ 105.423543][ T7946] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.439560][ T7946] EXT4-fs warning (device loop7): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 105.610876][ T4680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.610880][ T6892] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.762503][ T362] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.831579][ T28] audit: type=1400 audit(1774432892.466:1150): avc: denied { write } for pid=7971 comm="syz.4.1632" name="cgroup.subtree_control" dev="cgroup2" ino=322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.870790][ T28] audit: type=1400 audit(1774432892.466:1151): avc: denied { open } for pid=7971 comm="syz.4.1632" path="" dev="cgroup2" ino=322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.899033][ T362] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.909440][ T28] audit: type=1400 audit(1774432892.466:1152): avc: denied { ioctl } for pid=7971 comm="syz.4.1632" path="" dev="cgroup2" ino=322 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.002692][ T7981] loop7: detected capacity change from 0 to 512 [ 106.013501][ T362] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.035613][ T7981] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.059562][ T7981] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 106.081169][ T28] audit: type=1400 audit(1774432892.716:1153): avc: denied { shutdown } for pid=7986 comm="syz.4.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.103319][ T7981] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 106.126135][ T362] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.151113][ T7981] System zones: 0-2, 18-18, 34-35 [ 106.166097][ T7981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.180553][ T7933] chnl_net:caif_netlink_parms(): no params data found [ 106.238239][ T7919] chnl_net:caif_netlink_parms(): no params data found [ 106.248841][ T6892] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.282832][ T8010] loop4: detected capacity change from 0 to 512 [ 106.295413][ T8010] EXT4-fs: Ignoring removed nobh option [ 106.307304][ T8012] loop7: detected capacity change from 0 to 1024 [ 106.323849][ T8010] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.342708][ T8010] EXT4-fs (loop4): 1 truncate cleaned up [ 106.361991][ T8010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.381121][ T8012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.400207][ T8012] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.413708][ T8010] EXT4-fs warning (device loop4): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 106.428109][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.445202][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.452628][ T7933] bridge_slave_0: entered allmulticast mode [ 106.459449][ T7933] bridge_slave_0: entered promiscuous mode [ 106.459769][ T4680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.473321][ T7919] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.481426][ T7919] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.488571][ T7919] bridge_slave_0: entered allmulticast mode [ 106.491437][ T6892] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.495510][ T7919] bridge_slave_0: entered promiscuous mode [ 106.521239][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.538867][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.563879][ T7933] bridge_slave_1: entered allmulticast mode [ 106.570345][ T7933] bridge_slave_1: entered promiscuous mode [ 106.577276][ T8034] loop4: detected capacity change from 0 to 512 [ 106.591060][ T7919] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.607615][ T7919] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.610017][ T8036] loop7: detected capacity change from 0 to 512 [ 106.621856][ T8034] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.622115][ T7919] bridge_slave_1: entered allmulticast mode [ 106.635925][ T8034] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 106.647256][ T8034] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 106.656142][ T8036] EXT4-fs error (device loop7): ext4_init_orphan_info:583: comm syz.7.1654: inode #0: comm syz.7.1654: iget: illegal inode # [ 106.658520][ T7919] bridge_slave_1: entered promiscuous mode [ 106.684051][ T8036] loop7: lost filesystem error report for type 5 error -117 [ 106.684289][ T8036] EXT4-fs (loop7): get orphan inode failed [ 106.687171][ T8034] System zones: [ 106.691635][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 106.691655][ C0] EXT4-fs (loop7): initial error at time 1774432893: ext4_init_orphan_info:583 [ 106.697455][ T8034] 0-2, 18-18, 34-35 [ 106.697989][ T8034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.701036][ C0] EXT4-fs (loop7): last error at time 1774432893: ext4_init_orphan_info:583 [ 106.750842][ T8036] EXT4-fs (loop7): mount failed [ 106.751236][ T7933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.787212][ T8044] loop9: detected capacity change from 0 to 7 [ 106.800853][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.810544][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.818712][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.819274][ T4680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.828298][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.828754][ T8044] loop9: unable to read partition table [ 106.837712][ T7933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.848381][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 106.869847][ T8044] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 106.872097][ T7919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.883560][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.901926][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.909919][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.919548][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.944637][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.954280][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.962387][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.972005][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.989188][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.998893][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.007249][ T362] bridge_slave_1: left allmulticast mode [ 107.014153][ T362] bridge_slave_1: left promiscuous mode [ 107.019924][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.047461][ T362] bridge_slave_0: left allmulticast mode [ 107.053754][ T362] bridge_slave_0: left promiscuous mode [ 107.059523][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.147064][ T28] audit: type=1400 audit(1774432893.776:1154): avc: denied { write } for pid=8052 comm="syz.7.1662" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.243102][ T362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.263708][ T362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.273928][ T8063] loop7: detected capacity change from 0 to 512 [ 107.282075][ T8063] EXT4-fs: Ignoring removed bh option [ 107.282831][ T362] bond0 (unregistering): Released all slaves [ 107.287769][ T8063] EXT4-fs: inline encryption not supported [ 107.304880][ T8063] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.321673][ T7919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.331875][ T8063] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 107.368141][ T8063] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1665: bg 0: block 248: padding at end of block bitmap is not set [ 107.382532][ T8063] loop7: lost filesystem error report for type 5 error -117 [ 107.389955][ T362] hsr_slave_0: left promiscuous mode [ 107.390714][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 107.399253][ T8063] Quota error (device loop7): write_blk: dquota write failed [ 107.402590][ C1] EXT4-fs (loop7): last error at time 1774432894: ext4_validate_block_bitmap:441 [ 107.422789][ T8063] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 107.436203][ T362] hsr_slave_1: left promiscuous mode [ 107.452355][ T8063] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.1665: Failed to acquire dquot type 1 [ 107.452459][ T362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.452472][ T362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.478354][ T8063] loop7: lost filesystem error report for type 5 error -117 [ 107.478532][ T362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.494125][ T8063] EXT4-fs (loop7): 1 truncate cleaned up [ 107.500210][ T8063] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 107.514072][ T362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.524598][ T362] veth1_macvtap: left promiscuous mode [ 107.530226][ T362] veth0_macvtap: left promiscuous mode [ 107.535844][ T362] veth1_vlan: left promiscuous mode [ 107.541101][ T362] veth0_vlan: left promiscuous mode [ 107.600740][ T28] audit: type=1400 audit(1774432894.226:1155): avc: denied { map } for pid=8062 comm="syz.7.1665" path="/61/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.659014][ T362] team0 (unregistering): Port device team_slave_1 removed [ 107.677790][ T362] team0 (unregistering): Port device team_slave_0 removed [ 107.692731][ T6892] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 107.710851][ T69] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-5 [ 107.719881][ T69] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:5: Failed to release dquot type 1 [ 107.732430][ T69] loop7: lost filesystem error report for type 5 error -117 [ 107.753991][ T7933] team0: Port device team_slave_0 added [ 107.781591][ T7919] team0: Port device team_slave_0 added [ 107.792621][ T7933] team0: Port device team_slave_1 added [ 107.805154][ T7919] team0: Port device team_slave_1 added [ 107.834852][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.863858][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.898329][ T7933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.922077][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.929105][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.961019][ T7933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.987195][ T7919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.994424][ T7919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.025871][ T7919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.065339][ T7933] hsr_slave_0: entered promiscuous mode [ 108.078180][ T7933] hsr_slave_1: entered promiscuous mode [ 108.090932][ T7933] debugfs: 'hsr0' already exists in 'hsr' [ 108.096724][ T7933] Cannot create hsr debugfs directory [ 108.114092][ T28] audit: type=1400 audit(1774432894.746:1156): avc: denied { mount } for pid=8118 comm="syz.7.1681" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 108.121890][ T7919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.164879][ T7919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.193176][ T7919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.282610][ T8141] program syz.7.1687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.284837][ T7919] hsr_slave_0: entered promiscuous mode [ 108.326018][ T7919] hsr_slave_1: entered promiscuous mode [ 108.347008][ T7919] debugfs: 'hsr0' already exists in 'hsr' [ 108.360843][ T7919] Cannot create hsr debugfs directory [ 108.374591][ T362] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.442046][ T362] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.452674][ T8156] loop4: detected capacity change from 0 to 512 [ 108.480052][ T8156] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1693: invalid indirect mapped block 256 (level 2) [ 108.498893][ T8156] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.500731][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 108.516331][ C1] EXT4-fs (loop4): initial error at time 1774432895: ext4_free_branches:1023: inode 11 [ 108.526001][ C1] EXT4-fs (loop4): last error at time 1774432895: ext4_free_branches:1023: inode 11 [ 108.536088][ T8156] EXT4-fs (loop4): 2 truncates cleaned up [ 108.551022][ T8156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.598534][ T4680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.609896][ T362] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.719227][ T362] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.759119][ T8191] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.870028][ T362] bridge_slave_1: left allmulticast mode [ 108.880779][ T362] bridge_slave_1: left promiscuous mode [ 108.886576][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.931114][ T362] bridge_slave_0: left allmulticast mode [ 108.943529][ T362] bridge_slave_0: left promiscuous mode [ 108.949365][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.075476][ T362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.095204][ T362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.111968][ T362] bond0 (unregistering): Released all slaves [ 109.191112][ T362] hsr_slave_0: left promiscuous mode [ 109.212122][ T362] hsr_slave_1: left promiscuous mode [ 109.231256][ T362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.266007][ T362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.273600][ T362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.281203][ T362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.301406][ T362] veth1_macvtap: left promiscuous mode [ 109.321863][ T362] veth0_macvtap: left promiscuous mode [ 109.327488][ T362] veth1_vlan: left promiscuous mode [ 109.341659][ T362] veth0_vlan: left promiscuous mode [ 109.525965][ T8285] program syz.4.1732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.548166][ T362] team0 (unregistering): Port device team_slave_1 removed [ 109.563297][ T362] team0 (unregistering): Port device team_slave_0 removed [ 110.198589][ T7933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.246618][ T7933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.297858][ T7933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.315039][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1756'. [ 110.342750][ T7933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.351908][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1756'. [ 110.385138][ T7919] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 110.431259][ T7919] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 110.448941][ T7919] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 110.473611][ T8409] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 110.483231][ T8409] syzkaller0: linktype set to 769 [ 110.491517][ T7919] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 110.596803][ T7933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.615149][ T7933] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.638152][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.645396][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.669008][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.676134][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.687580][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1764'. [ 110.714236][ T7919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.746727][ T7919] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.779073][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1766'. [ 110.786402][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.795105][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.811539][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.818631][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.835153][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1766'. [ 110.853273][ T7933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.864571][ T8470] loop7: detected capacity change from 0 to 128 [ 110.880913][ T8470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.901421][ T7919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.923030][ T8470] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.956790][ T8470] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.011652][ T6892] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.109879][ T7919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.128201][ T8509] vcan0: tx address claim with dest, not broadcast [ 111.154602][ T7933] veth0_vlan: entered promiscuous mode [ 111.182088][ T7933] veth1_vlan: entered promiscuous mode [ 111.195208][ T8518] netlink: 182 bytes leftover after parsing attributes in process `syz.4.1777'. [ 111.215154][ T7933] veth0_macvtap: entered promiscuous mode [ 111.227716][ T7933] veth1_macvtap: entered promiscuous mode [ 111.248976][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.269426][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.289658][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.306328][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.327365][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.341428][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 111.341439][ T28] audit: type=1400 audit(1774432897.976:1177): avc: denied { mount } for pid=7933 comm="syz-executor" name="/" dev="gadgetfs" ino=4609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 111.348569][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.419629][ T7919] veth0_vlan: entered promiscuous mode [ 111.439314][ T7919] veth1_vlan: entered promiscuous mode [ 111.468745][ T7919] veth0_macvtap: entered promiscuous mode [ 111.486323][ T7919] veth1_macvtap: entered promiscuous mode [ 111.516177][ T7919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.531403][ T7919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.539741][ T8558] loop6: detected capacity change from 0 to 128 [ 111.551295][ T8558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.558510][ T69] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.567970][ T69] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.589521][ T8558] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.604608][ T69] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.612626][ T8558] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.613455][ T69] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.650565][ T4475] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.686129][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1784'. [ 111.829323][ T8598] loop7: detected capacity change from 0 to 128 [ 112.037630][ T8625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8625 comm=syz.7.1799 [ 112.152718][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1801'. [ 112.282796][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1815'. [ 112.348638][ T8665] loop9: detected capacity change from 0 to 512 [ 112.382078][ T8665] EXT4-fs: Ignoring removed oldalloc option [ 112.417230][ T8665] EXT4-fs: Ignoring removed i_version option [ 112.424121][ T8665] EXT4-fs (loop9): filesystem is read-only [ 112.430135][ T8665] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 112.466961][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 112.477782][ T8665] EXT4-fs (loop9): filesystem is read-only [ 112.488230][ T8665] EXT4-fs (loop9): orphan cleanup on readonly fs [ 112.502081][ T8665] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1808: bg 0: block 64: padding at end of block bitmap is not set [ 112.542733][ T8665] loop9: lost filesystem error report for type 5 error -117 [ 112.546490][ T8665] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 112.553913][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 112.553931][ C1] EXT4-fs (loop9): initial error at time 1774432899: ext4_validate_block_bitmap:441 [ 112.553956][ C1] EXT4-fs (loop9): last error at time 1774432899: ext4_validate_block_bitmap:441 [ 112.587999][ T8665] loop9: lost filesystem error report for type 5 error -117 [ 112.588470][ T8665] EXT4-fs (loop9): 1 orphan inode deleted [ 112.636002][ T8665] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.656136][ T8696] loop1: detected capacity change from 0 to 1024 [ 112.671046][ T8696] EXT4-fs: Ignoring removed oldalloc option [ 112.677139][ T8696] EXT4-fs: Ignoring removed bh option [ 112.690487][ T7919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.733774][ T8696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.826805][ T8696] EXT4-fs (loop1): shut down requested (0) [ 112.856946][ T8696] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 112.876059][ T8696] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 112.885378][ T28] audit: type=1400 audit(1774432899.526:1178): avc: denied { quotaon } for pid=8695 comm="syz.1.1816" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.917055][ T8719] tap0: tun_chr_ioctl cmd 1074025677 [ 112.923199][ T7933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.932484][ T8719] tap0: linktype set to 787 [ 113.148422][ T8749] batadv0: entered allmulticast mode [ 113.251774][ T8760] sock: sock_set_timeout: `syz.6.1832' (pid 8760) tries to set negative timeout [ 113.268598][ T28] audit: type=1400 audit(1774432899.896:1179): avc: denied { read } for pid=8761 comm="syz.7.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.529524][ T8668] syz.4.1809 (8668) used greatest stack depth: 5968 bytes left [ 113.792424][ T8808] team_slave_0: entered promiscuous mode [ 113.798232][ T8808] team_slave_1: entered promiscuous mode [ 113.804317][ T8808] macvtap1: entered promiscuous mode [ 113.809728][ T8808] team0: entered promiscuous mode [ 113.816405][ T8808] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 113.824010][ T8808] team0: Device macvtap1 is already an upper device of the team interface [ 113.851308][ T8808] team0: left promiscuous mode [ 113.863316][ T8808] team_slave_0: left promiscuous mode [ 113.868829][ T8808] team_slave_1: left promiscuous mode [ 114.549069][ T8813] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 114.566582][ T8813] syzkaller0: linktype set to 769 [ 114.594796][ T8820] sock: sock_set_timeout: `syz.1.1854' (pid 8820) tries to set negative timeout [ 114.708895][ T8834] batadv0: entered allmulticast mode [ 114.734842][ T8839] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 114.745785][ T8839] syzkaller0: linktype set to 769 [ 114.847346][ T8856] loop4: detected capacity change from 0 to 128 [ 115.084319][ T8880] loop9: detected capacity change from 0 to 128 [ 115.124577][ T8883] loop6: detected capacity change from 0 to 1024 [ 115.139045][ T8883] EXT4-fs: Ignoring removed oldalloc option [ 115.147345][ T8883] EXT4-fs: Ignoring removed bh option [ 115.175850][ T8891] loop9: detected capacity change from 0 to 128 [ 115.193168][ T8883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.239740][ T8883] EXT4-fs (loop6): shut down requested (0) [ 115.267210][ T8883] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 115.293853][ T8883] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 115.314435][ T8882] loop1: detected capacity change from 0 to 32768 [ 115.327103][ T8900] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967280. macoff=96 [ 115.379343][ T8882] loop1: p1 p2 p3 < p5 p6 > [ 115.384863][ T8882] loop1: p2 size 16775168 extends beyond EOD, truncated [ 115.392232][ T4475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.393501][ T8882] loop1: p5 start 4294970168 is beyond EOD, truncated [ 115.532442][ T8914] __nla_validate_parse: 5 callbacks suppressed [ 115.532460][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1895'. [ 115.568571][ T7924] udevd[7924]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 115.570257][ T7993] udevd[7993]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 115.592594][ T8029] udevd[8029]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 115.602625][ T7932] udevd[7932]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 115.754357][ T1031] IPVS: starting estimator thread 0... [ 115.836553][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.850608][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.868196][ T8938] IPVS: using max 2448 ests per chain, 122400 per kthread [ 115.962295][ T28] audit: type=1400 audit(1774432902.596:1180): avc: denied { bind } for pid=8960 comm="syz.7.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.993042][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1912'. [ 116.069823][ T3475] IPVS: starting estimator thread 0... [ 116.111146][ T8975] loop7: detected capacity change from 0 to 164 [ 116.144125][ T8975] ISOFS: Bad logical zone size 2816 [ 116.162240][ T8970] IPVS: using max 2640 ests per chain, 132000 per kthread [ 116.428508][ T4771] Process accounting resumed [ 116.557905][ T28] audit: type=1400 audit(1774432903.186:1181): avc: denied { read } for pid=8993 comm="syz.4.1928" path="socket:[24075]" dev="sockfs" ino=24075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.644303][ T28] audit: type=1400 audit(1774432903.276:1182): avc: denied { connect } for pid=9009 comm="syz.4.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.957827][ T9014] loop1: detected capacity change from 0 to 128 [ 117.033798][ T28] audit: type=1326 audit(1774432903.666:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="syz.4.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 117.077699][ T28] audit: type=1326 audit(1774432903.666:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="syz.4.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 117.130787][ T28] audit: type=1326 audit(1774432903.666:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="syz.4.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 117.166643][ T28] audit: type=1326 audit(1774432903.666:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="syz.4.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 117.311001][ T28] audit: type=1326 audit(1774432903.666:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="syz.4.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 117.445292][ T28] audit: type=1400 audit(1774432903.746:1188): avc: denied { setopt } for pid=9026 comm="syz.4.1942" lport=50505 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 117.503940][ T28] audit: type=1400 audit(1774432903.936:1189): avc: denied { read write } for pid=9048 comm="syz.1.1952" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 117.546494][ T28] audit: type=1400 audit(1774432903.936:1190): avc: denied { open } for pid=9048 comm="syz.1.1952" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 117.815762][ T9037] loop7: detected capacity change from 0 to 32768 [ 117.931305][ T9037] loop7: p1 p2 p3 < p5 p6 > [ 117.944323][ T9037] loop7: p2 size 16775168 extends beyond EOD, truncated [ 117.962921][ T9037] loop7: p5 start 4294970168 is beyond EOD, truncated [ 118.084771][ T9073] loop6: detected capacity change from 0 to 128 [ 118.276051][ T7924] udevd[7924]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 118.287559][ T7932] udevd[7932]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 118.299036][ T8029] udevd[8029]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 118.315184][ T7993] udevd[7993]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 118.593002][ T1031] IPVS: starting estimator thread 0... [ 118.691372][ T9117] IPVS: using max 2592 ests per chain, 129600 per kthread [ 118.728796][ T3390] IPVS: starting estimator thread 0... [ 118.796797][ T9137] netlink: 'syz.4.1988': attribute type 3 has an invalid length. [ 118.827406][ T9137] netlink: 'syz.4.1988': attribute type 1 has an invalid length. [ 118.840828][ T9131] IPVS: using max 2832 ests per chain, 141600 per kthread [ 118.852164][ T9137] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1988'. [ 119.034465][ T3390] IPVS: starting estimator thread 0... [ 119.086590][ T9159] loop6: detected capacity change from 0 to 164 [ 119.123208][ T9159] ISOFS: Bad logical zone size 2816 [ 119.140765][ T9157] IPVS: using max 2304 ests per chain, 115200 per kthread [ 119.284123][ T3390] Process accounting resumed [ 119.346359][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2009'. [ 119.866512][ T9204] loop7: detected capacity change from 0 to 256 [ 119.950234][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.959510][ T9218] netlink: 'syz.9.2024': attribute type 6 has an invalid length. [ 119.996294][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.118028][ T9239] netlink: 236 bytes leftover after parsing attributes in process `syz.6.2030'. [ 120.149513][ T9239] netlink: 236 bytes leftover after parsing attributes in process `syz.6.2030'. [ 120.403777][ T9275] loop6: detected capacity change from 0 to 1024 [ 120.437421][ T9275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.651277][ T4475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.820152][ T9313] netlink: 'syz.9.2058': attribute type 2 has an invalid length. [ 120.840332][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2058'. [ 121.697240][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 121.697318][ T28] audit: type=1400 audit(1774432908.316:1196): avc: denied { write } for pid=9355 comm="syz.1.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.772272][ T28] audit: type=1400 audit(1774432908.376:1197): avc: denied { listen } for pid=9355 comm="syz.1.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.857187][ T9377] syz.4.2078 uses obsolete (PF_INET,SOCK_PACKET) [ 121.912640][ T9379] loop9: detected capacity change from 0 to 512 [ 122.039056][ T9379] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 122.083078][ T28] audit: type=1400 audit(1774432908.706:1198): avc: denied { view } for pid=9382 comm="syz.1.2080" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 122.106374][ T9379] EXT4-fs (loop9): 1 truncate cleaned up [ 122.119173][ T9379] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.174957][ T9389] loop4: detected capacity change from 0 to 512 [ 122.206551][ T28] audit: type=1400 audit(1774432908.836:1199): avc: denied { read write } for pid=9378 comm="syz.9.2079" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.233670][ T28] audit: type=1400 audit(1774432908.836:1200): avc: denied { open } for pid=9378 comm="syz.9.2079" path="/60/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.293571][ T9394] loop1: detected capacity change from 0 to 2048 [ 122.319599][ T9394] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 122.345963][ T9394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.785588][ T9403] syz.7.2087 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 122.820768][ T9403] CPU: 1 UID: 0 PID: 9403 Comm: syz.7.2087 Not tainted syzkaller #0 PREEMPT(full) [ 122.820796][ T9403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.820892][ T9403] Call Trace: [ 122.820899][ T9403] [ 122.820907][ T9403] __dump_stack+0x1d/0x30 [ 122.820933][ T9403] dump_stack_lvl+0x95/0xd0 [ 122.820975][ T9403] dump_stack+0x15/0x1b [ 122.820991][ T9403] dump_header+0x80/0x240 [ 122.821009][ T9403] oom_kill_process+0x295/0x350 [ 122.821064][ T9403] out_of_memory+0x97d/0xb80 [ 122.821087][ T9403] try_charge_memcg+0x62e/0xa10 [ 122.821123][ T9403] obj_cgroup_charge_pages+0x23/0xc0 [ 122.821148][ T9403] __memcg_kmem_charge_page+0x9e/0x170 [ 122.821176][ T9403] __alloc_frozen_pages_noprof+0x18a/0x360 [ 122.821231][ T9403] alloc_pages_mpol+0xb3/0x260 [ 122.821258][ T9403] alloc_pages_noprof+0x8f/0x130 [ 122.821343][ T9403] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 122.821436][ T9403] __kvmalloc_node_noprof+0x3d4/0x650 [ 122.821459][ T9403] ? ip_set_alloc+0x24/0x30 [ 122.821480][ T9403] ? ip_set_alloc+0x24/0x30 [ 122.821500][ T9403] ? __kmalloc_cache_noprof+0x18a/0x410 [ 122.821581][ T9403] ip_set_alloc+0x24/0x30 [ 122.821605][ T9403] hash_netiface_create+0x282/0x740 [ 122.821709][ T9403] ? __pfx_hash_netiface_create+0x10/0x10 [ 122.821736][ T9403] ip_set_create+0x3cf/0x970 [ 122.821777][ T9403] ? __nla_parse+0x40/0x60 [ 122.821802][ T9403] nfnetlink_rcv_msg+0x509/0x5d0 [ 122.821836][ T9403] netlink_rcv_skb+0x123/0x220 [ 122.821863][ T9403] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 122.821887][ T9403] nfnetlink_rcv+0x167/0x1720 [ 122.821907][ T9403] ? __kfree_skb+0x109/0x150 [ 122.821988][ T9403] ? nlmon_xmit+0x4f/0x60 [ 122.822007][ T9403] ? consume_skb+0x4b/0x160 [ 122.822032][ T9403] ? nlmon_xmit+0x4f/0x60 [ 122.822049][ T9403] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 122.822089][ T9403] ? __dev_queue_xmit+0x136c/0x1f20 [ 122.822111][ T9403] ? __dev_queue_xmit+0x148/0x1f20 [ 122.822153][ T9403] ? ref_tracker_free+0x37d/0x3e0 [ 122.822181][ T9403] ? __netlink_deliver_tap+0x4dc/0x500 [ 122.822254][ T9403] netlink_unicast+0x5c0/0x690 [ 122.822276][ T9403] netlink_sendmsg+0x5c8/0x6f0 [ 122.822329][ T9403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.822356][ T9403] ____sys_sendmsg+0x563/0x5b0 [ 122.822443][ T9403] ___sys_sendmsg+0x195/0x1e0 [ 122.822474][ T9403] __x64_sys_sendmsg+0xd4/0x160 [ 122.822501][ T9403] x64_sys_call+0x194c/0x3020 [ 122.822521][ T9403] do_syscall_64+0x12c/0x370 [ 122.822665][ T9403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.822683][ T9403] RIP: 0033:0x7f11b6a6c799 [ 122.822700][ T9403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.822716][ T9403] RSP: 002b:00007f11b54c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.822754][ T9403] RAX: ffffffffffffffda RBX: 00007f11b6ce5fa0 RCX: 00007f11b6a6c799 [ 122.822768][ T9403] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 122.822780][ T9403] RBP: 00007f11b6b02c99 R08: 0000000000000000 R09: 0000000000000000 [ 122.822791][ T9403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.822801][ T9403] R13: 00007f11b6ce6038 R14: 00007f11b6ce5fa0 R15: 00007fff67f893b8 [ 122.822817][ T9403] [ 122.822887][ T9403] memory: usage 247660kB, limit 307200kB, failcnt 190 [ 123.150742][ T9403] memory+swap: usage 246584kB, limit 9007199254740988kB, failcnt 0 [ 123.158856][ T9403] kmem: usage 219752kB, limit 9007199254740988kB, failcnt 0 [ 123.184968][ T9403] Memory cgroup stats for /syz7: [ 123.185327][ T9403] cache 147456 [ 123.196245][ T9403] rss 32768 [ 123.199598][ T9403] shmem 0 [ 123.202740][ T9403] mapped_file 0 [ 123.206355][ T9403] dirty 0 [ 123.209447][ T9403] writeback 0 [ 123.212886][ T9403] workingset_refault_anon 24 [ 123.217957][ T9403] workingset_refault_file 0 [ 123.222649][ T9403] swap 233472 [ 123.226091][ T9403] swapcached 311296 [ 123.230073][ T9403] pgpgin 36463 [ 123.233580][ T9403] pgpgout 36409 [ 123.237196][ T9403] pgfault 54106 [ 123.240813][ T9403] pgmajfault 8 [ 123.244313][ T9403] inactive_anon 40960 [ 123.248431][ T9403] active_anon 32768 [ 123.252467][ T9403] inactive_file 147456 [ 123.260756][ T9403] active_file 0 [ 123.270741][ T9403] unevictable 0 [ 123.274221][ T9403] hierarchical_memory_limit 314572800 [ 123.289741][ T9403] hierarchical_memsw_limit 9223372036854771712 [ 123.296015][ T9403] total_cache 147456 [ 123.310094][ T9403] total_rss 32768 [ 123.313790][ T9403] total_shmem 0 [ 123.317253][ T9403] total_mapped_file 0 [ 123.321852][ T9403] total_dirty 0 [ 123.325374][ T9403] total_writeback 0 [ 123.329170][ T9403] total_workingset_refault_anon 24 [ 123.334361][ T9403] total_workingset_refault_file 0 [ 123.339392][ T9403] total_swap 233472 [ 123.343430][ T9403] total_swapcached 311296 [ 123.347824][ T9403] total_pgpgin 36463 [ 123.351734][ T9403] total_pgpgout 36409 [ 123.355749][ T9403] total_pgfault 54106 [ 123.359753][ T9403] total_pgmajfault 8 [ 123.363846][ T9403] total_inactive_anon 40960 [ 123.368339][ T9403] total_active_anon 32768 [ 123.372707][ T9403] total_inactive_file 147456 [ 123.377276][ T9403] total_active_file 0 [ 123.381265][ T9403] total_unevictable 0 [ 123.385435][ T9403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2087,pid=9402,uid=0 [ 123.400192][ T9403] Memory cgroup out of memory: Killed process 9403 (syz.7.2087) total-vm:96488kB, anon-rss:1340kB, file-rss:22260kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 124.147399][ T7919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.158775][ T7933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.404580][ T9449] team_slave_0: entered promiscuous mode [ 124.410491][ T9449] team_slave_1: entered promiscuous mode [ 124.419454][ T9449] macvtap1: entered promiscuous mode [ 124.425071][ T9449] team0: entered promiscuous mode [ 124.431595][ T9449] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 124.438889][ T9449] team0: Device macvtap1 is already an upper device of the team interface [ 124.474124][ T9449] team0: left promiscuous mode [ 124.485209][ T9449] team_slave_0: left promiscuous mode [ 124.491031][ T9449] team_slave_1: left promiscuous mode [ 124.537296][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 124.688216][ T28] audit: type=1400 audit(1774432911.316:1201): avc: denied { setopt } for pid=9478 comm="syz.1.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.784866][ T9463] loop9: detected capacity change from 0 to 32768 [ 125.482458][ T9463] loop9: p1 p2 p3 < > [ 125.487731][ T9463] loop9: p2 size 16775168 extends beyond EOD, truncated [ 125.509884][ T2999] loop9: p1 p2 p3 < p5 p6 > [ 125.518037][ T2999] loop9: p2 size 16775168 extends beyond EOD, truncated [ 125.542590][ T2999] loop9: p5 start 4294970168 is beyond EOD, truncated [ 125.715872][ T7993] udevd[7993]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 125.731441][ T7932] udevd[7932]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 125.749684][ T7924] udevd[7924]: inotify_add_watch(7, /dev/loop9p6, 10) failed: No such file or directory [ 125.764931][ T8029] udevd[8029]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 125.774369][ T28] audit: type=1326 audit(1774432912.406:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.2117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x0 [ 125.875298][ T9534] 9p: Bad value for 'wfdno' [ 126.238690][ T9557] loop6: detected capacity change from 0 to 32768 [ 126.343036][ T9557] loop6: p1 p2 p3 < p5 p6 > [ 126.361346][ T9557] loop6: p2 size 16775168 extends beyond EOD, truncated [ 126.370187][ T9557] loop6: p5 start 4294970168 is beyond EOD, truncated [ 126.390671][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2129'. [ 126.415200][ T9588] netlink: 'syz.1.2129': attribute type 18 has an invalid length. [ 126.440093][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2129'. [ 126.552310][ T8029] udevd[8029]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 126.563359][ T7932] udevd[7932]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 126.563399][ T7924] udevd[7924]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 126.585082][ T7993] udevd[7993]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 126.619385][ T9603] team_slave_0: entered promiscuous mode [ 126.625089][ T9603] team_slave_1: entered promiscuous mode [ 126.625597][ T9605] loop4: detected capacity change from 0 to 512 [ 126.631060][ T9603] macvtap1: entered promiscuous mode [ 126.642944][ T9603] team0: entered promiscuous mode [ 126.649509][ T9603] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 126.661355][ T9605] EXT4-fs (loop4): 1 truncate cleaned up [ 126.667625][ T9605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.694222][ T4680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.703803][ T9603] team0: Device macvtap1 is already an upper device of the team interface [ 126.713051][ T9603] team0: left promiscuous mode [ 126.718080][ T9603] team_slave_0: left promiscuous mode [ 126.723505][ T9603] team_slave_1: left promiscuous mode [ 126.744054][ T28] audit: type=1326 audit(1774432913.376:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 126.768389][ T28] audit: type=1326 audit(1774432913.376:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 126.791938][ T28] audit: type=1326 audit(1774432913.376:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 126.821905][ T28] audit: type=1326 audit(1774432913.376:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 126.846609][ T28] audit: type=1326 audit(1774432913.376:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 126.870376][ T28] audit: type=1326 audit(1774432913.376:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 126.894756][ T28] audit: type=1326 audit(1774432913.376:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 126.941156][ T28] audit: type=1326 audit(1774432913.376:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 126.965395][ T28] audit: type=1326 audit(1774432913.376:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 127.025714][ T28] audit: type=1326 audit(1774432913.376:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 127.113805][ T9628] loop1: detected capacity change from 0 to 4096 [ 127.136471][ T9628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.165355][ T9628] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 127.186498][ T9628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.287055][ T9644] loop4: detected capacity change from 0 to 1764 [ 127.294482][ T7933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.311016][ T9644] iso9660: Unknown parameter '' [ 127.332289][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2153'. [ 127.360078][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2153'. [ 127.374925][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2153'. [ 127.385984][ T9649] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2153'. [ 127.469424][ T9662] loop1: detected capacity change from 0 to 512 [ 127.501507][ T9662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.532595][ T9662] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.585702][ T9662] EXT4-fs (loop1): shut down requested (0) [ 127.640920][ T7933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.737093][ T9690] loop1: detected capacity change from 0 to 256 [ 127.782307][ T9692] loop7: detected capacity change from 0 to 512 [ 127.788907][ T9692] EXT4-fs: Ignoring removed i_version option [ 127.795923][ T9694] loop1: detected capacity change from 0 to 512 [ 127.796078][ T9692] EXT4-fs: Ignoring removed bh option [ 127.814137][ T9694] EXT4-fs: Ignoring removed orlov option [ 127.831733][ T9694] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.851577][ T9692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.864844][ T9692] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.891228][ T9694] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.2173: corrupted in-inode xattr: e_value size too large [ 127.905510][ T9694] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.905765][ T9694] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2173: couldn't read orphan inode 15 (err -117) [ 127.914968][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 127.914992][ C0] EXT4-fs (loop1): initial error at time 1774432914: ext4_iget_extra_inode:5025: inode 15 [ 127.915027][ C0] EXT4-fs (loop1): last error at time 1774432914: ext4_iget_extra_inode:5025: inode 15 [ 127.953367][ T9694] loop1: lost filesystem error report for type 5 error -117 [ 127.956868][ T9694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.011493][ T7933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.127821][ T6892] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.645460][ T9755] loop6: detected capacity change from 0 to 512 [ 128.679112][ T9755] EXT4-fs: Ignoring removed bh option [ 128.701460][ T9755] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 128.748516][ T9755] EXT4-fs (loop6): 1 truncate cleaned up [ 128.772560][ T9765] loop1: detected capacity change from 0 to 128 [ 128.779780][ T9755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.816486][ T9765] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.838311][ T9771] loop7: detected capacity change from 0 to 2048 [ 128.841657][ T9765] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.902379][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2205'. [ 128.946274][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2205'. [ 128.950557][ T9755] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.015370][ T9776] loop7: detected capacity change from 0 to 128 [ 129.022590][ T7933] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.070109][ T9776] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.087754][ T9776] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.129561][ T6892] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.235360][ T9791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.278268][ T4680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.355226][ T9815] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.373023][ T9815] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.506775][ T9831] xt_hashlimit: size too large, truncated to 1048576 [ 129.663500][ T9846] netlink: 'syz.6.2237': attribute type 4 has an invalid length. [ 129.710326][ T9848] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.754811][ T7919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.773184][ T9854] serio: Serial port ttyS3 [ 129.823105][ T9856] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 129.845611][ T9856] EXT4-fs (loop7): 1 truncate cleaned up [ 129.867107][ T9859] bridge2: entered promiscuous mode [ 129.873263][ T9856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.888918][ T9859] bridge2: entered allmulticast mode [ 129.901669][ T9869] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2247'. [ 129.912464][ T9859] team0: Port device bridge2 added [ 129.929000][ T9870] bridge0: port 3(team0) entered blocking state [ 129.945249][ T9870] bridge0: port 3(team0) entered disabled state [ 129.962105][ T9870] team0: entered allmulticast mode [ 129.970511][ T6892] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.991928][ T9870] team_slave_0: entered allmulticast mode [ 129.997762][ T9870] team_slave_1: entered allmulticast mode [ 130.034643][ T9870] team0: entered promiscuous mode [ 130.061036][ T9870] team_slave_0: entered promiscuous mode [ 130.066992][ T9870] team_slave_1: entered promiscuous mode [ 130.081963][ T9870] bridge0: port 3(team0) entered blocking state [ 130.088475][ T9870] bridge0: port 3(team0) entered forwarding state [ 130.197644][ T9889] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.225351][ T9889] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.418394][ T9901] batadv_slave_1: entered promiscuous mode [ 130.424942][ T9900] batadv_slave_1: left promiscuous mode [ 130.448619][ T9903] syzkaller1: entered promiscuous mode [ 130.455044][ T9903] syzkaller1: entered allmulticast mode [ 130.507997][ T9860] syz.1.2246 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 130.520184][ T9860] CPU: 1 UID: 0 PID: 9860 Comm: syz.1.2246 Not tainted syzkaller #0 PREEMPT(full) [ 130.520210][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.520220][ T9860] Call Trace: [ 130.520225][ T9860] [ 130.520231][ T9860] __dump_stack+0x1d/0x30 [ 130.520282][ T9860] dump_stack_lvl+0x95/0xd0 [ 130.520303][ T9860] dump_stack+0x15/0x1b [ 130.520322][ T9860] dump_header+0x80/0x240 [ 130.520343][ T9860] oom_kill_process+0x295/0x350 [ 130.520362][ T9860] out_of_memory+0x97d/0xb80 [ 130.520438][ T9860] try_charge_memcg+0x62e/0xa10 [ 130.520473][ T9860] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 130.520530][ T9860] __swap_cache_prepare_and_add+0x386/0x530 [ 130.520555][ T9860] swap_cache_alloc_folio+0xa2/0x120 [ 130.520576][ T9860] swap_cluster_readahead+0x26e/0x3d0 [ 130.520606][ T9860] swapin_readahead+0xde/0x840 [ 130.520653][ T9860] ? __rcu_read_unlock+0x4e/0x70 [ 130.520670][ T9860] ? __perf_event_task_sched_in+0xa65/0xad0 [ 130.520693][ T9860] ? xfd_validate_state+0x45/0xf0 [ 130.520764][ T9860] ? __rcu_read_unlock+0x4e/0x70 [ 130.520780][ T9860] ? swap_cache_get_folio+0x26f/0x280 [ 130.520857][ T9860] do_swap_page+0x30d/0x2220 [ 130.520883][ T9860] ? __schedule+0x93c/0xd40 [ 130.520940][ T9860] ? __rcu_read_lock+0x36/0x50 [ 130.520955][ T9860] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 130.521013][ T9860] handle_mm_fault+0xb46/0x3020 [ 130.521040][ T9860] ? vma_start_read+0x1c7/0x2c0 [ 130.521063][ T9860] do_user_addr_fault+0x62f/0x1050 [ 130.521097][ T9860] ? trace_page_fault_user+0x1f/0xe0 [ 130.521123][ T9860] exc_page_fault+0x62/0xa0 [ 130.521144][ T9860] asm_exc_page_fault+0x26/0x30 [ 130.521205][ T9860] RIP: 0033:0x7f68a1a2a14c [ 130.521222][ T9860] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 130.521305][ T9860] RSP: 002b:00007ffd394e6d50 EFLAGS: 00010202 [ 130.521319][ T9860] RAX: 0000000000000000 RBX: 00007f68a1dd6090 RCX: 000055558ce41808 [ 130.521338][ T9860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.521348][ T9860] RBP: 00007f68a1dd7da0 R08: 0000000000000000 R09: 0000000000000000 [ 130.521358][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001fe44 [ 130.521367][ T9860] R13: 00007f68a1dd5fac R14: 000000000001fb9a R15: 00007ffd394e6e50 [ 130.521385][ T9860] [ 130.758277][ T9860] memory: usage 307200kB, limit 307200kB, failcnt 168 [ 130.765177][ T9860] memory+swap: usage 307536kB, limit 9007199254740988kB, failcnt 0 [ 130.773117][ T9860] kmem: usage 298992kB, limit 9007199254740988kB, failcnt 0 [ 130.783379][ T9860] Memory cgroup stats for /syz1: [ 130.783653][ T9860] cache 0 [ 130.794472][ T9860] rss 8388608 [ 130.797799][ T9860] shmem 0 [ 130.800853][ T9860] mapped_file 0 [ 130.804358][ T9860] dirty 0 [ 130.808145][ T9860] writeback 4096 [ 130.812033][ T9860] workingset_refault_anon 8 [ 130.816933][ T9860] workingset_refault_file 0 [ 130.821505][ T9860] swap 344064 [ 130.825110][ T9860] swapcached 471040 [ 130.829063][ T9907] netlink: 83 bytes leftover after parsing attributes in process `syz.4.2262'. [ 130.838117][ T9860] pgpgin 23209 [ 130.841574][ T9860] pgpgout 21157 [ 130.845435][ T9860] pgfault 37071 [ 130.848925][ T9860] pgmajfault 6 [ 130.852384][ T9860] inactive_anon 4096 [ 130.856274][ T9860] active_anon 12288 [ 130.862191][ T9910] netlink: 'syz.6.2263': attribute type 16 has an invalid length. [ 130.870167][ T9910] netlink: 'syz.6.2263': attribute type 17 has an invalid length. [ 130.880736][ T9860] inactive_file 0 [ 130.884383][ T9860] active_file 0 [ 130.887817][ T9860] unevictable 8388608 [ 130.902236][ T9860] hierarchical_memory_limit 314572800 [ 130.907648][ T9860] hierarchical_memsw_limit 9223372036854771712 [ 130.914383][ T9860] total_cache 0 [ 130.922263][ T9860] total_rss 8388608 [ 130.926183][ T9860] total_shmem 0 [ 130.931250][ T9860] total_mapped_file 0 [ 130.935750][ T9860] total_dirty 0 [ 130.939294][ T9860] total_writeback 4096 [ 130.940660][ T9910] bridge0: port 3(team0) entered disabled state [ 130.943661][ T9860] total_workingset_refault_anon 8 [ 130.949879][ T9910] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.954899][ T9860] total_workingset_refault_file 0 [ 130.961998][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.970315][ T9860] total_swap 344064 [ 130.978457][ T9860] total_swapcached 471040 [ 130.982953][ T9860] total_pgpgin 23209 [ 130.986925][ T9860] total_pgpgout 21157 [ 130.997963][ T9860] total_pgfault 37071 [ 131.015958][ T9860] total_pgmajfault 6 [ 131.019925][ T9860] total_inactive_anon 4096 [ 131.028777][ T9860] total_active_anon 12288 [ 131.033471][ T9860] total_inactive_file 0 [ 131.039291][ T9860] total_active_file 0 [ 131.044992][ T9860] total_unevictable 8388608 [ 131.058927][ T9860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2246,pid=9860,uid=0 [ 131.073756][ T9860] Memory cgroup out of memory: Killed process 9860 (syz.1.2246) total-vm:94032kB, anon-rss:9416kB, file-rss:22220kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 131.098780][ T9910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.112979][ T9910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.162789][ T9910] bridge1: left promiscuous mode [ 131.173846][ T9910] bridge1: left allmulticast mode [ 131.190176][ T9906] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 131.208652][ T41] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.220464][ T41] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.229912][ T41] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.240717][ T41] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.283619][ T9924] netlink: 'syz.1.2269': attribute type 3 has an invalid length. [ 131.324297][ T9924] netlink: 'syz.1.2269': attribute type 3 has an invalid length. [ 131.775641][ T9975] bridge1: entered promiscuous mode [ 131.781872][ T9975] bridge1: entered allmulticast mode [ 131.789064][ T9975] team0: Port device bridge1 added [ 131.798446][ T9975] bridge0: port 3(team0) entered blocking state [ 131.805407][ T9975] bridge0: port 3(team0) entered disabled state [ 131.812262][ T9975] team0: entered allmulticast mode [ 131.817525][ T9975] team_slave_0: entered allmulticast mode [ 131.823880][ T9975] team_slave_1: entered allmulticast mode [ 131.843165][ T9975] team0: entered promiscuous mode [ 131.852874][ T9975] team_slave_0: entered promiscuous mode [ 131.866208][ T9975] team_slave_1: entered promiscuous mode [ 131.873341][ T9975] bridge0: port 3(team0) entered blocking state [ 131.879646][ T9975] bridge0: port 3(team0) entered forwarding state [ 132.008420][ T9991] __nla_validate_parse: 2 callbacks suppressed [ 132.008442][ T9991] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2301'. [ 132.075812][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 132.075825][ T28] audit: type=1400 audit(1774432918.706:1275): avc: denied { accept } for pid=9998 comm="syz.9.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 132.259177][T10013] set_capacity_and_notify: 5 callbacks suppressed [ 132.259192][T10013] loop9: detected capacity change from 0 to 2048 [ 132.281788][T10013] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 132.302492][T10013] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.317261][ T28] audit: type=1400 audit(1774432918.956:1276): avc: denied { lock } for pid=10012 comm="syz.9.2309" path="/98/file1/cpuset.effective_cpus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.357709][ T28] audit: type=1400 audit(1774432918.986:1277): avc: denied { remount } for pid=10019 comm="syz.4.2312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 132.357967][ T7919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.395580][ T28] audit: type=1400 audit(1774432919.026:1278): avc: denied { unmount } for pid=4680 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 133.059229][T10056] sg_write: data in/out 601/28 bytes for SCSI command 0x0-- guessing data in; [ 133.059229][T10056] program syz.9.2328 not setting count and/or reply_len properly [ 133.106785][T10059] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2329'. [ 133.121293][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2329'. [ 133.130973][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2329'. [ 133.164339][T10068] netlink: 'syz.9.2333': attribute type 3 has an invalid length. [ 133.309524][T10078] loop9: detected capacity change from 0 to 1024 [ 133.321286][T10078] EXT4-fs: Ignoring removed bh option [ 133.343353][T10078] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.363553][T10078] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 2: comm syz.9.2336: lblock 2 mapped to illegal pblock 2 (length 1) [ 133.381811][T10078] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 133.381939][T10078] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 133.391034][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 133.391050][ C0] EXT4-fs (loop9): initial error at time 1774432920: ext4_map_blocks:776: inode 3: block 2 [ 133.391090][ C0] EXT4-fs (loop9): last error at time 1774432920: ext4_map_blocks:776: inode 3: block 2 [ 133.425925][T10078] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 48: comm syz.9.2336: lblock 0 mapped to illegal pblock 48 (length 1) [ 133.440228][T10078] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 133.440542][T10078] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 133.458463][T10078] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.2336: Failed to acquire dquot type 0 [ 133.471226][T10078] loop9: lost filesystem error report for type 5 error -117 [ 133.471566][T10078] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 133.488255][T10078] loop9: lost filesystem error report for type 5 error -117 [ 133.491539][T10078] EXT4-fs error (device loop9): ext4_evict_inode:255: inode #11: comm syz.9.2336: mark_inode_dirty error [ 133.512006][T10078] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 133.514118][T10078] EXT4-fs warning (device loop9): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 133.533634][T10078] EXT4-fs (loop9): 1 orphan inode deleted [ 133.539735][T10078] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.557279][ T2234] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.571523][ T2234] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 133.578439][ T2234] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 133.611051][ T2234] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 0 [ 134.340559][ T7919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.352213][ T7919] EXT4-fs error (device loop9): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 134.367878][ T7919] loop9: lost filesystem error report for type 5 error -117 [ 134.368076][ T7919] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 134.405395][ T7919] loop9: lost filesystem error report for type 5 error -117 [ 134.405567][ T7919] EXT4-fs error (device loop9): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 134.424619][ T7919] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 134.641647][ T3383] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 134.664000][ T3383] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.687806][T10126] loop9: detected capacity change from 0 to 4096 [ 134.714437][T10126] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 134.753868][ T28] audit: type=1326 audit(1774432921.386:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.4.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 134.783199][ T28] audit: type=1326 audit(1774432921.386:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.4.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 134.809747][ T28] audit: type=1326 audit(1774432921.386:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.4.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4b81c799 code=0x7ffc0000 [ 134.937480][T10141] loop9: detected capacity change from 0 to 512 [ 134.974048][T10141] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2371: bg 0: block 248: padding at end of block bitmap is not set [ 135.010885][T10141] loop9: lost filesystem error report for type 5 error -117 [ 135.011092][T10141] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.2371: Failed to acquire dquot type 1 [ 135.029892][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 135.029930][ C0] EXT4-fs (loop9): last error at time 1774432921: ext4_validate_block_bitmap:441 [ 135.058704][T10141] loop9: lost filesystem error report for type 5 error -117 [ 135.059142][T10141] EXT4-fs (loop9): 1 truncate cleaned up [ 135.104168][T10141] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.125176][T10141] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.197689][ T7919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.217046][T10157] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2367'. [ 135.226535][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2367'. [ 135.235895][T10157] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2367'. [ 135.276024][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.289234][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.348942][T10163] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 135.616846][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 135.631431][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.866655][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.900221][T10212] loop7: detected capacity change from 0 to 512 [ 135.906931][T10212] EXT4-fs: Ignoring removed bh option [ 135.912887][T10212] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 135.922197][T10212] EXT4-fs (loop7): 1 truncate cleaned up [ 135.928356][T10212] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.954311][ T6892] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.060661][T10228] loop7: detected capacity change from 0 to 512 [ 136.068658][T10228] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.077044][T10228] EXT4-fs error (device loop7): __ext4_iget:5378: inode #11: block 1: comm syz.7.2398: invalid block [ 136.088217][T10228] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.088336][T10228] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2398: couldn't read orphan inode 11 (err -117) [ 136.097635][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 136.097652][ C1] EXT4-fs (loop7): initial error at time 1774432922: __ext4_iget:5378: inode 11: block 1 [ 136.097683][ C1] EXT4-fs (loop7): last error at time 1774432922: __ext4_iget:5378: inode 11: block 1 [ 136.135647][T10228] loop7: lost filesystem error report for type 5 error -117 [ 136.136046][T10228] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.304236][T10243] netlink: 'syz.7.2401': attribute type 4 has an invalid length. [ 136.341071][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 136.351190][ T35] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 136.375016][T10247] loop6: detected capacity change from 0 to 4096 [ 136.397240][T10247] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 137.492415][T10275] xt_hashlimit: size too large, truncated to 1048576 [ 137.627474][T10283] netlink: 'syz.1.2418': attribute type 4 has an invalid length. [ 137.658499][T10285] loop6: detected capacity change from 0 to 512 [ 137.698796][T10285] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2420: bg 0: block 248: padding at end of block bitmap is not set [ 137.716610][T10285] loop6: lost filesystem error report for type 5 error -117 [ 137.716830][T10285] __quota_error: 61 callbacks suppressed [ 137.716842][T10285] Quota error (device loop6): write_blk: dquota write failed [ 137.724246][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 137.724268][ C0] EXT4-fs (loop6): last error at time 1774432924: ext4_validate_block_bitmap:441 [ 137.754939][T10285] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 137.765005][T10285] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2420: Failed to acquire dquot type 1 [ 137.776326][T10285] loop6: lost filesystem error report for type 5 error -117 [ 137.776832][T10285] EXT4-fs (loop6): 1 truncate cleaned up [ 137.790196][T10285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.803097][T10285] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.839993][ T4475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.898148][ T28] audit: type=1400 audit(1774432924.526:1341): avc: denied { ioctl } for pid=10294 comm="syz.7.2425" path="socket:[28475]" dev="sockfs" ino=28475 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 137.930947][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.937245][T10293] Bluetooth: hci0: command 0x1003 tx timeout [ 138.175995][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 138.192955][ T35] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.256297][T10325] loop4: detected capacity change from 0 to 4096 [ 138.268510][T10328] netlink: 'syz.9.2434': attribute type 4 has an invalid length. [ 138.277962][T10325] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 138.465250][T10342] openvswitch: netlink: Missing key (keys=40, expected=100) [ 139.316463][ T28] audit: type=1326 audit(1774432925.946:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 139.348931][ T28] audit: type=1326 audit(1774432925.946:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 139.373317][ T28] audit: type=1326 audit(1774432925.946:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 139.421666][ T28] audit: type=1326 audit(1774432925.946:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 139.450776][ T28] audit: type=1326 audit(1774432925.966:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 139.483613][ T28] audit: type=1326 audit(1774432925.966:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 139.526185][ T28] audit: type=1326 audit(1774432925.976:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 139.824142][T10208] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 139.920591][T10420] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.061728][ T2234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.151761][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.541009][T10463] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 140.561610][T10463] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 140.877709][T10492] netem: incorrect gi model size [ 140.904425][T10492] netem: change failed [ 141.020801][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.041352][T10502] loop9: detected capacity change from 0 to 512 [ 141.050229][T10502] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 141.071049][T10502] EXT4-fs (loop9): 1 truncate cleaned up [ 141.079898][T10502] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.101491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.112555][ T7919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.183401][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.217215][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2521'. [ 141.322456][T10529] loop4: detected capacity change from 0 to 512 [ 141.345566][T10529] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2526: inode has both inline data and extents flags [ 141.360962][T10529] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.361180][T10529] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2526: couldn't read orphan inode 15 (err -117) [ 141.382142][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 141.382163][ C1] EXT4-fs (loop4): initial error at time 1774432927: ext4_orphan_get:1391: inode 15 [ 141.382188][ C1] EXT4-fs (loop4): last error at time 1774432927: ext4_orphan_get:1391: inode 15 [ 141.426473][T10529] loop4: lost filesystem error report for type 5 error -117 [ 141.427103][T10529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.503521][ T4680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.534530][T10546] Invalid argument reading file caps for ./file0 [ 141.594249][T10551] loop4: detected capacity change from 0 to 764 [ 141.647623][T10555] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.711438][T10555] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.725698][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2545'. [ 141.735310][T10569] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2545'. [ 141.744990][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.811421][T10555] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.882999][T10555] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.928566][ T50] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.948073][ T50] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.968343][ T50] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.990585][ T50] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.016705][T10602] loop4: detected capacity change from 0 to 2048 [ 142.140801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.230972][ T7246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.253288][T10625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.311989][T10625] sctp: [Deprecated]: syz.4.2569 (pid 10625) Use of int in maxseg socket option. [ 142.311989][T10625] Use struct sctp_assoc_value instead [ 142.684118][T10655] loop6: detected capacity change from 0 to 512 [ 142.720297][T10655] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 142.728516][T10655] System zones: 0-2, 18-18, 34-35 [ 142.734587][T10655] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.747410][T10655] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.764702][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 142.764717][ T28] audit: type=1400 audit(1774432929.396:1411): avc: denied { name_bind } for pid=10661 comm="syz.1.2582" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 142.883019][ T4475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.079319][T10674] geneve2: entered promiscuous mode [ 143.156755][ T28] audit: type=1400 audit(1774432929.786:1412): avc: denied { cpu } for pid=10679 comm="syz.6.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 143.439187][T10696] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.446536][T10696] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.504985][T10696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.525902][T10696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.577909][ T12] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.603124][ T12] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.621109][ T12] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.653734][ T28] audit: type=1400 audit(1774432930.276:1413): avc: denied { bind } for pid=10714 comm="syz.4.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.689141][ T12] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.707942][T10717] loop4: detected capacity change from 0 to 512 [ 143.739104][T10717] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 143.761630][T10717] EXT4-fs (loop4): 1 truncate cleaned up [ 143.771110][T10717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.857793][ T4680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.961424][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2620'. [ 143.993266][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2620'. [ 144.063603][ T9] net_ratelimit: 2 callbacks suppressed [ 144.063617][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.167556][T10753] loop9: detected capacity change from 0 to 8192 [ 144.220759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.222398][ T28] audit: type=1400 audit(1774432930.856:1414): avc: denied { getopt } for pid=10768 comm="syz.6.2633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.277126][ T28] audit: type=1400 audit(1774432930.876:1415): avc: denied { setattr } for pid=10768 comm="syz.6.2633" name="ip_mr_vif" dev="proc" ino=4026533564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 144.319959][T10772] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.332031][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'. [ 144.349002][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.360371][T10776] bond_slave_0: entered promiscuous mode [ 144.366060][T10776] bond_slave_1: entered promiscuous mode [ 144.382438][T10776] macvlan2: entered promiscuous mode [ 144.387815][T10776] bond0: entered promiscuous mode [ 144.394221][T10776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.510741][ T28] audit: type=1400 audit(1774432931.136:1416): avc: denied { read } for pid=10783 comm="syz.1.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.177643][ T28] audit: type=1400 audit(1774432931.806:1417): avc: denied { read } for pid=10823 comm="syz.9.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.260763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.318860][ T3390] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.327632][ T3390] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.335600][ T3390] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.345292][ T3390] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.357212][ T3390] rtc rtc0: __rtc_set_alarm: err=-22 [ 145.382866][T10838] loop9: detected capacity change from 0 to 512 [ 145.423306][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.514548][T10846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.719026][T10851] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.726243][T10851] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.901956][T10851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.929671][T10851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.005196][ T362] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.027392][ T362] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.050378][ T362] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.070020][ T362] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.253452][T10858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2676'. [ 146.328579][ T28] audit: type=1400 audit(1774432932.956:1418): avc: denied { listen } for pid=10859 comm="syz.6.2677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.448423][T10864] loop4: detected capacity change from 0 to 8192 [ 146.560946][T10872] loop4: detected capacity change from 0 to 2048 [ 146.595804][ T28] audit: type=1326 audit(1774432933.226:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.9.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9bebc799 code=0x7ffc0000 [ 146.619765][ T28] audit: type=1326 audit(1774432933.226:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.9.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9bebc799 code=0x7ffc0000 [ 146.643971][ T7993] loop4: p2 p3 < > p4 < p5 > [ 146.648648][ T7993] loop4: partition table partially beyond EOD, truncated [ 146.670952][ T7993] loop4: p2 start 53543428 is beyond EOD, truncated [ 146.680849][ T7993] loop4: p3 start 4284289 is beyond EOD, truncated [ 146.708031][ T7993] loop4: p5 start 53543428 is beyond EOD, truncated [ 146.720183][T10872] loop4: p2 p3 < > p4 < p5 > [ 146.725095][T10872] loop4: partition table partially beyond EOD, truncated [ 146.739484][T10872] loop4: p2 start 53543428 is beyond EOD, truncated [ 146.746267][T10872] loop4: p3 start 4284289 is beyond EOD, truncated [ 146.754262][T10872] loop4: p5 start 53543428 is beyond EOD, truncated [ 146.825305][ T7993] udevd[7993]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 146.853972][ T7993] udevd[7993]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 147.138521][T10914] loop6: detected capacity change from 0 to 1024 [ 147.150016][T10914] EXT4-fs (loop6): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 147.193147][T10914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.232655][ T4475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.243745][T10922] loop1: detected capacity change from 0 to 512 [ 147.325493][T10922] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 147.333979][T10933] loop6: detected capacity change from 0 to 256 [ 147.334405][T10933] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.353533][T10922] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.378657][T10922] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.2705: corrupted inode contents [ 147.390977][T10922] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.395582][T10922] EXT4-fs (loop1): Remounting filesystem read-only [ 147.404937][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 147.404988][ C1] EXT4-fs (loop1): initial error at time 1774432934: ext4_do_update_inode:5569: inode 16 [ 147.405125][ C1] EXT4-fs (loop1): last error at time 1774432934: ext4_do_update_inode:5569: inode 16 [ 147.439110][T10922] EXT4-fs (loop1): 1 truncate cleaned up [ 147.445648][ T30] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 147.456277][ T30] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 147.467026][ T30] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 147.481009][T10922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.521056][ T7933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.545725][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2716'. [ 147.577604][T10948] raw_sendmsg: syz.1.2718 forgot to set AF_INET. Fix it! [ 147.601548][T10944] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 147.617505][T10944] vhci_hcd vhci_hcd.1: default hub control req: d10d v0006 i0007 l2 [ 147.669574][T10959] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2723'. [ 147.869428][T10986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.880953][T10986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.954049][T10999] netlink: 'syz.6.2740': attribute type 10 has an invalid length. [ 147.962093][T10999] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.2740'. [ 148.167895][T11013] loop1: detected capacity change from 0 to 128 [ 148.453391][T11023] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 148.584216][T11029] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 148.597183][T11029] vhci_hcd vhci_hcd.2: invalid port number 96 [ 148.610787][T11029] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 148.723077][T11041] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 148.792343][T11045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.802307][T11045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.860767][T11052] loop6: detected capacity change from 0 to 512 [ 148.870862][T11052] EXT4-fs (loop6): 1 truncate cleaned up [ 148.876903][T11052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.951292][T11052] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.6.2764: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 149.016609][ T28] kauditd_printk_skb: 477 callbacks suppressed [ 149.016625][ T28] audit: type=1326 audit(1774432935.616:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.7.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 149.056399][ T28] audit: type=1326 audit(1774432935.616:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.7.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 149.057205][ T4475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.131750][ T28] audit: type=1326 audit(1774432935.616:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.7.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 149.178633][T11073] loop6: detected capacity change from 0 to 512 [ 149.212027][T11073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.217053][ T28] audit: type=1326 audit(1774432935.616:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.7.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 149.234976][T11073] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.297108][ T28] audit: type=1326 audit(1774432935.616:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.7.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b6a6c799 code=0x7ffc0000 [ 149.320819][ T28] audit: type=1400 audit(1774432935.746:1897): avc: denied { read } for pid=11068 comm="syz.7.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.340721][ T28] audit: type=1400 audit(1774432935.896:1898): avc: denied { create } for pid=11076 comm="syz.7.2775" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.363040][ T28] audit: type=1400 audit(1774432935.896:1899): avc: denied { setattr } for pid=11076 comm="syz.7.2775" name="file0" dev="tmpfs" ino=1526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.393709][ T4475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.421137][ T28] audit: type=1400 audit(1774432935.896:1900): avc: denied { write } for pid=11076 comm="syz.7.2775" name="file0" dev="tmpfs" ino=1526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.444123][ T28] audit: type=1400 audit(1774432935.896:1901): avc: denied { open } for pid=11076 comm="syz.7.2775" path="/291/file0" dev="tmpfs" ino=1526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.636290][T11091] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 149.648678][T11091] vhci_hcd vhci_hcd.2: invalid port number 96 [ 149.658259][T11091] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 149.662003][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2782'. [ 149.777667][T11108] sctp: [Deprecated]: syz.1.2786 (pid 11108) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.777667][T11108] Use struct sctp_sack_info instead [ 149.825275][T11111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.895916][T11120] loop9: detected capacity change from 0 to 512 [ 149.921981][T11122] loop4: detected capacity change from 0 to 512 [ 149.929500][T11122] EXT4-fs: Mount option(s) incompatible with ext2 [ 149.945705][T11125] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2798'. [ 149.965940][T11120] EXT4-fs (loop9): 1 truncate cleaned up [ 149.976214][T11120] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.996003][T11120] EXT4-fs error (device loop9): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.9.2795: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 150.058072][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2796'. [ 150.099179][ T7919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.155319][T11147] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2808'. [ 150.350272][T11160] loop4: detected capacity change from 0 to 4096 [ 150.371443][T11160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.551515][ T4680] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 150.582313][ T4680] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 150.743081][ T6906] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.063280][T11195] batadv_slave_0: entered promiscuous mode [ 151.087339][T11194] batadv_slave_0: left promiscuous mode [ 151.200495][T11189] chnl_net:caif_netlink_parms(): no params data found [ 151.319111][T11189] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.362214][T11189] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.388652][T11189] bridge_slave_0: entered allmulticast mode [ 151.407241][T11189] bridge_slave_0: entered promiscuous mode [ 151.451038][T11214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.501554][T11214] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.531920][T11214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.571135][T11189] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.591141][ T7246] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 151.615559][T11189] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.625992][T11189] bridge_slave_1: entered allmulticast mode [ 151.632761][T11189] bridge_slave_1: entered promiscuous mode [ 151.649997][T11189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.683988][T11189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.719591][T11189] team0: Port device team_slave_0 added [ 151.728783][T11189] team0: Port device team_slave_1 added [ 151.761985][T11189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.768950][T11189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.809450][T11189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.825627][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 151.864678][T11189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.889855][T11189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.936503][ T3397] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=3397 comm=kworker/0:5 [ 151.950989][T11189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.990869][T11238] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11238 comm=syz.9.2842 [ 152.043254][T11237] usb usb4: usbfs: interface 0 claimed by hub while 'syz.6.2844' sets config #0 [ 152.044554][T11189] hsr_slave_0: entered promiscuous mode [ 152.068477][T11189] hsr_slave_1: entered promiscuous mode [ 152.074630][T11189] debugfs: 'hsr0' already exists in 'hsr' [ 152.080378][T11189] Cannot create hsr debugfs directory [ 152.137307][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2847'. [ 152.286353][T11259] loop6: detected capacity change from 0 to 1024 [ 152.315927][T11259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.352613][ T4475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.402878][T11189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.422683][T11189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.434553][T11189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.448626][T11189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.535092][T11189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.558434][T11189] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.569720][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.576848][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.595630][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.602743][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.625045][T11189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.698880][T11189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.851033][T11189] veth0_vlan: entered promiscuous mode [ 152.859166][T11189] veth1_vlan: entered promiscuous mode [ 152.885873][T11189] veth0_macvtap: entered promiscuous mode [ 152.902140][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 152.906240][T11189] veth1_macvtap: entered promiscuous mode [ 152.931073][ T3383] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.932652][T11189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.965498][T11189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.990881][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.999674][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.042985][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.059999][T11342] loop1: detected capacity change from 0 to 512 [ 153.070055][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.077377][T11342] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2858: bg 0: block 5: invalid block bitmap [ 153.108295][T11342] loop1: lost filesystem error report for type 5 error -117 [ 153.110706][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 153.124492][ C0] EXT4-fs (loop1): initial error at time 1774432939: ext4_validate_block_bitmap:432 [ 153.133984][ C0] EXT4-fs (loop1): last error at time 1774432939: ext4_validate_block_bitmap:432 [ 153.143888][T11342] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 153.159655][T11342] loop1: lost filesystem error report for type 5 error -117 [ 153.162119][T11342] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2858: invalid indirect mapped block 3 (level 2) [ 153.249431][T11342] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.249709][T11342] EXT4-fs (loop1): 1 orphan inode deleted [ 153.278785][T11357] loop2: detected capacity change from 0 to 128 [ 153.285431][T11342] EXT4-fs (loop1): 1 truncate cleaned up [ 153.311076][T11342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.361206][T11363] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 153.466947][ T7933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.580358][T11391] loop9: detected capacity change from 0 to 1024 [ 153.634934][T11392] loop6: detected capacity change from 0 to 512 [ 153.693440][T11392] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.721159][T11391] EXT4-fs: inline encryption not supported [ 153.767083][T11391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.939567][ T7919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.147903][T11441] tipc: Started in network mode [ 154.154318][T11441] tipc: Node identity ac14140f, cluster identity 4711 [ 154.162905][T11441] tipc: Enabled bearer , priority 10 [ 154.191020][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 154.191033][ T28] audit: type=1400 audit(1774432940.826:1914): avc: denied { ioctl } for pid=11450 comm="syz.2.2880" path="socket:[32694]" dev="sockfs" ino=32694 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.261279][T11460] ipvlan2: entered promiscuous mode [ 154.267481][T11460] ipvlan2: entered allmulticast mode [ 154.277716][T11460] gretap0: entered allmulticast mode [ 154.294450][T11460] team0: Device ipvlan2 failed to register rx_handler [ 154.760868][ T28] audit: type=1400 audit(1774432941.396:1915): avc: denied { ioctl } for pid=11519 comm="syz.9.2897" path="socket:[31594]" dev="sockfs" ino=31594 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.852839][ T28] audit: type=1400 audit(1774432941.436:1916): avc: denied { write } for pid=11519 comm="syz.9.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.069504][T11556] loop1: detected capacity change from 0 to 1024 [ 155.090925][T11556] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 155.127670][T11556] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 155.273154][T11556] JBD2: no valid journal superblock found [ 155.285518][T11556] EXT4-fs (loop1): Could not load journal inode [ 155.643296][ T3383] tipc: Node number set to 2886997007 [ 155.658563][ T28] audit: type=1400 audit(1774432942.286:1917): avc: denied { watch watch_reads } for pid=11571 comm="syz.7.2911" path="/317/file1" dev="tmpfs" ino=1662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.816674][T11595] syzkaller1: entered promiscuous mode [ 155.837196][T11595] syzkaller1: entered allmulticast mode [ 155.878247][T11583] loop1: detected capacity change from 0 to 8192 [ 155.912684][T11583] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 156.043118][T11617] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2923'. [ 156.155189][T11621] loop1: detected capacity change from 0 to 1024 [ 156.227260][T11621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 156.271027][T11621] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.365965][ T7933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.424172][T11646] syzkaller1: entered promiscuous mode [ 156.429698][T11646] syzkaller1: entered allmulticast mode [ 156.455886][ T28] audit: type=1400 audit(1774432943.086:1918): avc: denied { getopt } for pid=11648 comm="syz.9.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 156.520618][ T28] audit: type=1400 audit(1774432943.146:1919): avc: denied { map } for pid=11655 comm="syz.1.2940" path="socket:[31707]" dev="sockfs" ino=31707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 156.549168][ T28] audit: type=1400 audit(1774432943.146:1920): avc: denied { accept } for pid=11655 comm="syz.1.2940" path="socket:[31707]" dev="sockfs" ino=31707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 156.635046][T11672] netlink: 'syz.1.2947': attribute type 13 has an invalid length. [ 156.645493][T11672] gretap0: refused to change device tx_queue_len [ 156.652645][T11672] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 156.780945][T11680] syzkaller1: entered promiscuous mode [ 156.786973][T11680] syzkaller1: entered allmulticast mode [ 157.345964][T11718] loop2: detected capacity change from 0 to 512 [ 157.381108][T11718] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.2969: corrupted inode contents [ 157.401674][T11726] syzkaller1: entered promiscuous mode [ 157.407304][T11718] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.407491][T11718] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #3: comm syz.2.2969: mark_inode_dirty error [ 157.416730][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 157.416752][ C1] EXT4-fs (loop2): initial error at time 1774432944: ext4_do_update_inode:5569: inode 3 [ 157.416781][ C1] EXT4-fs (loop2): last error at time 1774432944: ext4_do_update_inode:5569: inode 3 [ 157.455380][T11726] syzkaller1: entered allmulticast mode [ 157.466289][T11718] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.466707][T11718] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.2969: corrupted inode contents [ 157.487786][T11718] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.487962][T11718] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.2969: mark_inode_dirty error [ 157.571089][T11718] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.573465][T11718] Quota error (device loop2): write_blk: dquota write failed [ 157.595432][T11718] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 157.605717][T11718] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.2969: Failed to acquire dquot type 0 [ 157.620425][T11718] loop2: lost filesystem error report for type 5 error -117 [ 157.641815][T11718] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.2969: corrupted inode contents [ 157.661558][T11718] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 157.661819][T11718] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.2969: mark_inode_dirty error [ 157.691065][T11718] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 157.691455][T11718] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.2969: corrupted inode contents [ 157.718870][ T28] audit: type=1400 audit(1774432944.356:1921): avc: denied { create } for pid=11735 comm="syz.7.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 157.719272][T11718] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 157.762889][T11718] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.2969: mark_inode_dirty error [ 157.790970][T11718] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 157.791786][T11718] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.2969: corrupted inode contents [ 157.866213][T11718] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 157.867445][T11718] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 157.916311][T11718] loop2: lost filesystem error report for type 5 error -117 [ 157.916537][T11718] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.2969: corrupted inode contents [ 157.966520][T11718] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.2969: mark_inode_dirty error [ 157.994299][T11718] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 158.018498][T11718] loop2: lost filesystem error report for type 5 error -117 [ 158.020176][T11718] EXT4-fs (loop2): 1 truncate cleaned up [ 158.021961][T11746] loop6: detected capacity change from 0 to 128 [ 158.044646][T11718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.057700][T11718] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.075537][T11746] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.088195][T11746] ext4 filesystem being mounted at /554/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.136848][ T4475] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.141023][T11718] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #3: comm syz.2.2969: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 158.141023][T11718] [ 158.203954][T11189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.332698][T11775] netlink: 'syz.2.2994': attribute type 1 has an invalid length. [ 158.341745][T11775] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2994'. [ 158.376837][T11780] loop2: detected capacity change from 0 to 1024 [ 158.401928][T11780] EXT4-fs: Ignoring removed oldalloc option [ 158.415097][T11780] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 158.423491][T11784] loop6: detected capacity change from 0 to 4096 [ 158.441971][T11784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.509045][ T4475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.693068][ T3383] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 158.706879][ T3383] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.018547][T11835] netlink: 'syz.6.3020': attribute type 13 has an invalid length. [ 159.048952][T11835] gretap0: refused to change device tx_queue_len [ 159.056601][T11835] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 159.308215][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 159.308236][ T28] audit: type=1400 audit(1774432945.936:1964): avc: denied { ioctl } for pid=11854 comm="syz.6.3029" path="socket:[34114]" dev="sockfs" ino=34114 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.353612][T11864] loop1: detected capacity change from 0 to 256 [ 159.378523][T11866] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3033'. [ 159.411288][ T28] audit: type=1400 audit(1774432946.006:1965): avc: denied { watch } for pid=11863 comm="syz.1.3032" path="/235/file0/file0" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 159.781984][T11881] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3040'. [ 159.988312][ T28] audit: type=1400 audit(1774432946.616:1966): avc: denied { setopt } for pid=11908 comm="syz.6.3050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 160.113954][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3058'. [ 160.129909][T11924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.194384][ T28] audit: type=1400 audit(1774432946.826:1967): avc: denied { sqpoll } for pid=11938 comm="syz.7.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 160.225464][T11944] loop2: detected capacity change from 0 to 512 [ 160.234222][T11947] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3067'. [ 160.244060][T11947] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3067'. [ 160.273962][T11949] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11949 comm=syz.6.3068 [ 160.401266][ T3383] kernel write not supported for file bpf-prog (pid: 3383 comm: kworker/0:3) [ 160.641098][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 160.843587][ T28] audit: type=1400 audit(1774432947.476:1968): avc: denied { create } for pid=11997 comm="syz.2.3083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 160.863364][ T28] audit: type=1400 audit(1774432947.476:1969): avc: denied { ioctl } for pid=11997 comm="syz.2.3083" path="socket:[34336]" dev="sockfs" ino=34336 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 160.915768][T12002] loop2: detected capacity change from 0 to 128 [ 160.939180][T12002] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.955590][T12002] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.968568][ T28] audit: type=1400 audit(1774432947.596:1970): avc: denied { create } for pid=12005 comm="syz.9.3086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.997505][ T28] audit: type=1400 audit(1774432947.626:1971): avc: denied { ioctl } for pid=12005 comm="syz.9.3086" path="socket:[34346]" dev="sockfs" ino=34346 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.022953][ T28] audit: type=1400 audit(1774432947.626:1972): avc: denied { setopt } for pid=12005 comm="syz.9.3086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.044283][ T28] audit: type=1400 audit(1774432947.626:1973): avc: denied { bind } for pid=12005 comm="syz.9.3086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.049201][T11189] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.078685][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3089'. [ 161.132246][T12019] loop1: detected capacity change from 0 to 512 [ 161.140355][T12019] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3092: invalid indirect mapped block 256 (level 2) [ 161.154240][T12019] fserror_report: 2 callbacks suppressed [ 161.154252][T12019] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.160427][T12019] EXT4-fs (loop1): 2 truncates cleaned up [ 161.169651][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 161.169670][ C1] EXT4-fs (loop1): initial error at time 1774432947: ext4_free_branches:1023: inode 11 [ 161.169709][ C1] EXT4-fs (loop1): last error at time 1774432947: ext4_free_branches:1023: inode 11 [ 161.201447][T12019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.225525][ T7933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.253635][T12023] Set syz1 is full, maxelem 1038 reached [ 161.502605][T12036] netlink: 63 bytes leftover after parsing attributes in process `syz.7.3099'. [ 161.768147][T12070] loop1: detected capacity change from 0 to 512 [ 161.811827][T12070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.863273][ T7933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.953682][T12089] 9pnet_fd: p9_fd_create_tcp (12089): problem connecting socket to 127.0.0.1 [ 162.018286][T12101] program syz.2.3127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.370193][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'. [ 162.379280][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'. [ 162.434598][T12141] Invalid argument reading file caps for ./file0 [ 162.700754][ T3524] Bluetooth: hci0: command 0x1003 tx timeout [ 162.700754][T10208] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 162.737710][T12158] loop2: detected capacity change from 0 to 1024 [ 162.771663][T12158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.798286][T11189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.804100][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.146285][T12207] loop9: detected capacity change from 0 to 128 [ 163.287452][T12224] loop9: detected capacity change from 0 to 512 [ 163.324252][T12224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.352784][T12224] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.382297][ T7919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.757895][ T3475] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 163.780248][ T3475] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.849597][T12300] __nla_validate_parse: 52 callbacks suppressed [ 163.849611][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3218'. [ 163.865157][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3218'. [ 163.962401][T12313] loop2: detected capacity change from 0 to 1024 [ 163.999942][T12313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.025857][T11189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.182956][ T2999] ================================================================== [ 164.191063][ T2999] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat [ 164.198524][ T2999] [ 164.200875][ T2999] write to 0xffff88811b70e000 of 4 bytes by task 7993 on cpu 1: [ 164.208486][ T2999] d_make_discardable+0x4f/0xa0 [ 164.213331][ T2999] simple_unlink+0x68/0x80 [ 164.217769][ T2999] shmem_unlink+0x12d/0x140 [ 164.222266][ T2999] vfs_unlink+0x1c7/0x490 [ 164.226587][ T2999] filename_unlinkat+0x1e2/0x410 [ 164.231510][ T2999] __se_sys_unlink+0x2b/0xe0 [ 164.236086][ T2999] __x64_sys_unlink+0x1f/0x30 [ 164.240746][ T2999] x64_sys_call+0x2eb6/0x3020 [ 164.245414][ T2999] do_syscall_64+0x12c/0x370 [ 164.249988][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.255951][ T2999] [ 164.258258][ T2999] read to 0xffff88811b70e000 of 4 bytes by task 2999 on cpu 0: [ 164.265789][ T2999] do_readlinkat+0xa0/0x2f0 [ 164.270286][ T2999] __x64_sys_readlink+0x47/0x60 [ 164.275121][ T2999] x64_sys_call+0x2b51/0x3020 [ 164.279791][ T2999] do_syscall_64+0x12c/0x370 [ 164.284369][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.290245][ T2999] [ 164.292550][ T2999] value changed: 0x08300080 -> 0x00300180 [ 164.298247][ T2999] [ 164.300554][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 164.306689][ T2999] CPU: 0 UID: 0 PID: 2999 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 164.315522][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.325559][ T2999] ================================================================== [ 164.870773][T10208] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.870808][ T3524] Bluetooth: hci0: command 0x1003 tx timeout