last executing test programs: 1m40.820892124s ago: executing program 32 (id=333): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) 1m30.656445238s ago: executing program 33 (id=749): r0 = socket$inet6(0xa, 0x1, 0x84) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x13997e9a, @loopback, 0x1}, 0x1c) close(r0) 1m24.574496052s ago: executing program 0 (id=847): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000140007800800114000000000050015000c0db7490500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) 1m24.407682447s ago: executing program 0 (id=852): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d000100040000000100040000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m24.33599486s ago: executing program 0 (id=854): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00') fchdir(r0) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 1m24.33585408s ago: executing program 0 (id=855): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) 1m24.084071638s ago: executing program 0 (id=862): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00040000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) 1m23.561294464s ago: executing program 0 (id=876): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m23.546455275s ago: executing program 34 (id=876): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m22.152235139s ago: executing program 6 (id=906): sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x44, 0xf, 0x6, 0xb81, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000540018"], 0x90}}, 0x0) 1m22.065773202s ago: executing program 6 (id=898): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x6, 0x0, 0x0, 0x0, 0x7, 0x28510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, @perf_config_ext={0x200000000008, 0x2c}, 0x7e75, 0x5, 0x2000, 0x7, 0x2008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x802, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r1, 0x78a8c000) write(r0, &(0x7f0000000080)="08008edf673c8000", 0x8) 1m21.929504506s ago: executing program 6 (id=903): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x7, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x3, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10003, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xca, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m21.883811918s ago: executing program 6 (id=904): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) 1m21.600046047s ago: executing program 6 (id=909): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 1m21.049929795s ago: executing program 6 (id=921): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff507000000000000030"], 0x0}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001d40)=""/4067, 0xfe4}, {&(0x7f00000006c0)=""/149, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {0x0}], 0x5}}], 0xffffffffffffff55, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x200010d4) 1m20.976853787s ago: executing program 35 (id=921): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff507000000000000030"], 0x0}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001d40)=""/4067, 0xfe4}, {&(0x7f00000006c0)=""/149, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {0x0}], 0x5}}], 0xffffffffffffff55, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x200010d4) 1m0.645859765s ago: executing program 5 (id=1390): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x8, @void}, 0x10) 1m0.529354119s ago: executing program 5 (id=1392): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x381}) socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 1m0.49874345s ago: executing program 5 (id=1393): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 1m0.433543202s ago: executing program 5 (id=1395): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, &(0x7f0000000200)={0x84, 0x70, 0x0, {r0}}, 0x20) 1m0.360724635s ago: executing program 5 (id=1397): syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8890) preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fac, 0x9) 1m0.120428292s ago: executing program 5 (id=1399): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x7ff, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 1m0.098581663s ago: executing program 36 (id=1399): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x7ff, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 34.842981299s ago: executing program 3 (id=2087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 34.737471092s ago: executing program 3 (id=2089): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3) 34.702285283s ago: executing program 3 (id=2091): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r1, 0x0) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000940)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0xfffffff9}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/4096, 0x1000}], 0x2, 0x7d, 0x5}}], 0x48, 0x8004}, 0x0) 34.635354695s ago: executing program 3 (id=2094): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 34.609552416s ago: executing program 3 (id=2095): syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x400, 0x1000, 0x1cc0014}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 34.145037881s ago: executing program 3 (id=2103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @random="e2dcf3cdee73", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x30, 0x14, 0x66, 0x0, 0x8, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast}}}}}}, 0x26) 34.123335842s ago: executing program 37 (id=2103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @random="e2dcf3cdee73", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x30, 0x14, 0x66, 0x0, 0x8, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast}}}}}}, 0x26) 33.640579627s ago: executing program 9 (id=2109): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800000000180c200000086dd6012000800003a0000000000000000000000009c81696b0100000000000000000000000000000001"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 31.407559329s ago: executing program 9 (id=2123): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 31.299215732s ago: executing program 9 (id=2112): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 31.244258284s ago: executing program 9 (id=2113): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 31.175841416s ago: executing program 9 (id=2117): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) 31.05711607s ago: executing program 9 (id=2126): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003c80)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x8, @local, 0x3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)="591a", 0x2}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x8, @private2, 0x800}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000004c0)="d6", 0x1}], 0x1}}], 0x2, 0x44845) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x3}, 0x8) 31.04755445s ago: executing program 38 (id=2126): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003c80)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x8, @local, 0x3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)="591a", 0x2}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x8, @private2, 0x800}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000004c0)="d6", 0x1}], 0x1}}], 0x2, 0x44845) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x3}, 0x8) 2.071306035s ago: executing program 8 (id=2760): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x2, &(0x7f0000000040)={0x0, 0x15, 0x4, @tid=r0}, &(0x7f0000000240)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 2.032318346s ago: executing program 8 (id=2762): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.989080907s ago: executing program 2 (id=2764): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r0, 0x0}]) 1.783863434s ago: executing program 8 (id=2766): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x0, 0x201}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.705170376s ago: executing program 2 (id=2767): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x18, 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) 1.210838462s ago: executing program 7 (id=2774): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 1.161942224s ago: executing program 7 (id=2777): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x3e0, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1b8, 0x1e0, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x1700, 0x1}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf251500000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00*'], 0x40}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) 1.102614366s ago: executing program 7 (id=2778): socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x92, 0x0) 1.061609997s ago: executing program 7 (id=2779): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000019140)='@', 0x1) sendfile(r1, r0, 0x0, 0x7fffffff) 883.196343ms ago: executing program 1 (id=2781): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 877.503613ms ago: executing program 8 (id=2782): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mkdir(&(0x7f0000000140)='./control\x00', 0x0) 851.353583ms ago: executing program 1 (id=2783): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4603090700810000000000000402003e00f9ffffffbf0300000000000040000000000000000301000000000000350d00000500380001"], 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 761.094916ms ago: executing program 1 (id=2785): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000004}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) epoll_pwait(r1, &(0x7f0000001a80)=[{}], 0x1, 0x1ff, 0x0, 0x0) 760.571597ms ago: executing program 2 (id=2786): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140)="3782", &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 748.664537ms ago: executing program 1 (id=2787): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 704.175328ms ago: executing program 1 (id=2788): io_setup(0x2, &(0x7f0000000040)=0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendto$inet6(r1, 0x0, 0x0, 0x200488b1, 0x0, 0x0) 600.403671ms ago: executing program 4 (id=2791): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f00000003c0)={0x24, 0x3c, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@typed={0xc, 0x3d, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x52, 0x0, 0x0, @fd=r0}]}, 0x24}, {&(0x7f0000005dc0)={0x2c, 0x3a, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x1c, 0x4f, 0x0, 0x1, [@nested={0x4, 0xe2}, @typed={0x14, 0x30, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x2c}], 0x2, 0x0, 0x0, 0x44011}, 0x40830) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 526.372794ms ago: executing program 4 (id=2792): rt_sigprocmask(0x0, &(0x7f0000000380)={[0xfffff7feffff7fff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r1, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0)={[0x1]}, 0x8}) 379.643389ms ago: executing program 1 (id=2793): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) 379.367859ms ago: executing program 39 (id=2793): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) 379.168419ms ago: executing program 4 (id=2795): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clock_getres(0xd6360619310ef359, 0x0) 250.757363ms ago: executing program 4 (id=2796): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 217.305334ms ago: executing program 2 (id=2797): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblc\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e26, 0x2, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) 216.676564ms ago: executing program 8 (id=2798): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000024c0)='.\x00', 0x400000c) mkdir(&(0x7f0000000000)='./file0\x00', 0x70) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 169.284375ms ago: executing program 2 (id=2799): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000000)={0x1, 0x2000001}, 0x8) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x4, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000800) 167.107715ms ago: executing program 8 (id=2800): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) linkat(r1, &(0x7f0000000140)='./file1\x00', r0, 0x0, 0x0) fadvise64(r1, 0x7f, 0x0, 0x4) 117.333217ms ago: executing program 4 (id=2801): mlockall(0x7) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) 94.621377ms ago: executing program 2 (id=2802): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES8=r2], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 78.921328ms ago: executing program 7 (id=2803): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1085, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 10.386331ms ago: executing program 7 (id=2804): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) statx(0xffffffffffffffff, 0x0, 0x400, 0x400, 0x0) 0s ago: executing program 4 (id=2805): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pread64(r1, &(0x7f0000000240)=""/164, 0x131, 0x131) kernel console output (not intermixed with test programs): too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.552695][ T6101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.581713][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.593164][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.600120][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.616318][ T6101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.627005][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.673632][ T6101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.679513][ T5987] hsr_slave_0: entered promiscuous mode [ 77.688863][ T5987] hsr_slave_1: entered promiscuous mode [ 77.695961][ T5987] debugfs: 'hsr0' already exists in 'hsr' [ 77.696286][ T6101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.701748][ T5987] Cannot create hsr debugfs directory [ 77.722999][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.765919][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.832269][ T6122] netlink: 116 bytes leftover after parsing attributes in process `syz.3.953'. [ 77.870386][ T6128] EXT4-fs: Mount option(s) incompatible with ext2 [ 77.870804][ T5987] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 77.911871][ T6130] EXT4-fs: test_dummy_encryption option not supported [ 77.933911][ T6130] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 77.939082][ T5987] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 77.969768][ T5987] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 77.980480][ T5987] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 78.190856][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.231273][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.248580][ T5821] veth0_vlan: entered promiscuous mode [ 78.263940][ T1620] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.271030][ T1620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.303352][ T5821] veth1_vlan: entered promiscuous mode [ 78.311086][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.318360][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.348713][ T5821] veth0_macvtap: entered promiscuous mode [ 78.359771][ T5987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.370749][ T5987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.389166][ T5821] veth1_macvtap: entered promiscuous mode [ 78.405379][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.421249][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.432510][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.445941][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.454986][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.465325][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.474439][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.496212][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.512562][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.561397][ T6188] netlink: 'syz.1.967': attribute type 3 has an invalid length. [ 78.697159][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.959'. [ 78.772644][ T5987] veth0_vlan: entered promiscuous mode [ 78.800074][ T5987] veth1_vlan: entered promiscuous mode [ 78.806460][ T6226] set_capacity_and_notify: 3 callbacks suppressed [ 78.806475][ T6226] loop7: detected capacity change from 0 to 512 [ 78.851245][ T5987] veth0_macvtap: entered promiscuous mode [ 78.868318][ T6226] EXT4-fs (loop7): 1 truncate cleaned up [ 78.881439][ T5987] veth1_macvtap: entered promiscuous mode [ 78.912949][ T6226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.921578][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.937908][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.948938][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.958686][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.978940][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.992003][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.005268][ T6243] loop3: detected capacity change from 0 to 512 [ 79.053562][ T6243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.065993][ T6243] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.282141][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.613081][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.857492][ T6308] loop1: detected capacity change from 0 to 764 [ 79.931539][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 79.931556][ T28] audit: type=1326 audit(1774950033.465:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 79.978921][ T28] audit: type=1326 audit(1774950033.465:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 80.034990][ T6312] loop1: detected capacity change from 0 to 512 [ 80.048139][ T28] audit: type=1326 audit(1774950033.465:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 80.073375][ T28] audit: type=1326 audit(1774950033.465:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 80.097198][ T28] audit: type=1326 audit(1774950033.465:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 80.098737][ T6319] loop8: detected capacity change from 0 to 128 [ 80.127283][ T6312] EXT4-fs (loop1): 1 truncate cleaned up [ 80.162043][ T6312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.203396][ T6319] syz.8.1000: attempt to access beyond end of device [ 80.203396][ T6319] loop8: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 80.231294][ T6319] syz.8.1000: attempt to access beyond end of device [ 80.231294][ T6319] loop8: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 80.269848][ T6319] syz.8.1000: attempt to access beyond end of device [ 80.269848][ T6319] loop8: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 80.309883][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 80.319426][ T6319] Buffer I/O error on dev loop8, logical block 71, lost async page write [ 80.349804][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 80.394741][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 80.403751][ T3444] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.422520][ T3444] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.431451][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 80.451277][ T3444] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.460470][ T3444] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.522466][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.570092][ T6355] loop8: detected capacity change from 0 to 512 [ 80.648768][ T28] audit: type=1326 audit(1774950034.185:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.8.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8e6c819 code=0x7ffc0000 [ 80.707834][ T28] audit: type=1326 audit(1774950034.215:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.8.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8e6c819 code=0x7ffc0000 [ 80.738357][ T6364] loop8: detected capacity change from 0 to 1024 [ 80.765993][ T28] audit: type=1326 audit(1774950034.215:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.8.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f19b8e6c819 code=0x7ffc0000 [ 80.799385][ T28] audit: type=1326 audit(1774950034.215:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.8.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8e6c819 code=0x7ffc0000 [ 80.825184][ T28] audit: type=1326 audit(1774950034.215:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.8.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8e6c819 code=0x7ffc0000 [ 80.859172][ T6364] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.021430][ T5987] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.167622][ T6382] loop8: detected capacity change from 0 to 2048 [ 81.212709][ T6382] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.243825][ T6382] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.522901][ T6422] SELinux: failed to load policy [ 81.674543][ T5987] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.702532][ T6447] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1034'. [ 81.786366][ T6459] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1038'. [ 81.831010][ T6463] loop1: detected capacity change from 0 to 1024 [ 81.859118][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1042'. [ 81.868314][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1042'. [ 81.881032][ T6463] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.885509][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.912594][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1042'. [ 81.913242][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.942492][ T6463] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 81.962647][ T6463] EXT4-fs (loop1): orphan cleanup on readonly fs [ 81.972752][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1042'. [ 81.982404][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.991001][ T6463] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.1040: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.991748][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.027542][ T6463] loop1: lost filesystem error report for type 5 error -117 [ 82.032452][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 82.046450][ C1] EXT4-fs (loop1): initial error at time 1774950035: ext4_free_blocks:6724 [ 82.055096][ C1] EXT4-fs (loop1): last error at time 1774950035: ext4_free_blocks:6724 [ 82.063636][ T6463] EXT4-fs (loop1): Remounting filesystem read-only [ 82.070325][ T6463] EXT4-fs (loop1): 1 orphan inode deleted [ 82.076800][ T6463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.147919][ T6463] EXT4-fs (loop1): shut down requested (2) [ 82.271873][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.300438][ T6501] loop7: detected capacity change from 0 to 512 [ 82.674081][ T3419] net_ratelimit: 24 callbacks suppressed [ 82.674100][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.688150][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.105685][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 83.533763][ T6561] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 83.552846][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.561285][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.585898][ T6559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.592406][ T6561] ext4 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.633146][ T3444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.642657][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.652546][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.660728][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.670930][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.732387][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.750949][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.766465][ T5987] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 84.008300][ T6606] set_capacity_and_notify: 3 callbacks suppressed [ 84.008317][ T6606] loop5: detected capacity change from 0 to 1024 [ 84.076033][ T6606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.173083][ T4677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.332668][ T6631] loop5: detected capacity change from 0 to 1024 [ 84.360226][ T6631] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.411881][ T6631] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 84.420217][ T6631] EXT4-fs (loop5): orphan cleanup on readonly fs [ 84.426808][ T6631] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.1101: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.440304][ T6631] loop5: lost filesystem error report for type 5 error -117 [ 84.442372][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 84.443121][ T6631] EXT4-fs (loop5): Remounting filesystem read-only [ 84.449688][ C1] EXT4-fs (loop5): initial error at time 1774950037: ext4_free_blocks:6724 [ 84.471520][ C1] EXT4-fs (loop5): last error at time 1774950037: ext4_free_blocks:6724 [ 84.500615][ T6631] EXT4-fs (loop5): 1 orphan inode deleted [ 84.507122][ T6631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.524636][ T6639] loop1: detected capacity change from 0 to 128 [ 84.541579][ T6631] EXT4-fs (loop5): shut down requested (2) [ 84.621921][ T4677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.883100][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.898630][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.922482][ T6683] loop5: detected capacity change from 0 to 2048 [ 84.961885][ T6683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.993593][ T4677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.424281][ T6736] loop5: detected capacity change from 0 to 2048 [ 85.447406][ T6736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.452056][ T6740] netlink: 'syz.7.1151': attribute type 3 has an invalid length. [ 85.460972][ T6736] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.469067][ T6740] __nla_validate_parse: 8 callbacks suppressed [ 85.469083][ T6740] netlink: 13435 bytes leftover after parsing attributes in process `syz.7.1151'. [ 85.636542][ T6749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1155'. [ 85.739800][ T3406] IPVS: starting estimator thread 0... [ 85.776095][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 85.776112][ T28] audit: type=1400 audit(1774950039.315:934): avc: denied { write } for pid=6760 comm="syz.8.1159" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.842503][ T6759] IPVS: using max 2640 ests per chain, 132000 per kthread [ 85.901971][ T4677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.211852][ T6805] loop7: detected capacity change from 0 to 2048 [ 86.234961][ T6805] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.265662][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.587602][ T28] audit: type=1400 audit(1774950040.125:935): avc: denied { read } for pid=6832 comm="syz.7.1184" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.611746][ T28] audit: type=1400 audit(1774950040.125:936): avc: denied { open } for pid=6832 comm="syz.7.1184" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.731488][ T6837] loop1: detected capacity change from 0 to 2048 [ 86.774971][ T6837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.804768][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.222727][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 87.237771][ T6854] bond2: Invalid ad_actor_system MAC address. [ 87.244348][ T6854] bond2: option ad_actor_system: invalid value (4294967295) [ 87.253216][ T6854] bond2 (unregistering): Released all slaves [ 87.473929][ T6865] netlink: 'syz.8.1196': attribute type 3 has an invalid length. [ 87.481881][ T6865] netlink: 13435 bytes leftover after parsing attributes in process `syz.8.1196'. [ 87.588525][ T6874] loop8: detected capacity change from 0 to 512 [ 87.595218][ T6874] EXT4-fs: Ignoring removed i_version option [ 87.610133][ T6874] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.792420][ C0] net_ratelimit: 13 callbacks suppressed [ 87.792438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.806291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.814464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.835494][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1204'. [ 87.867377][ T6884] loop1: detected capacity change from 0 to 1024 [ 87.882814][ T6884] EXT4-fs: inline encryption not supported [ 87.892607][ T6884] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.906581][ T6884] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #3: block 2: comm syz.1.1205: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.920750][ T6884] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 87.920895][ T6884] EXT4-fs (loop1): Remounting filesystem read-only [ 87.929952][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 87.929971][ C0] EXT4-fs (loop1): initial error at time 1774950041: ext4_map_blocks:786: inode 3: block 2 [ 87.930007][ C0] EXT4-fs (loop1): last error at time 1774950041: ext4_map_blocks:786: inode 3: block 2 [ 87.962751][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.965334][ T6884] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 87.971287][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.980036][ T6884] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 87.997266][ T6884] EXT4-fs (loop1): 1 orphan inode deleted [ 88.003467][ T6884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.033145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.037613][ T28] audit: type=1400 audit(1774950041.575:937): avc: denied { watch } for pid=6883 comm="syz.1.1205" path="/220/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.240307][ T5987] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.249817][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.274642][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.543301][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1216'. [ 88.572439][ T6921] netlink: 'syz.1.1216': attribute type 7 has an invalid length. [ 88.580275][ T6921] netlink: 'syz.1.1216': attribute type 8 has an invalid length. [ 88.588122][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 88.649879][ T6921] erspan0: entered promiscuous mode [ 88.663493][ T6921] gretap0: entered promiscuous mode [ 88.673170][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.684730][ T6921] erspan0: left promiscuous mode [ 88.703207][ T6921] gretap0: left promiscuous mode [ 88.773006][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1220'. [ 88.782543][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1220'. [ 88.823355][ T6937] batadv_slave_0: entered promiscuous mode [ 88.848900][ T6936] batadv_slave_0: left promiscuous mode [ 88.992617][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.000854][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.040264][ T28] audit: type=1400 audit(1774950042.575:938): avc: denied { read } for pid=6972 comm="syz.8.1238" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.077866][ T28] audit: type=1400 audit(1774950042.575:939): avc: denied { open } for pid=6972 comm="syz.8.1238" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.117204][ T28] audit: type=1400 audit(1774950042.575:940): avc: denied { ioctl } for pid=6972 comm="syz.8.1238" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.271714][ T28] audit: type=1400 audit(1774950042.805:941): avc: denied { mount } for pid=7000 comm="syz.3.1232" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 89.433418][ T7014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1234'. [ 89.445052][ T7014] netlink: 'syz.3.1234': attribute type 7 has an invalid length. [ 89.462373][ T7014] netlink: 'syz.3.1234': attribute type 8 has an invalid length. [ 89.475050][ T7014] erspan0: entered promiscuous mode [ 89.485028][ T7014] gretap0: entered promiscuous mode [ 89.498987][ T7014] erspan0: left promiscuous mode [ 89.508307][ T7014] gretap0: left promiscuous mode [ 89.769488][ T7060] netlink: 'syz.8.1246': attribute type 1 has an invalid length. [ 89.803868][ T7060] loop8: detected capacity change from 0 to 128 [ 89.907741][ T7073] loop8: detected capacity change from 0 to 128 [ 90.286566][ T7117] netlink: 'syz.1.1265': attribute type 34 has an invalid length. [ 90.488439][ T7120] __nla_validate_parse: 4 callbacks suppressed [ 90.488457][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'. [ 90.738345][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1281'. [ 90.784124][ T28] kauditd_printk_skb: 473 callbacks suppressed [ 90.784151][ T28] audit: type=1326 audit(1774950044.325:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f003636d04e code=0x7ffc0000 [ 90.814899][ T28] audit: type=1326 audit(1774950044.325:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f003636d04e code=0x7ffc0000 [ 90.838918][ T28] audit: type=1326 audit(1774950044.325:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f003636d04e code=0x7ffc0000 [ 90.885286][ T28] audit: type=1326 audit(1774950044.325:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f003636d04e code=0x7ffc0000 [ 90.920194][ T28] audit: type=1326 audit(1774950044.325:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f003636d04e code=0x7ffc0000 [ 90.945939][ T28] audit: type=1326 audit(1774950044.325:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f003636d04e code=0x7ffc0000 [ 91.004507][ T28] audit: type=1326 audit(1774950044.325:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f003636d04e code=0x7ffc0000 [ 91.045146][ T28] audit: type=1326 audit(1774950044.325:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f003636d04e code=0x7ffc0000 [ 91.114577][ T28] audit: type=1326 audit(1774950044.325:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f003636d04e code=0x7ffc0000 [ 91.139267][ T28] audit: type=1326 audit(1774950044.325:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f003636d04e code=0x7ffc0000 [ 91.159535][ T7190] netlink: 'syz.8.1300': attribute type 34 has an invalid length. [ 92.623487][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1308'. [ 93.146567][ T7262] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 93.158392][ T10] net_ratelimit: 38 callbacks suppressed [ 93.158407][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.162990][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.181153][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.196982][ T7266] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 93.298556][ T7242] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 93.306267][ T7242] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.528046][ T3419] kernel write not supported for file /sg0 (pid: 3419 comm: kworker/1:4) [ 93.588566][ T7297] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 93.640399][ T7301] xt_hashlimit: size too large, truncated to 1048576 [ 93.679840][ T7306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.803713][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.941228][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 94.032424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.040741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.135765][ T7340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.157664][ T7341] xt_hashlimit: size too large, truncated to 1048576 [ 94.205858][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.814258][ T7409] netlink: 'syz.5.1388': attribute type 21 has an invalid length. [ 95.814297][ T7409] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1388'. [ 96.587869][ T7433] loop7: detected capacity change from 0 to 1024 [ 96.603558][ T7433] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 96.603558][ T7433] [ 96.635246][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1402'. [ 96.846646][ T7430] chnl_net:caif_netlink_parms(): no params data found [ 96.900413][ T7430] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.907741][ T7430] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.915547][ T7430] bridge_slave_0: entered allmulticast mode [ 96.926030][ T7430] bridge_slave_0: entered promiscuous mode [ 96.943439][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.950555][ T7430] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.974993][ T7430] bridge_slave_1: entered allmulticast mode [ 96.991948][ T7430] bridge_slave_1: entered promiscuous mode [ 97.025843][ T7430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.036528][ T7430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.056735][ T7430] team0: Port device team_slave_0 added [ 97.063426][ T7430] team0: Port device team_slave_1 added [ 97.091595][ T7430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.098827][ T7430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.128731][ T7430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.140870][ T7430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.147988][ T7430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.175615][ T7430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.235538][ T7430] hsr_slave_0: entered promiscuous mode [ 97.241581][ T7430] hsr_slave_1: entered promiscuous mode [ 97.249321][ T7430] debugfs: 'hsr0' already exists in 'hsr' [ 97.256138][ T7430] Cannot create hsr debugfs directory [ 97.353653][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 97.363280][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.502511][ T7430] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 97.512475][ T7430] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 97.524387][ T7430] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 97.546695][ T7430] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 97.593171][ T7430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.605502][ T7430] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.624855][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.631936][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.655606][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.662718][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.727579][ T28] kauditd_printk_skb: 749 callbacks suppressed [ 97.727650][ T28] audit: type=1400 audit(1774950051.265:2174): avc: denied { mounton } for pid=7498 comm="syz.8.1422" path="/proc/221/cgroup" dev="proc" ino=19753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 97.772467][ T28] audit: type=1326 audit(1774950051.305:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d72d1c819 code=0x7ffc0000 [ 97.840481][ T28] audit: type=1326 audit(1774950051.305:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d72d1c819 code=0x7ffc0000 [ 97.847298][ T7430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.880272][ T28] audit: type=1326 audit(1774950051.365:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.8.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8e6c819 code=0x7ffc0000 [ 97.904743][ T28] audit: type=1326 audit(1774950051.375:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.8.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8e6c819 code=0x7ffc0000 [ 97.940205][ T28] audit: type=1326 audit(1774950051.415:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.8.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8e6c819 code=0x7ffc0000 [ 97.972122][ T28] audit: type=1326 audit(1774950051.415:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.8.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8e6c819 code=0x7ffc0000 [ 98.008927][ T28] audit: type=1326 audit(1774950051.415:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.8.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f19b8e6c819 code=0x7ffc0000 [ 98.041769][ T28] audit: type=1326 audit(1774950051.415:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.8.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8e6c819 code=0x7ffc0000 [ 98.077787][ T28] audit: type=1326 audit(1774950051.415:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.8.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8e6c819 code=0x7ffc0000 [ 98.171078][ T7430] veth0_vlan: entered promiscuous mode [ 98.184845][ T7430] veth1_vlan: entered promiscuous mode [ 98.206020][ T7430] veth0_macvtap: entered promiscuous mode [ 98.227897][ T7430] veth1_macvtap: entered promiscuous mode [ 98.248139][ T7430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.262455][ T7430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.283106][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.291923][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.321546][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.344971][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.432645][ T6163] net_ratelimit: 17 callbacks suppressed [ 98.432663][ T6163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.446425][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.966927][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.177245][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1463'. [ 99.205248][ T6163] kernel write not supported for file bpf-prog (pid: 6163 comm: kworker/1:7) [ 99.618997][ T7631] batadv_slave_1: entered promiscuous mode [ 99.625619][ T7630] batadv_slave_1: left promiscuous mode [ 99.833420][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.842816][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.909999][ T7658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=7658 comm=syz.1.1483 [ 99.925654][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1483'. [ 100.019079][ T7668] xt_hashlimit: size too large, truncated to 1048576 [ 100.193379][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.235739][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1496'. [ 100.248301][ T7689] loop9: detected capacity change from 0 to 512 [ 100.272444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.280771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.292885][ T7689] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 100.301017][ T7689] EXT4-fs (loop9): orphan cleanup on readonly fs [ 100.308575][ T7689] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #16: comm syz.9.1497: corrupted inode contents [ 100.321109][ T7689] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 100.321266][ T7689] EXT4-fs error (device loop9): ext4_dirty_inode:6495: inode #16: comm syz.9.1497: mark_inode_dirty error [ 100.330612][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 100.330635][ C0] EXT4-fs (loop9): initial error at time 1774950053: ext4_do_update_inode:5602: inode 16 [ 100.330664][ C0] EXT4-fs (loop9): last error at time 1774950053: ext4_do_update_inode:5602: inode 16 [ 100.370220][ T7689] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 100.370445][ T7689] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #16: comm syz.9.1497: corrupted inode contents [ 100.393396][ T7689] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 100.393583][ T7689] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.1497: mark_inode_dirty error [ 100.425753][ T7689] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 100.426102][ T7689] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #16: comm syz.9.1497: corrupted inode contents [ 100.448177][ T7689] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 100.448441][ T7689] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 100.466785][ T7689] loop9: lost filesystem error report for type 5 error -117 [ 100.467075][ T7689] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #16: comm syz.9.1497: corrupted inode contents [ 100.486822][ T7689] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 100.487067][ T7689] EXT4-fs error (device loop9): ext4_truncate:4602: inode #16: comm syz.9.1497: mark_inode_dirty error [ 100.508308][ T7689] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 100.513109][ T7689] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 100.539680][ T7689] loop9: lost filesystem error report for type 5 error -117 [ 100.546688][ T7689] EXT4-fs (loop9): 1 truncate cleaned up [ 100.563434][ T7711] xt_hashlimit: size too large, truncated to 1048576 [ 100.592815][ T309] EXT4-fs error (device loop9): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 100.620355][ T309] loop9: lost filesystem error report for type 5 error -117 [ 100.621505][ T7713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.622816][ T7689] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.683222][ T7430] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.985623][ T7750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1523'. [ 100.995817][ T7750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1523'. [ 101.005849][ T7750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1523'. [ 101.021286][ T7750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1523'. [ 101.161561][ T7762] xt_hashlimit: size too large, truncated to 1048576 [ 101.445648][ T6163] kernel write not supported for file bpf-prog (pid: 6163 comm: kworker/1:7) [ 101.922437][ T7805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.933350][ T7805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.954106][ T7807] loop8: detected capacity change from 0 to 512 [ 101.965699][ T7804] random: crng reseeded on system resumption [ 101.991265][ T7807] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.014320][ T7811] syzkaller1: entered promiscuous mode [ 102.020002][ T7811] syzkaller1: entered allmulticast mode [ 102.063358][ T7807] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 102.102611][ T5987] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 102.194443][ T7832] loop7: detected capacity change from 0 to 512 [ 102.213298][ T7832] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 102.236938][ T7832] EXT4-fs (loop7): orphan cleanup on readonly fs [ 102.246415][ T7832] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.1558: corrupted inode contents [ 102.262408][ T7832] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 102.264561][ T7832] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #16: comm syz.7.1558: mark_inode_dirty error [ 102.273803][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 102.273819][ C1] EXT4-fs (loop7): initial error at time 1774950055: ext4_do_update_inode:5602: inode 16 [ 102.273854][ C1] EXT4-fs (loop7): last error at time 1774950055: ext4_do_update_inode:5602: inode 16 [ 102.323756][ T7832] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 102.324705][ T7832] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.1558: corrupted inode contents [ 102.346224][ T7832] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 102.346462][ T7832] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.1558: mark_inode_dirty error [ 102.368898][ T7832] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.1558: corrupted inode contents [ 102.382454][ T7832] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 102.391144][ T7832] loop7: lost filesystem error report for type 5 error -117 [ 102.391367][ T7832] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.1558: corrupted inode contents [ 102.412659][ T7832] EXT4-fs error (device loop7): ext4_truncate:4602: inode #16: comm syz.7.1558: mark_inode_dirty error [ 102.424577][ T7832] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 102.447567][ T7832] loop7: lost filesystem error report for type 5 error -117 [ 102.448113][ T7832] EXT4-fs (loop7): 1 truncate cleaned up [ 102.461890][ T1620] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 102.487061][ T1620] loop7: lost filesystem error report for type 5 error -117 [ 102.487800][ T7832] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.557253][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.595686][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.119614][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.392501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.400730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.413536][ T7934] raw_sendmsg: syz.8.1598 forgot to set AF_INET. Fix it! [ 103.627291][ T7948] random: crng reseeded on system resumption [ 103.654603][ T7950] loop9: detected capacity change from 0 to 512 [ 103.689077][ T7950] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.764208][ T7950] EXT4-fs warning (device loop9): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 103.817061][ T7430] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 103.928904][ T28] kauditd_printk_skb: 364 callbacks suppressed [ 103.928923][ T28] audit: type=1400 audit(1774950057.465:2546): avc: denied { create } for pid=7967 comm="syz.7.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 104.083139][ T28] audit: type=1400 audit(1774950057.625:2547): avc: denied { setopt } for pid=7979 comm="syz.1.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.145356][ T28] audit: type=1400 audit(1774950057.625:2548): avc: denied { listen } for pid=7979 comm="syz.1.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.181345][ T7982] syzkaller1: entered promiscuous mode [ 104.181883][ T28] audit: type=1400 audit(1774950057.645:2549): avc: denied { accept } for pid=7979 comm="syz.1.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.210642][ T7982] syzkaller1: entered allmulticast mode [ 104.337381][ T7989] SELinux: failed to load policy [ 104.748902][ T8019] loop8: detected capacity change from 0 to 4096 [ 104.781262][ T8019] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.826505][ T8019] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.903703][ T28] audit: type=1400 audit(1774950058.435:2550): avc: denied { read write } for pid=8018 comm="syz.8.1648" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.974897][ T8031] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1642'. [ 105.037062][ T28] audit: type=1400 audit(1774950058.475:2551): avc: denied { open } for pid=8018 comm="syz.8.1648" path="/149/file0/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.062379][ T8031] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1642'. [ 105.180254][ T28] audit: type=1400 audit(1774950058.625:2552): avc: denied { open } for pid=8036 comm="syz.7.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 105.217704][ T28] audit: type=1400 audit(1774950058.625:2553): avc: denied { kernel } for pid=8036 comm="syz.7.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 105.241061][ T5987] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.258871][ T28] audit: type=1400 audit(1774950058.635:2554): avc: denied { cpu } for pid=8036 comm="syz.7.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 105.292447][ T28] audit: type=1400 audit(1774950058.635:2555): avc: denied { write } for pid=8036 comm="syz.7.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 105.313843][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.359522][ T8053] loop9: detected capacity change from 0 to 1024 [ 105.376112][ T8059] loop7: detected capacity change from 0 to 512 [ 105.383151][ T8053] EXT4-fs: inline encryption not supported [ 105.411334][ T8059] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.434325][ T8053] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.475796][ T8059] EXT4-fs warning (device loop7): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 105.490761][ T8053] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.512775][ T8053] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1658: bg 0: block 112: padding at end of block bitmap is not set [ 105.572620][ T8053] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 1 with error 28 [ 105.587245][ T5821] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 105.602388][ T8053] EXT4-fs (loop9): This should not happen!! Data will be lost [ 105.602388][ T8053] [ 105.617865][ T8053] EXT4-fs (loop9): Total free blocks count 0 [ 105.632455][ T8053] EXT4-fs (loop9): Free/Dirty block details [ 105.638516][ T8053] EXT4-fs (loop9): free_blocks=0 [ 105.653277][ T8053] EXT4-fs (loop9): dirty_blocks=16 [ 105.655766][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 105.669183][ T8053] EXT4-fs (loop9): Block reservation details [ 105.675414][ T8053] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 105.693615][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.730922][ T1620] EXT4-fs error (device loop9): ext4_map_blocks:828: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 105.756991][ T1620] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 105.763547][ T8089] syzkaller1: entered promiscuous mode [ 105.782431][ T8089] syzkaller1: entered allmulticast mode [ 105.784213][ T7430] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 106.060280][ T8116] loop8: detected capacity change from 0 to 512 [ 106.073893][ T8116] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.1681: iget: bad extra_isize 58 (inode size 256) [ 106.135392][ T8116] fserror_report: 4 callbacks suppressed [ 106.135414][ T8116] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.141272][ T8116] EXT4-fs (loop8): Remounting filesystem read-only [ 106.150461][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 106.150487][ C1] EXT4-fs (loop8): initial error at time 1774950059: ext4_xattr_inode_iget:441: inode 11 [ 106.150520][ C1] EXT4-fs (loop8): last error at time 1774950059: ext4_xattr_inode_iget:441: inode 11 [ 106.183243][ T8116] EXT4-fs warning (device loop8): ext4_evict_inode:268: couldn't mark inode dirty (err -30) [ 106.193766][ T8116] EXT4-fs (loop8): 1 orphan inode deleted [ 106.200160][ T8116] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.224181][ T5987] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.512507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.520805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.944485][ T8152] tun0: tun_chr_ioctl cmd 1074025675 [ 106.954745][ T8152] tun0: persist enabled [ 106.962694][ T8152] tun0: tun_chr_ioctl cmd 1074025675 [ 106.973240][ T8152] tun0: persist disabled [ 107.055072][ T8158] loop8: detected capacity change from 0 to 128 [ 107.061893][ T8158] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.099731][ T8158] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.151937][ T1620] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.234430][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.534771][ T8186] netlink: 'syz.9.1713': attribute type 5 has an invalid length. [ 107.640045][ T8196] loop7: detected capacity change from 0 to 512 [ 107.664170][ T8198] loop9: detected capacity change from 0 to 128 [ 107.673291][ T8196] EXT4-fs: Ignoring removed oldalloc option [ 107.699190][ T8198] msdos: Unknown parameter 'dos1xf' [ 107.716360][ T8196] EXT4-fs (loop7): 1 truncate cleaned up [ 107.730788][ T8198] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1718'. [ 107.758508][ T8196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.929638][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.112483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.120905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.129101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.215873][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.224226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.365509][ T8234] loop7: detected capacity change from 0 to 512 [ 108.386816][ T8234] EXT4-fs: Ignoring removed nobh option [ 108.424127][ T8234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.495025][ T8234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.513061][ T8234] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.614847][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.863013][ T8251] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1741'. [ 109.091514][ T8270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.946534][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 110.513041][ T8318] net_ratelimit: 6 callbacks suppressed [ 110.513108][ T8318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.744419][ T8346] loop8: detected capacity change from 0 to 2048 [ 110.840178][ T8348] loop8: detected capacity change from 0 to 512 [ 110.846642][ T8318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.864961][ T8348] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 110.873539][ T8348] System zones: 0-2, 18-18, 34-34 [ 110.881737][ T8348] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 110.896694][ T8348] EXT4-fs (loop8): Remounting filesystem read-only [ 110.903253][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 110.903274][ C1] EXT4-fs (loop8): initial error at time 1774950064: ext4_mb_generate_buddy:1317 [ 110.903315][ C1] EXT4-fs (loop8): last error at time 1774950064: ext4_mb_generate_buddy:1317 [ 110.928121][ T8348] EXT4-fs (loop8): 1 truncate cleaned up [ 110.934257][ T8348] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.946833][ T36] __quota_error: 69 callbacks suppressed [ 110.946865][ T8348] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.946895][ T36] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 110.965289][ T8348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.976198][ T36] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 110.989313][ T8318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.999361][ T36] Quota error (device loop8): write_blk: dquota write failed [ 111.012253][ T36] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 111.022447][ T36] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 111.033375][ T36] Quota error (device loop8): write_blk: dquota write failed [ 111.042349][ T36] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list [ 111.053927][ T36] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 111.054718][ T8353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.064109][ T36] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 111.074948][ T8353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.082080][ T36] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 111.091600][ T8353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.101826][ T36] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 111.110698][ T8353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.129341][ T8353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.145408][ T8353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.154254][ T8353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.243374][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1787'. [ 111.275841][ T8359] netlink: 'syz.8.1787': attribute type 1 has an invalid length. [ 111.283964][ T8359] netlink: 'syz.8.1787': attribute type 2 has an invalid length. [ 111.506804][ T28] audit: type=1400 audit(1774950065.045:2625): avc: denied { append } for pid=8375 comm="syz.8.1806" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.562618][ T28] audit: type=1400 audit(1774950065.075:2626): avc: denied { map } for pid=8375 comm="syz.8.1806" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.679082][ T8389] process 'syz.7.1798' launched '/dev/fd/5' with NULL argv: empty string added [ 111.970282][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 112.172722][ T8441] loop9: detected capacity change from 0 to 1024 [ 112.182936][ T8441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.204977][ T8441] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.239055][ T8450] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1826'. [ 112.252791][ T7430] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.307349][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 112.453060][ T3420] IPVS: starting estimator thread 0... [ 112.542615][ T8473] IPVS: using max 2688 ests per chain, 134400 per kthread [ 112.561522][ T8486] loop8: detected capacity change from 0 to 512 [ 112.578775][ T8486] EXT4-fs: inline encryption not supported [ 112.591749][ T8486] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 112.609272][ T8486] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 112.631227][ T8486] loop8: detected capacity change from 0 to 128 [ 112.726391][ T8486] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.796175][ T8486] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.862523][ T8507] loop9: detected capacity change from 0 to 8192 [ 112.901782][ T8507] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 112.909470][ T8507] FAT-fs (loop9): Filesystem has been set read-only [ 112.986944][ T5987] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.242609][ T3419] IPVS: starting estimator thread 0... [ 113.254449][ T3419] IPVS: starting estimator thread 0... [ 113.342538][ T8535] IPVS: using max 2640 ests per chain, 132000 per kthread [ 113.362467][ T8537] IPVS: using max 2688 ests per chain, 134400 per kthread [ 113.550058][ T8550] loop7: detected capacity change from 0 to 1024 [ 113.563378][ T8550] EXT4-fs: Ignoring removed orlov option [ 113.581323][ T50] IPVS: stop unused estimator thread 0... [ 113.594304][ T8550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.653421][ T5821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.889893][ T3420] IPVS: starting estimator thread 0... [ 114.003681][ T8571] IPVS: using max 2640 ests per chain, 132000 per kthread [ 114.155071][ T8593] netlink: 'syz.9.1885': attribute type 41 has an invalid length. [ 114.297262][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1901'. [ 114.480266][ T3420] IPVS: starting estimator thread 0... [ 114.607768][ T8621] IPVS: using max 2688 ests per chain, 134400 per kthread [ 114.925219][ T8647] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1908'. [ 115.056688][ T8649] bridge_slave_0: left allmulticast mode [ 115.065061][ T8649] bridge_slave_0: left promiscuous mode [ 115.074630][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.094869][ T8649] bridge_slave_1: left allmulticast mode [ 115.102136][ T8649] bridge_slave_1: left promiscuous mode [ 115.114647][ T8649] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.133884][ T8649] bond0: (slave bond_slave_0): Releasing backup interface [ 115.162621][ T8649] bond0: (slave bond_slave_1): Releasing backup interface [ 115.189165][ T8649] team0: Port device team_slave_0 removed [ 115.198081][ T8649] team0: Port device team_slave_1 removed [ 115.205526][ T8649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.213341][ T8649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.222180][ T8649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.229930][ T8649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.615406][ T8679] team0: Port device syz_tun added [ 115.653831][ T8679] team0: Port device syz_tun removed [ 115.679624][ T8679] bridge_slave_0: left allmulticast mode [ 115.691301][ T8679] bridge_slave_0: left promiscuous mode [ 115.697566][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.715417][ T8679] bridge_slave_1: left allmulticast mode [ 115.740336][ T8679] bridge_slave_1: left promiscuous mode [ 115.747223][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.757961][ T8679] bond0: (slave bond_slave_0): Releasing backup interface [ 115.768952][ T8679] bond0: (slave bond_slave_1): Releasing backup interface [ 115.781769][ T8679] team0: Port device team_slave_0 removed [ 115.791838][ T8679] team0: Port device team_slave_1 removed [ 115.799442][ T8679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.807339][ T8679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.817449][ T8679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.825599][ T8679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.838130][ T8679] net_ratelimit: 775 callbacks suppressed [ 115.838149][ T8679] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.905213][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.952102][ T8706] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 116.017959][ T28] kauditd_printk_skb: 143 callbacks suppressed [ 116.017979][ T28] audit: type=1400 audit(1774950069.555:2770): avc: denied { read } for pid=8708 comm="syz.7.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 116.080690][ T8712] bridge0: entered promiscuous mode [ 116.343908][ T28] audit: type=1400 audit(1774950069.885:2771): avc: denied { connect } for pid=8750 comm="syz.7.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.366724][ T28] audit: type=1400 audit(1774950069.895:2772): avc: denied { mounton } for pid=8750 comm="syz.7.1951" path="/syzcgroup/cpu/syz7/cgroup.procs" dev="cgroup" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 116.485531][ T28] audit: type=1400 audit(1774950070.025:2773): avc: denied { read } for pid=8762 comm="syz.1.1958" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.508956][ T28] audit: type=1400 audit(1774950070.025:2774): avc: denied { open } for pid=8762 comm="syz.1.1958" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.533662][ T28] audit: type=1400 audit(1774950070.025:2775): avc: denied { ioctl } for pid=8762 comm="syz.1.1958" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.632694][ T28] audit: type=1400 audit(1774950070.175:2776): avc: denied { ioctl } for pid=8776 comm="syz.1.1965" path="socket:[23884]" dev="sockfs" ino=23884 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 116.787919][ T28] audit: type=1400 audit(1774950070.325:2777): avc: denied { setopt } for pid=8788 comm="syz.9.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.835491][ T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.872693][ T834] IPVS: starting estimator thread 0... [ 116.929074][ T8799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.945746][ T8799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.962397][ T8793] IPVS: using max 3552 ests per chain, 177600 per kthread [ 116.980133][ T8799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.002509][ T8800] netlink: 'syz.7.1974': attribute type 4 has an invalid length. [ 117.010614][ T8799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.043297][ T8804] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.057019][ T8804] vhci_hcd vhci_hcd.1: default hub control req: d10d v0006 i0007 l2 [ 117.175821][ T28] audit: type=1326 audit(1774950070.705:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.3.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d72d1c819 code=0x7ffc0000 [ 117.200192][ T28] audit: type=1326 audit(1774950070.705:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.3.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f1d72d1c819 code=0x7ffc0000 [ 117.264101][ T50] IPVS: stop unused estimator thread 0... [ 117.394009][ T8837] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 118.012835][ T8846] SELinux: failed to load policy [ 118.250461][ T8861] loop9: detected capacity change from 0 to 8192 [ 118.460863][ T8878] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2005'. [ 118.511312][ T8886] loop7: detected capacity change from 0 to 736 [ 118.518388][ T8888] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2005'. [ 118.532610][ T8884] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2010'. [ 118.567791][ T8889] team0: Port device syz_tun added [ 118.639883][ T8889] team0: Port device syz_tun removed [ 118.691410][ T8889] bridge_slave_0: left allmulticast mode [ 118.709696][ T8889] bridge_slave_0: left promiscuous mode [ 118.722505][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.747623][ T8889] bridge_slave_1: left allmulticast mode [ 118.767321][ T8889] bridge_slave_1: left promiscuous mode [ 118.773725][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.798951][ T8889] bond0: (slave bond_slave_0): Releasing backup interface [ 118.824068][ T8889] bond0: (slave bond_slave_1): Releasing backup interface [ 118.837903][ T8889] team0: Port device team_slave_0 removed [ 118.840011][ T8905] xt_hashlimit: size too large, truncated to 1048576 [ 118.855329][ T8889] team0: Port device team_slave_1 removed [ 118.870439][ T8889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.883898][ T8889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.893080][ T8889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.900911][ T8889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.919592][ T8889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.964291][ T3420] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.010392][ T3420] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.254006][ T8930] netlink: 'syz.8.2029': attribute type 4 has an invalid length. [ 119.908124][ T8941] IPVS: You probably need to specify IP address on multicast interface. [ 119.965761][ T8941] IPVS: Error connecting to the multicast addr [ 120.243856][ T8976] netlink: 'syz.3.2050': attribute type 4 has an invalid length. [ 120.296763][ T8980] xt_hashlimit: size too large, truncated to 1048576 [ 120.681977][ T9007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2063'. [ 120.706209][ T9007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2063'. [ 120.786848][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.794898][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.172890][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 121.172909][ T28] audit: type=1400 audit(1774950074.715:2814): avc: denied { bind } for pid=9030 comm="syz.1.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.764609][ T9054] IPVS: You probably need to specify IP address on multicast interface. [ 121.774138][ T9054] IPVS: Error connecting to the multicast addr [ 122.187099][ T9090] TCP: TCP_TX_DELAY enabled [ 122.445666][ T9096] team0: Port device syz_tun added [ 122.496917][ T309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.531144][ T309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.578107][ T9097] team0: Port device syz_tun removed [ 122.627698][ T9097] net_ratelimit: 1 callbacks suppressed [ 122.627719][ T9097] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.724060][ T309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.759397][ T309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.817762][ T9105] syzkaller1: entered promiscuous mode [ 122.845104][ T9105] syzkaller1: entered allmulticast mode [ 122.877849][ T309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.895545][ T309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.154163][ T309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.172394][ T309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.325112][ T309] bridge_slave_1: left allmulticast mode [ 123.331089][ T309] bridge_slave_1: left promiscuous mode [ 123.337058][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.345701][ T309] bridge_slave_0: left allmulticast mode [ 123.351374][ T309] bridge_slave_0: left promiscuous mode [ 123.357397][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.484891][ T309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.494636][ T309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.504167][ T309] bond0 (unregistering): Released all slaves [ 123.511534][ T309] bond1 (unregistering): Released all slaves [ 123.534819][ T9102] chnl_net:caif_netlink_parms(): no params data found [ 123.559738][ T309] hsr_slave_0: left promiscuous mode [ 123.565545][ T309] hsr_slave_1: left promiscuous mode [ 123.571226][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.579087][ T309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.588395][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.595894][ T309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.607567][ T309] veth1_vlan: left promiscuous mode [ 123.613141][ T309] veth0_vlan: left promiscuous mode [ 123.672661][ T309] team0 (unregistering): Port device team_slave_1 removed [ 123.682486][ T309] team0 (unregistering): Port device team_slave_0 removed [ 123.730176][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.737576][ T9102] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.744985][ T9102] bridge_slave_0: entered allmulticast mode [ 123.751364][ T9102] bridge_slave_0: entered promiscuous mode [ 123.759254][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.766848][ T9102] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.774188][ T9102] bridge_slave_1: entered allmulticast mode [ 123.780673][ T9102] bridge_slave_1: entered promiscuous mode [ 123.798044][ T9102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.808499][ T9102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.828125][ T9102] team0: Port device team_slave_0 added [ 123.834893][ T9102] team0: Port device team_slave_1 added [ 123.849993][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.857122][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.883530][ T9102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.894748][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.901707][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.927739][ T9102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.955900][ T9102] hsr_slave_0: entered promiscuous mode [ 123.962066][ T9102] hsr_slave_1: entered promiscuous mode [ 123.968132][ T9102] debugfs: 'hsr0' already exists in 'hsr' [ 123.973988][ T9102] Cannot create hsr debugfs directory [ 124.041552][ T309] IPVS: stop unused estimator thread 0... [ 124.703124][ T9102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.712491][ T9102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.721489][ T9102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.730851][ T9102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.779913][ T9102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.793464][ T9102] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.803435][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.810677][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.824703][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.831886][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.853574][ T9102] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.865286][ T9102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.925062][ T9102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.058203][ T9102] veth0_vlan: entered promiscuous mode [ 125.067157][ T9102] veth1_vlan: entered promiscuous mode [ 125.082968][ T9102] veth0_macvtap: entered promiscuous mode [ 125.090770][ T9102] veth1_macvtap: entered promiscuous mode [ 125.101923][ T9102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.111160][ T9102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.125278][ T3444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.148263][ T3444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.164194][ T3444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.174213][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.499869][ T70] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.623636][ T70] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.752272][ T70] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.837051][ T70] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.259868][ T70] bond0 (unregistering): Released all slaves [ 126.337987][ T70] hsr_slave_0: left promiscuous mode [ 126.390418][ T70] hsr_slave_1: left promiscuous mode [ 126.411341][ T70] veth1_macvtap: left promiscuous mode [ 126.417946][ T70] veth0_macvtap: left promiscuous mode [ 126.424321][ T70] veth1_vlan: left promiscuous mode [ 126.430880][ T70] veth0_vlan: left promiscuous mode [ 126.655257][ T9471] syzkaller1: entered promiscuous mode [ 126.667136][ T9471] syzkaller1: entered allmulticast mode [ 126.720990][ T9393] chnl_net:caif_netlink_parms(): no params data found [ 126.734695][ T28] audit: type=1400 audit(1774950080.275:2815): avc: denied { mount } for pid=9494 comm="syz.8.2147" name="/" dev="ramfs" ino=26281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 126.817102][ T9393] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.826242][ T9393] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.833642][ T9393] bridge_slave_0: entered allmulticast mode [ 126.840333][ T9393] bridge_slave_0: entered promiscuous mode [ 126.848804][ T9393] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.857369][ T9393] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.864787][ T9393] bridge_slave_1: entered allmulticast mode [ 126.877196][ T9393] bridge_slave_1: entered promiscuous mode [ 126.943873][ T9393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.954595][ T70] IPVS: stop unused estimator thread 0... [ 126.961805][ T9393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.988854][ T9393] team0: Port device team_slave_0 added [ 126.996586][ T9393] team0: Port device team_slave_1 added [ 127.020333][ T9393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.029111][ T9393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.055329][ T9393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.066903][ T9393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.074830][ T9393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.101274][ T9393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.133120][ T9393] hsr_slave_0: entered promiscuous mode [ 127.139185][ T9393] hsr_slave_1: entered promiscuous mode [ 127.145403][ T9393] debugfs: 'hsr0' already exists in 'hsr' [ 127.151153][ T9393] Cannot create hsr debugfs directory [ 127.427951][ T9393] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 127.438243][ T9393] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 127.449245][ T9393] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 127.459752][ T9393] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 127.493221][ T9393] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.500369][ T9393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.507883][ T9393] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.515123][ T9393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.544455][ T9393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.556653][ T3444] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.564639][ T3444] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.579245][ T9393] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.589277][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.596498][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.606837][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.614007][ T1620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.696739][ T9393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.775867][ T9393] veth0_vlan: entered promiscuous mode [ 127.784498][ T9393] veth1_vlan: entered promiscuous mode [ 127.802227][ T9393] veth0_macvtap: entered promiscuous mode [ 127.810383][ T9393] veth1_macvtap: entered promiscuous mode [ 127.823253][ T9393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.836050][ T9393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.847628][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.857023][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.879934][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.893275][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.928280][ T28] audit: type=1400 audit(1774950081.465:2816): avc: denied { create } for pid=9635 comm="syz.1.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 128.302031][ T9647] chnl_net:caif_netlink_parms(): no params data found [ 128.503713][ T9647] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.522728][ T9647] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.532165][ T9647] bridge_slave_0: entered allmulticast mode [ 128.545073][ T9647] bridge_slave_0: entered promiscuous mode [ 128.751616][ T9647] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.767703][ T9647] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.782068][ T9647] bridge_slave_1: entered allmulticast mode [ 128.806597][ T9647] bridge_slave_1: entered promiscuous mode [ 128.857749][ T9647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.889881][ T9647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.956897][ T9647] team0: Port device team_slave_0 added [ 128.979573][ T9647] team0: Port device team_slave_1 added [ 129.045847][ T9647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.069802][ T9647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.114233][ T28] audit: type=1400 audit(1774950082.655:2817): avc: denied { listen } for pid=9725 comm="syz.4.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.149186][ T9647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.181201][ T9647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.182580][ T28] audit: type=1400 audit(1774950082.655:2818): avc: denied { accept } for pid=9725 comm="syz.4.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.192456][ T9647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.247793][ T9647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.272717][ T28] audit: type=1400 audit(1774950082.815:2819): avc: denied { map } for pid=9735 comm="syz.2.2168" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 129.364877][ T9647] hsr_slave_0: entered promiscuous mode [ 129.371725][ T9647] hsr_slave_1: entered promiscuous mode [ 129.380078][ T9647] debugfs: 'hsr0' already exists in 'hsr' [ 129.393865][ T9647] Cannot create hsr debugfs directory [ 129.437793][ T28] audit: type=1400 audit(1774950082.975:2820): avc: denied { connect } for pid=9756 comm="syz.2.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.476207][ T28] audit: type=1400 audit(1774950082.975:2821): avc: denied { shutdown } for pid=9756 comm="syz.2.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.508962][ T3406] kernel write not supported for file bpf-prog (pid: 3406 comm: kworker/0:4) [ 129.591704][ T9647] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.612787][ T9779] sctp: [Deprecated]: syz.2.2180 (pid 9779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.612787][ T9779] Use struct sctp_sack_info instead [ 129.624277][ T28] audit: type=1400 audit(1774950083.155:2822): avc: denied { append } for pid=9786 comm="syz.1.2182" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 129.690386][ T28] audit: type=1326 audit(1774950083.225:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.7.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 129.717466][ T9647] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.723008][ T9446] kernel read not supported for file /input/event0 (pid: 9446 comm: kworker/0:6) [ 129.729758][ T28] audit: type=1326 audit(1774950083.235:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.7.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 129.798457][ T9647] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.866452][ T9647] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.943927][ T9647] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 129.977439][ T9647] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 130.000958][ T9647] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 130.014073][ T9647] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 130.073949][ T9647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.095909][ T9647] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.129359][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.136641][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.163895][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.171092][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.271474][ T9869] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 130.341142][ T9647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.586932][ T9647] veth0_vlan: entered promiscuous mode [ 130.600026][ T9647] veth1_vlan: entered promiscuous mode [ 130.628114][ T9647] veth0_macvtap: entered promiscuous mode [ 130.647857][ T9647] veth1_macvtap: entered promiscuous mode [ 130.681126][ T9647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.702968][ T9647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.731207][ T1620] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.741917][ T1620] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.774501][ T1620] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.800337][ T1620] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.967721][ T9960] unsupported nla_type 210 [ 131.274863][ T9990] syzkaller1: entered promiscuous mode [ 131.281787][ T9990] syzkaller1: entered allmulticast mode [ 131.321168][ T9992] hsr0: entered allmulticast mode [ 131.326738][ T9992] hsr_slave_0: entered allmulticast mode [ 131.332662][ T9992] hsr_slave_1: entered allmulticast mode [ 131.342642][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2252'. [ 131.378159][ T9992] hsr_slave_0: left promiscuous mode [ 131.384345][ T9992] hsr_slave_1: left promiscuous mode [ 131.394275][ T9992] hsr0 (unregistering): left allmulticast mode [ 131.841503][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 131.841522][ T28] audit: type=1400 audit(1774950085.375:2836): avc: denied { create } for pid=10018 comm="syz.1.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.869413][ T28] audit: type=1400 audit(1774950085.385:2837): avc: denied { ioctl } for pid=10018 comm="syz.1.2263" path="socket:[28211]" dev="sockfs" ino=28211 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.406958][ T28] audit: type=1326 audit(1774950085.945:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.8.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37abc0c819 code=0x7ffc0000 [ 132.465294][ T28] audit: type=1326 audit(1774950085.945:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.8.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37abc0c819 code=0x7ffc0000 [ 132.508439][T10022] syz.7.2264 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 132.532380][ T28] audit: type=1326 audit(1774950085.975:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.8.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f37abc0c819 code=0x7ffc0000 [ 132.543902][T10022] CPU: 1 UID: 0 PID: 10022 Comm: syz.7.2264 Not tainted syzkaller #0 PREEMPT(full) [ 132.543933][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.543951][T10022] Call Trace: [ 132.543958][T10022] [ 132.543967][T10022] __dump_stack+0x1d/0x30 [ 132.544045][T10022] dump_stack_lvl+0x95/0xd0 [ 132.544069][T10022] dump_stack+0x15/0x1b [ 132.544091][T10022] dump_header+0x80/0x240 [ 132.544114][T10022] oom_kill_process+0x295/0x350 [ 132.544210][T10022] out_of_memory+0x97d/0xb80 [ 132.544234][T10022] try_charge_memcg+0x62e/0xa10 [ 132.544273][T10022] obj_cgroup_charge_pages+0x23/0xc0 [ 132.544301][T10022] __memcg_kmem_charge_page+0x9e/0x170 [ 132.544359][T10022] __alloc_frozen_pages_noprof+0x18a/0x360 [ 132.544459][T10022] alloc_pages_mpol+0xb3/0x260 [ 132.544489][T10022] alloc_pages_noprof+0x8f/0x140 [ 132.544591][T10022] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 132.544744][T10022] __kvmalloc_node_noprof+0x3d4/0x650 [ 132.544814][T10022] ? futex_hash_allocate+0x190/0x9d0 [ 132.544842][T10022] ? futex_hash_allocate+0x190/0x9d0 [ 132.544937][T10022] futex_hash_allocate+0x190/0x9d0 [ 132.544966][T10022] ? cap_task_prctl+0x13f/0x6e0 [ 132.544993][T10022] futex_hash_prctl+0xd8/0xf0 [ 132.545020][T10022] __se_sys_prctl+0xa3d/0x13f0 [ 132.545056][T10022] __x64_sys_prctl+0x67/0x80 [ 132.545082][T10022] x64_sys_call+0x2533/0x3020 [ 132.545108][T10022] do_syscall_64+0x12c/0x370 [ 132.545135][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.545172][T10022] RIP: 0033:0x7f00242ec819 [ 132.545189][T10022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.545208][T10022] RSP: 002b:00007f0022d3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 132.545230][T10022] RAX: ffffffffffffffda RBX: 00007f0024565fa0 RCX: 00007f00242ec819 [ 132.545245][T10022] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 132.545259][T10022] RBP: 00007f0024382c91 R08: 0000000000000000 R09: 0000000000000000 [ 132.545382][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.545395][T10022] R13: 00007f0024566038 R14: 00007f0024565fa0 R15: 00007ffc33fbf538 [ 132.545415][T10022] [ 132.545595][T10022] memory: usage 307200kB, limit 307200kB, failcnt 196 [ 132.606042][ T28] audit: type=1326 audit(1774950085.975:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.8.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37abc0c819 code=0x7ffc0000 [ 132.813832][T10022] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 132.821778][T10022] kmem: usage 298996kB, limit 9007199254740988kB, failcnt 0 [ 132.829130][T10022] Memory cgroup stats for /syz7: [ 132.829444][T10022] cache 0 [ 132.837743][T10022] rss 8388608 [ 132.838588][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.841068][T10022] shmem 0 [ 132.841079][T10022] mapped_file 0 [ 132.858246][T10022] dirty 0 [ 132.861197][T10022] writeback 0 [ 132.864568][T10022] workingset_refault_anon 20 [ 132.869306][T10022] workingset_refault_file 0 [ 132.873928][T10022] swap 266240 [ 132.877275][T10022] swapcached 6631424 [ 132.881334][T10022] pgpgin 41834 [ 132.884758][T10022] pgpgout 39783 [ 132.888316][T10022] pgfault 57362 [ 132.891939][T10022] pgmajfault 8 [ 132.895470][T10022] inactive_anon 12288 [ 132.899507][T10022] active_anon 0 [ 132.910883][ T28] audit: type=1326 audit(1774950085.975:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.8.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37abc0c819 code=0x7ffc0000 [ 132.917760][T10022] inactive_file 0 [ 132.943504][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.974453][T10022] active_file 0 [ 132.978038][T10022] unevictable 8388608 [ 132.982034][T10022] hierarchical_memory_limit 314572800 [ 132.986635][ T28] audit: type=1400 audit(1774950086.425:2843): avc: denied { mount } for pid=10035 comm="syz.8.2280" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 132.992606][T10022] hierarchical_memsw_limit 9223372036854771712 [ 133.021689][T10049] loop8: detected capacity change from 0 to 128 [ 133.022077][T10022] total_cache 0 [ 133.028408][ T28] audit: type=1400 audit(1774950086.445:2844): avc: denied { write } for pid=3365 comm="kworker/1:2" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=27339 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.032602][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.059204][T10022] total_rss 8388608 [ 133.073070][T10022] total_shmem 0 [ 133.076856][T10022] total_mapped_file 0 [ 133.080859][T10022] total_dirty 0 [ 133.086786][T10022] total_writeback 0 [ 133.090702][T10022] total_workingset_refault_anon 20 [ 133.102533][T10022] total_workingset_refault_file 0 [ 133.107676][T10022] total_swap 266240 [ 133.111498][T10022] total_swapcached 6631424 [ 133.116387][T10022] total_pgpgin 41834 [ 133.120402][T10022] total_pgpgout 39783 [ 133.132265][T10022] total_pgfault 57362 [ 133.136807][T10022] total_pgmajfault 8 [ 133.149702][T10022] total_inactive_anon 12288 [ 133.160189][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.162613][T10022] total_active_anon 0 [ 133.185567][T10022] total_inactive_file 0 [ 133.185767][ T28] audit: type=1400 audit(1774950086.725:2845): avc: denied { watch watch_reads } for pid=10057 comm="syz.8.2276" path="/15/file1" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.222966][T10022] total_active_file 0 [ 133.227452][T10022] total_unevictable 8388608 [ 133.232003][T10022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2264,pid=10021,uid=0 [ 133.247927][T10022] Memory cgroup out of memory: Killed process 10021 (syz.7.2264) total-vm:96080kB, anon-rss:9416kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 133.386393][T10046] chnl_net:caif_netlink_parms(): no params data found [ 133.442563][ T70] bridge_slave_1: left allmulticast mode [ 133.460083][ T70] bridge_slave_1: left promiscuous mode [ 133.482924][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.496084][ T70] bridge_slave_0: left allmulticast mode [ 133.525898][ T70] bridge_slave_0: left promiscuous mode [ 133.541208][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.709714][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.734380][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.768599][ T70] bond0 (unregistering): Released all slaves [ 133.842729][ T70] hsr_slave_0: left promiscuous mode [ 133.851280][ T70] hsr_slave_1: left promiscuous mode [ 133.864639][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.872260][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.879711][T10019] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 133.912771][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.950699][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.988883][ T70] veth1_macvtap: left promiscuous mode [ 134.017581][ T70] veth0_macvtap: left promiscuous mode [ 134.035248][ T70] veth1_vlan: left promiscuous mode [ 134.040887][ T70] veth0_vlan: left promiscuous mode [ 134.160534][T10129] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2297'. [ 134.185924][T10129] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2297'. [ 134.236716][ T70] team0 (unregistering): Port device team_slave_1 removed [ 134.260726][ T70] team0 (unregistering): Port device team_slave_0 removed [ 134.388194][T10046] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.401236][T10046] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.413524][T10046] bridge_slave_0: entered allmulticast mode [ 134.430484][T10046] bridge_slave_0: entered promiscuous mode [ 134.449481][T10046] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.490120][T10046] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.515008][T10046] bridge_slave_1: entered allmulticast mode [ 134.531336][T10046] bridge_slave_1: entered promiscuous mode [ 134.594430][T10046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.605283][T10046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.643482][T10046] team0: Port device team_slave_0 added [ 134.653344][T10046] team0: Port device team_slave_1 added [ 134.703602][T10046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.741909][T10046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.802288][T10046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.853277][T10046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.855336][T10175] loop7: detected capacity change from 0 to 128 [ 134.862585][T10046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.894046][T10176] loop8: detected capacity change from 0 to 2048 [ 134.940511][T10176] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.953851][T10176] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.964589][T10046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.022177][T10046] hsr_slave_0: entered promiscuous mode [ 135.044790][T10046] hsr_slave_1: entered promiscuous mode [ 135.050823][T10046] debugfs: 'hsr0' already exists in 'hsr' [ 135.056670][T10046] Cannot create hsr debugfs directory [ 135.091189][ T9647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.484028][T10248] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2327'. [ 135.581390][T10046] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.617477][T10046] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.637903][T10046] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.664142][T10046] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.736855][T10046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.772869][T10046] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.805357][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.812512][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.824741][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.831886][T10291] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2339'. [ 135.831921][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.868411][T10046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.893745][T10046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.949728][ T3419] IPVS: starting estimator thread 0... [ 136.000370][T10315] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2345'. [ 136.052831][T10308] IPVS: using max 2256 ests per chain, 112800 per kthread [ 136.107376][T10046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.156733][T10343] loop7: detected capacity change from 0 to 512 [ 136.173410][T10343] ext4: Unknown parameter 'uid<00000000000000060929' [ 136.202266][T10343] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2352'. [ 136.286949][ T9] IPVS: starting estimator thread 0... [ 136.293576][T10046] veth0_vlan: entered promiscuous mode [ 136.313854][T10046] veth1_vlan: entered promiscuous mode [ 136.348935][T10046] veth0_macvtap: entered promiscuous mode [ 136.363009][T10046] veth1_macvtap: entered promiscuous mode [ 136.380028][T10046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.392688][T10046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.404292][T10362] IPVS: using max 2352 ests per chain, 117600 per kthread [ 136.411531][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.421281][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.440990][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.457761][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.533584][T10379] loop4: detected capacity change from 0 to 2048 [ 136.585158][T10379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.711242][T10378] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 136.826075][ T9102] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.028989][T10426] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.614229][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 137.614246][ T28] audit: type=1400 audit(1774950091.155:2857): avc: denied { bind } for pid=10480 comm="syz.4.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.736783][ T28] audit: type=1400 audit(1774950091.275:2858): avc: denied { unmount } for pid=10484 comm="syz.4.2382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.964124][ T28] audit: type=1326 audit(1774950091.505:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10494 comm="syz.4.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e3f3c819 code=0x7ffc0000 [ 138.015362][T10502] loop7: detected capacity change from 0 to 1024 [ 138.024617][T10502] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.027306][ T28] audit: type=1326 audit(1774950091.505:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10494 comm="syz.4.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e3f3c819 code=0x7ffc0000 [ 138.066952][T10502] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 138.066952][T10502] [ 138.143563][ T28] audit: type=1326 audit(1774950091.505:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10494 comm="syz.4.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7ff5e3f3c819 code=0x7ffc0000 [ 138.212321][ T28] audit: type=1326 audit(1774950091.505:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10494 comm="syz.4.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e3f3c819 code=0x7ffc0000 [ 138.266691][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2389'. [ 138.332625][ T28] audit: type=1326 audit(1774950091.505:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10494 comm="syz.4.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e3f3c819 code=0x7ffc0000 [ 138.522327][ T28] audit: type=1400 audit(1774950092.055:2864): avc: denied { getattr } for pid=10529 comm="syz.4.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 138.726212][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2408'. [ 139.176666][T10577] Invalid argument reading file caps for ./file0 [ 139.355468][ T1620] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.380244][T10601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2426'. [ 139.400441][ T1620] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.420118][ T1620] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.447380][ T1620] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.562636][T10617] hsr0: entered promiscuous mode [ 139.634873][T10626] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 140.043292][ T28] audit: type=1400 audit(1774950093.585:2865): avc: denied { validate_trans } for pid=10675 comm="syz.7.2447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 140.065716][ T28] audit: type=1326 audit(1774950093.605:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.8.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37abc0c819 code=0x7ffc0000 [ 140.186184][T10694] loop8: detected capacity change from 0 to 1024 [ 140.211020][T10694] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 140.228533][T10694] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 140.266910][T10694] EXT4-fs (loop8): invalid journal inode [ 140.280553][T10694] EXT4-fs (loop8): can't get journal size [ 140.291865][T10694] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.337759][ T9647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.486869][T10737] hsr0: entered promiscuous mode [ 141.141454][T10822] loop8: detected capacity change from 0 to 1024 [ 141.199572][T10822] EXT4-fs: Ignoring removed nobh option [ 141.220590][T10822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.279120][T10822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.337951][T10822] EXT4-fs (loop8): shut down requested (2) [ 141.374011][ T9647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.581734][T10867] loop8: detected capacity change from 0 to 256 [ 141.624219][T10867] FAT-fs (loop8): Directory bread(block 64) failed [ 141.630951][T10867] FAT-fs (loop8): Directory bread(block 65) failed [ 141.644120][T10867] FAT-fs (loop8): Directory bread(block 66) failed [ 141.660851][T10867] FAT-fs (loop8): Directory bread(block 67) failed [ 141.679278][T10867] FAT-fs (loop8): Directory bread(block 68) failed [ 141.705052][T10867] FAT-fs (loop8): Directory bread(block 69) failed [ 141.719485][T10867] FAT-fs (loop8): Directory bread(block 70) failed [ 141.753097][T10867] FAT-fs (loop8): Directory bread(block 71) failed [ 141.766151][T10867] FAT-fs (loop8): Directory bread(block 72) failed [ 141.772847][T10867] FAT-fs (loop8): Directory bread(block 73) failed [ 143.187128][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 143.187146][ T28] audit: type=1400 audit(1774950096.725:2895): avc: denied { ioctl } for pid=10951 comm="syz.4.2513" path="socket:[30767]" dev="sockfs" ino=30767 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.537850][ T28] audit: type=1400 audit(1774950098.065:2896): avc: denied { getopt } for pid=11003 comm="syz.7.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.651619][T11014] loop7: detected capacity change from 0 to 8192 [ 144.677472][ T28] audit: type=1400 audit(1774950098.215:2897): avc: denied { setopt } for pid=11019 comm="syz.2.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.752371][ T28] audit: type=1400 audit(1774950098.215:2898): avc: denied { write } for pid=11019 comm="syz.2.2544" path="socket:[30924]" dev="sockfs" ino=30924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.793272][ T28] audit: type=1400 audit(1774950098.235:2899): avc: denied { read } for pid=11019 comm="syz.2.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.823745][ T28] audit: type=1400 audit(1774950098.365:2900): avc: denied { write } for pid=11030 comm="syz.4.2548" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 145.100697][T11058] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2560'. [ 145.111006][ T28] audit: type=1326 audit(1774950098.655:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.7.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 145.135979][ T28] audit: type=1326 audit(1774950098.655:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.7.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 145.162003][ T28] audit: type=1326 audit(1774950098.675:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.7.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 145.200634][ T28] audit: type=1326 audit(1774950098.675:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.7.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 145.841996][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2575'. [ 145.860298][T11094] netlink: 'syz.7.2575': attribute type 30 has an invalid length. [ 145.873011][T11094] netlink: 'syz.7.2575': attribute type 29 has an invalid length. [ 145.881051][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2575'. [ 147.146261][T11163] netlink: 'syz.4.2606': attribute type 10 has an invalid length. [ 147.181570][T11163] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2606'. [ 147.413600][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2619'. [ 147.463044][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'. [ 147.472094][T11191] netlink: 'syz.2.2620': attribute type 30 has an invalid length. [ 147.499326][T11191] netlink: 'syz.2.2620': attribute type 29 has an invalid length. [ 147.508396][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2620'. [ 147.604975][T10589] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.634491][T10589] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.843055][T11209] netlink: 'syz.7.2627': attribute type 13 has an invalid length. [ 147.851630][T11209] gretap0: refused to change device tx_queue_len [ 147.903210][T11209] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 148.372616][T11229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2636'. [ 148.465218][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2638'. [ 148.505282][T11235] dummy0: entered promiscuous mode [ 148.510701][T11235] macsec0: entered promiscuous mode [ 148.543876][T11235] macsec0: entered allmulticast mode [ 148.568467][T11235] dummy0: entered allmulticast mode [ 148.584078][T11235] dummy0: left allmulticast mode [ 148.594793][T11235] dummy0: left promiscuous mode [ 148.964086][T11259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2649'. [ 149.106375][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 149.106393][ T28] audit: type=1326 audit(1774950102.645:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e3f3c819 code=0x7ffc0000 [ 149.139928][ T28] audit: type=1326 audit(1774950102.675:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7ff5e3f3c819 code=0x7ffc0000 [ 149.156136][T11276] Set syz1 is full, maxelem 2 reached [ 149.171942][ T28] audit: type=1326 audit(1774950102.675:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e3f3c819 code=0x7ffc0000 [ 149.196446][ T28] audit: type=1326 audit(1774950102.675:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e3f3c819 code=0x7ffc0000 [ 149.560738][ T1327] Bluetooth: hci0: Frame reassembly failed (-84) [ 150.043422][ T28] audit: type=1400 audit(1774950103.585:2918): avc: denied { read } for pid=11317 comm="syz.7.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 151.226428][T11353] __nla_validate_parse: 3 callbacks suppressed [ 151.226448][T11353] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2689'. [ 151.263208][T11353] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2689'. [ 151.297319][T11356] loop8: detected capacity change from 0 to 512 [ 151.306003][T11356] EXT4-fs: test_dummy_encryption option not supported [ 151.635555][ T3747] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.669097][T11381] loop4: detected capacity change from 0 to 512 [ 151.677302][T11381] EXT4-fs: test_dummy_encryption option not supported [ 152.100468][T11412] serio: Serial port ptm0 [ 152.263142][ T28] audit: type=1326 audit(1774950105.795:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.7.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 152.289600][ T28] audit: type=1326 audit(1774950105.795:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.7.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 152.323503][ T28] audit: type=1326 audit(1774950105.805:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.7.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 152.377749][ T28] audit: type=1326 audit(1774950105.805:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.7.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 152.401921][ T28] audit: type=1326 audit(1774950105.825:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.7.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 152.492057][T11434] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2724'. [ 152.513371][T11434] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2724'. [ 152.584997][ T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 152.602944][ T35] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.628489][T11436] loop8: detected capacity change from 0 to 8192 [ 152.766103][T11444] loop8: detected capacity change from 0 to 4096 [ 152.777954][T11444] EXT4-fs: Ignoring removed bh option [ 152.809354][T11444] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.884042][ T9647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.399251][T11479] openvswitch: netlink: Missing key (keys=40, expected=100) [ 153.623358][T11492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.642826][T11492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.389017][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 154.389037][ T28] audit: type=1326 audit(1774950107.925:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 154.423789][ T28] audit: type=1326 audit(1774950107.925:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 154.448384][ T28] audit: type=1326 audit(1774950107.965:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 154.473122][ T28] audit: type=1326 audit(1774950107.965:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 154.578980][ T28] audit: type=1326 audit(1774950107.965:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 154.620381][T11528] openvswitch: netlink: Missing key (keys=40, expected=100) [ 154.628894][T11527] serio: Serial port ptm0 [ 154.650788][ T28] audit: type=1326 audit(1774950107.965:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 154.698563][ T28] audit: type=1326 audit(1774950107.965:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 154.743861][ T28] audit: type=1326 audit(1774950107.965:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 154.812924][ T28] audit: type=1326 audit(1774950107.965:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 154.858220][T11534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.867153][ T28] audit: type=1326 audit(1774950107.965:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.7.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00242ec819 code=0x7ffc0000 [ 154.891367][T11534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.303666][T11548] netlink: 'syz.7.2772': attribute type 2 has an invalid length. [ 155.311457][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2772'. [ 155.451501][T11558] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2777'. [ 155.461346][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2776'. [ 155.738225][T11568] loop8: detected capacity change from 0 to 128 [ 155.781535][T11571] Invalid argument reading file caps for ./file0 [ 155.854292][T11577] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.939508][T11577] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.041993][T11577] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.055898][T11586] syz.8.2782: attempt to access beyond end of device [ 156.055898][T11586] loop8: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 156.165583][T11577] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.229503][ T1327] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.258313][T10759] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.278542][T10759] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.291239][T10759] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.395761][T10589] IPVS: starting estimator thread 0... [ 156.448000][T11608] loop8: detected capacity change from 0 to 2048 [ 156.478368][T11608] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.493619][T11604] IPVS: using max 2352 ests per chain, 117600 per kthread [ 156.522670][T11608] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.560413][T11618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.606728][T11624] ================================================================== [ 156.614857][T11624] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 156.622086][T11624] [ 156.624432][T11624] read-write to 0xffff88810a3aafd8 of 8 bytes by task 11608 on cpu 1: [ 156.632606][T11624] __xa_set_mark+0xd2/0x1a0 [ 156.637157][T11624] __folio_mark_dirty+0x383/0x4a0 [ 156.642240][T11624] mark_buffer_dirty+0x120/0x220 [ 156.647215][T11624] folio_zero_new_buffers+0x28c/0x2e0 [ 156.652622][T11624] block_write_end+0x200/0x210 [ 156.657424][T11624] ext4_da_write_end+0x1d3/0x810 [ 156.662404][T11624] generic_perform_write+0x311/0x490 [ 156.667718][T11624] ext4_buffered_write_iter+0x1ee/0x3c0 [ 156.673276][T11624] ext4_file_write_iter+0x380/0xfa0 [ 156.678481][T11624] vfs_write+0x5a6/0x9f0 [ 156.682732][T11624] ksys_write+0xdc/0x1a0 [ 156.686981][T11624] __x64_sys_write+0x40/0x50 [ 156.691573][T11624] x64_sys_call+0x27e1/0x3020 [ 156.696259][T11624] do_syscall_64+0x12c/0x370 [ 156.700853][T11624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.706751][T11624] [ 156.709076][T11624] read to 0xffff88810a3aafd8 of 8 bytes by task 11624 on cpu 0: [ 156.716792][T11624] xas_find_marked+0x213/0x620 [ 156.721566][T11624] filemap_get_folios_tag+0xfa/0x510 [ 156.726854][T11624] mpage_prepare_extent_to_map+0x328/0xc50 [ 156.732665][T11624] ext4_do_writepages+0xa07/0x2840 [ 156.737779][T11624] ext4_writepages+0x18f/0x320 [ 156.742552][T11624] do_writepages+0x1c6/0x310 [ 156.747151][T11624] filemap_flush_range+0x105/0x140 [ 156.752275][T11624] generic_fadvise+0x338/0x460 [ 156.757057][T11624] __x64_sys_fadvise64+0xcb/0x110 [ 156.762100][T11624] x64_sys_call+0x242b/0x3020 [ 156.766794][T11624] do_syscall_64+0x12c/0x370 [ 156.771418][T11624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.777460][T11624] [ 156.779802][T11624] value changed: 0x000001ffffffffff -> 0x00000fffffffffff [ 156.786905][T11624] [ 156.789222][T11624] Reported by Kernel Concurrency Sanitizer on: [ 156.795371][T11624] CPU: 0 UID: 0 PID: 11624 Comm: syz.8.2800 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 156.804746][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.814807][T11624] ================================================================== [ 156.916257][T11624] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2800: bg 0: block 345: padding at end of block bitmap is not set [ 156.946075][T11624] EXT4-fs (loop8): Remounting filesystem read-only [ 156.952815][ T1327] EXT4-fs warning (device loop8): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 157.284108][T11624] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.296390][ T1620] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.384655][ T1620] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.424945][ T1620] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.475061][ T1620] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.544901][ T1620] bridge_slave_1: left allmulticast mode [ 157.550588][ T1620] bridge_slave_1: left promiscuous mode [ 157.556537][ T1620] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.564334][ T1620] bridge_slave_0: left allmulticast mode [ 157.570011][ T1620] bridge_slave_0: left promiscuous mode [ 157.575828][ T1620] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.634644][ T1620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.644568][ T1620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.654189][ T1620] bond0 (unregistering): Released all slaves [ 157.698386][ T1620] hsr_slave_0: left promiscuous mode [ 157.704317][ T1620] hsr_slave_1: left promiscuous mode [ 157.709994][ T1620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.717790][ T1620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.725611][ T1620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.733449][ T1620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.745175][ T1620] veth1_macvtap: left promiscuous mode [ 157.750686][ T1620] veth0_macvtap: left promiscuous mode [ 157.756469][ T1620] veth1_vlan: left promiscuous mode [ 157.761955][ T1620] veth0_vlan: left promiscuous mode [ 157.828358][ T1620] team0 (unregistering): Port device team_slave_1 removed [ 157.838439][ T1620] team0 (unregistering): Port device team_slave_0 removed [ 158.057766][ T1620] IPVS: stop unused estimator thread 0... [ 158.096107][ T1620] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.194944][ T1620] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.254835][ T1620] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.294982][ T1620] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.351722][ T1620] bridge_slave_1: left allmulticast mode [ 158.358931][ T1620] bridge_slave_1: left promiscuous mode [ 158.364757][ T1620] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.372666][ T1620] bridge_slave_0: left allmulticast mode [ 158.378303][ T1620] bridge_slave_0: left promiscuous mode [ 158.384124][ T1620] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.464517][ T1620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.474446][ T1620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.483826][ T1620] bond0 (unregistering): Released all slaves [ 158.524698][ T1620] hsr_slave_0: left promiscuous mode [ 158.530494][ T1620] hsr_slave_1: left promiscuous mode [ 158.536869][ T1620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.544606][ T1620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.558659][ T1620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.566236][ T1620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.577118][ T1620] veth1_macvtap: left promiscuous mode [ 158.582759][ T1620] veth0_macvtap: left promiscuous mode [ 158.588310][ T1620] veth1_vlan: left promiscuous mode [ 158.594567][ T1620] veth0_vlan: left promiscuous mode [ 158.659188][ T1620] team0 (unregistering): Port device team_slave_1 removed [ 158.668563][ T1620] team0 (unregistering): Port device team_slave_0 removed [ 158.917464][ T1620] IPVS: stop unused estimator thread 0... [ 160.475864][ T1327] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.524055][ T1327] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.563790][ T1327] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.623865][ T1327] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.682717][ T1327] bridge_slave_1: left allmulticast mode [ 160.688651][ T1327] bridge_slave_1: left promiscuous mode [ 160.694532][ T1327] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.702146][ T1327] bridge_slave_0: left allmulticast mode [ 160.708115][ T1327] bridge_slave_0: left promiscuous mode [ 160.713974][ T1327] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.767197][ T1327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.777048][ T1327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.786287][ T1327] bond0 (unregistering): Released all slaves [ 160.793798][ T1327] bond1 (unregistering): Released all slaves [ 160.844057][ T1327] hsr_slave_0: left promiscuous mode [ 160.849898][ T1327] hsr_slave_1: left promiscuous mode [ 160.855766][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.865031][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.873091][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.880499][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.891740][ T1327] veth1_macvtap: left promiscuous mode [ 160.897458][ T1327] veth0_macvtap: left promiscuous mode [ 160.903038][ T1327] veth1_vlan: left promiscuous mode [ 160.908375][ T1327] veth0_vlan: left promiscuous mode [ 160.969285][ T1327] team0 (unregistering): Port device team_slave_1 removed [ 160.978751][ T1327] team0 (unregistering): Port device team_slave_0 removed [ 161.224929][ T1327] IPVS: stop unused estimator thread 0...