last executing test programs: 1m25.236704145s ago: executing program 32 (id=745): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 1m22.394089042s ago: executing program 33 (id=790): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00', 0xfffffffc}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x8000, 0x800, 0x1000000002, 0x80, 0x0, 0x6}, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1m6.828315196s ago: executing program 1 (id=1138): r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m6.827756796s ago: executing program 1 (id=1139): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 1m5.886567958s ago: executing program 1 (id=1161): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x80000001) accept4(r0, 0x0, 0x0, 0x0) 1m5.886248448s ago: executing program 1 (id=1162): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, &(0x7f0000000200)={0x84, 0x70, 0x0, {r0}}, 0x20) 1m5.83683773s ago: executing program 1 (id=1165): syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xb0) 1m5.54890902s ago: executing program 1 (id=1173): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 1m5.523756191s ago: executing program 34 (id=1173): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 48.114216198s ago: executing program 7 (id=1640): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ustat(0x0, 0x0) 47.239672459s ago: executing program 0 (id=1651): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 47.227507599s ago: executing program 7 (id=1642): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1, 0x400, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "42a7b472da36a5bb"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x502, 0x80000000, {0x0, 0xea60}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x48}}, 0x40000) 47.072616724s ago: executing program 7 (id=1646): socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000100)="5694e2f1cd6698f50da0b15fbff55a319a427f5428593716"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 47.039454506s ago: executing program 7 (id=1647): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 46.999957667s ago: executing program 7 (id=1650): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 46.975557307s ago: executing program 0 (id=1653): unshare(0x2c020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x1581, &(0x7f00000006c0)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 46.875480001s ago: executing program 0 (id=1661): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES8=r2], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 46.807340913s ago: executing program 0 (id=1663): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) 46.628402579s ago: executing program 0 (id=1668): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x108) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 46.436825366s ago: executing program 0 (id=1673): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 46.436739096s ago: executing program 35 (id=1673): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 45.817619017s ago: executing program 7 (id=1689): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) 45.769326459s ago: executing program 36 (id=1689): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) 20.322687292s ago: executing program 9 (id=2321): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x20, 0x100, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 20.229344506s ago: executing program 9 (id=2322): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r1, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}, 0x1, 0x620b}, 0x0) 20.228893945s ago: executing program 9 (id=2323): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) 20.170476877s ago: executing program 9 (id=2324): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x510, &(0x7f0000001a00)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 20.037610202s ago: executing program 9 (id=2325): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x95, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="d351986bfea9f83ab68c6cd4aef7b34d7ddd4d28e76ae1f9a3e25dfa62cc889829", 0x21}, {&(0x7f00000001c0)="bec7e829225920096d31f5ba44c20826087a57357f7729c06e5af6945e2f00b4d943fa08618f50ae3c7198952d7781e2b351ca6bf6e17da73068dc7524078f1768d0df9bb5b98b7519a2d8712beb08eab4bc8383488a9648e35deab0ffaad07a80a733f520a2778dbca00eb3d357e94456ba4610be", 0x75}], 0x2}}], 0x1, 0x40800) 19.768557661s ago: executing program 9 (id=2330): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x2000000) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0xa0) 19.727596322s ago: executing program 37 (id=2330): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x2000000) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0xa0) 6.920841412s ago: executing program 3 (id=2679): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140)="6fed", 0x2, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 6.087485161s ago: executing program 3 (id=2704): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 5.492747131s ago: executing program 3 (id=2711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 5.423311934s ago: executing program 3 (id=2713): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0xa45c04, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 5.391751604s ago: executing program 3 (id=2714): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 4.784824805s ago: executing program 3 (id=2721): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x6d6e, 0x1c080, 0x1, 0x20002f7}) 4.781693165s ago: executing program 38 (id=2721): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x6d6e, 0x1c080, 0x1, 0x20002f7}) 1.981536281s ago: executing program 5 (id=2770): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xc}, {0x5, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20040000) 1.924632793s ago: executing program 5 (id=2773): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) 1.810475298s ago: executing program 5 (id=2776): pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/69, 0x45}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket(0x80000000000000a, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.592822315s ago: executing program 2 (id=2782): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002075"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.219490338s ago: executing program 8 (id=2790): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003c80)=""/4011, 0xfab}, {&(0x7f0000002c40)=""/4128, 0x1020}, {&(0x7f0000000140)=""/26, 0x1a}], 0x3}, 0x100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.181454379s ago: executing program 2 (id=2792): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000a80)={r2, 0x0, "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"}, &(0x7f0000000180)=0xfebd) 949.204367ms ago: executing program 5 (id=2794): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x5, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 949.085117ms ago: executing program 6 (id=2795): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac14147ce0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca1c1b4bdf4bd9ce71fb"], 0xdd12}], 0x1}, 0x20040051) 910.091178ms ago: executing program 8 (id=2796): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bd3, 0x10100, 0x0, 0x314}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000000)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0x1) 861.91132ms ago: executing program 6 (id=2797): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 861.49154ms ago: executing program 8 (id=2798): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 792.853752ms ago: executing program 6 (id=2800): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f00000000c0)) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 698.782676ms ago: executing program 8 (id=2803): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) 575.3278ms ago: executing program 8 (id=2804): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000580)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@oldalloc}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x44a42, 0x10b) r1 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) fallocate(r1, 0x0, 0xbf5, 0x2000402) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 573.65838ms ago: executing program 4 (id=2805): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x2, 0xd3f, 0x2, 0x6}, 0x8}) close(0x3) 516.788152ms ago: executing program 6 (id=2806): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 470.971883ms ago: executing program 4 (id=2807): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x3, &(0x7f0000000380)=[{0x6, 0x40, 0x1, 0x1}, {0x84, 0x6, 0x9, 0xff}, {0x10, 0x5, 0x2, 0x1000}]}) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 452.649324ms ago: executing program 6 (id=2808): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0xffffffff, 0x1}, 0x1004, 0x0, 0x10000, 0x3, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) tkill(r0, 0x12) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4000}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x240000000000000]}, 0x8) 430.232065ms ago: executing program 4 (id=2809): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) 354.408308ms ago: executing program 6 (id=2810): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 326.135619ms ago: executing program 4 (id=2811): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000200010004"], 0x408100) 311.192759ms ago: executing program 2 (id=2812): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@newtfilter={0x24, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}}, 0x24}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 272.85064ms ago: executing program 5 (id=2813): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresuid(0xee01, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000040)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180), 0x4) 272.49651ms ago: executing program 4 (id=2814): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20842, 0x93) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) close(0x3) 196.079773ms ago: executing program 4 (id=2815): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) rmdir(0x0) 180.551544ms ago: executing program 5 (id=2816): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"/135], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) 124.273145ms ago: executing program 2 (id=2817): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x11}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 76.888577ms ago: executing program 8 (id=2818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000002200)={@val={0x0, 0x88ca}, @void, @eth={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @val={@void}, {@ipv6={0x86dd, @tcp={0x5, 0x6, 'MMa', 0x14, 0x6, 0x1, @mcast2, @remote, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0xfffe, 0x0, 0x7}}}}}}}}, 0x52) 28.801089ms ago: executing program 2 (id=2819): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x25, 0x5, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 0s ago: executing program 2 (id=2820): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @loopback, 0x7ffff, 0x6, 0x0, 0x0, 0x6, 0x40000010}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="12042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): 648][ T7450] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 88.433698][ T7450] EXT4-fs (loop6): orphan cleanup on readonly fs [ 88.480620][ T7450] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.1417: corrupted inode contents [ 88.515546][ T7450] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 88.515885][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 88.532933][ C0] EXT4-fs (loop6): initial error at time 1774708936: ext4_do_update_inode:5569: inode 16 [ 88.542911][ C0] EXT4-fs (loop6): last error at time 1774708936: ext4_do_update_inode:5569: inode 16 [ 88.593617][ T7450] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #16: comm syz.6.1417: mark_inode_dirty error [ 88.606330][ T7450] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 88.615437][ T7450] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.1417: corrupted inode contents [ 88.643915][ T7450] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 88.644071][ T7450] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.1417: mark_inode_dirty error [ 88.671130][ T7450] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 88.671935][ T7450] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.1417: corrupted inode contents [ 88.708263][ T7450] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 88.710751][ T7450] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 88.730078][ T7450] loop6: lost filesystem error report for type 5 error -117 [ 88.730576][ T7450] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.1417: corrupted inode contents [ 88.770261][ T7450] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 88.770478][ T7450] EXT4-fs error (device loop6): ext4_truncate:4587: inode #16: comm syz.6.1417: mark_inode_dirty error [ 88.799022][ T7450] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 88.805269][ T7450] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 88.847642][ T7450] loop6: lost filesystem error report for type 5 error -117 [ 88.848146][ T7450] EXT4-fs (loop6): 1 truncate cleaned up [ 88.872785][ T4842] __quota_error: 79 callbacks suppressed [ 88.872803][ T4842] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 88.912987][ T4842] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 1 [ 88.925040][ T4842] loop6: lost filesystem error report for type 5 error -117 [ 88.926830][ T7450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.028023][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.082590][ T1034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 89.106445][ T1034] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.205924][ T28] audit: type=1400 audit(1774708932.837:1122): avc: denied { read } for pid=1034 comm="kworker/1:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18232 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.389814][ T7515] netlink: 'syz.5.1444': attribute type 4 has an invalid length. [ 89.542662][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1449'. [ 89.583647][ T28] audit: type=1400 audit(1774708933.237:1123): avc: denied { mount } for pid=7532 comm="syz.7.1452" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.648067][ T7540] loop7: detected capacity change from 0 to 512 [ 89.664976][ T7540] FAT-fs (loop7): Directory bread(block 199916) failed [ 89.684562][ T7542] loop5: detected capacity change from 0 to 512 [ 89.689776][ T7540] FAT-fs (loop7): Directory bread(block 199917) failed [ 89.701901][ T7540] FAT-fs (loop7): Directory bread(block 199918) failed [ 89.703401][ T28] audit: type=1400 audit(1774708933.357:1124): avc: denied { mounton } for pid=7541 comm="syz.5.1456" path="/file0" dev="ramfs" ino=18666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 89.720902][ T7540] FAT-fs (loop7): Directory bread(block 199919) failed [ 89.740570][ T7542] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.753282][ T7540] FAT-fs (loop7): Directory bread(block 199920) failed [ 89.762010][ T7540] FAT-fs (loop7): Directory bread(block 199921) failed [ 89.769115][ T7540] FAT-fs (loop7): Directory bread(block 199922) failed [ 89.788360][ T7540] FAT-fs (loop7): Directory bread(block 199923) failed [ 89.823662][ T7550] syzkaller1: entered promiscuous mode [ 89.830243][ T7550] syzkaller1: entered allmulticast mode [ 89.839063][ T7550] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 42 [ 89.899504][ T7555] loop7: detected capacity change from 0 to 512 [ 89.909399][ T7555] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 89.959413][ T7558] loop3: detected capacity change from 0 to 1024 [ 89.967952][ T7555] EXT4-fs (loop7): 1 truncate cleaned up [ 89.974209][ T7555] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.002147][ T7558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.022733][ T7558] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.038080][ T28] audit: type=1400 audit(1774708933.697:1125): avc: denied { unlink } for pid=7557 comm="syz.3.1463" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.038627][ T7558] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1463: bg 0: block 112: padding at end of block bitmap is not set [ 90.096402][ T6774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.121347][ T7558] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.1463: lblock 0 mapped to illegal pblock 0 (length 1) [ 90.141959][ T7563] loop7: detected capacity change from 0 to 1024 [ 90.157568][ T7558] EXT4-fs error (device loop3): ext4_ext_remove_space:2954: inode #15: comm syz.3.1463: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 90.184897][ T7563] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 90.197741][ T7563] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.204761][ T7557] EXT4-fs error (device loop3): ext4_ext_remove_space:2954: inode #15: comm syz.3.1463: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 90.238964][ T7557] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.239287][ T7557] EXT4-fs error (device loop3): ext4_evict_inode:266: comm syz.3.1463: couldn't truncate inode 15 (err -117) [ 90.262175][ T6774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 90.304404][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 90.314931][ T7567] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1465'. [ 90.369608][ T28] audit: type=1400 audit(1774708934.027:1126): avc: denied { bind } for pid=7576 comm="syz.7.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.561294][ T28] audit: type=1400 audit(1774708934.217:1127): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.599030][ T28] audit: type=1400 audit(1774708934.217:1128): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.625588][ T28] audit: type=1400 audit(1774708934.217:1129): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.685354][ T28] audit: type=1400 audit(1774708934.257:1130): avc: denied { create } for pid=7591 comm="syz.6.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.686067][ T7594] netlink: 'syz.3.1477': attribute type 3 has an invalid length. [ 90.723952][ T7594] netlink: 'syz.3.1477': attribute type 1 has an invalid length. [ 90.738372][ T7594] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1477'. [ 90.764638][ T7598] loop6: detected capacity change from 0 to 512 [ 90.794676][ T7598] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 90.848322][ T7598] EXT4-fs (loop6): 1 truncate cleaned up [ 90.871169][ T7598] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.890772][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 90.922616][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 90.933846][ T7602] infiniband syz1: set active [ 90.939851][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.949377][ T7602] infiniband syz1: added bond_slave_1 [ 90.970861][ T7602] RDS/IB: syz1: added [ 90.980920][ T7602] smc: adding ib device syz1 with port count 1 [ 90.994307][ T7602] smc: ib device syz1 port 1 has no pnetid [ 91.098317][ T7628] loop6: detected capacity change from 0 to 2048 [ 91.145971][ T7628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.233323][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.379084][ T7655] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1490'. [ 91.402232][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1490'. [ 91.416290][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 91.442332][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1490'. [ 91.456011][ T7660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1492'. [ 91.511059][ T7664] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1494'. [ 91.535172][ T7664] bond0: entered promiscuous mode [ 91.540314][ T7664] bond_slave_0: entered promiscuous mode [ 91.546430][ T7664] bond_slave_1: entered promiscuous mode [ 91.562504][ T7664] bond0: left promiscuous mode [ 91.581698][ T7664] bond_slave_0: left promiscuous mode [ 91.587563][ T7664] bond_slave_1: left promiscuous mode [ 91.608748][ T7671] SELinux: failed to load policy [ 91.957403][ T7701] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 91.964667][ T23] IPVS: starting estimator thread 0... [ 92.058271][ T7711] IPVS: using max 2688 ests per chain, 134400 per kthread [ 92.058676][ T7725] loop7: detected capacity change from 0 to 256 [ 92.108491][ T7725] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.164950][ T7725] FAT-fs (loop7): Directory bread(block 64) failed [ 92.172081][ T7725] FAT-fs (loop7): Directory bread(block 65) failed [ 92.178809][ T7725] FAT-fs (loop7): Directory bread(block 66) failed [ 92.193804][ T7725] FAT-fs (loop7): Directory bread(block 67) failed [ 92.201143][ T7725] FAT-fs (loop7): Directory bread(block 68) failed [ 92.209577][ T7725] FAT-fs (loop7): Directory bread(block 69) failed [ 92.216792][ T7725] FAT-fs (loop7): Directory bread(block 70) failed [ 92.226223][ T7725] FAT-fs (loop7): Directory bread(block 71) failed [ 92.232985][ T7725] FAT-fs (loop7): Directory bread(block 72) failed [ 92.246007][ T7725] FAT-fs (loop7): Directory bread(block 73) failed [ 92.652086][ T7775] ext4: Unknown parameter 'uid<00000000000000060929' [ 92.711523][ T7775] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1532'. [ 93.450655][ T7836] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.509509][ T7836] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.570590][ T7836] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.660943][ T7836] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.688562][ T7851] batadv_slave_1: entered promiscuous mode [ 93.707036][ T7851] batadv_slave_1: left promiscuous mode [ 93.754911][ T349] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.775556][ T349] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.819551][ T1725] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.841767][ T1725] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.910283][ T7870] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 93.919591][ T28] kauditd_printk_skb: 212 callbacks suppressed [ 93.919659][ T28] audit: type=1400 audit(1774708937.567:1343): avc: denied { create } for pid=7869 comm="syz.6.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 93.981550][ T28] audit: type=1400 audit(1774708937.567:1344): avc: denied { write } for pid=7869 comm="syz.6.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 94.008471][ T28] audit: type=1400 audit(1774708937.587:1345): avc: denied { create } for pid=7871 comm="syz.7.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.039628][ T28] audit: type=1400 audit(1774708937.587:1346): avc: denied { write } for pid=7871 comm="syz.7.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.059489][ T28] audit: type=1400 audit(1774708937.627:1347): avc: denied { bind } for pid=7875 comm="syz.3.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.196782][ T28] audit: type=1400 audit(1774708937.837:1348): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.290323][ T28] audit: type=1400 audit(1774708937.897:1349): avc: denied { read write } for pid=7898 comm="syz.6.1585" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 94.368994][ T28] audit: type=1400 audit(1774708937.897:1350): avc: denied { open } for pid=7898 comm="syz.6.1585" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 94.458658][ T28] audit: type=1400 audit(1774708938.117:1351): avc: denied { module_request } for pid=7915 comm="syz.6.1592" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 94.483754][ T7918] serio: Serial port ttyS3 [ 94.576159][ T28] audit: type=1400 audit(1774708938.237:1352): avc: denied { read } for pid=7920 comm="syz.7.1594" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.773676][ T7937] tun1: tun_chr_ioctl cmd 1074025675 [ 94.779161][ T7937] tun1: persist enabled [ 94.783712][ T7937] tun1: tun_chr_ioctl cmd 1074025675 [ 94.789292][ T7937] tun1: persist disabled [ 94.813709][ T7939] set_capacity_and_notify: 2 callbacks suppressed [ 94.813730][ T7939] loop5: detected capacity change from 0 to 1024 [ 94.850600][ T7939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.868081][ T7939] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.1602: Allocating blocks 385-513 which overlap fs metadata [ 94.883542][ T7939] EXT4-fs (loop5): pa ffff8881075acee0: logic 16, phys. 129, len 24 [ 94.892387][ T7939] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 94.914248][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.466626][ T7990] loop7: detected capacity change from 0 to 1024 [ 95.491998][ T7990] EXT4-fs: inline encryption not supported [ 95.526817][ T7995] loop5: detected capacity change from 0 to 512 [ 95.535297][ T7995] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.552080][ T7995] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.571037][ T7995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.600738][ T7990] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 95.621234][ T7995] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.632201][ T7990] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.638258][ T5827] kernel write not supported for file bpf-prog (pid: 5827 comm: kworker/1:6) [ 95.751214][ T4842] tipc: Subscription rejected, illegal request [ 95.778970][ T8025] netlink: 'syz.7.1636': attribute type 29 has an invalid length. [ 95.803497][ T8025] netlink: 'syz.7.1636': attribute type 29 has an invalid length. [ 95.823931][ T8025] __nla_validate_parse: 3 callbacks suppressed [ 95.823951][ T8025] netlink: 500 bytes leftover after parsing attributes in process `syz.7.1636'. [ 96.854028][ T8161] bond1: entered promiscuous mode [ 97.142766][ T8197] loop5: detected capacity change from 0 to 512 [ 97.180016][ T8199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.250579][ T8205] loop0: detected capacity change from 0 to 4096 [ 97.255589][ T8210] loop6: detected capacity change from 0 to 1024 [ 97.281110][ T8210] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 97.296899][ T8210] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 97.309572][ T8210] EXT4-fs (loop6): This should not happen!! Data will be lost [ 97.309572][ T8210] [ 97.320174][ T8210] EXT4-fs (loop6): Total free blocks count 0 [ 97.326278][ T8210] EXT4-fs (loop6): Free/Dirty block details [ 97.332835][ T8210] EXT4-fs (loop6): free_blocks=20480 [ 97.338503][ T8210] EXT4-fs (loop6): dirty_blocks=32 [ 97.343841][ T8210] EXT4-fs (loop6): Block reservation details [ 97.351739][ T8210] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 97.375146][ T349] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 97.388108][ T349] EXT4-fs (loop6): This should not happen!! Data will be lost [ 97.388108][ T349] [ 97.397466][ T3310] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 97.410751][ T3310] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 97.479147][ T8223] loop3: detected capacity change from 0 to 512 [ 97.505031][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1671'. [ 97.517323][ T8223] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1669: inode has both inline data and extents flags [ 97.543733][ T8223] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.543925][ T8223] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1669: couldn't read orphan inode 15 (err -117) [ 97.553122][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 97.553148][ C0] EXT4-fs (loop3): initial error at time 1774708941: ext4_orphan_get:1391: inode 15 [ 97.553202][ C0] EXT4-fs (loop3): last error at time 1774708941: ext4_orphan_get:1391: inode 15 [ 97.592003][ T8223] loop3: lost filesystem error report for type 5 error -117 [ 97.900448][ T349] bond0 (unregistering): Released all slaves [ 97.917790][ T349] bond1 (unregistering): Released all slaves [ 97.927072][ T349] bond2 (unregistering): Released all slaves [ 98.108477][ T349] hsr_slave_0: left promiscuous mode [ 98.115778][ T349] hsr_slave_1: left promiscuous mode [ 98.307909][ T8297] batadv_slave_1: entered promiscuous mode [ 98.334062][ T8296] batadv_slave_1: left promiscuous mode [ 98.361867][ T8237] chnl_net:caif_netlink_parms(): no params data found [ 98.452489][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.466592][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.485118][ T8237] bridge_slave_0: entered allmulticast mode [ 98.504868][ T8237] bridge_slave_0: entered promiscuous mode [ 98.521752][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.529575][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.537794][ T8237] bridge_slave_1: entered allmulticast mode [ 98.554812][ T8237] bridge_slave_1: entered promiscuous mode [ 98.573323][ T349] IPVS: stop unused estimator thread 0... [ 98.623160][ T8237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.647623][ T8237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.713779][ T8237] team0: Port device team_slave_0 added [ 98.727567][ T8237] team0: Port device team_slave_1 added [ 98.749098][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.759827][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.795992][ T8237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.819648][ T8294] chnl_net:caif_netlink_parms(): no params data found [ 98.835228][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.844766][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.874201][ T8237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.172263][ T8356] loop5: detected capacity change from 0 to 1024 [ 99.503480][ T5433] EXT4-fs unmount: 9 callbacks suppressed [ 99.503496][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.506837][ T349] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.595122][ T8366] loop3: detected capacity change from 0 to 512 [ 99.599296][ T8237] hsr_slave_0: entered promiscuous mode [ 99.623547][ T8366] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1703: iget: bad extra_isize 58 (inode size 256) [ 99.637460][ T8237] hsr_slave_1: entered promiscuous mode [ 99.643204][ T8237] debugfs: 'hsr0' already exists in 'hsr' [ 99.645961][ T8366] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 99.649321][ T8237] Cannot create hsr debugfs directory [ 99.652887][ T8366] EXT4-fs (loop3): Remounting filesystem read-only [ 99.658473][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 99.658495][ C1] EXT4-fs (loop3): initial error at time 1774708943: ext4_xattr_inode_iget:441: inode 11 [ 99.658527][ C1] EXT4-fs (loop3): last error at time 1774708943: ext4_xattr_inode_iget:441: inode 11 [ 99.698412][ T349] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.720597][ T8366] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 99.724335][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 99.724352][ T28] audit: type=1400 audit(1774708943.377:1440): avc: denied { read write } for pid=8371 comm="syz.6.1705" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.731091][ T8366] EXT4-fs (loop3): 1 orphan inode deleted [ 99.740099][ T28] audit: type=1400 audit(1774708943.377:1441): avc: denied { open } for pid=8371 comm="syz.6.1705" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.762666][ T8366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.797847][ T8294] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.812374][ T28] audit: type=1400 audit(1774708943.377:1442): avc: denied { ioctl } for pid=8371 comm="syz.6.1705" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.822413][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.860978][ T8294] bridge_slave_0: entered allmulticast mode [ 99.867798][ T8294] bridge_slave_0: entered promiscuous mode [ 99.874756][ T8294] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.882144][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.889872][ T8294] bridge_slave_1: entered allmulticast mode [ 99.896533][ T8294] bridge_slave_1: entered promiscuous mode [ 99.914088][ T349] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.958265][ T8294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.004063][ T28] audit: type=1326 audit(1774708943.657:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 100.031784][ T28] audit: type=1326 audit(1774708943.657:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 100.056142][ T28] audit: type=1326 audit(1774708943.687:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 100.080599][ T349] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.090177][ T28] audit: type=1326 audit(1774708943.687:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 100.115104][ T28] audit: type=1326 audit(1774708943.687:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 100.134426][ T8294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.160088][ T8398] loop6: detected capacity change from 0 to 512 [ 100.166671][ T28] audit: type=1326 audit(1774708943.687:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 100.195914][ T28] audit: type=1326 audit(1774708943.687:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 100.215812][ T8398] EXT4-fs (loop6): 1 truncate cleaned up [ 100.225981][ T8398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.280571][ T8294] team0: Port device team_slave_0 added [ 100.315547][ T8237] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 100.346281][ T8237] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 100.359555][ T8294] team0: Port device team_slave_1 added [ 100.376105][ T8408] loop5: detected capacity change from 0 to 1024 [ 100.382335][ T8237] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 100.403710][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.416023][ T8237] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 100.418133][ T8408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.438681][ T8408] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.483806][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.519615][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.559315][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.576722][ T8428] loop3: detected capacity change from 0 to 256 [ 100.579460][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.619840][ T8428] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.624520][ T8294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.648805][ T349] bridge_slave_1: left allmulticast mode [ 100.654935][ T349] bridge_slave_1: left promiscuous mode [ 100.661324][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.669458][ T349] bridge_slave_0: left allmulticast mode [ 100.675310][ T349] bridge_slave_0: left promiscuous mode [ 100.694181][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.827703][ T349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.837707][ T349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.847635][ T349] bond0 (unregistering): Released all slaves [ 100.858628][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.865712][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.894406][ T8294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.979006][ T8294] hsr_slave_0: entered promiscuous mode [ 100.985205][ T8294] hsr_slave_1: entered promiscuous mode [ 100.994919][ T8294] debugfs: 'hsr0' already exists in 'hsr' [ 101.006777][ T8294] Cannot create hsr debugfs directory [ 101.028908][ T349] hsr_slave_0: left promiscuous mode [ 101.038849][ T349] hsr_slave_1: left promiscuous mode [ 101.045313][ T349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.052983][ T349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.064687][ T349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.072885][ T349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.085775][ T349] veth1_macvtap: left promiscuous mode [ 101.098815][ T349] veth0_macvtap: left promiscuous mode [ 101.104510][ T349] veth1_vlan: left promiscuous mode [ 101.110197][ T349] veth0_vlan: left promiscuous mode [ 101.197963][ T349] team0 (unregistering): Port device team_slave_1 removed [ 101.224660][ T349] team0 (unregistering): Port device team_slave_0 removed [ 101.299642][ T8472] vlan2: entered allmulticast mode [ 101.304913][ T8472] bridge0: entered allmulticast mode [ 101.314635][ T8472] bridge0: port 3(vlan2) entered blocking state [ 101.321410][ T8472] bridge0: port 3(vlan2) entered disabled state [ 101.364547][ T8237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.426834][ T8237] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.447070][ T1725] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.454403][ T1725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.479150][ T4840] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.486250][ T4840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.588936][ T8294] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 101.607942][ T8294] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 101.617182][ T8294] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 101.626429][ T8294] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 101.641201][ T8237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.668299][ T349] IPVS: stop unused estimator thread 0... [ 101.791634][ T8294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.816900][ T8294] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.842413][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.849558][ T4842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.859628][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.866851][ T4842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.922480][ T8237] veth0_vlan: entered promiscuous mode [ 101.947188][ T8237] veth1_vlan: entered promiscuous mode [ 101.985014][ T8542] syzkaller1: entered promiscuous mode [ 101.994919][ T8542] syzkaller1: entered allmulticast mode [ 102.007723][ T8237] veth0_macvtap: entered promiscuous mode [ 102.017514][ T8237] veth1_macvtap: entered promiscuous mode [ 102.050736][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.088792][ T8294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.104519][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.119778][ T349] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.145907][ T349] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.167800][ T349] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.184759][ T4842] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.197010][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'. [ 102.221453][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1740'. [ 102.252387][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'. [ 102.271989][ T8560] syzkaller1: entered promiscuous mode [ 102.283444][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1740'. [ 102.291365][ T8560] syzkaller1: entered allmulticast mode [ 102.413131][ T8579] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 102.495186][ T8294] veth0_vlan: entered promiscuous mode [ 102.511186][ T8294] veth1_vlan: entered promiscuous mode [ 102.552882][ T8294] veth0_macvtap: entered promiscuous mode [ 102.570435][ T8592] loop8: detected capacity change from 0 to 8192 [ 102.578278][ T8294] veth1_macvtap: entered promiscuous mode [ 102.601067][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.632348][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.714664][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.736359][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.745560][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.767965][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.003638][ T3363] IPVS: starting estimator thread 0... [ 103.036779][ T8629] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 103.097197][ T8629] bond2 (unregistering): Released all slaves [ 103.116017][ T8628] IPVS: using max 2640 ests per chain, 132000 per kthread [ 103.229449][ T8642] loop5: detected capacity change from 0 to 1024 [ 103.241589][ T8642] EXT4-fs: Ignoring removed bh option [ 103.249424][ T8642] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 103.282559][ T8642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.317353][ T8642] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.1762: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 103.348393][ T8651] loop6: detected capacity change from 0 to 512 [ 103.364119][ T8653] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1765'. [ 103.382422][ T8642] EXT4-fs (loop5): Remounting filesystem read-only [ 103.410508][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.434652][ T12] tipc: Subscription rejected, illegal request [ 104.040484][ T8699] loop3: detected capacity change from 0 to 256 [ 104.287513][ T8725] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.560992][ T8738] netlink: 'syz.8.1802': attribute type 12 has an invalid length. [ 104.572441][ T8738] netlink: 'syz.8.1802': attribute type 29 has an invalid length. [ 104.581549][ T8738] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1802'. [ 104.591122][ T8738] netlink: 'syz.8.1802': attribute type 2 has an invalid length. [ 104.599307][ T8738] netlink: 23 bytes leftover after parsing attributes in process `syz.8.1802'. [ 104.675457][ T8744] loop5: detected capacity change from 0 to 512 [ 104.691750][ T8744] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1805: inode has both inline data and extents flags [ 104.705552][ T8744] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.705890][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 104.721512][ C1] EXT4-fs (loop5): initial error at time 1774708948: ext4_orphan_get:1391: inode 15 [ 104.730953][ C1] EXT4-fs (loop5): last error at time 1774708948: ext4_orphan_get:1391: inode 15 [ 104.743870][ T8744] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1805: couldn't read orphan inode 15 (err -117) [ 104.749211][ T8748] netlink: 204 bytes leftover after parsing attributes in process `syz.9.1806'. [ 104.758679][ T8744] loop5: lost filesystem error report for type 5 error -117 [ 104.766818][ T8744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.826617][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.853168][ T8748] netlink: 84 bytes leftover after parsing attributes in process `syz.9.1806'. [ 104.904117][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b077200: rx timeout, send abort [ 104.912440][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b077200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.932392][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 104.932407][ T28] audit: type=1400 audit(1774708948.587:1515): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 104.969118][ T8755] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 104.983241][ T8755] SELinux: failed to load policy [ 104.990501][ T28] audit: type=1400 audit(1774708948.587:1516): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.013485][ T8761] loop9: detected capacity change from 0 to 128 [ 105.022463][ T8757] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 105.033489][ T8757] SELinux: failed to load policy [ 105.048512][ T28] audit: type=1400 audit(1774708948.587:1517): avc: denied { append } for pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.103638][ T28] audit: type=1400 audit(1774708948.587:1518): avc: denied { open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.155778][ T28] audit: type=1400 audit(1774708948.587:1519): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.244164][ T28] audit: type=1400 audit(1774708948.627:1520): avc: denied { load_policy } for pid=8754 comm="syz.5.1808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.315305][ T28] audit: type=1400 audit(1774708948.957:1521): avc: denied { write } for pid=8775 comm="syz.8.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.408453][ T8785] loop8: detected capacity change from 0 to 1024 [ 105.443635][ T8785] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.529449][ T8785] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 105.597875][ T8797] netlink: 'syz.5.1828': attribute type 13 has an invalid length. [ 105.627223][ T8237] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.635095][ T8797] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.1828'. [ 105.667492][ T28] audit: type=1400 audit(1774708949.317:1522): avc: denied { bind } for pid=8801 comm="syz.9.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.712514][ T28] audit: type=1400 audit(1774708949.317:1523): avc: denied { listen } for pid=8801 comm="syz.9.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.721450][ T8807] loop8: detected capacity change from 0 to 1024 [ 105.760517][ T8807] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.786666][ T28] audit: type=1400 audit(1774708949.447:1524): avc: denied { create } for pid=8814 comm="syz.9.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.813875][ T8809] loop5: detected capacity change from 0 to 8192 [ 105.839963][ T8237] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.998568][ T8830] loop9: detected capacity change from 0 to 512 [ 106.023044][ T8830] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.1841: corrupted in-inode xattr: invalid size in ea xattr [ 106.042055][ T8830] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.042242][ T8830] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1841: couldn't read orphan inode 15 (err -117) [ 106.051459][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 106.051480][ C0] EXT4-fs (loop9): initial error at time 1774708949: ext4_iget_extra_inode:5025: inode 15 [ 106.051513][ C0] EXT4-fs (loop9): last error at time 1774708949: ext4_iget_extra_inode:5025: inode 15 [ 106.091324][ T8830] loop9: lost filesystem error report for type 5 error -117 [ 106.096820][ T8830] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.122707][ T8845] loop6: detected capacity change from 0 to 512 [ 106.126260][ T8830] EXT4-fs (loop9): shut down requested (1) [ 106.146073][ T8845] EXT4-fs (loop6): 1 truncate cleaned up [ 106.166344][ T8845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.197168][ T8294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.225324][ T8845] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1848: invalid indirect mapped block 4294901760 (level 0) [ 106.304107][ T8845] EXT4-fs (loop6): Remounting filesystem read-only [ 106.308411][ T8809] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 106.321006][ T8856] loop8: detected capacity change from 0 to 512 [ 106.336178][ T8809] FAT-fs (loop5): Filesystem has been set read-only [ 106.363813][ T8856] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 106.364218][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.393297][ T8856] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 106.464562][ T8861] loop3: detected capacity change from 0 to 2048 [ 106.475096][ T8864] loop9: detected capacity change from 0 to 512 [ 106.485970][ T8866] loop8: detected capacity change from 0 to 512 [ 106.501445][ T8861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.530834][ T8861] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 106.546074][ T8866] EXT4-fs (loop8): 1 truncate cleaned up [ 106.552186][ T8866] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.582838][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.613188][ T8864] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.638510][ T8864] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.745230][ T8864] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.1858: corrupted inode contents [ 106.804977][ T8864] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #2: comm syz.9.1858: mark_inode_dirty error [ 106.839211][ T8864] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.1858: corrupted inode contents [ 106.839433][ T8237] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.860693][ T8864] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.1858: mark_inode_dirty error [ 106.873864][ T8893] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #2: comm syz.9.1858: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 106.873864][ T8893] [ 106.887244][ T8903] loop5: detected capacity change from 0 to 128 [ 106.905383][ T8864] EXT4-fs error (device loop9): ext4_get_first_dir_block:3538: inode #18: comm syz.9.1858: directory missing '.' [ 106.987744][ T8294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.124767][ T8927] EXT4-fs (loop3): 1 truncate cleaned up [ 107.135363][ T8927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.322659][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.376528][ T8944] ip6erspan0: entered allmulticast mode [ 107.426974][ T8952] Invalid logical block size (2) [ 107.513467][ T8956] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 107.555106][ T8956] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 107.627228][ T8956] EXT4-fs (loop3): invalid journal inode [ 107.635606][ T8956] EXT4-fs (loop3): can't get journal size [ 107.696778][ T8956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.820717][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.921753][ T8976] EXT4-fs: inline encryption not supported [ 107.984379][ T8982] syzkaller1: entered promiscuous mode [ 107.997057][ T8976] EXT4-fs: Ignoring removed bh option [ 107.997720][ T8982] syzkaller1: entered allmulticast mode [ 108.019056][ T8986] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1904'. [ 108.071050][ T8976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.127283][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.211316][ T9006] EXT4-fs: Ignoring removed orlov option [ 108.244639][ T9006] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.252591][ T9012] dummy0: entered promiscuous mode [ 108.264142][ T9012] dummy0: left promiscuous mode [ 108.271815][ T9006] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1914: corrupted in-inode xattr: e_value size too large [ 108.315316][ T9006] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.315538][ T9006] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1914: couldn't read orphan inode 15 (err -117) [ 108.324949][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 108.324969][ C0] EXT4-fs (loop5): initial error at time 1774708951: ext4_iget_extra_inode:5025: inode 15 [ 108.325029][ C0] EXT4-fs (loop5): last error at time 1774708951: ext4_iget_extra_inode:5025: inode 15 [ 108.374437][ T9006] loop5: lost filesystem error report for type 5 error -117 [ 108.377245][ T9006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.416829][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.562626][ T9041] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1927: bad orphan inode 11862016 [ 108.571626][ T9043] syzkaller1: entered promiscuous mode [ 108.573434][ T9041] loop8: lost filesystem error report for type 5 error -117 [ 108.579658][ T9041] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 108.581575][ T9043] syzkaller1: entered allmulticast mode [ 108.587524][ T9041] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.641086][ T9041] Invalid ELF header magic: != ELF [ 108.656471][ T8237] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 108.946241][ T9062] xt_connbytes: Forcing CT accounting to be enabled [ 108.979225][ T9062] program syz.5.1935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.104048][ T9075] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 109.124395][ T9075] EXT4-fs (loop6): 1 truncate cleaned up [ 109.130941][ T9075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.233679][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.268025][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1947'. [ 109.319806][ T9091] vlan2: entered allmulticast mode [ 109.325228][ T9091] dummy0: entered allmulticast mode [ 109.331055][ T9091] bridge0: port 3(vlan2) entered blocking state [ 109.337777][ T9091] bridge0: port 3(vlan2) entered disabled state [ 109.345018][ T9091] vlan2: entered promiscuous mode [ 109.350878][ T9091] dummy0: entered promiscuous mode [ 109.406243][ T9099] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1950'. [ 109.641885][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1965'. [ 109.666310][ T9128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1965'. [ 109.680911][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1965'. [ 109.690532][ T9128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1965'. [ 109.700291][ T9132] batadv_slave_1: entered promiscuous mode [ 109.727325][ T9131] batadv_slave_1: left promiscuous mode [ 109.801368][ T9146] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1972'. [ 110.143889][ T9187] program syz.6.1987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.211544][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.469573][ T9201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.479995][ T9201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.481500][ T9209] set_capacity_and_notify: 6 callbacks suppressed [ 110.481516][ T9209] loop8: detected capacity change from 0 to 512 [ 110.505274][ T9209] EXT4-fs: test_dummy_encryption option not supported [ 110.606811][ T9213] loop3: detected capacity change from 0 to 512 [ 110.618776][ T9213] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1999: bad orphan inode 11862016 [ 110.630536][ T9213] loop3: lost filesystem error report for type 5 error -117 [ 110.631077][ T9213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 110.651136][ T9213] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.666030][ T9213] Invalid ELF header magic: != ELF [ 110.680908][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 110.872591][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 110.872609][ T28] audit: type=1400 audit(1774708954.527:1560): avc: denied { execute_no_trans } for pid=9223 comm="syz.3.2003" path="/416/file0" dev="tmpfs" ino=2170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.872633][ T9224] Invalid argument reading file caps for ./file0 [ 111.001437][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2006'. [ 111.199026][ T9242] loop9: detected capacity change from 0 to 128 [ 111.233791][ T9244] loop9: detected capacity change from 0 to 256 [ 111.429465][ T9260] loop6: detected capacity change from 0 to 1024 [ 111.447947][ T9260] EXT4-fs: inline encryption not supported [ 111.466138][ T9260] EXT4-fs: Ignoring removed i_version option [ 111.490819][ T9260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.514131][ T9260] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.2019: Allocating blocks 497-513 which overlap fs metadata [ 111.547410][ T9259] EXT4-fs (loop6): pa ffff8881075ad070: logic 256, phys. 369, len 9 [ 111.555785][ T9259] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 111.587430][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.769296][ T9278] loop8: detected capacity change from 0 to 8192 [ 111.995016][ T9301] loop3: detected capacity change from 0 to 512 [ 112.004707][ T9301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.051930][ T9301] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.066100][ T9301] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.079121][ T9301] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.2031: Allocating blocks 41-42 which overlap fs metadata [ 112.094742][ T9301] loop3: lost filesystem error report for type 5 error -117 [ 112.095004][ T9301] EXT4-fs (loop3): Remounting filesystem read-only [ 112.102323][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 112.102354][ C0] EXT4-fs (loop3): initial error at time 1774708955: ext4_mb_mark_diskspace_used:4222 [ 112.102393][ C0] EXT4-fs (loop3): last error at time 1774708955: ext4_mb_mark_diskspace_used:4222 [ 112.137985][ T28] audit: type=1400 audit(1774708955.797:1561): avc: denied { listen } for pid=9307 comm="syz.6.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.138056][ T9301] Quota error (device loop3): write_blk: dquota write failed [ 112.138075][ T9301] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 112.173841][ T28] audit: type=1400 audit(1774708955.827:1562): avc: denied { accept } for pid=9307 comm="syz.6.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.177330][ T9301] Quota error (device loop3): write_blk: dquota write failed [ 112.199729][ T9310] netlink: 'syz.6.2033': attribute type 1 has an invalid length. [ 112.202261][ T9301] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 112.219867][ T9301] EXT4-fs (loop3): 1 truncate cleaned up [ 112.225942][ T9301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.275733][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.275751][ T9312] loop6: detected capacity change from 0 to 1024 [ 112.291901][ T3553] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.293550][ T3785] Bluetooth: hci0: command 0x1003 tx timeout [ 112.298423][ T9312] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.382933][ T9312] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 112.395034][ T9312] EXT4-fs (loop6): orphan cleanup on readonly fs [ 112.402275][ T9312] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz.6.2035: Invalid inode table block 0 in block_group 0 [ 112.415097][ T9312] loop6: lost filesystem error report for type 5 error -117 [ 112.415260][ T9312] EXT4-fs (loop6): Remounting filesystem read-only [ 112.422724][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 112.422745][ C0] EXT4-fs (loop6): initial error at time 1774708956: __ext4_get_inode_loc:4782 [ 112.422772][ C0] EXT4-fs (loop6): last error at time 1774708956: __ext4_get_inode_loc:4782 [ 112.502273][ T9312] Quota error (device loop6): write_blk: dquota write failed [ 112.509921][ T9312] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 112.520676][ T9312] EXT4-fs (loop6): 1 truncate cleaned up [ 112.544277][ T9312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.569384][ T9312] raw_sendmsg: syz.6.2035 forgot to set AF_INET. Fix it! [ 112.591715][ T9337] loop5: detected capacity change from 0 to 512 [ 112.606894][ T9337] EXT4-fs (loop5): 1 truncate cleaned up [ 112.614211][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.614307][ T9337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.680685][ T9348] program syz.6.2044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.785268][ T9362] loop8: detected capacity change from 0 to 128 [ 112.798408][ T9362] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2049'. [ 112.992673][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.005329][ T9377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.072335][ T28] audit: type=1400 audit(1774708956.727:1563): avc: denied { create } for pid=9393 comm="syz.5.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 113.111405][ T9377] __nla_validate_parse: 2 callbacks suppressed [ 113.111422][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2053'. [ 113.158264][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.408610][ T9445] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 113.419574][ T9445] EXT4-fs (loop3): 1 truncate cleaned up [ 113.430533][ T9445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.493932][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.515453][ T9453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.563843][ T9453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.704122][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2077'. [ 113.728013][ T9473] netlink: 'syz.6.2077': attribute type 1 has an invalid length. [ 113.735804][ T9473] netlink: 'syz.6.2077': attribute type 2 has an invalid length. [ 113.805131][ T9453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.814069][ T9453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.863960][ T9490] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2080'. [ 114.232114][ T9533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.256131][ T9533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.319640][ T9538] veth0: entered promiscuous mode [ 114.343069][ T9537] veth0: left promiscuous mode [ 114.414988][ T9552] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2098'. [ 114.577094][ T9575] EXT4-fs (loop9): 1 truncate cleaned up [ 114.589579][ T9575] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.718541][ T9591] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.743271][ T9593] netlink: 'syz.8.2112': attribute type 4 has an invalid length. [ 114.776204][ T9591] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.878328][ T8294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.911381][ T9605] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2116'. [ 114.946992][ T9610] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2120'. [ 115.077249][ T9622] EXT4-fs: Ignoring removed oldalloc option [ 115.107301][ T9622] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2126: invalid block [ 115.164879][ T9632] EXT4-fs (loop8): 1 truncate cleaned up [ 115.178089][ T9622] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.178941][ T9632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.188313][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 115.188351][ C0] EXT4-fs (loop5): initial error at time 1774708958: ext4_get_branch:178: inode 11: block 4294967295 [ 115.188385][ C0] EXT4-fs (loop5): last error at time 1774708958: ext4_get_branch:178: inode 11: block 4294967295 [ 115.254253][ T9622] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2126: invalid indirect mapped block 4294967295 (level 1) [ 115.291542][ T9622] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.301652][ T9622] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2126: invalid indirect mapped block 4294967295 (level 1) [ 115.326216][ T9622] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.326461][ T9622] EXT4-fs (loop5): 2 truncates cleaned up [ 115.416429][ T9622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.553991][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.766789][ T8237] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.019310][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 116.019328][ T28] audit: type=1400 audit(1774708959.677:1580): avc: denied { create } for pid=9649 comm="syz.5.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.074187][ T28] audit: type=1400 audit(1774708959.707:1581): avc: denied { getopt } for pid=9649 comm="syz.5.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.107856][ T9663] set_capacity_and_notify: 7 callbacks suppressed [ 116.107877][ T9663] loop8: detected capacity change from 0 to 2048 [ 116.147130][ T9663] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.155033][ T9667] xt_hashlimit: size too large, truncated to 1048576 [ 116.174202][ T9663] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 116.193261][ T8237] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.301616][ T28] audit: type=1326 audit(1774708959.957:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.6.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 116.389969][ T28] audit: type=1326 audit(1774708959.957:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.6.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 116.465910][ T28] audit: type=1326 audit(1774708959.957:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.6.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 116.536556][ T9694] xt_CT: No such helper "snmp_trap" [ 116.552094][ T28] audit: type=1326 audit(1774708959.987:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.6.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 116.593130][ T28] audit: type=1326 audit(1774708959.987:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.6.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 116.630305][ T28] audit: type=1326 audit(1774708959.987:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.6.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 116.655976][ T28] audit: type=1326 audit(1774708959.987:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.6.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 116.682323][ T28] audit: type=1326 audit(1774708959.997:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9681 comm="syz.6.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 116.826038][ T6042] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 116.834289][ T6042] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.085996][ T3785] Bluetooth: hci0: command 0x1003 tx timeout [ 117.088991][ T3553] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.193540][ T9726] loop9: detected capacity change from 0 to 512 [ 117.239787][ T9726] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 117.242341][ T9728] xt_hashlimit: size too large, truncated to 1048576 [ 117.288639][ T9726] EXT4-fs (loop9): 1 truncate cleaned up [ 117.307110][ T9726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.359812][ T3448] kernel read not supported for file / (pid: 3448 comm: kworker/0:8) [ 117.378743][ T8294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.466237][ T9740] loop9: detected capacity change from 0 to 256 [ 117.493471][ T9740] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.548276][ T9740] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.653238][ T3448] Process accounting resumed [ 117.833078][ T9774] syzkaller1: entered promiscuous mode [ 117.848380][ T9774] syzkaller1: entered allmulticast mode [ 118.113268][ T9804] loop3: detected capacity change from 0 to 512 [ 118.122824][ T9804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.136976][ T9804] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2199: iget: bad i_size value: 38620345925642 [ 118.156094][ T9804] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 118.156374][ T9804] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2199: couldn't read orphan inode 15 (err -117) [ 118.177695][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 118.177719][ C0] EXT4-fs (loop3): initial error at time 1774708961: ext4_orphan_get:1391: inode 15 [ 118.177756][ C0] EXT4-fs (loop3): last error at time 1774708961: ext4_orphan_get:1391: inode 15 [ 118.205047][ T9804] loop3: lost filesystem error report for type 5 error -117 [ 118.205750][ T9804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.256095][ T30] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 118.278647][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 118.291082][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 118.291082][ T30] [ 118.301690][ T30] EXT4-fs (loop3): Total free blocks count 0 [ 118.309258][ T30] EXT4-fs (loop3): Free/Dirty block details [ 118.315278][ T30] EXT4-fs (loop3): free_blocks=0 [ 118.320357][ T30] EXT4-fs (loop3): dirty_blocks=1 [ 118.327137][ T30] EXT4-fs (loop3): Block reservation details [ 118.333914][ T30] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 118.346650][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.381814][ T9815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=279 sclass=netlink_tcpdiag_socket pid=9815 comm=syz.6.2204 [ 118.598782][ T9833] loop3: detected capacity change from 0 to 128 [ 118.626515][ T9833] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.656533][ T9833] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.725970][ T9841] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 118.733356][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.804335][ T9846] netlink: 'syz.3.2217': attribute type 10 has an invalid length. [ 118.831670][ T9846] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2217'. [ 118.953105][ T9854] loop5: detected capacity change from 0 to 512 [ 118.960815][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'. [ 118.972366][ T9854] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.987672][ T9854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.010004][ T9854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.026990][ T9854] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.084189][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'. [ 119.200450][ T9868] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2227'. [ 119.201038][ T9867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.221074][ T9868] loop8: detected capacity change from 0 to 512 [ 119.259122][ T9868] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.275531][ T9868] EXT4-fs: inline encryption not supported [ 119.288680][ T9868] EXT4-fs: test_dummy_encryption option not supported [ 119.295239][ T9873] syzkaller1: entered promiscuous mode [ 119.302461][ T9868] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2227'. [ 119.316734][ T9873] syzkaller1: entered allmulticast mode [ 119.476789][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2234'. [ 119.609629][ T9894] loop3: detected capacity change from 0 to 512 [ 119.649253][ T9894] EXT4-fs (loop3): 1 truncate cleaned up [ 120.398011][ T9932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=9932 comm=syz.8.2254 [ 120.508582][ T9934] loop8: detected capacity change from 0 to 512 [ 120.730718][ T9955] af_packet: tpacket_rcv: packet too big, clamped from 120 to 4294967272. macoff=96 [ 120.881422][ T9970] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2271'. [ 120.898952][ T9974] loop5: detected capacity change from 0 to 128 [ 121.249501][ T9988] xt_hashlimit: size too large, truncated to 1048576 [ 121.281864][ T28] kauditd_printk_skb: 182 callbacks suppressed [ 121.281883][ T28] audit: type=1326 audit(1774708964.937:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9989 comm="syz.6.2281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x0 [ 121.380679][ T9995] loop9: detected capacity change from 0 to 1024 [ 121.412963][ T9995] EXT4-fs: Ignoring removed bh option [ 121.423467][T10001] syzkaller1: entered promiscuous mode [ 121.437307][ T9995] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.449572][T10002] SELinux: Context : is not valid (left unmapped). [ 121.449598][ T28] audit: type=1400 audit(1774708965.107:1773): avc: denied { mac_admin } for pid=10000 comm="syz.5.2286" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.456787][T10001] syzkaller1: entered allmulticast mode [ 121.493958][ T9995] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 2: comm syz.9.2283: lblock 2 mapped to illegal pblock 2 (length 1) [ 121.497901][ T28] audit: type=1400 audit(1774708965.147:1774): avc: denied { relabelto } for pid=10000 comm="syz.5.2286" name="rdma.current" dev="tmpfs" ino=1667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 121.529893][ T9995] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 121.541523][ T28] audit: type=1400 audit(1774708965.147:1775): avc: denied { associate } for pid=10000 comm="syz.5.2286" name="rdma.current" dev="tmpfs" ino=1667 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 121.585405][ T28] audit: type=1400 audit(1774708965.207:1776): avc: denied { unlink } for pid=5433 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 121.588897][ T9995] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 121.609943][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 121.609968][ C1] EXT4-fs (loop9): initial error at time 1774708965: ext4_map_blocks:776: inode 3: block 2 [ 121.610026][ C1] EXT4-fs (loop9): last error at time 1774708965: ext4_map_blocks:776: inode 3: block 2 [ 121.646560][ T9995] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 48: comm syz.9.2283: lblock 0 mapped to illegal pblock 48 (length 1) [ 121.660968][ T9995] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 121.662604][ T9995] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 121.681260][ T9995] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.2283: Failed to acquire dquot type 0 [ 121.692885][ T9995] loop9: lost filesystem error report for type 5 error -117 [ 121.693113][ T9995] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 121.710084][ T9995] loop9: lost filesystem error report for type 5 error -117 [ 121.714856][ T9995] EXT4-fs error (device loop9): ext4_evict_inode:255: inode #11: comm syz.9.2283: mark_inode_dirty error [ 121.733704][ T9995] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.733996][ T9995] EXT4-fs warning (device loop9): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 121.753674][ T9995] EXT4-fs (loop9): 1 orphan inode deleted [ 121.762637][T10012] loop3: detected capacity change from 0 to 128 [ 121.771475][T10012] EXT4-fs: Ignoring removed nobh option [ 121.781330][ T4840] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.807836][T10012] ext4 filesystem being mounted at /460/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.819973][ T4840] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 121.829741][ T4840] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:10: Failed to release dquot type 0 [ 121.845633][ T28] audit: type=1400 audit(1774708965.507:1777): avc: denied { watch } for pid=10011 comm="syz.3.2291" path="/460/mnt" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.900960][ T28] audit: type=1400 audit(1774708965.557:1778): avc: denied { read write } for pid=10021 comm="syz.3.2294" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 121.941921][ T8294] EXT4-fs error (device loop9): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 121.959599][ T8294] loop9: lost filesystem error report for type 5 error -117 [ 121.959847][ T8294] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 121.978472][ T8294] loop9: lost filesystem error report for type 5 error -117 [ 121.979703][ T8294] EXT4-fs error (device loop9): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 121.995071][T10028] loop8: detected capacity change from 0 to 512 [ 121.998835][ T8294] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 122.014732][T10028] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 122.048887][T10028] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2297: invalid indirect mapped block 9 (level 0) [ 122.064744][T10028] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.064949][T10028] EXT4-fs (loop8): 1 truncate cleaned up [ 122.074126][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 122.074165][ C0] EXT4-fs (loop8): initial error at time 1774708965: ext4_free_branches:1023: inode 11 [ 122.074202][ C0] EXT4-fs (loop8): last error at time 1774708965: ext4_free_branches:1023: inode 11 [ 122.413044][T10051] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10051 comm=syz.5.2305 [ 123.274439][T10063] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 123.281223][T10063] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 123.298570][T10066] loop9: detected capacity change from 0 to 128 [ 123.348988][T10066] bio_check_eod: 34 callbacks suppressed [ 123.349007][T10066] syz.9.2311: attempt to access beyond end of device [ 123.349007][T10066] loop9: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 123.372375][T10066] syz.9.2311: attempt to access beyond end of device [ 123.372375][T10066] loop9: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 123.393757][T10066] syz.9.2311: attempt to access beyond end of device [ 123.393757][T10066] loop9: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 123.433515][T10078] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10078 comm=syz.8.2314 [ 123.460107][ T30] kworker/u8:1: attempt to access beyond end of device [ 123.460107][ T30] loop9: rw=1, sector=138, nr_sectors = 2 limit=128 [ 123.859747][T10102] loop9: detected capacity change from 0 to 512 [ 123.882333][T10102] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.945934][T10102] loop9: detected capacity change from 512 to 0 [ 123.966121][ T8294] EXT4-fs error (device loop9): ext4_get_inode_loc:4920: inode #2: block 34: comm syz-executor: unable to read itable block [ 123.981899][ T8294] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 123.990531][ T8294] EXT4-fs (loop9): I/O error while writing superblock [ 123.997545][ T8294] EXT4-fs (loop9): Remounting filesystem read-only [ 124.024998][T10103] Buffer I/O error on dev loop9, logical block 12, lost sync page write [ 124.218011][T10112] loop5: detected capacity change from 0 to 1024 [ 124.225195][T10112] EXT4-fs: Ignoring removed bh option [ 124.242522][T10112] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.264133][ T40] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.275516][T10112] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.2329: lblock 2 mapped to illegal pblock 2 (length 1) [ 124.295159][T10112] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 124.295870][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 124.312353][ C1] EXT4-fs (loop5): initial error at time 1774708967: ext4_map_blocks:776: inode 3: block 2 [ 124.322857][ C1] EXT4-fs (loop5): last error at time 1774708967: ext4_map_blocks:776: inode 3: block 2 [ 124.325695][T10112] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.2329: lblock 0 mapped to illegal pblock 48 (length 1) [ 124.349222][T10112] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 124.364463][T10112] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2329: Failed to acquire dquot type 0 [ 124.385153][T10112] loop5: lost filesystem error report for type 5 error -117 [ 124.390747][T10112] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 124.421475][ T40] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.432076][T10112] loop5: lost filesystem error report for type 5 error -117 [ 124.432314][T10112] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.2329: mark_inode_dirty error [ 124.454062][T10112] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 124.458943][T10112] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 124.478665][T10112] EXT4-fs (loop5): 1 orphan inode deleted [ 124.506040][ T349] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.548821][ T349] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 0 [ 124.562722][ T40] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.576275][T10126] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 124.582288][T10126] syzkaller0: ignored: set checksum disabled [ 124.583922][ T5433] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 124.602213][ T5433] loop5: lost filesystem error report for type 5 error -117 [ 124.602733][ T5433] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 124.619799][T10126] syzkaller0: tun_chr_ioctl cmd 35111 [ 124.641292][ T5433] loop5: lost filesystem error report for type 5 error -117 [ 124.641454][ T5433] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 124.665198][ T40] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.669096][ T5433] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 124.828991][ T40] bridge_slave_1: left allmulticast mode [ 124.844028][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.875956][ T40] bridge_slave_1: left promiscuous mode [ 124.885213][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.908228][ T40] bridge_slave_0: left allmulticast mode [ 124.913921][ T40] bridge_slave_0: left promiscuous mode [ 124.917561][T10163] loop6: detected capacity change from 0 to 1024 [ 124.920323][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.932673][T10163] EXT4-fs: inline encryption not supported [ 124.952809][T10163] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.969954][T10163] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 3: comm syz.6.2347: lblock 3 mapped to illegal pblock 3 (length 3) [ 124.984804][T10163] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 124.997868][T10163] EXT4-fs (loop6): This should not happen!! Data will be lost [ 124.997868][T10163] [ 125.015198][T10163] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2347: bg 0: block 112: padding at end of block bitmap is not set [ 125.034126][T10163] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 125.049299][T10163] EXT4-fs (loop6): This should not happen!! Data will be lost [ 125.049299][T10163] [ 125.079797][ T349] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 125.120580][ T349] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 125.144224][ T349] EXT4-fs (loop6): This should not happen!! Data will be lost [ 125.144224][ T349] [ 125.238619][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.252012][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.262378][ T40] bond0 (unregistering): Released all slaves [ 125.409964][ T40] hsr_slave_0: left promiscuous mode [ 125.435343][ T40] hsr_slave_1: left promiscuous mode [ 125.454401][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.477404][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.487127][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.517837][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.533934][ T40] veth1_macvtap: left promiscuous mode [ 125.546276][ T40] veth0_macvtap: left promiscuous mode [ 125.557418][ T40] veth1_vlan: left promiscuous mode [ 125.572922][ T40] veth0_vlan: left promiscuous mode [ 125.879744][ T40] team0 (unregistering): Port device team_slave_1 removed [ 125.903120][ T40] team0 (unregistering): Port device team_slave_0 removed [ 125.962420][T10234] pimreg: entered allmulticast mode [ 125.968803][T10240] pimreg: left allmulticast mode [ 125.982233][T10115] chnl_net:caif_netlink_parms(): no params data found [ 126.035721][T10115] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.043065][T10115] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.050865][T10115] bridge_slave_0: entered allmulticast mode [ 126.057734][T10115] bridge_slave_0: entered promiscuous mode [ 126.066185][T10115] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.073352][T10115] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.091547][T10115] bridge_slave_1: entered allmulticast mode [ 126.106657][T10115] bridge_slave_1: entered promiscuous mode [ 126.131068][T10115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.141910][T10115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.182479][T10243] loop6: detected capacity change from 0 to 128 [ 126.185758][T10115] team0: Port device team_slave_0 added [ 126.214475][T10115] team0: Port device team_slave_1 added [ 126.261200][T10115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.270033][T10115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.298411][T10115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.309924][T10115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.317042][T10115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.343800][T10115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.354701][T10265] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2373'. [ 126.363853][T10265] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2373'. [ 126.375302][ T40] IPVS: stop unused estimator thread 0... [ 126.392479][T10267] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2373'. [ 126.409456][T10267] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2373'. [ 126.471698][T10115] hsr_slave_0: entered promiscuous mode [ 126.481608][T10275] loop6: detected capacity change from 0 to 512 [ 126.486506][T10115] hsr_slave_1: entered promiscuous mode [ 126.493980][T10115] debugfs: 'hsr0' already exists in 'hsr' [ 126.501092][T10115] Cannot create hsr debugfs directory [ 126.512918][T10275] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 126.525214][T10275] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 126.547744][T10275] EXT4-fs (loop6): group descriptors corrupted! [ 126.574421][T10275] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2377'. [ 126.744657][T10300] loop3: detected capacity change from 0 to 512 [ 126.797707][T10300] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2382: inode has both inline data and extents flags [ 126.821064][T10300] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 126.825867][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 126.835883][T10300] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2382: couldn't read orphan inode 15 (err -117) [ 126.841667][ C1] EXT4-fs (loop3): initial error at time 1774708970: ext4_orphan_get:1391: inode 15 [ 126.862921][ C1] EXT4-fs (loop3): last error at time 1774708970: ext4_orphan_get:1391: inode 15 [ 126.872279][ T3553] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.903508][T10115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 126.925991][T10300] loop3: lost filesystem error report for type 5 error -117 [ 126.941174][T10115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 126.986653][T10115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 127.023904][T10115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 127.051907][T10319] xt_hashlimit: size too large, truncated to 1048576 [ 127.159561][T10115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.190823][T10115] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.216465][ T1725] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.223610][ T1725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.267268][ T1725] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.274522][ T1725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.599522][T10115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.771279][T10115] veth0_vlan: entered promiscuous mode [ 127.803827][T10115] veth1_vlan: entered promiscuous mode [ 127.874762][T10115] veth0_macvtap: entered promiscuous mode [ 127.892674][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 127.892693][ T28] audit: type=1400 audit(1774708971.547:1805): avc: denied { setopt } for pid=10392 comm="syz.3.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.927725][T10115] veth1_macvtap: entered promiscuous mode [ 127.942557][T10115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.955969][ T28] audit: type=1400 audit(1774708971.597:1806): avc: denied { getopt } for pid=10404 comm="syz.5.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 128.003612][T10115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.017196][T10412] netlink: 'syz.8.2405': attribute type 6 has an invalid length. [ 128.031532][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.046413][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.068303][T10412] netlink: 'syz.8.2405': attribute type 6 has an invalid length. [ 128.076494][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.087647][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.125476][T10416] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2407'. [ 128.412780][ T28] audit: type=1326 audit(1774708972.067:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bff35c819 code=0x7ffc0000 [ 128.549254][ T28] audit: type=1326 audit(1774708972.107:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bff35c819 code=0x7ffc0000 [ 128.652260][ T28] audit: type=1326 audit(1774708972.107:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bff35c819 code=0x7ffc0000 [ 128.735942][ T28] audit: type=1326 audit(1774708972.107:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bff35c819 code=0x7ffc0000 [ 128.762997][T10400] IPVS: You probably need to specify IP address on multicast interface. [ 128.772213][T10400] IPVS: Error connecting to the multicast addr [ 128.806110][ T28] audit: type=1326 audit(1774708972.107:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9bff35c819 code=0x7ffc0000 [ 128.904118][ T28] audit: type=1326 audit(1774708972.107:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bff35c819 code=0x0 [ 128.962982][ T28] audit: type=1326 audit(1774708972.107:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bff35c819 code=0x7ffc0000 [ 129.042390][ T28] audit: type=1326 audit(1774708972.107:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10442 comm="syz.2.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bff35c819 code=0x7ffc0000 [ 129.428139][T10546] loop6: detected capacity change from 0 to 2048 [ 129.506195][T10546] EXT4-fs (loop6): shut down requested (2) [ 129.565148][ T5613] EXT4-fs unmount: 18 callbacks suppressed [ 129.565174][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.654283][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2448'. [ 129.736049][T10588] loop3: detected capacity change from 0 to 512 [ 129.758545][T10588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.786125][T10588] ext4 filesystem being mounted at /505/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.812559][T10588] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.2452: corrupted inode contents [ 129.839710][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 129.856166][T10596] netlink: 'syz.2.2454': attribute type 18 has an invalid length. [ 129.864601][T10588] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.2452: mark_inode_dirty error [ 129.876443][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'. [ 129.891552][T10588] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.2452: corrupted inode contents [ 129.934278][T10588] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2452: mark_inode_dirty error [ 129.978627][T10600] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.2452: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 129.978627][T10600] [ 130.061316][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.117611][ T30] tipc: Subscription rejected, illegal request [ 130.368321][T10665] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 130.374904][T10665] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 130.407371][T10665] vhci_hcd vhci_hcd.0: Device attached [ 130.423696][T10668] vhci_hcd: connection closed [ 130.424103][ T30] vhci_hcd vhci_hcd.6: stop threads [ 130.446044][ T30] vhci_hcd vhci_hcd.6: release socket [ 130.451646][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 130.940416][T10671] IPVS: You probably need to specify IP address on multicast interface. [ 130.948956][T10671] IPVS: Error connecting to the multicast addr [ 131.364966][T10726] loop3: detected capacity change from 0 to 164 [ 131.516106][T10738] loop5: detected capacity change from 0 to 512 [ 131.526124][T10738] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2489: inode has both inline data and extents flags [ 131.539785][T10738] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.540487][T10738] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2489: couldn't read orphan inode 15 (err -117) [ 131.549672][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 131.549707][ C1] EXT4-fs (loop5): initial error at time 1774708975: ext4_orphan_get:1391: inode 15 [ 131.549734][ C1] EXT4-fs (loop5): last error at time 1774708975: ext4_orphan_get:1391: inode 15 [ 131.595911][T10738] loop5: lost filesystem error report for type 5 error -117 [ 131.600242][T10738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.697147][T10752] loop3: detected capacity change from 0 to 512 [ 131.748033][T10752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.766511][T10752] ext4 filesystem being mounted at /518/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.821862][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.877119][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.093749][T10795] syzkaller1: entered promiscuous mode [ 132.099407][T10795] syzkaller1: entered allmulticast mode [ 132.200184][T10805] loop2: detected capacity change from 0 to 1024 [ 132.230558][T10805] EXT4-fs: Ignoring removed orlov option [ 132.249118][T10805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.285427][T10115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.319143][T10815] loop2: detected capacity change from 0 to 1024 [ 132.337808][T10815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.354044][T10815] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 132.387015][ T40] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 132.399715][ T40] EXT4-fs (loop2): This should not happen!! Data will be lost [ 132.399715][ T40] [ 132.423195][ T40] EXT4-fs (loop2): Total free blocks count 0 [ 132.435703][ T40] EXT4-fs (loop2): Free/Dirty block details [ 132.445407][T10820] netlink: 'syz.8.2523': attribute type 2 has an invalid length. [ 132.453983][ T40] EXT4-fs (loop2): free_blocks=20480 [ 132.459686][ T40] EXT4-fs (loop2): dirty_blocks=32 [ 132.464927][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2523'. [ 132.473850][ T40] EXT4-fs (loop2): Block reservation details [ 132.473871][ T40] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 132.476548][ T40] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 132.626003][T10813] IPVS: You probably need to specify IP address on multicast interface. [ 132.643707][T10813] IPVS: Error connecting to the multicast addr [ 132.665560][T10836] loop6: detected capacity change from 0 to 1024 [ 132.672455][T10836] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.699321][T10836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 132.724079][T10836] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.739402][T10842] loop5: detected capacity change from 0 to 512 [ 132.746097][T10836] EXT4-fs (loop6): shut down requested (2) [ 132.775797][T10842] EXT4-fs (loop5): 1 truncate cleaned up [ 132.791547][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.804042][T10842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.891750][T10852] netlink: 'syz.3.2536': attribute type 3 has an invalid length. [ 132.939538][ T6042] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 132.982882][ T6042] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.037739][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.053851][T10862] geneve2: entered promiscuous mode [ 133.060170][T10865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=10865 comm=syz.3.2540 [ 133.092353][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2540'. [ 133.129824][ T28] kauditd_printk_skb: 178 callbacks suppressed [ 133.129841][ T28] audit: type=1400 audit(1774708976.787:1993): avc: denied { connect } for pid=10870 comm="syz.3.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.248401][T10887] loop5: detected capacity change from 0 to 128 [ 133.455894][ T28] audit: type=1400 audit(1774708977.107:1994): avc: denied { bind } for pid=10903 comm="syz.8.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.486255][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.507284][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.576108][T10911] loop5: detected capacity change from 0 to 1024 [ 133.576778][T10910] loop2: detected capacity change from 0 to 1024 [ 133.618650][T10911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.631604][T10911] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.642579][T10910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.675073][T10910] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 133.707598][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.747463][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 133.784777][ T30] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.784777][ T30] [ 133.813135][ T30] EXT4-fs (loop2): Total free blocks count 0 [ 133.848060][ T30] EXT4-fs (loop2): Free/Dirty block details [ 133.865930][ T30] EXT4-fs (loop2): free_blocks=20480 [ 133.871431][ T30] EXT4-fs (loop2): dirty_blocks=32 [ 133.876868][ T30] EXT4-fs (loop2): Block reservation details [ 133.885920][ T30] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 133.892312][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 134.047964][T10936] loop2: detected capacity change from 0 to 512 [ 134.072865][ T28] audit: type=1400 audit(1774708977.727:1995): avc: denied { mounton } for pid=10935 comm="syz.2.2566" path="/syzcgroup/unified/syz2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 134.074631][T10936] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.241339][T10936] EXT4-fs error (device loop2): __ext4_iget:5378: inode #11: block 1: comm syz.2.2566: invalid block [ 134.267817][T10936] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.268017][T10936] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2566: couldn't read orphan inode 11 (err -117) [ 134.277331][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 134.277352][ C0] EXT4-fs (loop2): initial error at time 1774708977: __ext4_iget:5378: inode 11: block 1 [ 134.277386][ C0] EXT4-fs (loop2): last error at time 1774708977: __ext4_iget:5378: inode 11: block 1 [ 134.315135][T10936] loop2: lost filesystem error report for type 5 error -117 [ 134.315931][T10936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.403888][T10948] netlink: 'syz.5.2571': attribute type 1 has an invalid length. [ 134.522289][ T28] audit: type=1400 audit(1774708978.177:1996): avc: denied { sqpoll } for pid=10957 comm="syz.8.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.575873][ T28] audit: type=1326 audit(1774708978.227:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.5.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87638c819 code=0x7ffc0000 [ 134.601090][ T28] audit: type=1326 audit(1774708978.227:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.5.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87638c819 code=0x7ffc0000 [ 134.642521][ T28] audit: type=1326 audit(1774708978.227:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.5.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7ff87638c819 code=0x7ffc0000 [ 134.703831][T10974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.723006][ T28] audit: type=1326 audit(1774708978.227:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.5.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87638c819 code=0x7ffc0000 [ 134.752890][T10974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.768881][T10974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.778542][T10981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.779852][ T28] audit: type=1326 audit(1774708978.227:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.5.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87638c819 code=0x7ffc0000 [ 134.817668][T10981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.820072][ T28] audit: type=1326 audit(1774708978.367:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10976 comm="syz.5.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87638c819 code=0x7ffc0000 [ 134.849921][T10986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.860494][T10986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.983240][T11004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.031652][T11011] hsr0: entered allmulticast mode [ 135.047337][T11011] hsr_slave_0: entered allmulticast mode [ 135.053116][T11011] hsr_slave_1: entered allmulticast mode [ 135.067210][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2600'. [ 135.076690][T11011] hsr_slave_0: left promiscuous mode [ 135.082613][T11011] hsr_slave_1: left promiscuous mode [ 135.116568][T11011] hsr0 (unregistering): left allmulticast mode [ 135.394365][ T5433] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 135.405513][ T5433] FAT-fs (loop5): Filesystem has been set read-only [ 135.545767][T11055] tipc: Enabling of bearer rejected, failed to enable media [ 135.603346][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2620'. [ 135.750768][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2627'. [ 135.760027][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2627'. [ 135.834996][T11079] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 135.942574][T11096] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=11096 comm=syz.3.2638 [ 136.259165][T11120] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.400703][T11130] EXT4-fs: Ignoring removed bh option [ 136.414228][T11130] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 136.440337][T11130] EXT4-fs (loop5): 1 truncate cleaned up [ 136.457409][T11130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.498261][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.531748][T11142] hsr0: entered allmulticast mode [ 136.537084][T11142] hsr_slave_0: entered allmulticast mode [ 136.542848][T11142] hsr_slave_1: entered allmulticast mode [ 136.553979][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2659'. [ 136.563812][T11142] hsr_slave_0: left promiscuous mode [ 136.575912][T11142] hsr_slave_1: left promiscuous mode [ 136.599646][T11142] hsr0 (unregistering): left allmulticast mode [ 136.943840][T11175] syzkaller1: entered promiscuous mode [ 136.949607][T11175] syzkaller1: entered allmulticast mode [ 137.046259][T11185] set_capacity_and_notify: 5 callbacks suppressed [ 137.046281][T11185] loop8: detected capacity change from 0 to 512 [ 137.084971][T11185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.097731][T11185] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.130623][ T8237] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.477066][T11213] Invalid argument reading file caps for ./file0 [ 137.585345][T11229] netlink: 'syz.5.2697': attribute type 3 has an invalid length. [ 137.622666][T11231] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2698'. [ 137.673159][T11231] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2698'. [ 137.951198][T11246] loop5: detected capacity change from 0 to 1024 [ 137.963026][T11248] loop3: detected capacity change from 0 to 512 [ 138.013173][T11246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.028448][T11248] EXT4-fs (loop3): 1 orphan inode deleted [ 138.034772][T11248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.048244][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 138.101097][ T30] loop3: lost filesystem error report for type 5 error -117 [ 138.121139][T11248] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.198898][T11268] bpf: Bad value for 'gid' [ 138.203442][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 138.203460][ T28] audit: type=1400 audit(1774708981.857:2083): avc: denied { getopt } for pid=11266 comm="syz.6.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 138.271336][ T28] audit: type=1400 audit(1774708981.917:2084): avc: denied { remount } for pid=11247 comm="syz.3.2704" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 138.337018][T11248] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 138.467104][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.502648][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.903296][T11299] loop8: detected capacity change from 0 to 1024 [ 138.919303][T11298] netlink: 'syz.5.2716': attribute type 3 has an invalid length. [ 138.940410][T11299] EXT4-fs: Ignoring removed orlov option [ 139.121399][T11299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.157034][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2719'. [ 139.179850][ T8237] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.198781][T11309] dummy0: entered promiscuous mode [ 139.210957][T11309] macsec1: entered promiscuous mode [ 139.336054][T11309] macsec1: entered allmulticast mode [ 139.350823][T11309] dummy0: entered allmulticast mode [ 139.421196][T11309] dummy0: left allmulticast mode [ 139.426421][ T28] audit: type=1326 audit(1774708983.037:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11315 comm="syz.5.2723" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff87638c819 code=0x0 [ 139.452340][T11309] dummy0: left promiscuous mode [ 139.720737][ T28] audit: type=1400 audit(1774708983.377:2086): avc: denied { connect } for pid=11322 comm="syz.2.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.044393][T11313] chnl_net:caif_netlink_parms(): no params data found [ 140.109443][T11342] netlink: 111804 bytes leftover after parsing attributes in process `syz.2.2732'. [ 140.135995][T11342] net_ratelimit: 11 callbacks suppressed [ 140.136013][T11342] netlink: zone id is out of range [ 140.168144][T11342] netlink: del zone limit has 4 unknown bytes [ 140.212147][T11313] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.219563][T11313] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.252855][T11313] bridge_slave_0: entered allmulticast mode [ 140.253389][ T28] audit: type=1400 audit(1774708983.907:2087): avc: denied { getopt } for pid=11356 comm="syz.8.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.266494][T11313] bridge_slave_0: entered promiscuous mode [ 140.287640][T11313] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.294780][T11313] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.302310][T11313] bridge_slave_1: entered allmulticast mode [ 140.309065][T11313] bridge_slave_1: entered promiscuous mode [ 140.327934][T11313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.338412][T11313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.379907][ T28] audit: type=1400 audit(1774708984.037:2088): avc: denied { mount } for pid=11365 comm="syz.8.2740" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 140.414192][T11313] team0: Port device team_slave_0 added [ 140.424478][T11313] team0: Port device team_slave_1 added [ 140.465353][T11313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.477418][T11372] loop5: detected capacity change from 0 to 512 [ 140.484219][T11372] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.491624][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.491723][T11372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.526859][T11313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.538912][T11313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.555943][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.593882][T11372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.607353][T11372] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.619918][T11313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.677236][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.763421][T11313] hsr_slave_0: entered promiscuous mode [ 140.784762][T11313] hsr_slave_1: entered promiscuous mode [ 140.792507][T11313] debugfs: 'hsr0' already exists in 'hsr' [ 140.803039][T11313] Cannot create hsr debugfs directory [ 140.828925][T11381] syzkaller1: entered promiscuous mode [ 140.874108][T11401] loop5: detected capacity change from 0 to 512 [ 140.880663][T11381] syzkaller1: entered allmulticast mode [ 140.892807][T11401] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 140.931222][T11401] EXT4-fs (loop5): 1 truncate cleaned up [ 140.945185][T11401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.128813][ T5433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.169618][T11424] sctp: [Deprecated]: syz.5.2750 (pid 11424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.169618][T11424] Use struct sctp_sack_info instead [ 141.187906][T11422] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2751'. [ 141.241881][T11428] loop5: detected capacity change from 0 to 2048 [ 141.296953][T11428] loop5: p3 < > p4 < > [ 141.308844][T11313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.316113][T11428] loop5: partition table partially beyond EOD, truncated [ 141.342808][T11428] loop5: p3 start 4284289 is beyond EOD, truncated [ 141.354046][T11313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.384416][T11313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.400405][ T3001] loop5: p3 < > p4 < > [ 141.406722][T11313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.418003][ T3001] loop5: partition table partially beyond EOD, truncated [ 141.432373][T11449] loop6: detected capacity change from 0 to 512 [ 141.441007][ T3001] loop5: p3 start 4284289 is beyond EOD, truncated [ 141.458596][T11449] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 141.474107][T11449] EXT4-fs (loop6): 1 truncate cleaned up [ 141.483586][T11449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.518485][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 141.589830][T11313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.615395][T11313] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.628148][ T1725] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.635377][ T1725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.725988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.727694][ T1725] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.741227][ T1725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.918995][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.950711][T11313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.031176][T11502] loop6: detected capacity change from 0 to 1024 [ 142.086274][T11502] EXT4-fs: inline encryption not supported [ 142.086366][T11502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.145949][T11502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.227807][ T5613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.248235][ T28] audit: type=1400 audit(1774708985.887:2089): avc: denied { setopt } for pid=11541 comm="syz.2.2777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.280564][ T28] audit: type=1326 audit(1774708985.937:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.5.2776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87638c819 code=0x0 [ 142.289117][T11550] netlink: 'syz.6.2775': attribute type 4 has an invalid length. [ 142.387476][T11313] veth0_vlan: entered promiscuous mode [ 142.426660][T11313] veth1_vlan: entered promiscuous mode [ 142.478790][T11313] veth0_macvtap: entered promiscuous mode [ 142.499893][T11313] veth1_macvtap: entered promiscuous mode [ 142.530976][T11313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.553243][T11313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.595882][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.633709][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.785544][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.805776][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.853564][T11605] netlink: 'syz.8.2790': attribute type 29 has an invalid length. [ 142.873806][T11610] netlink: 'syz.8.2790': attribute type 29 has an invalid length. [ 142.882146][T11603] loop6: detected capacity change from 0 to 8192 [ 142.919101][T11605] netlink: 'syz.8.2790': attribute type 29 has an invalid length. [ 142.934638][ T28] audit: type=1326 audit(1774708986.587:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.6.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 142.960431][T11605] netlink: 'syz.8.2790': attribute type 29 has an invalid length. [ 142.983752][ T28] audit: type=1326 audit(1774708986.627:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.6.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6746bc819 code=0x7ffc0000 [ 143.095522][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.295080][T11648] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2800'. [ 143.334681][T11648] netlink: zone id is out of range [ 143.350083][T11648] netlink: zone id is out of range [ 143.383625][T11648] netlink: set zone limit has 8 unknown bytes [ 143.535687][T11671] loop8: detected capacity change from 0 to 1024 [ 143.589207][T11671] EXT4-fs: Ignoring removed bh option [ 143.621117][T11671] EXT4-fs: Ignoring removed oldalloc option [ 143.667866][T11671] EXT4-fs: Ignoring removed nobh option [ 143.756535][T11671] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.784687][T11671] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.2804: Allocating blocks 497-513 which overlap fs metadata [ 143.817903][T11671] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.2804: Allocating blocks 497-513 which overlap fs metadata [ 143.850313][T11671] EXT4-fs (loop8): pa ffff88810761b7e0: logic 16, phys. 129, len 24 [ 143.858601][T11671] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 143.970636][ T8237] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.028018][ T8237] ================================================================== [ 144.036286][ T8237] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 144.044049][ T8237] [ 144.046391][ T8237] read-write to 0xffff888237c26668 of 1 bytes by task 11669 on cpu 0: [ 144.054567][ T8237] folio_add_lru+0xa4/0x1e0 [ 144.059107][ T8237] shmem_get_folio_gfp+0x7b0/0xd60 [ 144.064246][ T8237] shmem_write_begin+0xfc/0x1f0 [ 144.069135][ T8237] generic_perform_write+0x183/0x490 [ 144.074463][ T8237] shmem_file_write_iter+0xc5/0xf0 [ 144.079624][ T8237] __kernel_write_iter+0x319/0x590 [ 144.084871][ T8237] dump_user_range+0xa7d/0xdb0 [ 144.089925][ T8237] elf_core_dump+0x21a2/0x2330 [ 144.094727][ T8237] coredump_write+0xacc/0xdd0 [ 144.099434][ T8237] vfs_coredump+0x26c7/0x3130 [ 144.104127][ T8237] get_signal+0xd80/0xf60 [ 144.108471][ T8237] arch_do_signal_or_restart+0x96/0x450 [ 144.114121][ T8237] exit_to_user_mode_loop+0x6a/0x6f0 [ 144.119416][ T8237] do_syscall_64+0x249/0x370 [ 144.124013][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.129911][ T8237] [ 144.132324][ T8237] read to 0xffff888237c26668 of 1 bytes by task 8237 on cpu 1: [ 144.139870][ T8237] __lru_add_drain_all+0x17e/0x450 [ 144.145003][ T8237] lru_add_drain_all+0x10/0x20 [ 144.149779][ T8237] invalidate_bdev+0x47/0x70 [ 144.154383][ T8237] ext4_put_super+0x624/0x7d0 [ 144.159069][ T8237] generic_shutdown_super+0xee/0x220 [ 144.164364][ T8237] kill_block_super+0x2a/0x70 [ 144.169131][ T8237] ext4_kill_sb+0x42/0x80 [ 144.173466][ T8237] deactivate_locked_super+0x75/0x1c0 [ 144.178852][ T8237] deactivate_super+0x97/0xa0 [ 144.183543][ T8237] cleanup_mnt+0x2bb/0x330 [ 144.187982][ T8237] __cleanup_mnt+0x19/0x20 [ 144.192409][ T8237] task_work_run+0x130/0x1a0 [ 144.197008][ T8237] exit_to_user_mode_loop+0x1f4/0x6f0 [ 144.202388][ T8237] do_syscall_64+0x249/0x370 [ 144.206983][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.212882][ T8237] [ 144.215204][ T8237] value changed: 0x0c -> 0x0f [ 144.219880][ T8237] [ 144.222225][ T8237] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 144.228380][ T8237] CPU: 1 UID: 0 PID: 8237 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 144.237843][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.247995][ T8237] ================================================================== [ 144.316057][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 144.316115][ T28] audit: type=1400 audit(1774708987.947:2110): avc: denied { write } for pid=3300 comm="syz-executor" path="pipe:[2395]" dev="pipefs" ino=2395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 144.399153][T10115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.788932][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.869686][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.948884][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.998762][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.099483][ T12] bridge_slave_1: left allmulticast mode [ 145.105342][ T12] bridge_slave_1: left promiscuous mode [ 145.111347][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.119312][ T12] bridge_slave_0: left allmulticast mode [ 145.125015][ T12] bridge_slave_0: left promiscuous mode [ 145.131086][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.237856][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.247894][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.257398][ T12] bond0 (unregistering): Released all slaves [ 145.333978][ T12] hsr_slave_0: left promiscuous mode [ 145.339855][ T12] hsr_slave_1: left promiscuous mode [ 145.345682][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.353289][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.361289][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.368796][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.379258][ T12] veth1_macvtap: left promiscuous mode [ 145.384855][ T12] veth0_macvtap: left promiscuous mode [ 145.390472][ T12] veth1_vlan: left promiscuous mode [ 145.395695][ T12] veth0_vlan: left promiscuous mode [ 145.454189][ T12] team0 (unregistering): Port device team_slave_1 removed [ 145.469264][ T12] team0 (unregistering): Port device team_slave_0 removed [ 145.754347][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.819845][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.859425][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.928339][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.995238][ T12] bridge_slave_1: left allmulticast mode [ 146.001253][ T12] bridge_slave_1: left promiscuous mode [ 146.007027][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.014605][ T12] bridge_slave_0: left allmulticast mode [ 146.020325][ T12] bridge_slave_0: left promiscuous mode [ 146.026018][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.127967][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.138069][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.147655][ T12] bond0 (unregistering): Released all slaves [ 146.205987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.216447][ T12] hsr_slave_0: left promiscuous mode [ 146.222569][ T12] hsr_slave_1: left promiscuous mode [ 146.230013][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.237736][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.246065][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.253747][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.264354][ T12] veth1_macvtap: left promiscuous mode [ 146.270847][ T12] veth0_macvtap: left promiscuous mode [ 146.277377][ T12] veth1_vlan: left promiscuous mode [ 146.282707][ T12] veth0_vlan: left promiscuous mode [ 146.345609][ T12] team0 (unregistering): Port device team_slave_1 removed [ 146.354709][ T12] team0 (unregistering): Port device team_slave_0 removed [ 147.008054][ T40] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.018039][ T40] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.087457][ T40] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.097376][ T40] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.167746][ T40] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.177699][ T40] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.227340][ T40] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.237260][ T40] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.303282][ T40] vlan2: left promiscuous mode [ 147.309052][ T40] dummy0: left promiscuous mode [ 147.314126][ T40] bridge0: port 3(vlan2) entered disabled state [ 147.321356][ T40] bridge_slave_1: left allmulticast mode [ 147.327055][ T40] bridge_slave_1: left promiscuous mode [ 147.332731][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.340610][ T40] bridge_slave_0: left allmulticast mode [ 147.346419][ T40] bridge_slave_0: left promiscuous mode [ 147.352026][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.448041][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.458051][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.467379][ T40] bond0 (unregistering): Released all slaves [ 147.475114][ T5827] syz1: Port: 1 Link DOWN [ 147.517655][ T40] tipc: Disabling bearer [ 147.523039][ T40] tipc: Left network mode [ 147.547553][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.555178][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.569368][ T40] veth1_vlan: left promiscuous mode [ 147.574721][ T40] veth0_vlan: left promiscuous mode [ 147.622068][ T40] team0 (unregistering): Port device team_slave_1 removed [ 147.633746][ T40] team0 (unregistering): Port device team_slave_0 removed [ 147.645965][ T12] smc: removing ib device syz1 [ 148.846032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.854163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.862661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.687780][ T3363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog