last executing test programs: 1m2.463195364s ago: executing program 2 (id=419): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m2.418798126s ago: executing program 2 (id=422): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x3, 0xfd, 0x9}}, 0x1c}}, 0x20000090) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x200000ca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=""/250}, 0x20) 1m0.873675307s ago: executing program 2 (id=464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088800fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m0.771338692s ago: executing program 2 (id=466): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m0.703871135s ago: executing program 2 (id=468): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) 1m0.383247952s ago: executing program 2 (id=471): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4050}, 0x4) close(r0) 1m0.368855673s ago: executing program 32 (id=471): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4050}, 0x4) close(r0) 46.117860573s ago: executing program 0 (id=879): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000001440)) 45.61088276s ago: executing program 0 (id=893): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb8}}, 0x0) 45.393233151s ago: executing program 0 (id=897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd49032800030020000000600000000004730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) 44.951037394s ago: executing program 0 (id=904): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 44.871456768s ago: executing program 0 (id=907): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000004, 0x200000005c832, 0xffffffffffffffff, 0xb8f09000) 44.64136555s ago: executing program 0 (id=916): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 44.64115628s ago: executing program 33 (id=916): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 28.889656119s ago: executing program 3 (id=1390): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r1, r1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0) 28.731713727s ago: executing program 3 (id=1391): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 28.656564791s ago: executing program 3 (id=1394): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {0x0, 0x1, r1, 0x1c, 0x1, @in6={0xa, 0x4e24, 0x8000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}}}, 0xa0) ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) 28.642101422s ago: executing program 3 (id=1395): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0xc}, &(0x7f0000000080)=0x8) 28.624035012s ago: executing program 3 (id=1396): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x17d) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x201) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 28.593444634s ago: executing program 3 (id=1398): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) 13.547380746s ago: executing program 34 (id=1398): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) 2.50015109s ago: executing program 4 (id=2064): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) 2.451895483s ago: executing program 4 (id=2067): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 2.410090665s ago: executing program 4 (id=2071): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.210833466s ago: executing program 5 (id=2077): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @private=0xa010102}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="cb57afec", 0x4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000004) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2.179158567s ago: executing program 5 (id=2078): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, 0x30) 1.73360147s ago: executing program 6 (id=2088): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4010, &(0x7f00000001c0)={[{@nodiscard}]}, 0x2, 0xbd8, &(0x7f00000083c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file1\x00', r0, r1) 1.643372805s ago: executing program 7 (id=2089): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) waitid(0x2, r1, 0x0, 0x4, 0x0) 1.607214737s ago: executing program 1 (id=2090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 1.529343931s ago: executing program 4 (id=2091): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)) 1.476777503s ago: executing program 6 (id=2092): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 1.476379984s ago: executing program 7 (id=2093): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e00660000070290780a010102ac1414aa11ff0921"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 1.387241668s ago: executing program 7 (id=2094): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.375376959s ago: executing program 7 (id=2095): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d00)=[{{&(0x7f0000002100)={0xa, 0x4e22, 0x17, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000002140)='7', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.366281679s ago: executing program 4 (id=2096): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 1.283306023s ago: executing program 5 (id=2097): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.268478104s ago: executing program 6 (id=2098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000001c0)="df12c9f7b9a6000f000000000000", 0x0, 0x80000084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.166173569s ago: executing program 1 (id=2099): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40080) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x134, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0xa0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x80, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 509.396384ms ago: executing program 4 (id=2100): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x1}, 0x8) 385.63322ms ago: executing program 1 (id=2101): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000080)='@', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) 366.251051ms ago: executing program 6 (id=2102): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1ff}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 365.667141ms ago: executing program 5 (id=2103): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) unshare(0x2a020480) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x1, &(0x7f0000000140)=@raw=[@alu={0x7, 0x1, 0x4, 0xa, 0x3, 0x0, 0xfffffffffffffff0}], 0x0, 0xd6e, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x8, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 313.124864ms ago: executing program 1 (id=2104): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 197.91609ms ago: executing program 6 (id=2105): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) 197.68934ms ago: executing program 5 (id=2106): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x3000, 0x1, 0x1, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 197.08549ms ago: executing program 7 (id=2107): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 137.705893ms ago: executing program 1 (id=2108): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_io_uring_setup(0x836, &(0x7f00000003c0)={0x0, 0xb62e, 0x400, 0xfffffffe, 0x182}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000002c0)=@nl=@unspec}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 124.423624ms ago: executing program 7 (id=2109): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 114.554004ms ago: executing program 6 (id=2110): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000056, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r1, &(0x7f0000001f00)=""/4111, 0x100f) 550.59µs ago: executing program 1 (id=2111): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000012c0)=""/182, 0xb6}], 0x1) 0s ago: executing program 5 (id=2112): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) kernel console output (not intermixed with test programs): 46231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.904121][ T5534] loop5: detected capacity change from 0 to 512 [ 59.914044][ T5534] EXT4-fs (loop5): orphan cleanup on readonly fs [ 59.925194][ T5534] EXT4-fs error (device loop5): ext4_quota_enable:7188: comm syz.5.723: Bad quota inum: 2, type: 1 [ 59.936609][ T5534] loop5: lost filesystem error report for type 5 error -117 [ 59.936733][ T5534] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 59.944079][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 59.944096][ C0] EXT4-fs (loop5): last error at time 1774472136: ext4_quota_enable:7188 [ 59.980313][ T5534] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 59.990608][ T5534] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 60.000300][ T5534] EXT4-fs warning (device loop5): read_mmp_block:111: Error -117 while reading MMP block 8 [ 60.060251][ T5551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.731'. [ 60.238199][ T5567] loop3: detected capacity change from 0 to 2048 [ 60.279716][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.318409][ T5575] netlink: 'syz.3.742': attribute type 13 has an invalid length. [ 60.338574][ T5575] gretap0: refused to change device tx_queue_len [ 60.359676][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.368789][ T5575] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 60.370471][ T5581] loop5: detected capacity change from 0 to 512 [ 60.399519][ T5581] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 60.419427][ T5581] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 60.742899][ T5610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.087208][ T5650] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 61.188663][ T5656] loop1: detected capacity change from 0 to 128 [ 61.247557][ T5656] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.294074][ T5668] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 61.303309][ T5668] System zones: 0-5 [ 61.454812][ T5681] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.758054][ T5714] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.758217][ T5716] EXT4-fs: Ignoring removed bh option [ 61.785714][ T5716] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 61.819860][ T5716] EXT4-fs (loop3): 1 truncate cleaned up [ 61.842152][ T5716] netlink: 220 bytes leftover after parsing attributes in process `syz.3.805'. [ 61.851285][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 62.040395][ T5732] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.811: Directory hole found for htree index block 0 [ 62.066325][ T5732] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 62.074536][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 62.074561][ C1] EXT4-fs (loop5): initial error at time 1774472138: dx_probe:791: inode 2 [ 62.074583][ C1] EXT4-fs (loop5): last error at time 1774472138: dx_probe:791: inode 2 [ 62.116907][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 62.116921][ T28] audit: type=1400 audit(1774472138.209:738): avc: denied { remount } for pid=5731 comm="syz.5.811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.153063][ T5732] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 62.325187][ T28] audit: type=1400 audit(1774472138.419:739): avc: denied { getopt } for pid=5752 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.452863][ T5765] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.465638][ T5765] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 62.499336][ T28] audit: type=1400 audit(1774472138.589:740): avc: denied { accept } for pid=5776 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.603621][ T3407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.612182][ T3407] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.627064][ T5765] EXT4-fs (loop5): orphan cleanup on readonly fs [ 62.637897][ T28] audit: type=1400 audit(1774472138.699:741): avc: denied { read write } for pid=5785 comm="syz.3.830" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 62.709511][ T5765] Quota error (device loop5): v2_read_file_info: Can't read info structure [ 62.730256][ T28] audit: type=1400 audit(1774472138.699:742): avc: denied { open } for pid=5785 comm="syz.3.830" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 62.780432][ T5765] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 62.810861][ T28] audit: type=1400 audit(1774472138.699:743): avc: denied { bind } for pid=5786 comm="syz.0.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.853657][ T5765] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 62.875982][ T28] audit: type=1400 audit(1774472138.699:744): avc: denied { setopt } for pid=5786 comm="syz.0.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.918293][ T5765] EXT4-fs (loop5): 1 truncate cleaned up [ 62.943611][ T28] audit: type=1400 audit(1774472138.729:745): avc: denied { getopt } for pid=5784 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.970776][ T5823] netlink: 'syz.0.840': attribute type 12 has an invalid length. [ 62.973145][ T5765] EXT4-fs (loop5): shut down requested (0) [ 63.001847][ T28] audit: type=1400 audit(1774472139.089:746): avc: denied { create } for pid=5820 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.026930][ T5823] netlink: 'syz.0.840': attribute type 29 has an invalid length. [ 63.029320][ T5827] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.824: corrupted in-inode xattr: overlapping e_value [ 63.094147][ T5823] netlink: 148 bytes leftover after parsing attributes in process `syz.0.840'. [ 63.173228][ T5837] set_capacity_and_notify: 7 callbacks suppressed [ 63.173243][ T5837] loop3: detected capacity change from 0 to 512 [ 63.259264][ T5837] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.265716][ T5837] EXT4-fs error (device loop3): ext4_quota_enable:7188: comm syz.3.845: Bad quota inum: 2, type: 1 [ 63.282553][ T5837] loop3: lost filesystem error report for type 5 error -117 [ 63.282746][ T5837] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 63.290086][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 63.290103][ C1] EXT4-fs (loop3): last error at time 1774472139: ext4_quota_enable:7188 [ 63.320768][ T5837] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 63.335859][ T5837] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 63.349405][ T5837] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 8 [ 63.775957][ T5902] loop3: detected capacity change from 0 to 2048 [ 63.812507][ T5902] EXT4-fs: Ignoring removed oldalloc option [ 63.861014][ T5902] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 63.882747][ T5902] System zones: 0-7 [ 63.895247][ T5902] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.861: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 63.912102][ T5902] EXT4-fs (loop3): Remounting filesystem read-only [ 63.943746][ T5913] netlink: 'syz.5.874': attribute type 5 has an invalid length. [ 64.101196][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.869'. [ 64.117554][ T5928] netlink: 'syz.5.869': attribute type 30 has an invalid length. [ 64.168596][ T5045] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.197549][ T5045] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.214014][ T5045] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.230780][ T5045] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.247818][ T5943] net_ratelimit: 12 callbacks suppressed [ 64.247840][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.286508][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.302655][ T3394] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.313919][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.360090][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.401961][ T5960] Invalid argument reading file caps for ./file0 [ 64.402565][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.417928][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.426787][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.442070][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.467384][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.738450][ T5987] netlink: 104 bytes leftover after parsing attributes in process `syz.0.893'. [ 65.042115][ T6007] Invalid argument reading file caps for ./file0 [ 65.489472][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.560796][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.696447][ T5045] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.752201][ T5045] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.802680][ T5045] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.876273][ T5045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.962732][ T3377] IPVS: starting estimator thread 0... [ 65.978325][ T6047] chnl_net:caif_netlink_parms(): no params data found [ 66.004954][ T5045] bridge_slave_1: left allmulticast mode [ 66.015782][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.025599][ T5045] bridge_slave_0: left allmulticast mode [ 66.033272][ T5045] bridge_slave_0: left promiscuous mode [ 66.039008][ T5045] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.049301][ T6065] IPVS: using max 2544 ests per chain, 127200 per kthread [ 66.162553][ T5045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.174244][ T5045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.185138][ T5045] bond0 (unregistering): Released all slaves [ 66.214653][ T6081] syzkaller1: entered promiscuous mode [ 66.227832][ T6081] syzkaller1: entered allmulticast mode [ 66.250939][ T5045] hsr_slave_0: left promiscuous mode [ 66.267383][ T5045] hsr_slave_1: left promiscuous mode [ 66.281457][ T5045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.298916][ T5045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.310265][ T5045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.317725][ T5045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.330522][ T5045] veth1_macvtap: left promiscuous mode [ 66.336081][ T5045] veth0_macvtap: left promiscuous mode [ 66.343567][ T5045] veth1_vlan: left promiscuous mode [ 66.356829][ T5045] veth0_vlan: left promiscuous mode [ 66.403240][ T6108] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 66.502313][ T5045] team0 (unregistering): Port device team_slave_1 removed [ 66.514101][ T5045] team0 (unregistering): Port device team_slave_0 removed [ 66.514433][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.935'. [ 66.608215][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.617369][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.624887][ T6047] bridge_slave_0: entered allmulticast mode [ 66.625478][ T6129] loop4: detected capacity change from 0 to 128 [ 66.631581][ T6047] bridge_slave_0: entered promiscuous mode [ 66.645132][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.652687][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.660199][ T6047] bridge_slave_1: entered allmulticast mode [ 66.666688][ T6047] bridge_slave_1: entered promiscuous mode [ 66.733833][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.792537][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.805767][ T6144] loop5: detected capacity change from 0 to 1024 [ 66.828381][ T6144] EXT4-fs: Ignoring removed oldalloc option [ 66.851765][ T6144] EXT4-fs: Ignoring removed bh option [ 66.868920][ T6047] team0: Port device team_slave_0 added [ 66.903187][ T6144] EXT4-fs mount: 38 callbacks suppressed [ 66.903200][ T6144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.909804][ T6047] team0: Port device team_slave_1 added [ 66.998838][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.006120][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.032136][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.043416][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.051786][ T4655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.060800][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.134191][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.149974][ T6171] netlink: 336 bytes leftover after parsing attributes in process `syz.5.950'. [ 67.171959][ T6171] netlink: 336 bytes leftover after parsing attributes in process `syz.5.950'. [ 67.234294][ T6047] hsr_slave_0: entered promiscuous mode [ 67.332318][ T6047] hsr_slave_1: entered promiscuous mode [ 67.348097][ T6047] debugfs: 'hsr0' already exists in 'hsr' [ 67.370884][ T6047] Cannot create hsr debugfs directory [ 67.458112][ T6192] batadv_slave_1: entered promiscuous mode [ 67.486985][ T6191] batadv_slave_1: left promiscuous mode [ 67.494260][ T6199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6199 comm=syz.5.962 [ 67.672974][ T6047] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 67.726513][ T6047] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 67.787111][ T6047] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 67.839334][ T6047] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 67.856925][ T6241] loop5: detected capacity change from 0 to 512 [ 67.865962][ T6241] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.901929][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 67.901943][ T28] audit: type=1326 audit(1774472143.999:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 67.937216][ T6241] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.974: invalid indirect mapped block 4294967295 (level 1) [ 67.951947][ T6241] fserror_report: 2 callbacks suppressed [ 67.951961][ T6241] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 67.957741][ T28] audit: type=1326 audit(1774472143.999:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 67.966934][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 67.966951][ C0] EXT4-fs (loop5): initial error at time 1774472144: ext4_free_branches:1023: inode 11 [ 67.966978][ C0] EXT4-fs (loop5): last error at time 1774472144: ext4_free_branches:1023: inode 11 [ 68.015872][ T6241] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.974: invalid indirect mapped block 4294967295 (level 1) [ 68.035474][ T6241] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.035534][ T28] audit: type=1326 audit(1774472143.999:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 68.069338][ T6241] EXT4-fs (loop5): 2 truncates cleaned up [ 68.074218][ T28] audit: type=1326 audit(1774472143.999:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 68.098685][ T28] audit: type=1326 audit(1774472143.999:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 68.098946][ T6241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.149046][ T6267] loop1: detected capacity change from 0 to 512 [ 68.186854][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.194397][ T6267] ext4: Unknown parameter 'uid<00000000000000060929' [ 68.221895][ T6267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.979'. [ 68.236914][ T28] audit: type=1326 audit(1774472143.999:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 68.270644][ T6047] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.287439][ T4655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.303738][ T28] audit: type=1326 audit(1774472143.999:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 68.304704][ T5036] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.334007][ T5036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.339773][ T28] audit: type=1326 audit(1774472143.999:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 68.346178][ T5036] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.371436][ T5036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.388847][ T28] audit: type=1326 audit(1774472143.999:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 68.414377][ T6272] lo: entered allmulticast mode [ 68.420406][ T6274] lo: left allmulticast mode [ 68.423009][ T28] audit: type=1326 audit(1774472143.999:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 68.463323][ T6047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.533338][ T6047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.558794][ T6290] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 68.565323][ T6290] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.594145][ T6290] vhci_hcd vhci_hcd.0: Device attached [ 68.629575][ T6292] vhci_hcd: connection closed [ 68.631235][ T5045] vhci_hcd vhci_hcd.1: stop threads [ 68.642340][ T5045] vhci_hcd vhci_hcd.1: release socket [ 68.647786][ T5045] vhci_hcd vhci_hcd.1: disconnect device [ 68.716028][ T6047] veth0_vlan: entered promiscuous mode [ 68.723643][ T6047] veth1_vlan: entered promiscuous mode [ 68.738809][ T6047] veth0_macvtap: entered promiscuous mode [ 68.752161][ T6047] veth1_macvtap: entered promiscuous mode [ 68.768914][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.783192][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.794846][ T5036] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.812626][ T5036] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.831031][ T5036] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.841153][ T5036] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.919530][ T6333] loop4: detected capacity change from 0 to 512 [ 68.930584][ T6333] EXT4-fs: Ignoring removed nobh option [ 68.961393][ T6333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.975130][ T6333] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.018992][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.295960][ T6369] serio: Serial port ptm0 [ 69.423668][ T6388] xt_hashlimit: size too large, truncated to 1048576 [ 69.443496][ T6391] loop5: detected capacity change from 0 to 128 [ 69.618773][ T6406] syz.4.1025 (6406) used greatest stack depth: 9072 bytes left [ 69.649249][ T3394] net_ratelimit: 12 callbacks suppressed [ 69.649263][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.711715][ T6413] futex_wake_op: syz.4.1027 tries to shift op by -1; fix this program [ 69.887084][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.898252][ T6429] loop3: detected capacity change from 0 to 512 [ 69.908049][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.128250][ T6445] loop3: detected capacity change from 0 to 1024 [ 70.151631][ T6445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.220297][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.262540][ T6452] loop3: detected capacity change from 0 to 1024 [ 70.312743][ T6452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.401776][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.510818][ T6465] loop6: detected capacity change from 0 to 1024 [ 70.525340][ T6465] EXT4-fs: inline encryption not supported [ 70.574484][ T6465] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.620737][ T6465] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.1046: lblock 2 mapped to illegal pblock 2 (length 1) [ 70.655074][ T6465] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 70.659167][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 70.674689][ C0] EXT4-fs (loop6): initial error at time 1774472146: ext4_map_blocks:776: inode 3: block 2 [ 70.684707][ C0] EXT4-fs (loop6): last error at time 1774472146: ext4_map_blocks:776: inode 3: block 2 [ 70.686127][ T6465] EXT4-fs (loop6): Remounting filesystem read-only [ 70.694991][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.705127][ T6479] loop5: detected capacity change from 0 to 256 [ 70.749299][ T6465] EXT4-fs (loop6): 1 orphan inode deleted [ 70.755522][ T6465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.803397][ T6047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.837893][ T6479] FAT-fs (loop5): Directory bread(block 64) failed [ 70.845165][ T6479] FAT-fs (loop5): Directory bread(block 65) failed [ 70.879097][ T6479] FAT-fs (loop5): Directory bread(block 66) failed [ 70.899303][ T6479] FAT-fs (loop5): Directory bread(block 67) failed [ 70.909409][ T6479] FAT-fs (loop5): Directory bread(block 68) failed [ 70.929236][ T6479] FAT-fs (loop5): Directory bread(block 69) failed [ 70.949921][ T6479] FAT-fs (loop5): Directory bread(block 70) failed [ 70.956497][ T6479] FAT-fs (loop5): Directory bread(block 71) failed [ 70.957079][ T6491] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1056'. [ 71.003143][ T6479] FAT-fs (loop5): Directory bread(block 72) failed [ 71.016066][ T6479] FAT-fs (loop5): Directory bread(block 73) failed [ 71.030685][ T6497] loop6: detected capacity change from 0 to 512 [ 71.030735][ T6496] loop4: detected capacity change from 0 to 512 [ 71.089599][ T6497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.119947][ T6496] EXT4-fs (loop4): 1 truncate cleaned up [ 71.128005][ T6496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.162389][ T6496] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1060: bg 0: block 465: padding at end of block bitmap is not set [ 71.177852][ T6497] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.285868][ T6047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.300926][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.457561][ T6516] Process accounting resumed [ 71.537681][ T6533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1074'. [ 71.550066][ T6537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.558319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.655822][ T6533] bond2: option primary_reselect: invalid value (8) [ 71.727347][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.736779][ T6533] bond2 (unregistering): Released all slaves [ 71.775971][ T6552] syzkaller1: entered promiscuous mode [ 71.789491][ T6547] loop4: detected capacity change from 0 to 8192 [ 71.802435][ T6552] syzkaller1: entered allmulticast mode [ 71.819682][ T6547] FAT-fs (loop4): error, invalid access to FAT (entry 0x00004614) [ 71.827509][ T6547] FAT-fs (loop4): Filesystem has been set read-only [ 71.862017][ T6547] FAT-fs (loop4): error, invalid access to FAT (entry 0x00004614) [ 71.873813][ T6547] FAT-fs (loop4): error, invalid access to FAT (entry 0x00004614) [ 71.887706][ T6547] syz.4.1079: attempt to access beyond end of device [ 71.887706][ T6547] loop4: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 71.901801][ T6547] Buffer I/O error on dev loop4, logical block 18010, async page read [ 71.913880][ T6547] FAT-fs (loop4): error, invalid access to FAT (entry 0x00004614) [ 71.922032][ T6547] FAT-fs (loop4): error, invalid access to FAT (entry 0x00004614) [ 71.942136][ T6547] FAT-fs (loop4): error, invalid access to FAT (entry 0x00004614) [ 71.953275][ T6547] FAT-fs (loop4): error, invalid access to FAT (entry 0x00004614) [ 71.967899][ T6547] FAT-fs (loop4): error, invalid access to FAT (entry 0x00004614) [ 71.986969][ T6547] FAT-fs (loop4): error, invalid access to FAT (entry 0x00004614) [ 72.007566][ T6562] EXT4-fs: Ignoring removed orlov option [ 72.027511][ T6562] EXT4-fs: Ignoring removed nobh option [ 72.032953][ T6566] msdos: Unknown parameter 'nodojs' [ 72.033767][ T6547] syz.4.1079: attempt to access beyond end of device [ 72.033767][ T6547] loop4: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 72.057118][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1088'. [ 72.067222][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1088'. [ 72.072408][ T6547] Buffer I/O error on dev loop4, logical block 18010, async page read [ 72.086981][ T6547] FAT-fs (loop4): error, invalid access to FAT (entry 0x00004614) [ 72.095953][ T6547] syz.4.1079: attempt to access beyond end of device [ 72.095953][ T6547] loop4: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 72.115589][ T6547] Buffer I/O error on dev loop4, logical block 18010, async page read [ 72.154451][ T6562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.178554][ T6547] syz.4.1079: attempt to access beyond end of device [ 72.178554][ T6547] loop4: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 72.205847][ T6547] Buffer I/O error on dev loop4, logical block 18010, async page read [ 72.219501][ T6547] syz.4.1079: attempt to access beyond end of device [ 72.219501][ T6547] loop4: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 72.237846][ T6547] Buffer I/O error on dev loop4, logical block 18010, async page read [ 72.256247][ T6547] syz.4.1079: attempt to access beyond end of device [ 72.256247][ T6547] loop4: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 72.270228][ T6547] Buffer I/O error on dev loop4, logical block 18010, async page read [ 72.278477][ T6547] syz.4.1079: attempt to access beyond end of device [ 72.278477][ T6547] loop4: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 72.295286][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.321083][ T6547] Buffer I/O error on dev loop4, logical block 18010, async page read [ 72.341698][ T6547] syz.4.1079: attempt to access beyond end of device [ 72.341698][ T6547] loop4: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 72.342261][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.356940][ T6547] Buffer I/O error on dev loop4, logical block 18010, async page read [ 72.392353][ T6589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.401874][ T6547] syz.4.1079: attempt to access beyond end of device [ 72.401874][ T6547] loop4: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 72.416873][ T6589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.425118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.551332][ T6547] Buffer I/O error on dev loop4, logical block 18010, async page read [ 72.573581][ T6604] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1106'. [ 72.593049][ T6604] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1106'. [ 72.609755][ T6547] syz.4.1079: attempt to access beyond end of device [ 72.609755][ T6547] loop4: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 72.626019][ T6547] Buffer I/O error on dev loop4, logical block 18010, async page read [ 72.759752][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.236632][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 73.236647][ T28] audit: type=1400 audit(1774472149.329:861): avc: denied { accept } for pid=6646 comm="syz.6.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.263209][ T28] audit: type=1326 audit(1774472149.349:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6649 comm="syz.5.1126" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bde51c799 code=0x0 [ 73.587057][ T28] audit: type=1326 audit(1774472149.679:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 73.614751][ T6676] SELinux: failed to load policy [ 73.622875][ T28] audit: type=1326 audit(1774472149.679:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 73.646704][ T28] audit: type=1326 audit(1774472149.679:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 73.670493][ T28] audit: type=1326 audit(1774472149.679:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 73.694390][ T28] audit: type=1326 audit(1774472149.679:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 73.717901][ T28] audit: type=1326 audit(1774472149.679:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 73.745499][ T28] audit: type=1326 audit(1774472149.679:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 73.772528][ T28] audit: type=1326 audit(1774472149.679:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f239eddc799 code=0x7ffc0000 [ 73.796879][ T6685] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.813371][ T6687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.826605][ T6687] ext4 filesystem being mounted at /227/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.855924][ T3407] IPVS: starting estimator thread 0... [ 73.862719][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.872645][ T6685] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.900434][ T6700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1145'. [ 73.926134][ T6685] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.959549][ T6696] IPVS: using max 2784 ests per chain, 139200 per kthread [ 74.000151][ T6685] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.099615][ T5036] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.112965][ T5036] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.160070][ T5036] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.172923][ T6731] tipc: Started in network mode [ 74.177915][ T6731] tipc: Node identity ac1414aa, cluster identity 4711 [ 74.185626][ T6731] tipc: Enabled bearer , priority 10 [ 74.194797][ T6735] set_capacity_and_notify: 3 callbacks suppressed [ 74.194810][ T6735] loop1: detected capacity change from 0 to 128 [ 74.213822][ T5041] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.292261][ T6743] loop1: detected capacity change from 0 to 512 [ 74.299028][ T6743] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.513357][ T6768] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1189'. [ 74.557256][ T6766] SELinux: ebitmap: empty map [ 74.574099][ T6766] SELinux: failed to load policy [ 74.727421][ T6789] unsupported nla_type 210 [ 74.825656][ T6798] loop3: detected capacity change from 0 to 1024 [ 74.855365][ T3421] net_ratelimit: 1 callbacks suppressed [ 74.855378][ T3421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.872587][ T6798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.924035][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.976437][ T6820] tmpfs: Bad value for 'mpol' [ 75.023053][ T6827] loop3: detected capacity change from 0 to 256 [ 75.067289][ T6835] loop1: detected capacity change from 0 to 256 [ 75.083046][ T6827] FAT-fs (loop3): Directory bread(block 64) failed [ 75.096360][ T6827] FAT-fs (loop3): Directory bread(block 65) failed [ 75.115533][ T6835] FAT-fs (loop1): Directory bread(block 64) failed [ 75.119907][ T6827] FAT-fs (loop3): Directory bread(block 66) failed [ 75.129338][ T6827] FAT-fs (loop3): Directory bread(block 67) failed [ 75.130434][ T6835] FAT-fs (loop1): Directory bread(block 65) failed [ 75.151904][ T6827] FAT-fs (loop3): Directory bread(block 68) failed [ 75.159450][ T6835] FAT-fs (loop1): Directory bread(block 66) failed [ 75.166011][ T6835] FAT-fs (loop1): Directory bread(block 67) failed [ 75.166098][ T6827] FAT-fs (loop3): Directory bread(block 69) failed [ 75.173082][ T6835] FAT-fs (loop1): Directory bread(block 68) failed [ 75.183621][ T6827] FAT-fs (loop3): Directory bread(block 70) failed [ 75.185746][ T3394] tipc: Node number set to 2886997162 [ 75.203293][ T6835] FAT-fs (loop1): Directory bread(block 69) failed [ 75.210405][ T6827] FAT-fs (loop3): Directory bread(block 71) failed [ 75.211803][ T6846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.217058][ T6827] FAT-fs (loop3): Directory bread(block 72) failed [ 75.225250][ T6835] FAT-fs (loop1): Directory bread(block 70) failed [ 75.232108][ T6827] FAT-fs (loop3): Directory bread(block 73) failed [ 75.238504][ T6835] FAT-fs (loop1): Directory bread(block 71) failed [ 75.251418][ T6835] FAT-fs (loop1): Directory bread(block 72) failed [ 75.257923][ T6835] FAT-fs (loop1): Directory bread(block 73) failed [ 75.319354][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.546075][ T6875] netlink: 'syz.5.1222': attribute type 3 has an invalid length. [ 75.858420][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.895603][ T3421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.327583][ T6917] hsr0: entered allmulticast mode [ 76.339178][ T6917] hsr_slave_0: entered allmulticast mode [ 76.347010][ T6917] hsr_slave_1: entered allmulticast mode [ 76.373724][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 76.408860][ T6917] hsr_slave_0: left promiscuous mode [ 76.431033][ T6917] hsr_slave_1: left promiscuous mode [ 76.439237][ T3421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.495708][ T6917] hsr0 (unregistering): left allmulticast mode [ 76.634094][ T6929] loop4: detected capacity change from 0 to 1024 [ 76.665941][ T6929] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 76.683926][ T6929] System zones: 0-1, 3-36 [ 76.694583][ T6929] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1244: bad orphan inode 134217728 [ 76.719211][ T6929] loop4: lost filesystem error report for type 5 error -117 [ 76.731746][ T6929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.782414][ T6943] loop5: detected capacity change from 0 to 128 [ 76.817393][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.921146][ T3421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.022132][ T5045] bio_check_eod: 76 callbacks suppressed [ 77.022142][ T5045] kworker/u8:13: attempt to access beyond end of device [ 77.022142][ T5045] loop5: rw=1, sector=817, nr_sectors = 8 limit=128 [ 77.048764][ T5045] kworker/u8:13: attempt to access beyond end of device [ 77.048764][ T5045] loop5: rw=1, sector=849, nr_sectors = 8 limit=128 [ 77.062507][ T5045] kworker/u8:13: attempt to access beyond end of device [ 77.062507][ T5045] loop5: rw=1, sector=881, nr_sectors = 8 limit=128 [ 77.076974][ T5045] kworker/u8:13: attempt to access beyond end of device [ 77.076974][ T5045] loop5: rw=1, sector=913, nr_sectors = 8 limit=128 [ 77.091986][ T5045] kworker/u8:13: attempt to access beyond end of device [ 77.091986][ T5045] loop5: rw=1, sector=945, nr_sectors = 8 limit=128 [ 77.112890][ T5045] kworker/u8:13: attempt to access beyond end of device [ 77.112890][ T5045] loop5: rw=1, sector=977, nr_sectors = 8 limit=128 [ 77.126684][ T5045] kworker/u8:13: attempt to access beyond end of device [ 77.126684][ T5045] loop5: rw=1, sector=1009, nr_sectors = 8 limit=128 [ 77.146497][ T5045] kworker/u8:13: attempt to access beyond end of device [ 77.146497][ T5045] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 77.165290][ T5045] kworker/u8:13: attempt to access beyond end of device [ 77.165290][ T5045] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 77.179613][ T5045] kworker/u8:13: attempt to access beyond end of device [ 77.179613][ T5045] loop5: rw=1, sector=321, nr_sectors = 8 limit=128 [ 77.342892][ T6983] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.354224][ T6983] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.399411][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.415379][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.433762][ T6995] loop1: detected capacity change from 0 to 2048 [ 77.446349][ T6995] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 77.460538][ T6995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.480830][ T6983] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.500185][ T6983] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.511604][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.563056][ T6983] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.574807][ T6983] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.646703][ T6983] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.657174][ T6983] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.693510][ T7016] program syz.6.1281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.754857][ T2115] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.764059][ T2115] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.772463][ T2115] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.780811][ T2115] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.791988][ T2115] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.805137][ T2115] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.821339][ T2115] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.830323][ T2115] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.841516][ T7026] netlink: 'syz.6.1285': attribute type 15 has an invalid length. [ 77.932402][ T7040] loop6: detected capacity change from 0 to 164 [ 77.933662][ T7038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.962755][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.232569][ T7056] loop5: detected capacity change from 0 to 1024 [ 78.242279][ T7056] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 78.254679][ T7056] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 78.264780][ T7056] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 78.275673][ T7056] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: inode #5: comm syz.5.1295: unexpected bad inode w/o EXT4_IGET_BAD [ 78.289868][ T7056] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 78.290003][ T7056] EXT4-fs (loop5): no journal found [ 78.304213][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 78.304226][ C1] EXT4-fs (loop5): initial error at time 1774472154: ext4_get_journal_inode:5863: inode 5 [ 78.304255][ C1] EXT4-fs (loop5): last error at time 1774472154: ext4_get_journal_inode:5863: inode 5 [ 78.336475][ T7056] EXT4-fs (loop5): can't get journal size [ 78.343014][ T7056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.364313][ T7056] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 78.367417][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 78.367428][ T28] audit: type=1326 audit(1774472154.459:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c4bc799 code=0x7ffc0000 [ 78.403712][ T28] audit: type=1326 audit(1774472154.469:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c4bc799 code=0x7ffc0000 [ 78.470935][ T4655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.514901][ T28] audit: type=1326 audit(1774472154.469:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c4bc799 code=0x7ffc0000 [ 78.532510][ T7074] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=279 sclass=netlink_tcpdiag_socket pid=7074 comm=syz.5.1301 [ 78.545644][ T28] audit: type=1326 audit(1774472154.469:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c4bc799 code=0x7ffc0000 [ 78.581202][ T28] audit: type=1326 audit(1774472154.469:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f575c4bc799 code=0x7ffc0000 [ 78.612955][ T28] audit: type=1326 audit(1774472154.469:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c4bc799 code=0x7ffc0000 [ 78.637538][ T28] audit: type=1326 audit(1774472154.469:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c4bc799 code=0x7ffc0000 [ 78.677242][ T28] audit: type=1326 audit(1774472154.469:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f575c4bc799 code=0x7ffc0000 [ 78.758736][ T28] audit: type=1326 audit(1774472154.539:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f575c4bc799 code=0x7ffc0000 [ 78.808994][ T28] audit: type=1400 audit(1774472154.699:903): avc: denied { read } for pid=7073 comm="syz.6.1302" path="socket:[16970]" dev="sockfs" ino=16970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.903924][ T7093] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 78.918643][ T7093] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 78.930089][ T7093] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 78.953021][ T7093] EXT4-fs error (device loop4): ext4_get_journal_inode:5863: inode #5: comm syz.4.1312: unexpected bad inode w/o EXT4_IGET_BAD [ 78.966688][ T7093] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 78.968238][ T7093] EXT4-fs (loop4): no journal found [ 78.977290][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 78.977310][ C1] EXT4-fs (loop4): initial error at time 1774472155: ext4_get_journal_inode:5863: inode 5 [ 78.977341][ C1] EXT4-fs (loop4): last error at time 1774472155: ext4_get_journal_inode:5863: inode 5 [ 78.980034][ T7100] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.986607][ T7093] EXT4-fs (loop4): can't get journal size [ 79.009427][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.027915][ T7093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.114216][ T7093] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 79.145281][ T7100] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.212150][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.222340][ T7100] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.248724][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1320'. [ 79.278909][ T7100] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.340979][ T49] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.354612][ T49] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.397670][ T49] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.406453][ T49] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.665714][ T7181] syzkaller1: entered promiscuous mode [ 79.671398][ T7181] syzkaller1: entered allmulticast mode [ 79.671685][ T7182] set_capacity_and_notify: 3 callbacks suppressed [ 79.671696][ T7182] loop3: detected capacity change from 0 to 512 [ 79.693232][ T7182] EXT4-fs: Ignoring removed oldalloc option [ 79.742037][ T7182] EXT4-fs (loop3): 1 truncate cleaned up [ 79.750483][ T7182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.767351][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 79.950731][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.049394][ T3421] net_ratelimit: 1 callbacks suppressed [ 80.049407][ T3421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.071475][ T7212] loop4: detected capacity change from 0 to 1764 [ 80.107314][ T7212] iso9660: Unknown parameter 'ÿ' [ 80.280383][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 80.436243][ T7262] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.455730][ T7267] netlink: 'syz.5.1371': attribute type 12 has an invalid length. [ 80.467032][ T7267] netlink: 'syz.5.1371': attribute type 29 has an invalid length. [ 80.480015][ T7267] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1371'. [ 80.534637][ T7262] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.592730][ T7262] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.662210][ T7262] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.687815][ T7299] loop5: detected capacity change from 0 to 1024 [ 80.719488][ T7299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.739390][ T5041] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.759729][ T5041] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.769051][ T4655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.778211][ T5041] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.790288][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.093415][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.480419][ T7333] loop3: detected capacity change from 0 to 512 [ 81.488262][ T7333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.505246][ T7333] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1390: invalid indirect mapped block 4294967295 (level 1) [ 81.520028][ T7333] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.520220][ T7333] EXT4-fs (loop3): Remounting filesystem read-only [ 81.529353][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 81.529374][ C1] EXT4-fs (loop3): initial error at time 1774472157: ext4_free_branches:1023: inode 11 [ 81.529410][ C1] EXT4-fs (loop3): last error at time 1774472157: ext4_free_branches:1023: inode 11 [ 81.563070][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.571424][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 81.573342][ T7333] EXT4-fs (loop3): 2 truncates cleaned up [ 81.588979][ T7333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.625696][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.119270][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.134675][ T7358] loop1: detected capacity change from 0 to 128 [ 82.488236][ T4655] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 82.510733][ T4655] CPU: 1 UID: 0 PID: 4655 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 82.510760][ T4655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.510769][ T4655] Call Trace: [ 82.510775][ T4655] [ 82.510857][ T4655] __dump_stack+0x1d/0x30 [ 82.510882][ T4655] dump_stack_lvl+0x95/0xd0 [ 82.510904][ T4655] dump_stack+0x15/0x1b [ 82.510925][ T4655] dump_header+0x80/0x240 [ 82.511020][ T4655] oom_kill_process+0x295/0x350 [ 82.511042][ T4655] out_of_memory+0x97d/0xb80 [ 82.511062][ T4655] try_charge_memcg+0x62e/0xa10 [ 82.511167][ T4655] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 82.511196][ T4655] __swap_cache_prepare_and_add+0x386/0x530 [ 82.511286][ T4655] swap_cache_alloc_folio+0xa2/0x120 [ 82.511314][ T4655] swap_cluster_readahead+0x26e/0x3d0 [ 82.511363][ T4655] swapin_readahead+0xde/0x840 [ 82.511399][ T4655] ? __rcu_read_unlock+0x4e/0x70 [ 82.511415][ T4655] ? __perf_event_task_sched_in+0xa65/0xad0 [ 82.511432][ T4655] ? __list_add_valid_or_report+0x38/0xe0 [ 82.511476][ T4655] ? __rcu_read_unlock+0x4e/0x70 [ 82.511524][ T4655] ? swap_cache_get_folio+0x26f/0x280 [ 82.511590][ T4655] do_swap_page+0x30d/0x2220 [ 82.511615][ T4655] ? __schedule+0x93c/0xd40 [ 82.511640][ T4655] ? mas_state_walk+0x24/0x650 [ 82.511682][ T4655] ? __rcu_read_lock+0x36/0x50 [ 82.511756][ T4655] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 82.511781][ T4655] handle_mm_fault+0xb46/0x3020 [ 82.511810][ T4655] ? vma_start_read+0x1c7/0x2c0 [ 82.511836][ T4655] do_user_addr_fault+0x62f/0x1050 [ 82.511859][ T4655] ? trace_page_fault_user+0x1f/0xe0 [ 82.511880][ T4655] exc_page_fault+0x62/0xa0 [ 82.511970][ T4655] asm_exc_page_fault+0x26/0x30 [ 82.511987][ T4655] RIP: 0033:0x7f9bde4d7917 [ 82.512003][ T4655] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 82.512020][ T4655] RSP: 002b:00007fffb9fb95e0 EFLAGS: 00010202 [ 82.512036][ T4655] RAX: 0000000000000000 RBX: 000055555cf00500 RCX: 00007f9bde4d7917 [ 82.512097][ T4655] RDX: 00007fffb9fb9620 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.512170][ T4655] RBP: 00007fffb9fb968c R08: 0000000000000000 R09: 0000000000000000 [ 82.512180][ T4655] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 82.512190][ T4655] R13: 00000000000927c0 R14: 0000000000013fc8 R15: 00007fffb9fb96e0 [ 82.512204][ T4655] [ 82.512210][ T4655] memory: usage 307200kB, limit 307200kB, failcnt 183 [ 82.762762][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.770830][ T4655] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 82.790115][ T4655] kmem: usage 298996kB, limit 9007199254740988kB, failcnt 0 [ 82.809028][ T4655] Memory cgroup stats for /syz5: [ 82.809426][ T4655] cache 0 [ 82.817631][ T4655] rss 8388608 [ 82.821366][ T4655] shmem 0 [ 82.824304][ T4655] mapped_file 0 [ 82.827969][ T4655] dirty 0 [ 82.831704][ T4655] writeback 4096 [ 82.835496][ T4655] workingset_refault_anon 6 [ 82.842045][ T4655] workingset_refault_file 0 [ 82.846606][ T4655] swap 446464 [ 82.850153][ T4655] swapcached 458752 [ 82.854078][ T4655] pgpgin 45478 [ 82.867309][ T4655] pgpgout 43427 [ 82.873700][ T4655] pgfault 43056 [ 82.877220][ T4655] pgmajfault 2 [ 82.881137][ T4655] inactive_anon 12288 [ 82.885715][ T4655] active_anon 0 [ 82.889447][ T4655] inactive_file 0 [ 82.902398][ T4655] active_file 0 [ 82.905978][ T4655] unevictable 8388608 [ 82.910373][ T4655] hierarchical_memory_limit 314572800 [ 82.916235][ T4655] hierarchical_memsw_limit 9223372036854771712 [ 82.931582][ T4655] total_cache 0 [ 82.948134][ T4655] total_rss 8388608 [ 82.953742][ T4655] total_shmem 0 [ 82.957311][ T4655] total_mapped_file 0 [ 82.962672][ T4655] total_dirty 0 [ 82.966196][ T4655] total_writeback 4096 [ 82.978630][ T4655] total_workingset_refault_anon 6 [ 82.984023][ T4655] total_workingset_refault_file 0 [ 82.989066][ T4655] total_swap 446464 [ 82.993136][ T4655] total_swapcached 458752 [ 82.999928][ T4655] total_pgpgin 45478 [ 83.004016][ T4655] total_pgpgout 43427 [ 83.008295][ T4655] total_pgfault 43056 [ 83.012984][ T4655] total_pgmajfault 2 [ 83.016947][ T4655] total_inactive_anon 12288 [ 83.021634][ T4655] total_active_anon 0 [ 83.025719][ T4655] total_inactive_file 0 [ 83.029915][ T4655] total_active_file 0 [ 83.042519][ T4655] total_unevictable 8388608 [ 83.050854][ T4655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1401,pid=7353,uid=0 [ 83.069568][ T7387] xt_l2tp: unknown flags: 10 [ 83.088380][ T4655] Memory cgroup out of memory: Killed process 7353 (syz.5.1401) total-vm:96080kB, anon-rss:9420kB, file-rss:22248kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 83.160093][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.478399][ T7408] SELinux: failed to load policy [ 83.508765][ T7413] sctp: [Deprecated]: syz.1.1428 (pid 7413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.508765][ T7413] Use struct sctp_sack_info instead [ 83.569221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.680165][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 83.680177][ T28] audit: type=1400 audit(1774472159.779:912): avc: denied { setattr } for pid=7428 comm="syz.4.1436" name="/" dev="configfs" ino=2088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.758256][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.813737][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.824654][ T7444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.862954][ T7444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.915966][ T7450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.007837][ T7454] loop5: detected capacity change from 0 to 4096 [ 84.033315][ T7454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.056078][ T7454] EXT4-fs (loop5): shut down requested (2) [ 84.075021][ T4655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.084838][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.094572][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.296943][ T5034] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.303493][ T28] audit: type=1400 audit(1774472160.399:913): avc: denied { ioctl } for pid=7466 comm="syz.5.1452" path="socket:[17912]" dev="sockfs" ino=17912 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.303527][ T5034] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.303549][ T5034] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.533360][ T7482] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1459'. [ 84.924138][ T7497] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1464'. [ 84.935594][ T7497] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1464'. [ 85.191400][ T7510] loop1: detected capacity change from 0 to 1024 [ 85.200122][ T7508] loop6: detected capacity change from 0 to 1024 [ 85.206817][ T7510] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 85.219339][ T7508] EXT4-fs: quotafile must be on filesystem root [ 85.241395][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 85.250708][ T3421] net_ratelimit: 4 callbacks suppressed [ 85.250720][ T3421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.270188][ T7510] netlink: 580 bytes leftover after parsing attributes in process `syz.1.1470'. [ 85.280542][ T7510] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1470'. [ 85.294661][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 85.351469][ T28] audit: type=1400 audit(1774472161.449:914): avc: denied { accept } for pid=7517 comm="syz.1.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.581270][ T7527] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 85.752067][ T28] audit: type=1400 audit(1774472161.849:915): avc: denied { read } for pid=7536 comm="syz.1.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.842132][ T7545] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1486'. [ 86.039244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.209780][ T7575] loop6: detected capacity change from 0 to 512 [ 86.239306][ T7575] EXT4-fs: Ignoring removed bh option [ 86.245053][ T7575] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.269527][ T7575] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 86.289750][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.323416][ T28] audit: type=1400 audit(1774472162.419:916): avc: denied { create } for pid=7584 comm="syz.6.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 86.360243][ T3955] Bluetooth: hci0: command 0x1003 tx timeout [ 86.362275][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.393291][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1505'. [ 86.409253][ T28] audit: type=1400 audit(1774472162.419:917): avc: denied { sys_admin } for pid=7584 comm="syz.6.1503" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 86.430898][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1505'. [ 86.499557][ T7601] ªªªªªª: renamed from dummy0 (while UP) [ 86.622101][ T7610] tipc: Started in network mode [ 86.629675][ T7610] tipc: Node identity ff25, cluster identity 4711 [ 86.699205][ T7610] tipc: Enabling of bearer rejected, failed to enable media [ 86.893340][ T28] audit: type=1326 audit(1774472162.989:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 86.935433][ T28] audit: type=1326 audit(1774472163.019:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 86.988008][ T28] audit: type=1326 audit(1774472163.019:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 87.042938][ T7632] loop1: detected capacity change from 0 to 256 [ 87.079723][ T7632] FAT-fs (loop1): Directory bread(block 64) failed [ 87.086311][ T7632] FAT-fs (loop1): Directory bread(block 65) failed [ 87.116310][ T7632] FAT-fs (loop1): Directory bread(block 66) failed [ 87.127666][ T7632] FAT-fs (loop1): Directory bread(block 67) failed [ 87.134568][ T28] audit: type=1326 audit(1774472163.019:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.1.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 87.149262][ T7632] FAT-fs (loop1): Directory bread(block 68) failed [ 87.168350][ T7632] FAT-fs (loop1): Directory bread(block 69) failed [ 87.181407][ T7632] FAT-fs (loop1): Directory bread(block 70) failed [ 87.194239][ T7632] FAT-fs (loop1): Directory bread(block 71) failed [ 87.205777][ T7638] loop6: detected capacity change from 0 to 136 [ 87.212358][ T7632] FAT-fs (loop1): Directory bread(block 72) failed [ 87.218904][ T7632] FAT-fs (loop1): Directory bread(block 73) failed [ 87.243658][ T7638] Attempt to read inode for relocated directory [ 87.276221][ T7632] bio_check_eod: 136 callbacks suppressed [ 87.276235][ T7632] syz.1.1522: attempt to access beyond end of device [ 87.276235][ T7632] loop1: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 87.297951][ T7637] syz.6.1524: attempt to access beyond end of device [ 87.297951][ T7637] loop6: rw=8912896, sector=335544428, nr_sectors = 4 limit=136 [ 87.319702][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.327142][ T7637] syz.6.1524: attempt to access beyond end of device [ 87.327142][ T7637] loop6: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 87.342739][ T7637] syz.6.1524: attempt to access beyond end of device [ 87.342739][ T7637] loop6: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 87.364739][ T7638] syz.6.1524: attempt to access beyond end of device [ 87.364739][ T7638] loop6: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 87.381416][ T7638] syz.6.1524: attempt to access beyond end of device [ 87.381416][ T7638] loop6: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 87.395740][ T7638] syz.6.1524: attempt to access beyond end of device [ 87.395740][ T7638] loop6: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 87.410762][ T7638] syz.6.1524: attempt to access beyond end of device [ 87.410762][ T7638] loop6: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 87.713717][ T7671] xt_hashlimit: size too large, truncated to 1048576 [ 87.799745][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.935497][ T7689] loop1: detected capacity change from 0 to 256 [ 88.014048][ T7693] loop1: detected capacity change from 0 to 512 [ 88.359259][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.382348][ T7717] SELinux: failed to load policy [ 88.599597][ T5041] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 88.709379][ T7737] 9pnet: p9_errstr2errno: server reported unknown error [ 88.890248][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 88.890261][ T28] audit: type=1400 audit(1774472164.989:946): avc: denied { bind } for pid=7756 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.971658][ T28] audit: type=1400 audit(1774472164.989:947): avc: denied { name_bind } for pid=7756 comm="syz.1.1570" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 89.031725][ T28] audit: type=1400 audit(1774472164.989:948): avc: denied { node_bind } for pid=7756 comm="syz.1.1570" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 89.180903][ T28] audit: type=1326 audit(1774472165.279:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 89.252862][ T28] audit: type=1326 audit(1774472165.279:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 89.312685][ T28] audit: type=1326 audit(1774472165.279:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 89.349175][ T28] audit: type=1326 audit(1774472165.279:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 89.399881][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.402658][ T28] audit: type=1326 audit(1774472165.379:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 89.437116][ T28] audit: type=1326 audit(1774472165.379:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6ee18c502 code=0x7ffc0000 [ 89.461252][ T28] audit: type=1326 audit(1774472165.379:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc6ee18c597 code=0x7ffc0000 [ 89.879357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.880168][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 89.887526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.923089][ T7788] loop4: detected capacity change from 0 to 1024 [ 89.930412][ T7788] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.961813][ T7788] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 90.004028][ T7788] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.018991][ T7788] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.1583: Invalid inode table block 0 in block_group 0 [ 90.036406][ T7788] loop4: lost filesystem error report for type 5 error -117 [ 90.038812][ T7788] EXT4-fs (loop4): Remounting filesystem read-only [ 90.046128][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 90.046141][ C1] EXT4-fs (loop4): initial error at time 1774472166: __ext4_get_inode_loc:4782 [ 90.046159][ C1] EXT4-fs (loop4): last error at time 1774472166: __ext4_get_inode_loc:4782 [ 90.099224][ T7788] EXT4-fs (loop4): 1 truncate cleaned up [ 90.109692][ T7788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.143217][ T7788] raw_sendmsg: syz.4.1583 forgot to set AF_INET. Fix it! [ 90.199925][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.232473][ T7805] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 90.232473][ T7805] The task syz.5.1588 (7805) triggered the difference, watch for misbehavior. [ 90.439501][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.567917][ T7828] SELinux: failed to load policy [ 90.578325][ T7830] loop1: detected capacity change from 0 to 128 [ 90.657615][ T7830] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.672033][ T7830] ext4 filesystem being mounted at /366/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.704223][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.737758][ T7837] loop1: detected capacity change from 0 to 512 [ 90.745073][ T7837] EXT4-fs: Ignoring removed bh option [ 90.752012][ T7837] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 90.768633][ T7837] EXT4-fs (loop1): 1 truncate cleaned up [ 90.780542][ T7837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.805357][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.839380][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.881519][ T7844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.890545][ T7844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.011248][ T7848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.100839][ T7844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.109659][ T7844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.162111][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.306233][ T7859] __nla_validate_parse: 1 callbacks suppressed [ 91.306311][ T7859] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1612'. [ 91.323491][ T7859] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1612'. [ 91.479251][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.511729][ T7865] syzkaller1: entered promiscuous mode [ 91.520252][ T7865] syzkaller1: entered allmulticast mode [ 91.617781][ T7874] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1619'. [ 91.713483][ T7888] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 91.721264][ T7887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 91.743024][ T7887] netlink: 'syz.6.1625': attribute type 4 has an invalid length. [ 91.815345][ T7895] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 91.905925][ T7899] loop5: detected capacity change from 0 to 1024 [ 91.945555][ T7899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.008351][ T7909] loop1: detected capacity change from 0 to 512 [ 92.020962][ T4655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.055401][ T7909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.117346][ T7909] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.148900][ T7909] EXT4-fs (loop1): shut down requested (0) [ 92.187966][ T7919] loop6: detected capacity change from 0 to 8192 [ 92.205191][ T7909] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 92.233922][ T7919] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.245566][ T7909] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 92.260147][ T7909] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 92.312090][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.350450][ T7931] openvswitch: netlink: Missing key (keys=40, expected=100) [ 92.419992][ T7938] loop1: detected capacity change from 0 to 1024 [ 92.445877][ T7938] EXT4-fs: Ignoring removed oldalloc option [ 92.457353][ T7938] EXT4-fs: Ignoring removed bh option [ 92.462549][ T7945] loop5: detected capacity change from 0 to 1024 [ 92.506712][ T7948] loop6: detected capacity change from 0 to 512 [ 92.514969][ T7945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.522699][ T7938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.527230][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.565729][ T7948] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 92.589463][ T7948] EXT4-fs (loop6): 1 truncate cleaned up [ 92.595488][ T7948] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.619937][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.696573][ T6047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.840961][ T4655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.035934][ T7975] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1661'. [ 93.098347][ T7979] syzkaller1: entered promiscuous mode [ 93.111638][ T7982] random: crng reseeded on system resumption [ 93.129582][ T7979] syzkaller1: entered allmulticast mode [ 93.343021][ T7999] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7999 comm=syz.1.1672 [ 93.569223][ T3421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.605855][ T8012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.882048][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.970856][ T8032] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 93.980034][ T8032] SELinux: failed to load policy [ 94.111144][ T8042] netlink: 'syz.1.1690': attribute type 4 has an invalid length. [ 94.154473][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 94.154485][ T28] audit: type=1400 audit(1774472170.249:1031): avc: denied { listen } for pid=8043 comm="syz.4.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.258951][ T8050] loop1: detected capacity change from 0 to 1024 [ 94.281378][ T8050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.308765][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.485069][ T8066] syzkaller1: entered promiscuous mode [ 94.490676][ T8066] syzkaller1: entered allmulticast mode [ 94.602525][ T28] audit: type=1400 audit(1774472170.699:1032): avc: denied { checkpoint_restore } for pid=8067 comm="syz.1.1703" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.791720][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 94.800938][ T8080] netlink: 'syz.1.1708': attribute type 29 has an invalid length. [ 94.808829][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 94.932175][ T28] audit: type=1400 audit(1774472171.029:1033): avc: denied { read } for pid=8089 comm="syz.6.1713" name="file0" dev="tmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.006354][ T8097] loop4: detected capacity change from 0 to 256 [ 95.022894][ T8097] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.072873][ T8104] EXT4-fs: test_dummy_encryption option not supported [ 95.149932][ T8111] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 95.176954][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.199662][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.229410][ T28] audit: type=1400 audit(1774472171.319:1034): avc: denied { sqpoll } for pid=8091 comm="syz.6.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 95.314895][ T5045] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.327116][ T8128] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.340341][ T8128] EXT4-fs (loop4): 1 truncate cleaned up [ 95.346488][ T8128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.378110][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.609231][ T8012] net_ratelimit: 7 callbacks suppressed [ 95.609246][ T8012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.649656][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.315369][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.323738][ T8152] set_capacity_and_notify: 2 callbacks suppressed [ 96.323761][ T8152] loop4: detected capacity change from 0 to 1024 [ 96.339253][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.347871][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.350205][ T8152] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.370909][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.379301][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.388925][ T8152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.405601][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.414420][ T8157] netlink: 'syz.5.1742': attribute type 4 has an invalid length. [ 96.508226][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.872179][ T8200] loop5: detected capacity change from 0 to 512 [ 96.892571][ T8200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.932422][ T5036] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.942696][ T4655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.001991][ T5036] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.014781][ T8213] loop5: detected capacity change from 0 to 512 [ 97.041547][ T8213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.058953][ T8213] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.081035][ T5036] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.098075][ T4655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.109806][ T8193] chnl_net:caif_netlink_parms(): no params data found [ 97.146003][ T5036] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.171424][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.178587][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.185989][ T8193] bridge_slave_0: entered allmulticast mode [ 97.193798][ T8193] bridge_slave_0: entered promiscuous mode [ 97.203412][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.210705][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.218017][ T8193] bridge_slave_1: entered allmulticast mode [ 97.225447][ T8193] bridge_slave_1: entered promiscuous mode [ 97.280665][ T5036] bridge_slave_1: left allmulticast mode [ 97.286322][ T5036] bridge_slave_1: left promiscuous mode [ 97.292187][ T5036] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.300387][ T5036] bridge_slave_0: left allmulticast mode [ 97.306106][ T5036] bridge_slave_0: left promiscuous mode [ 97.311995][ T5036] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.319178][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.344667][ T28] audit: type=1326 audit(1774472173.439:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 97.369215][ T28] audit: type=1326 audit(1774472173.439:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 97.393057][ T28] audit: type=1326 audit(1774472173.439:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 97.419852][ T28] audit: type=1326 audit(1774472173.439:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 97.443727][ T28] audit: type=1326 audit(1774472173.439:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6ee14cfce code=0x7ffc0000 [ 97.443944][ T5036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.467260][ T28] audit: type=1326 audit(1774472173.439:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.1.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee18c799 code=0x7ffc0000 [ 97.505537][ T5036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.515996][ T5036] bond0 (unregistering): Released all slaves [ 97.530898][ T8193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.555147][ T8244] loop1: detected capacity change from 0 to 2048 [ 97.580211][ T8193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.636578][ T8193] team0: Port device team_slave_0 added [ 97.642534][ T23] IPVS: starting estimator thread 0... [ 97.663375][ T8244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.665943][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.685662][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.708832][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.721728][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.739335][ T8254] IPVS: using max 2400 ests per chain, 120000 per kthread [ 97.765161][ T5036] veth1_macvtap: left promiscuous mode [ 97.774614][ T5036] veth0_macvtap: left promiscuous mode [ 97.780201][ T5036] veth1_vlan: left promiscuous mode [ 97.784278][ T8269] netlink: 'syz.6.1776': attribute type 10 has an invalid length. [ 97.793419][ T5036] veth0_vlan: left promiscuous mode [ 97.805450][ T8269] netlink: 'syz.6.1776': attribute type 19 has an invalid length. [ 97.821179][ T8269] netlink: 14536 bytes leftover after parsing attributes in process `syz.6.1776'. [ 97.910504][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.920217][ T5036] team0 (unregistering): Port device team_slave_1 removed [ 97.939920][ T5036] team0 (unregistering): Port device team_slave_0 removed [ 97.960120][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'. [ 97.971208][ T8273] netlink: 'syz.1.1777': attribute type 30 has an invalid length. [ 97.983790][ T8193] team0: Port device team_slave_1 added [ 97.989206][ T8273] netlink: 'syz.1.1777': attribute type 29 has an invalid length. [ 98.018352][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'. [ 98.043571][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.062207][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.089037][ T8193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.115068][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.146672][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.176362][ T3394] kernel write not supported for file bpf-prog (pid: 3394 comm: kworker/0:3) [ 98.203329][ T8193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.259574][ T8193] hsr_slave_0: entered promiscuous mode [ 98.270626][ T8193] hsr_slave_1: entered promiscuous mode [ 98.277571][ T8193] debugfs: 'hsr0' already exists in 'hsr' [ 98.301393][ T8193] Cannot create hsr debugfs directory [ 98.367148][ T8313] loop1: detected capacity change from 0 to 512 [ 98.379984][ T8313] EXT4-fs: Ignoring removed orlov option [ 98.435934][ T8313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.458411][ T5036] IPVS: stop unused estimator thread 0... [ 98.484154][ T8313] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.502025][ T8313] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.1790: corrupted inode contents [ 98.517266][ T8313] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.1790: mark_inode_dirty error [ 98.550061][ T8313] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.1790: corrupted inode contents [ 98.604157][ T8335] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.1790: corrupted inode contents [ 98.617570][ T8193] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 98.624311][ T8335] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.1790: mark_inode_dirty error [ 98.635891][ T8339] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1798'. [ 98.639462][ T8335] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.1790: corrupted inode contents [ 98.649232][ T8331] loop5: detected capacity change from 0 to 8192 [ 98.668386][ T8193] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 98.689410][ T8339] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1798'. [ 98.701184][ T8335] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.1790: mark_inode_dirty error [ 98.702821][ T8193] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 98.715059][ T8335] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.1790: corrupted inode contents [ 98.739420][ T8335] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.1790: mark_inode_dirty error [ 98.753531][ T8348] loop6: detected capacity change from 0 to 512 [ 98.773618][ T8351] loop4: detected capacity change from 0 to 256 [ 98.782260][ T8351] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.784783][ T8313] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.1790: ES cache extent failed: add [0,1,23,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 98.784783][ T8313] [ 98.828554][ T8348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.842634][ T8193] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 98.849909][ T8313] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.1790: corrupted inode contents [ 98.903601][ T6047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.993635][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.014619][ T8193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.023070][ T8376] loop5: detected capacity change from 0 to 2048 [ 99.045890][ T8193] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.053311][ T8376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.063907][ T8193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.075826][ T8193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.107372][ T5036] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.114544][ T5036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.191113][ T5036] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.198260][ T5036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.219670][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 99.219683][ T28] audit: type=1326 audit(1774472175.319:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.6.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e5a1c799 code=0x7ffc0000 [ 99.264201][ T8394] loop6: detected capacity change from 0 to 1024 [ 99.298314][ T8394] EXT4-fs: Ignoring removed bh option [ 99.305983][ T8394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.313486][ T28] audit: type=1326 audit(1774472175.359:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.6.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e5a1c799 code=0x7ffc0000 [ 99.344956][ T8193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.372152][ T28] audit: type=1326 audit(1774472175.359:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.6.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e5a1c799 code=0x7ffc0000 [ 99.408649][ T8394] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 99.433598][ T4655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.447599][ T28] audit: type=1326 audit(1774472175.359:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.6.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f75e5a1c799 code=0x7ffc0000 [ 99.453385][ T8394] System zones: 0-1, 3-36 [ 99.480343][ T8394] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.505976][ T28] audit: type=1326 audit(1774472175.359:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.6.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f75e5a1c502 code=0x7ffc0000 [ 99.530429][ T28] audit: type=1326 audit(1774472175.359:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.6.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f75e59dcfce code=0x7ffc0000 [ 99.565848][ T28] audit: type=1326 audit(1774472175.359:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.6.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f75e5a1c5c7 code=0x7ffc0000 [ 99.608116][ T8426] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.618030][ T28] audit: type=1326 audit(1774472175.359:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.6.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75e59dcfce code=0x7ffc0000 [ 99.641502][ T8426] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.656151][ T28] audit: type=1326 audit(1774472175.359:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.6.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75e5a1c42b code=0x7ffc0000 [ 99.695240][ T6047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.695370][ T28] audit: type=1326 audit(1774472175.389:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.6.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e5a1c799 code=0x7ffc0000 [ 99.751800][ T8426] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.777978][ T8441] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 99.801411][ T8441] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.808092][ T8441] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 99.818795][ T8426] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.836956][ T8193] veth0_vlan: entered promiscuous mode [ 99.844180][ T8441] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 99.852162][ T8441] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.1819: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 99.861538][ T8193] veth1_vlan: entered promiscuous mode [ 99.871042][ T8441] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 99.879150][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 99.894700][ C1] EXT4-fs (loop4): last error at time 1774472175: ext4_ext_check_inode:521: inode 13 [ 99.905516][ T8441] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1819: couldn't read orphan inode 13 (err -117) [ 99.918281][ T8441] loop4: lost filesystem error report for type 5 error -117 [ 99.918783][ T8441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.923795][ T8193] veth0_macvtap: entered promiscuous mode [ 99.953631][ T8441] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 99.978214][ T8426] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.989049][ T8426] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.999582][ T8441] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 100.020645][ T8193] veth1_macvtap: entered promiscuous mode [ 100.028372][ T8441] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 100.050975][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.064792][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.078952][ T8426] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.095257][ T8441] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 100.104920][ T8426] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.119985][ T8441] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 100.133825][ T5045] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.149642][ T8441] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 100.181079][ T5041] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.195144][ T5041] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.212715][ T5041] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.229574][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.269062][ T5041] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.292768][ T5041] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.325189][ T5041] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.345367][ T5041] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.365737][ T5041] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.379358][ T5041] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.391358][ T5041] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.399851][ T5041] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.627101][ T8506] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.695948][ T8506] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 100.748840][ T8506] FAT-fs (loop5): Filesystem has been set read-only [ 100.955489][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1854'. [ 100.972276][ T8534] vlan2: entered allmulticast mode [ 100.977415][ T8534] bridge0: entered allmulticast mode [ 100.991547][ T8534] bridge0: port 3(vlan2) entered blocking state [ 100.992611][ T8536] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1856'. [ 101.001578][ T8534] bridge0: port 3(vlan2) entered disabled state [ 101.023827][ T8536] bond0: entered promiscuous mode [ 101.028951][ T8536] bond_slave_0: entered promiscuous mode [ 101.035003][ T8536] bond_slave_1: entered promiscuous mode [ 101.043096][ T8536] bond0: left promiscuous mode [ 101.047960][ T8536] bond_slave_0: left promiscuous mode [ 101.054033][ T8536] bond_slave_1: left promiscuous mode [ 101.088448][ T8538] syzkaller1: entered promiscuous mode [ 101.095109][ T8538] syzkaller1: entered allmulticast mode [ 101.238739][ T8556] team0: Port device syz_tun added [ 101.270944][ T8558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1866'. [ 101.283708][ T8556] team0: Port device syz_tun removed [ 101.311030][ T8556] bridge_slave_0: left allmulticast mode [ 101.316778][ T8556] bridge_slave_0: left promiscuous mode [ 101.338091][ T8562] sctp: [Deprecated]: syz.1.1868 (pid 8562) Use of int in maxseg socket option. [ 101.338091][ T8562] Use struct sctp_assoc_value instead [ 101.352853][ T8556] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.369762][ T8556] bridge_slave_1: left allmulticast mode [ 101.399478][ T8556] bridge_slave_1: left promiscuous mode [ 101.409327][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.427441][ T8556] bond0: (slave bond_slave_0): Releasing backup interface [ 101.445628][ T8556] bond0: (slave bond_slave_1): Releasing backup interface [ 101.449557][ T8570] SET target dimension over the limit! [ 101.463956][ T8556] team0: Port device team_slave_0 removed [ 101.478161][ T8556] team0: Port device team_slave_1 removed [ 101.486122][ T8556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.493745][ T8556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.517255][ T8556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.525298][ T8556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.538737][ T8556] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 101.752160][ T8598] set_capacity_and_notify: 3 callbacks suppressed [ 101.752186][ T8598] loop6: detected capacity change from 0 to 128 [ 101.793983][ T8601] loop1: detected capacity change from 0 to 512 [ 101.839873][ T8601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.860311][ T8601] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.918411][ T8609] program syz.7.1887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.111323][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.210191][ T1030] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.236743][ T1030] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.353255][ T8645] loop4: detected capacity change from 0 to 256 [ 102.426498][ T8650] loop6: detected capacity change from 0 to 1024 [ 102.441238][ T8650] EXT4-fs: inline encryption not supported [ 102.454081][ T8650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.504154][ T8650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.535976][ T8660] tun0: tun_chr_ioctl cmd 1074025675 [ 102.544623][ T8660] tun0: persist enabled [ 102.551324][ T8660] tun0: tun_chr_ioctl cmd 1074025675 [ 102.556700][ T8660] tun0: persist disabled [ 102.569639][ T6047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.605837][ T8668] loop6: detected capacity change from 0 to 512 [ 102.625570][ T8668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.683123][ T6047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.817714][ T8688] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1921'. [ 103.044862][ T8704] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.083144][ T8704] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.132872][ T8704] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.182344][ T8704] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.258456][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.270630][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.283246][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.301002][ T5045] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.465431][ T8742] syzkaller1: entered promiscuous mode [ 103.477707][ T8742] syzkaller1: entered allmulticast mode [ 103.624756][ T8756] loop5: detected capacity change from 0 to 1024 [ 103.640965][ T8756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.664745][ T4655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.794154][ T8772] loop6: detected capacity change from 0 to 512 [ 103.811200][ T8772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.824110][ T8772] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.044825][ T6047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.130298][ T8800] loop1: detected capacity change from 0 to 1024 [ 104.150698][ T8800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.291098][ T8810] loop6: detected capacity change from 0 to 128 [ 104.321817][ T8800] EXT4-fs (loop1): shut down requested (1) [ 104.410345][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.448074][ T8821] netlink: 'syz.6.1979': attribute type 6 has an invalid length. [ 104.456340][ T8821] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1979'. [ 104.551578][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 104.551720][ T28] audit: type=1326 audit(1774472180.649:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889584c799 code=0x7ffc0000 [ 104.583216][ T28] audit: type=1326 audit(1774472180.679:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889584c799 code=0x7ffc0000 [ 104.607208][ T28] audit: type=1326 audit(1774472180.679:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889584c799 code=0x7ffc0000 [ 104.643965][ T28] audit: type=1326 audit(1774472180.679:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889584c799 code=0x7ffc0000 [ 104.668802][ T28] audit: type=1326 audit(1774472180.679:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f889584c799 code=0x7ffc0000 [ 104.701587][ T28] audit: type=1326 audit(1774472180.679:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889584c799 code=0x7ffc0000 [ 104.725978][ T28] audit: type=1326 audit(1774472180.679:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889584c799 code=0x7ffc0000 [ 104.749850][ T28] audit: type=1326 audit(1774472180.679:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889584c799 code=0x7ffc0000 [ 104.774534][ T28] audit: type=1326 audit(1774472180.679:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f889584c799 code=0x7ffc0000 [ 104.883370][ T28] audit: type=1326 audit(1774472180.679:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889584c799 code=0x7ffc0000 [ 105.316386][ T8852] loop1: detected capacity change from 0 to 512 [ 105.325024][ T8852] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1992: bg 0: block 5: invalid block bitmap [ 105.338318][ T8852] loop1: lost filesystem error report for type 5 error -117 [ 105.338514][ T8852] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 105.345901][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 105.345922][ C1] EXT4-fs (loop1): initial error at time 1774472181: ext4_validate_block_bitmap:432 [ 105.345943][ C1] EXT4-fs (loop1): last error at time 1774472181: ext4_validate_block_bitmap:432 [ 105.379701][ T8852] loop1: lost filesystem error report for type 5 error -117 [ 105.381499][ T8852] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1992: invalid indirect mapped block 3 (level 2) [ 105.403774][ T8852] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.412842][ T8852] EXT4-fs (loop1): 1 orphan inode deleted [ 105.427872][ T8852] EXT4-fs (loop1): 1 truncate cleaned up [ 105.433929][ T8852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.460369][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.764352][ T8878] EXT4-fs: Ignoring removed oldalloc option [ 105.772152][ T8878] EXT4-fs: Ignoring removed bh option [ 105.781803][ T8878] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.842751][ T8193] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.412830][ T8922] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.452005][ T8922] IPVS: persistence engine module ip_vs_pe_€ not found [ 106.491607][ T8193] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.651439][ T8949] dvmrp1: entered allmulticast mode [ 106.845397][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2040'. [ 106.859791][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2040'. [ 106.975213][ T8963] syz.6.2038 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 106.993923][ T8963] CPU: 0 UID: 0 PID: 8963 Comm: syz.6.2038 Not tainted syzkaller #0 PREEMPT(full) [ 106.994024][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.994035][ T8963] Call Trace: [ 106.994042][ T8963] [ 106.994048][ T8963] __dump_stack+0x1d/0x30 [ 106.994071][ T8963] dump_stack_lvl+0x95/0xd0 [ 106.994130][ T8963] dump_stack+0x15/0x1b [ 106.994147][ T8963] dump_header+0x80/0x240 [ 106.994165][ T8963] oom_kill_process+0x295/0x350 [ 106.994183][ T8963] out_of_memory+0x97d/0xb80 [ 106.994212][ T8963] try_charge_memcg+0x62e/0xa10 [ 106.994245][ T8963] obj_cgroup_charge_pages+0x23/0xc0 [ 106.994271][ T8963] __memcg_kmem_charge_page+0x9e/0x170 [ 106.994346][ T8963] __alloc_frozen_pages_noprof+0x18a/0x360 [ 106.994374][ T8963] alloc_pages_mpol+0xb3/0x260 [ 106.994399][ T8963] alloc_pages_noprof+0x8f/0x130 [ 106.994420][ T8963] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 106.994464][ T8963] __kvmalloc_node_noprof+0x3d4/0x650 [ 106.994506][ T8963] ? futex_hash_allocate+0x190/0x9d0 [ 106.994605][ T8963] ? futex_hash_allocate+0x190/0x9d0 [ 106.994633][ T8963] futex_hash_allocate+0x190/0x9d0 [ 106.994657][ T8963] ? cap_task_prctl+0x13f/0x6e0 [ 106.994690][ T8963] futex_hash_prctl+0xd8/0xf0 [ 106.994715][ T8963] __se_sys_prctl+0xa3d/0x13f0 [ 106.994742][ T8963] __x64_sys_prctl+0x67/0x80 [ 106.994767][ T8963] x64_sys_call+0x2533/0x3020 [ 106.994885][ T8963] do_syscall_64+0x12c/0x370 [ 106.994973][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.994991][ T8963] RIP: 0033:0x7f75e5a1c799 [ 106.995007][ T8963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.995025][ T8963] RSP: 002b:00007f75e446f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 106.995046][ T8963] RAX: ffffffffffffffda RBX: 00007f75e5c95fa0 RCX: 00007f75e5a1c799 [ 106.995060][ T8963] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 106.995073][ T8963] RBP: 00007f75e5ab2c99 R08: 0000000000000000 R09: 0000000000000000 [ 106.995150][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.995160][ T8963] R13: 00007f75e5c96038 R14: 00007f75e5c95fa0 R15: 00007ffd0274b9e8 [ 106.995175][ T8963] [ 106.995265][ T8963] memory: usage 302780kB, limit 307200kB, failcnt 234 [ 107.224200][ T8963] memory+swap: usage 5248kB, limit 9007199254740988kB, failcnt 0 [ 107.231992][ T8963] kmem: usage 4088kB, limit 9007199254740988kB, failcnt 0 [ 107.239207][ T8963] Memory cgroup stats for /syz6: [ 107.239623][ T8963] cache 0 [ 107.247590][ T8963] rss 32768 [ 107.250816][ T8963] shmem 0 [ 107.253744][ T8963] mapped_file 0 [ 107.257193][ T8963] dirty 0 [ 107.260219][ T8963] writeback 0 [ 107.263515][ T8963] workingset_refault_anon 29 [ 107.268093][ T8963] workingset_refault_file 0 [ 107.274108][ T8963] swap 704512 [ 107.278083][ T8963] swapcached 737280 [ 107.282156][ T8963] pgpgin 25983 [ 107.285631][ T8963] pgpgout 25974 [ 107.289196][ T8963] pgfault 43824 [ 107.292779][ T8963] pgmajfault 17 [ 107.296314][ T8963] inactive_anon 4096 [ 107.300347][ T8963] active_anon 28672 [ 107.304175][ T8963] inactive_file 4096 [ 107.308058][ T8963] active_file 0 [ 107.311551][ T8963] unevictable 0 [ 107.315105][ T8963] hierarchical_memory_limit 314572800 [ 107.330639][ T8963] hierarchical_memsw_limit 9223372036854771712 [ 107.337376][ T8963] total_cache 0 [ 107.341593][ T8963] total_rss 32768 [ 107.345348][ T8963] total_shmem 0 [ 107.348875][ T8963] total_mapped_file 0 [ 107.353027][ T8963] total_dirty 0 [ 107.356597][ T8963] total_writeback 0 [ 107.360461][ T8963] total_workingset_refault_anon 29 [ 107.365620][ T8963] total_workingset_refault_file 0 [ 107.370764][ T8963] total_swap 704512 [ 107.374562][ T8963] total_swapcached 737280 [ 107.378916][ T8963] total_pgpgin 25983 [ 107.382863][ T8963] total_pgpgout 25974 [ 107.387046][ T8963] total_pgfault 43824 [ 107.393307][ T8963] total_pgmajfault 17 [ 107.398604][ T8963] total_inactive_anon 4096 [ 107.403882][ T8963] total_active_anon 28672 [ 107.408522][ T8963] total_inactive_file 4096 [ 107.413107][ T8963] total_active_file 0 [ 107.417068][ T8963] total_unevictable 0 [ 107.445588][ T8963] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2038,pid=8962,uid=0 [ 107.462600][ T8963] Memory cgroup out of memory: Killed process 8962 (syz.6.2038) total-vm:96212kB, anon-rss:1260kB, file-rss:22376kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 107.488780][ T8963] syz.6.2038 (8963) used greatest stack depth: 8640 bytes left [ 107.615248][ T9000] set_capacity_and_notify: 4 callbacks suppressed [ 107.615378][ T9000] loop1: detected capacity change from 0 to 512 [ 107.656647][ T9000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.669460][ T9000] ext4 filesystem being mounted at /486/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.696951][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.997343][ T9042] batadv_slave_0: entered promiscuous mode [ 108.004127][ T9041] batadv_slave_0: left promiscuous mode [ 108.076725][ T9046] loop5: detected capacity change from 0 to 4096 [ 108.083646][ T9046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.098271][ T9046] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 108.110244][ T9046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.128167][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.137303][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.146244][ T4655] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.523857][ T9067] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 108.596892][ T9071] loop6: detected capacity change from 0 to 512 [ 108.641360][ T9073] loop6: detected capacity change from 0 to 4096 [ 108.656945][ T9073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.688203][ T9073] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2088: corrupted inode contents [ 108.700304][ T9073] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.2088: mark_inode_dirty error [ 108.711850][ T9073] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2088: corrupted inode contents [ 108.723932][ T9073] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.2088: mark_inode_dirty error [ 108.735868][ T9073] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2088: corrupted inode contents [ 108.748531][ T9073] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.2088: mark_inode_dirty error [ 108.761187][ T9073] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2088: corrupted inode contents [ 108.773268][ T9073] EXT4-fs error (device loop6): ext4_truncate:4587: inode #15: comm syz.6.2088: mark_inode_dirty error [ 108.782113][ T9081] team0: Port device syz_tun added [ 108.810523][ T9081] team0: Port device syz_tun removed [ 108.817174][ T9073] EXT4-fs error (device loop6) in ext4_setattr:5983: Corrupt filesystem [ 108.828889][ T9081] bridge_slave_0: left allmulticast mode [ 108.841943][ T9081] bridge_slave_0: left promiscuous mode [ 108.847713][ T9079] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2088: corrupted inode contents [ 108.860063][ T9081] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.883984][ T9081] bridge_slave_1: left allmulticast mode [ 108.890150][ T6047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.891430][ T9081] bridge_slave_1: left promiscuous mode [ 108.906684][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.923083][ T9081] bond0: (slave bond_slave_0): Releasing backup interface [ 108.937341][ T9081] bond0: (slave bond_slave_1): Releasing backup interface [ 108.973834][ T9081] team0: Port device team_slave_0 removed [ 109.001404][ T9081] team0: Port device team_slave_1 removed [ 109.032414][ T9081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.041454][ T9081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.070227][ T9081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.077913][ T9081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.101735][ T9081] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.852426][ T28] kauditd_printk_skb: 168 callbacks suppressed [ 109.852438][ T28] audit: type=1400 audit(1774472185.949:1309): avc: denied { name_connect } for pid=9104 comm="syz.4.2100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 109.990865][ T28] audit: type=1400 audit(1774472186.069:1310): avc: denied { search } for pid=9107 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.045772][ T28] audit: type=1400 audit(1774472186.089:1311): avc: denied { search } for pid=9107 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.082186][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2104'. [ 110.091896][ T28] audit: type=1400 audit(1774472186.089:1312): avc: denied { search } for pid=9107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.116721][ T9122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2104'. [ 110.155896][ T28] audit: type=1400 audit(1774472186.089:1313): avc: denied { search } for pid=9107 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.187546][ T28] audit: type=1400 audit(1774472186.089:1314): avc: denied { read open } for pid=9111 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.256892][ T28] audit: type=1400 audit(1774472186.089:1315): avc: denied { getattr } for pid=9111 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.282373][ T28] audit: type=1400 audit(1774472186.089:1316): avc: denied { getattr } for pid=9111 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.309314][ T28] audit: type=1400 audit(1774472186.119:1317): avc: denied { read } for pid=9114 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.364641][ T3000] ================================================================== [ 110.368666][ T28] audit: type=1400 audit(1774472186.119:1318): avc: denied { open } for pid=9114 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.372743][ T3000] BUG: KCSAN: data-race in d_delete / lookup_fast [ 110.372774][ T3000] [ 110.372780][ T3000] read-write to 0xffff88810854f480 of 4 bytes by task 3296 on cpu 0: [ 110.372793][ T3000] d_delete+0xbe/0xe0 [ 110.372816][ T3000] d_delete_notify+0x32/0x100 [ 110.372832][ T3000] vfs_unlink+0x289/0x490 [ 110.372848][ T3000] filename_unlinkat+0x1e2/0x410 [ 110.372865][ T3000] __se_sys_unlink+0x2b/0xe0 [ 110.372882][ T3000] __x64_sys_unlink+0x1f/0x30 [ 110.372899][ T3000] x64_sys_call+0x2eb6/0x3020 [ 110.372923][ T3000] do_syscall_64+0x12c/0x370 [ 110.372941][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.372959][ T3000] [ 110.372964][ T3000] read to 0xffff88810854f480 of 4 bytes by task 3000 on cpu 1: [ 110.372979][ T3000] lookup_fast+0xf0/0x320 [ 110.372998][ T3000] path_lookupat+0x15c/0x500 [ 110.373016][ T3000] filename_lookup+0x190/0x390 [ 110.373035][ T3000] do_readlinkat+0x74/0x2f0 [ 110.484890][ T3000] __x64_sys_readlink+0x47/0x60 [ 110.489750][ T3000] x64_sys_call+0x2b51/0x3020 [ 110.494432][ T3000] do_syscall_64+0x12c/0x370 [ 110.499112][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.505096][ T3000] [ 110.507413][ T3000] value changed: 0x00300180 -> 0x00004080 [ 110.513205][ T3000] [ 110.515521][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 110.521660][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 110.530492][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.540531][ T3000] ==================================================================