last executing test programs: 1m0.090777563s ago: executing program 3 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000180)="000002b7c70021", 0x7}], 0x2) 59.912978033s ago: executing program 3 (id=179): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="150b0000000001000000010000000800010001008f00"], 0x1c}, 0x1, 0x0, 0x0, 0x400c400}, 0x20048004) 59.826609668s ago: executing program 3 (id=183): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@local, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010029bd700000000000e00000020000000000000000000000000000000003"], 0xb8}}, 0x10000000) 59.662849067s ago: executing program 3 (id=188): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="3e3a1ef16be042eeb4f16ab74342b4e9b3627285d9d5bb1bd9da14580e046a9f12f4612e67c1d3fad996b88b7afbb672f5ae7f179b47fc35eea2400fa7712f02b121224a3088777245de53fdf0393828da8e0a124f7668c06bf4f005e8d9bad3aed90be0b3e404e03f4d7fe86d641dc82aae0cec1d388933f21ffbf8cc46d2e3321534ecb1c8df79306a842863d04cf04d422f30ff45cb65b9d483e662c4d534cd69ec1ed58739f26566", @ANYRES32, @ANYRES8], 0x1, 0x123d, &(0x7f0000002200)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x3d) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 59.523322985s ago: executing program 3 (id=193): unshare(0x6a040000) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$inet(0x2, 0x2, 0x200) close_range(r0, 0xffffffffffffffff, 0x0) 59.28077299s ago: executing program 3 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chroot(&(0x7f0000000080)='.\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0/../file0\x00', 0x202700, 0x2416f8ee72cd77a3) 59.280618289s ago: executing program 32 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chroot(&(0x7f0000000080)='.\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0/../file0\x00', 0x202700, 0x2416f8ee72cd77a3) 50.212190384s ago: executing program 4 (id=454): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000440)='\a\x00\x00\x00\x00\x00\x00\x00', 0x8) 50.197099395s ago: executing program 4 (id=455): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) 50.039532184s ago: executing program 2 (id=456): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x2000000, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 50.025349845s ago: executing program 4 (id=457): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x4, 0x1}, 0x80c, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r0, r1}, 0xc) 50.000357766s ago: executing program 2 (id=458): socket$netlink(0x10, 0x3, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.94703626s ago: executing program 2 (id=460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000480)={@val={0x0, 0xf8}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xcaa}, @x25={0x0, 0x7f, 0xb, "ddeda952c92b9dadf240d58c96b4a46c75eda077d0a4c4e67e380b2f531e84ad342f100176"}}, 0x36) 49.906165802s ago: executing program 4 (id=461): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) setresuid(0x0, 0xee00, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 49.844046135s ago: executing program 2 (id=462): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x100000, 0xe898d2275f586979) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 49.682610585s ago: executing program 4 (id=464): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f00000001c0), 0x0}, 0x20) 49.632632438s ago: executing program 2 (id=465): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @opaque="1757a21225de430aeec726ef3003"}}}}}}, 0x0) 49.364490503s ago: executing program 4 (id=470): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000017c0)=@newtfilter={0x88c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1fdbe}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xffffc362, 0x1, 0x3, 0x0, 0x7, 0x68aebd05, 0x5, 0x1000, 0x9, 0x4, 0x7fffffff, 0x6, 0x8, 0x0, 0x6, 0xffffffff, 0x8, 0x9, 0x10, 0xd, 0x5, 0x9, 0x40, 0x8, 0x5, 0x3, 0x0, 0x5, 0x1, 0xa1, 0x3, 0xc, 0x7fff, 0x8, 0x9, 0x8, 0x2a, 0x6e3, 0xfff, 0x10000, 0xe03, 0x3, 0x0, 0x5, 0x9, 0x7fff, 0xfffffffd, 0x5, 0x4, 0x6, 0x0, 0xe8cb, 0x7, 0x2, 0xcc6, 0x1, 0x5, 0x4, 0x800, 0x6, 0x0, 0xe2a, 0x4, 0x9, 0x0, 0x2, 0x3, 0x5, 0x2, 0xbb, 0x5, 0x80000001, 0x2, 0x800, 0x0, 0xa, 0x5, 0x1, 0x3, 0x0, 0x0, 0x4, 0x5, 0x8000, 0x0, 0x1, 0x7, 0x6, 0x2, 0x7515, 0x10000000, 0xd, 0x0, 0x9, 0x2, 0x8, 0x80000001, 0xfff, 0x4, 0x1, 0x3ff, 0x3, 0x1, 0x3, 0x8, 0x85, 0x8, 0xea7, 0x0, 0x81, 0x7, 0x4, 0x82, 0xffffd0f9, 0x9, 0x81, 0x10, 0x3, 0xfffffffa, 0x0, 0x1, 0x4, 0xa1, 0x80000001, 0x5, 0x7f, 0x971b, 0x7, 0x40fec6d6, 0x0, 0x40, 0x6, 0x3, 0x4, 0x401, 0x0, 0x2, 0x0, 0x5, 0xe, 0x4, 0xffff05f5, 0x2, 0xff, 0x3, 0xffff, 0xf, 0xd, 0x4, 0x2, 0x9, 0x3b, 0x80000000, 0xab, 0xffff, 0x0, 0x5, 0x8, 0x0, 0x7fffffff, 0xa5e3, 0xc, 0x0, 0x8, 0xfe, 0x386, 0xe, 0x5, 0x8b36, 0x0, 0x1, 0x9, 0x240000, 0x4, 0x756, 0x4, 0x0, 0x8, 0x6, 0x6, 0x900, 0xa47, 0xfffffffc, 0x6, 0x6, 0x1000, 0x0, 0x9, 0x7, 0x1, 0x9, 0x8, 0x4, 0x975b, 0x3, 0x1, 0x4, 0x1, 0x1, 0x5, 0x0, 0x7, 0xfffffff9, 0x3, 0x2, 0x8, 0x0, 0x2, 0x1, 0x8, 0x9, 0x0, 0x4, 0x9, 0x6, 0x5d528fb, 0xffffffff, 0xffffffff, 0xcfa8, 0x81, 0x1, 0x0, 0x80000000, 0x5, 0x3, 0x40, 0xfffff076, 0x6, 0xfffffffa, 0x4, 0x7, 0x9, 0x7, 0x480c, 0x9, 0x9ec, 0x1, 0x1, 0x2, 0x8, 0x8, 0x8, 0x6, 0xffff0001, 0x4, 0xb7f3, 0x100, 0x2, 0x8, 0x4, 0x7, 0x3, 0x7fff30f8, 0xffff, 0x101]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x957, 0x2, 0xf95, 0x80, 0x3, 0x6, 0x9, 0x8, 0x6, 0xa7b9, 0x1, 0xd3, 0x43, 0x0, 0x1, 0x80000000, 0x9fb, 0x50, 0x13, 0x91, 0x1, 0x5, 0x86ec, 0xe, 0x13, 0x0, 0x7, 0x9, 0xff, 0x2, 0x80000, 0x6, 0x4a, 0x6, 0xb6, 0x6, 0x9, 0x80000000, 0x7, 0x1, 0x5, 0x80000001, 0x4, 0xa, 0xa89, 0x6e, 0x8000, 0xfffffffd, 0x80000001, 0x800, 0xa21, 0x9, 0x176de9f, 0xf3, 0x0, 0x8, 0x8, 0x1, 0x188, 0x5f3, 0x9, 0x0, 0xffffffff, 0xfffffff8, 0x3, 0x2, 0x6, 0x2, 0x5e, 0x9, 0x9, 0x200, 0x4, 0x3, 0x2, 0x8, 0x80000001, 0xfffffffb, 0x8, 0xffc2, 0x6, 0x4c, 0x0, 0xc, 0x5, 0x7, 0x24d, 0xbf2, 0x1ff, 0xde, 0xb0, 0x0, 0xffffffff, 0x0, 0x5, 0x1, 0x9, 0x802, 0x3, 0x1, 0x6, 0x1, 0x1, 0x1, 0x6c7ac214, 0x2, 0x9, 0x10001, 0x7fffffff, 0xb, 0xce7, 0x6, 0x40, 0xfff, 0x1d, 0xffffffff, 0x9, 0xb, 0x0, 0x10001, 0x400, 0x5, 0x0, 0x1, 0x7ff, 0x8, 0x117ea5d1, 0x5, 0xc925, 0x8, 0x48d59cf, 0x2, 0xffc, 0xd6, 0x5, 0x2, 0x9, 0x80, 0x3, 0x1, 0x3ff, 0x7bd274a9, 0x10001, 0x7, 0x40, 0x3ff, 0x2, 0x4, 0x5, 0x5, 0xcd, 0x80000001, 0x1, 0x2, 0xffff, 0x6, 0x3f3a, 0x6d, 0xbb68, 0x7, 0x0, 0x1, 0x2, 0x4, 0xb4, 0x8, 0x2, 0x8, 0x4, 0x8, 0x2, 0x0, 0xa795, 0x1, 0x0, 0x10001, 0x3, 0x3198b2bd, 0x7, 0xffffffff, 0x8, 0xc, 0x5, 0x7f, 0x8000, 0x0, 0x3, 0x5, 0x3, 0x0, 0xd, 0x2, 0x8, 0x7fffffff, 0x10000, 0x6, 0x10001, 0xb, 0x7, 0x5, 0x3, 0x2, 0x5, 0x3, 0x8, 0x7, 0x7fffffff, 0x5, 0x1d977981, 0xfffffffd, 0xa8a, 0x7fff, 0xe99, 0x2b, 0xffff79e9, 0x3, 0x9, 0x4, 0x80, 0x6, 0xffffffff, 0x1000, 0xc175, 0x4d, 0xfffffffd, 0x3, 0x3c, 0xd, 0x9, 0x64a, 0x80000001, 0x7ff, 0xa48f, 0x4, 0x4b8, 0x1, 0x3ff, 0x6, 0x9, 0xcc, 0x5, 0x7ff, 0x84e, 0x7, 0x2, 0x10001, 0x9, 0x3, 0x1000, 0xe, 0x3788, 0x7, 0x7, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x0, 0x0, 0x0, {0xe, 0x1, 0xff, 0x6, 0x10, 0x7}, {0x9, 0x1, 0x800, 0x88f, 0x101, 0xf7fd}, 0x5, 0x390, 0x9}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}}, 0x24040084) 49.320587876s ago: executing program 33 (id=470): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000017c0)=@newtfilter={0x88c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1fdbe}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xffffc362, 0x1, 0x3, 0x0, 0x7, 0x68aebd05, 0x5, 0x1000, 0x9, 0x4, 0x7fffffff, 0x6, 0x8, 0x0, 0x6, 0xffffffff, 0x8, 0x9, 0x10, 0xd, 0x5, 0x9, 0x40, 0x8, 0x5, 0x3, 0x0, 0x5, 0x1, 0xa1, 0x3, 0xc, 0x7fff, 0x8, 0x9, 0x8, 0x2a, 0x6e3, 0xfff, 0x10000, 0xe03, 0x3, 0x0, 0x5, 0x9, 0x7fff, 0xfffffffd, 0x5, 0x4, 0x6, 0x0, 0xe8cb, 0x7, 0x2, 0xcc6, 0x1, 0x5, 0x4, 0x800, 0x6, 0x0, 0xe2a, 0x4, 0x9, 0x0, 0x2, 0x3, 0x5, 0x2, 0xbb, 0x5, 0x80000001, 0x2, 0x800, 0x0, 0xa, 0x5, 0x1, 0x3, 0x0, 0x0, 0x4, 0x5, 0x8000, 0x0, 0x1, 0x7, 0x6, 0x2, 0x7515, 0x10000000, 0xd, 0x0, 0x9, 0x2, 0x8, 0x80000001, 0xfff, 0x4, 0x1, 0x3ff, 0x3, 0x1, 0x3, 0x8, 0x85, 0x8, 0xea7, 0x0, 0x81, 0x7, 0x4, 0x82, 0xffffd0f9, 0x9, 0x81, 0x10, 0x3, 0xfffffffa, 0x0, 0x1, 0x4, 0xa1, 0x80000001, 0x5, 0x7f, 0x971b, 0x7, 0x40fec6d6, 0x0, 0x40, 0x6, 0x3, 0x4, 0x401, 0x0, 0x2, 0x0, 0x5, 0xe, 0x4, 0xffff05f5, 0x2, 0xff, 0x3, 0xffff, 0xf, 0xd, 0x4, 0x2, 0x9, 0x3b, 0x80000000, 0xab, 0xffff, 0x0, 0x5, 0x8, 0x0, 0x7fffffff, 0xa5e3, 0xc, 0x0, 0x8, 0xfe, 0x386, 0xe, 0x5, 0x8b36, 0x0, 0x1, 0x9, 0x240000, 0x4, 0x756, 0x4, 0x0, 0x8, 0x6, 0x6, 0x900, 0xa47, 0xfffffffc, 0x6, 0x6, 0x1000, 0x0, 0x9, 0x7, 0x1, 0x9, 0x8, 0x4, 0x975b, 0x3, 0x1, 0x4, 0x1, 0x1, 0x5, 0x0, 0x7, 0xfffffff9, 0x3, 0x2, 0x8, 0x0, 0x2, 0x1, 0x8, 0x9, 0x0, 0x4, 0x9, 0x6, 0x5d528fb, 0xffffffff, 0xffffffff, 0xcfa8, 0x81, 0x1, 0x0, 0x80000000, 0x5, 0x3, 0x40, 0xfffff076, 0x6, 0xfffffffa, 0x4, 0x7, 0x9, 0x7, 0x480c, 0x9, 0x9ec, 0x1, 0x1, 0x2, 0x8, 0x8, 0x8, 0x6, 0xffff0001, 0x4, 0xb7f3, 0x100, 0x2, 0x8, 0x4, 0x7, 0x3, 0x7fff30f8, 0xffff, 0x101]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x957, 0x2, 0xf95, 0x80, 0x3, 0x6, 0x9, 0x8, 0x6, 0xa7b9, 0x1, 0xd3, 0x43, 0x0, 0x1, 0x80000000, 0x9fb, 0x50, 0x13, 0x91, 0x1, 0x5, 0x86ec, 0xe, 0x13, 0x0, 0x7, 0x9, 0xff, 0x2, 0x80000, 0x6, 0x4a, 0x6, 0xb6, 0x6, 0x9, 0x80000000, 0x7, 0x1, 0x5, 0x80000001, 0x4, 0xa, 0xa89, 0x6e, 0x8000, 0xfffffffd, 0x80000001, 0x800, 0xa21, 0x9, 0x176de9f, 0xf3, 0x0, 0x8, 0x8, 0x1, 0x188, 0x5f3, 0x9, 0x0, 0xffffffff, 0xfffffff8, 0x3, 0x2, 0x6, 0x2, 0x5e, 0x9, 0x9, 0x200, 0x4, 0x3, 0x2, 0x8, 0x80000001, 0xfffffffb, 0x8, 0xffc2, 0x6, 0x4c, 0x0, 0xc, 0x5, 0x7, 0x24d, 0xbf2, 0x1ff, 0xde, 0xb0, 0x0, 0xffffffff, 0x0, 0x5, 0x1, 0x9, 0x802, 0x3, 0x1, 0x6, 0x1, 0x1, 0x1, 0x6c7ac214, 0x2, 0x9, 0x10001, 0x7fffffff, 0xb, 0xce7, 0x6, 0x40, 0xfff, 0x1d, 0xffffffff, 0x9, 0xb, 0x0, 0x10001, 0x400, 0x5, 0x0, 0x1, 0x7ff, 0x8, 0x117ea5d1, 0x5, 0xc925, 0x8, 0x48d59cf, 0x2, 0xffc, 0xd6, 0x5, 0x2, 0x9, 0x80, 0x3, 0x1, 0x3ff, 0x7bd274a9, 0x10001, 0x7, 0x40, 0x3ff, 0x2, 0x4, 0x5, 0x5, 0xcd, 0x80000001, 0x1, 0x2, 0xffff, 0x6, 0x3f3a, 0x6d, 0xbb68, 0x7, 0x0, 0x1, 0x2, 0x4, 0xb4, 0x8, 0x2, 0x8, 0x4, 0x8, 0x2, 0x0, 0xa795, 0x1, 0x0, 0x10001, 0x3, 0x3198b2bd, 0x7, 0xffffffff, 0x8, 0xc, 0x5, 0x7f, 0x8000, 0x0, 0x3, 0x5, 0x3, 0x0, 0xd, 0x2, 0x8, 0x7fffffff, 0x10000, 0x6, 0x10001, 0xb, 0x7, 0x5, 0x3, 0x2, 0x5, 0x3, 0x8, 0x7, 0x7fffffff, 0x5, 0x1d977981, 0xfffffffd, 0xa8a, 0x7fff, 0xe99, 0x2b, 0xffff79e9, 0x3, 0x9, 0x4, 0x80, 0x6, 0xffffffff, 0x1000, 0xc175, 0x4d, 0xfffffffd, 0x3, 0x3c, 0xd, 0x9, 0x64a, 0x80000001, 0x7ff, 0xa48f, 0x4, 0x4b8, 0x1, 0x3ff, 0x6, 0x9, 0xcc, 0x5, 0x7ff, 0x84e, 0x7, 0x2, 0x10001, 0x9, 0x3, 0x1000, 0xe, 0x3788, 0x7, 0x7, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x0, 0x0, 0x0, {0xe, 0x1, 0xff, 0x6, 0x10, 0x7}, {0x9, 0x1, 0x800, 0x88f, 0x101, 0xf7fd}, 0x5, 0x390, 0x9}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}}, 0x24040084) 49.003678724s ago: executing program 2 (id=477): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x147542, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000280)="a1", 0x1}], 0x1, 0x1ff, 0x5, 0x1a) 48.943318358s ago: executing program 34 (id=477): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x147542, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000280)="a1", 0x1}], 0x1, 0x1ff, 0x5, 0x1a) 31.391041344s ago: executing program 1 (id=959): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) write$binfmt_aout(r1, &(0x7f0000000980)={{0x107, 0x2, 0x2, 0x310, 0x18c, 0xfffffffb, 0x173, 0xfffffff9}, "c3d4be09", ['\x00']}, 0x4c) 31.312609948s ago: executing program 1 (id=961): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000040) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) 31.253709672s ago: executing program 1 (id=964): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000), 0x10) read(r0, &(0x7f00000017c0)=""/4090, 0xffa) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@can={{0x3, 0x0, 0x1}, 0x8}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x400c8c1) 31.170193877s ago: executing program 1 (id=967): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x100000, 0xe898d2275f586979) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 31.09783013s ago: executing program 1 (id=970): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1ce7, &(0x7f0000000040)={0x0, 0xe9f9, 0x4480, 0x1, 0x18d}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 30.651635416s ago: executing program 1 (id=978): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}}, 0x24040080) 30.624382218s ago: executing program 35 (id=978): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}}, 0x24040080) 1.607859117s ago: executing program 0 (id=1775): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x4, 0xb296, 0x1ff}, 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 1.293738376s ago: executing program 0 (id=1778): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) 1.03501635s ago: executing program 7 (id=1791): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) close_range(r0, 0xffffffffffffffff, 0x0) 1.018361421s ago: executing program 8 (id=1793): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @time={0x65757100, 0xffffff}, 0x3, {0x1, 0xfc}}) 1.013712432s ago: executing program 6 (id=1794): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 968.469574ms ago: executing program 6 (id=1796): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) lsetxattr$trusted_overlay_opaque(&(0x7f0000000440)='./file0/file1\x00', &(0x7f0000000480), 0x0, 0x0, 0x0) 899.023698ms ago: executing program 7 (id=1799): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 874.74224ms ago: executing program 7 (id=1800): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c0048451600000000000d46f84a30dfdf44d55c801ee905422743b683c21f4dfba674da53048dccc8661091c163b4780a8edcb84ff9a2442b03c76373ada8efb2b4402900bc17b759bf1560930826eda2d20f1b1832f557c11defb1c0fbdc75fdce750edb42a3d0cf5b35f73251e8baa5ba007a5b00ac4b80aa7766c794761004cb18bcf56c913f0562c13720141bdf028195d175ec9031d42eff8b758994bc50445772d6961939", @ANYRES32=0x0, @ANYRES8, @ANYBLOB="10a9d98a79673dddde01d1c2a085966ce76f45c2829e2fab95b34f8c26093a42f0eabdd83d48a713532c4772faf1a03e2b7feefcf55c9006bc203dcfb4bf89597fabf8c04149d17a083eb52d36cd1461d789d4825cc52654c84e428492824b1c73bc534aa5aafc17e6969b8fa09959a58ce833f834e39c5c746a90b64acb3440558c4df8531965e77f0bef5fc3599f8c34b6d60bd228b188817dd2f8a76b0ad9b18c10b78ac8c8ba44d92102e7b17c8a16fd15bfd230d1e258556f44246511ff", @ANYRESOCT=0x0], 0x1, 0x2b2, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 864.52315ms ago: executing program 8 (id=1801): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xc0240, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x20000900) setxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 829.502012ms ago: executing program 8 (id=1802): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 773.049535ms ago: executing program 7 (id=1803): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 667.050911ms ago: executing program 5 (id=1805): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) 643.948063ms ago: executing program 7 (id=1806): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) copy_file_range(r0, 0x0, r0, &(0x7f0000000500)=0xffff, 0x9, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) pwrite64(r1, &(0x7f00000001c0)='u', 0x1, 0x10000) 616.593554ms ago: executing program 6 (id=1807): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x400, 0xfffffbfd, 0x40000331}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 389.815917ms ago: executing program 0 (id=1808): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 389.669128ms ago: executing program 5 (id=1809): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) close_range(r0, 0xffffffffffffffff, 0x0) 351.10764ms ago: executing program 0 (id=1810): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x40000009}) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x2, 0xd}, 0xb) 309.624343ms ago: executing program 6 (id=1811): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 296.115153ms ago: executing program 7 (id=1812): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x3, 0x9, 0x6}, &(0x7f0000000100)=0x10) 273.170775ms ago: executing program 6 (id=1813): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x11, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) 259.890345ms ago: executing program 0 (id=1814): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000140)='fd/3\x00') 221.045797ms ago: executing program 8 (id=1815): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0xff03, 0x3c8, 0x1f8, 0x2e0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0xff, 0x0, 0x0, 0xff, 0x1fe]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x0, 0x6, 0x3, 0x8, 0x1000, 'nr0\x00', 'vlan1\x00', {0xff}, {}, 0x0, 0x400}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@broadcast, @private=0xa010102, 0xff, 0x0, 0x8, 0xd, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x5, 0x9, 0xffff, 0x8, 0x65c, 'sit0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x488}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @remote, 0x4}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@multicast, {[0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x9ee8, 0x4f, 0x4, 0xfff, 0x5, 0x1, 'veth0_to_batadv\x00', 'rose0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) 215.301927ms ago: executing program 5 (id=1816): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1}, 0x20003ff0}], 0x1, 0x0, 0x0) 210.436668ms ago: executing program 0 (id=1817): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) lsetxattr$trusted_overlay_opaque(&(0x7f0000000440)='./file0/file1\x00', &(0x7f0000000480), 0x0, 0x0, 0x0) 176.56751ms ago: executing program 6 (id=1818): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0xa, 0x2, 0x4, 0xfa, 0xe]}, &(0x7f0000000080)=0x78) 117.476714ms ago: executing program 5 (id=1819): unshare(0x28000600) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) 110.391694ms ago: executing program 8 (id=1820): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) setresuid(r1, r2, 0x0) 90.486595ms ago: executing program 8 (id=1821): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 66.195716ms ago: executing program 5 (id=1822): r0 = socket$kcm(0x2, 0x3, 0x84) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x5, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850) 0s ago: executing program 5 (id=1823): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x400, 0xfffffbfd, 0x40000331}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): from 0 to 512 [ 45.966010][ T4710] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.996745][ T4710] EXT4-fs (loop0): 1 truncate cleaned up [ 46.002726][ T4710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.089155][ T1944] bridge_slave_1: left allmulticast mode [ 46.095181][ T1944] bridge_slave_1: left promiscuous mode [ 46.101095][ T1944] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.126185][ T1944] bridge_slave_0: left allmulticast mode [ 46.132511][ T1944] bridge_slave_0: left promiscuous mode [ 46.138479][ T1944] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.175045][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.198646][ T1944] hsr0: left allmulticast mode [ 46.203441][ T1944] hsr_slave_0: left allmulticast mode [ 46.208913][ T1944] hsr_slave_1: left allmulticast mode [ 46.214305][ T1944] hsr0: left promiscuous mode [ 46.219098][ T1944] nr0: port 1(hsr0) entered disabled state [ 46.284739][ T4735] loop0: detected capacity change from 0 to 512 [ 46.304822][ T4735] EXT4-fs: Ignoring removed oldalloc option [ 46.342357][ T4735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.404749][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.432112][ T1944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.445199][ T1944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.473172][ T1944] bond0 (unregistering): Released all slaves [ 46.550299][ T1944] hsr_slave_0: left promiscuous mode [ 46.556717][ T1944] hsr_slave_1: left promiscuous mode [ 46.562425][ T1944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.570006][ T1944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.585146][ T1944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.592558][ T1944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.677844][ T4776] sctp: [Deprecated]: syz.0.489 (pid 4776) Use of int in max_burst socket option deprecated. [ 46.677844][ T4776] Use struct sctp_assoc_value instead [ 46.690672][ T1944] veth1_macvtap: left promiscuous mode [ 46.699136][ T1944] veth0_macvtap: left promiscuous mode [ 46.709347][ T1944] veth1_vlan: left promiscuous mode [ 46.715310][ T1944] veth0_vlan: left promiscuous mode [ 46.858307][ T1944] team0 (unregistering): Port device team_slave_1 removed [ 46.868611][ T1944] team0 (unregistering): Port device team_slave_0 removed [ 46.950946][ T4797] loop0: detected capacity change from 0 to 128 [ 46.957192][ T4709] chnl_net:caif_netlink_parms(): no params data found [ 46.994729][ T4797] syz.0.498: attempt to access beyond end of device [ 46.994729][ T4797] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 47.028104][ T4797] syz.0.498: attempt to access beyond end of device [ 47.028104][ T4797] loop0: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 47.041822][ T4797] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 47.052218][ T4801] syzkaller1: entered promiscuous mode [ 47.057793][ T4801] syzkaller1: entered allmulticast mode [ 47.066458][ T4797] syz.0.498: attempt to access beyond end of device [ 47.066458][ T4797] loop0: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 47.080155][ T4797] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 47.088748][ T4797] syz.0.498: attempt to access beyond end of device [ 47.088748][ T4797] loop0: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 47.102436][ T4797] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 47.111074][ T4797] syz.0.498: attempt to access beyond end of device [ 47.111074][ T4797] loop0: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 47.154790][ T4807] syz.0.498: attempt to access beyond end of device [ 47.154790][ T4807] loop0: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 47.168639][ T4807] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 47.179643][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.186949][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.200675][ T4709] bridge_slave_0: entered allmulticast mode [ 47.207182][ T4709] bridge_slave_0: entered promiscuous mode [ 47.234654][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.241741][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.255071][ T4709] bridge_slave_1: entered allmulticast mode [ 47.265180][ T4709] bridge_slave_1: entered promiscuous mode [ 47.274630][ T36] IPVS: starting estimator thread 0... [ 47.300886][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.328519][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.355435][ T4736] chnl_net:caif_netlink_parms(): no params data found [ 47.374603][ T4829] IPVS: using max 2160 ests per chain, 108000 per kthread [ 47.390593][ T4709] team0: Port device team_slave_0 added [ 47.414263][ T1944] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.435788][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.455112][ T4709] team0: Port device team_slave_1 added [ 47.490482][ T1944] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.539570][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.546635][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.572554][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.586261][ T4856] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 47.608204][ T1944] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.628042][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.635284][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.644356][ T4736] bridge_slave_0: entered allmulticast mode [ 47.651343][ T4736] bridge_slave_0: entered promiscuous mode [ 47.664112][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.671147][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.697612][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.732267][ T1944] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.753746][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.760527][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.513'. [ 47.761058][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.777204][ T4736] bridge_slave_1: entered allmulticast mode [ 47.790042][ T4736] bridge_slave_1: entered promiscuous mode [ 47.836590][ T4875] loop5: detected capacity change from 0 to 128 [ 47.836991][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.867891][ T4709] hsr_slave_0: entered promiscuous mode [ 47.879644][ T4709] hsr_slave_1: entered promiscuous mode [ 47.880260][ T4875] syz.5.517: attempt to access beyond end of device [ 47.880260][ T4875] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 47.905638][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.924200][ T4874] loop1: detected capacity change from 0 to 8192 [ 47.924269][ T1944] bridge_slave_1: left allmulticast mode [ 47.936320][ T1944] bridge_slave_1: left promiscuous mode [ 47.942131][ T1944] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.962320][ T1944] bridge_slave_0: left allmulticast mode [ 47.968142][ T1944] bridge_slave_0: left promiscuous mode [ 47.973889][ T1944] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.975750][ T4875] syz.5.517: attempt to access beyond end of device [ 47.975750][ T4875] loop5: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 47.994766][ T4875] Buffer I/O error on dev loop5, logical block 70, lost async page write [ 48.003761][ T4875] syz.5.517: attempt to access beyond end of device [ 48.003761][ T4875] loop5: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 48.017913][ T4875] Buffer I/O error on dev loop5, logical block 71, lost async page write [ 48.027341][ T4875] syz.5.517: attempt to access beyond end of device [ 48.027341][ T4875] loop5: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 48.041139][ T4875] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 48.060035][ T4884] Buffer I/O error on dev loop5, logical block 69, lost async page write [ 48.137440][ T1944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.147060][ T1944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.156862][ T1944] bond0 (unregistering): Released all slaves [ 48.185726][ T4736] team0: Port device team_slave_0 added [ 48.196973][ T1944] hsr_slave_0: left promiscuous mode [ 48.203737][ T1944] hsr_slave_1: left promiscuous mode [ 48.209634][ T1944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.217051][ T1944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.224687][ T1944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.232173][ T1944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.254221][ T1944] veth1_macvtap: left promiscuous mode [ 48.263190][ T1944] veth0_macvtap: left promiscuous mode [ 48.268797][ T1944] veth1_vlan: left promiscuous mode [ 48.274186][ T1944] veth0_vlan: left promiscuous mode [ 48.294153][ T4896] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.397657][ T1944] team0 (unregistering): Port device team_slave_1 removed [ 48.411371][ T1944] team0 (unregistering): Port device team_slave_0 removed [ 48.457192][ T4736] team0: Port device team_slave_1 added [ 48.491893][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.498995][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.525507][ T4736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.563032][ T4709] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 48.572903][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.579943][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.605925][ T4736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.632482][ T4709] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 48.644185][ T4709] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 48.655956][ T4709] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 48.695706][ T4736] hsr_slave_0: entered promiscuous mode [ 48.701752][ T4736] hsr_slave_1: entered promiscuous mode [ 48.707915][ T4736] debugfs: 'hsr0' already exists in 'hsr' [ 48.713736][ T4736] Cannot create hsr debugfs directory [ 48.784141][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.828726][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.846534][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.853678][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.879617][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.886785][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.905859][ T4939] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.941969][ T4736] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 48.958359][ T4736] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 48.977230][ T4736] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 48.994077][ T4736] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 49.049378][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.086348][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.106737][ T4736] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.123721][ T1707] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.130846][ T1707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.141674][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.148817][ T1707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.216830][ T4980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 49.301414][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.332998][ T4996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.339807][ T4709] veth0_vlan: entered promiscuous mode [ 49.349743][ T4996] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.366439][ T4996] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.534: bg 0: block 112: padding at end of block bitmap is not set [ 49.381769][ T4996] EXT4-fs (loop1): Remounting filesystem read-only [ 49.385428][ T4709] veth1_vlan: entered promiscuous mode [ 49.417140][ T4709] veth0_macvtap: entered promiscuous mode [ 49.436062][ T4709] veth1_macvtap: entered promiscuous mode [ 49.442618][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.460460][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.484605][ T4561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.492634][ T4159] Bluetooth: hci0: command 0x1003 tx timeout [ 49.513764][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.532714][ T41] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.542770][ T5019] set_capacity_and_notify: 3 callbacks suppressed [ 49.542790][ T5019] loop1: detected capacity change from 0 to 128 [ 49.582286][ T41] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.600921][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 49.600937][ T29] audit: type=1400 audit(1770262662.693:457): avc: denied { setopt } for pid=5029 comm="syz.5.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.642072][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.654750][ T1944] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.690557][ T5019] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.712855][ T5019] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.729296][ T4736] veth0_vlan: entered promiscuous mode [ 49.746546][ T4736] veth1_vlan: entered promiscuous mode [ 49.769970][ T4736] veth0_macvtap: entered promiscuous mode [ 49.770246][ T5019] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.779433][ T4736] veth1_macvtap: entered promiscuous mode [ 49.806230][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.817900][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.825416][ T29] audit: type=1400 audit(1770262662.913:458): avc: denied { setopt } for pid=5050 comm="syz.5.541" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.855242][ T5052] pim6reg: entered allmulticast mode [ 49.863279][ T47] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.883672][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.542'. [ 49.892644][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.542'. [ 49.905078][ T5052] team0: entered allmulticast mode [ 49.910209][ T5052] team_slave_0: entered allmulticast mode [ 49.916034][ T5052] team_slave_1: entered allmulticast mode [ 49.926973][ T5052] team0: left allmulticast mode [ 49.931849][ T5052] team_slave_0: left allmulticast mode [ 49.937546][ T5052] team_slave_1: left allmulticast mode [ 49.944003][ T5052] pim6reg: left allmulticast mode [ 49.981014][ T47] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.000293][ T47] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.026945][ T47] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.171788][ T5098] netlink: 36 bytes leftover after parsing attributes in process `syz.5.550'. [ 50.206828][ T29] audit: type=1400 audit(1770262663.303:459): avc: denied { read write } for pid=5099 comm="syz.6.552" name="usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.231280][ T29] audit: type=1400 audit(1770262663.303:460): avc: denied { open } for pid=5099 comm="syz.6.552" path="/dev/usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.320718][ T29] audit: type=1400 audit(1770262663.403:461): avc: denied { ioctl } for pid=5099 comm="syz.6.552" path="/dev/usbmon4" dev="devtmpfs" ino=154 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.347394][ T10] hid_parser_main: 1 callbacks suppressed [ 50.347412][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.379379][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.409403][ T4838] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 50.559458][ T29] audit: type=1400 audit(1770262663.653:462): avc: denied { connect } for pid=5142 comm="syz.6.561" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.645473][ T5156] netlink: 'syz.6.564': attribute type 3 has an invalid length. [ 50.653153][ T5156] netlink: 13435 bytes leftover after parsing attributes in process `syz.6.564'. [ 50.699269][ T5162] loop5: detected capacity change from 0 to 128 [ 50.875078][ T29] audit: type=1400 audit(1770262663.953:463): avc: denied { create } for pid=5181 comm="syz.7.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.894700][ T29] audit: type=1400 audit(1770262663.953:464): avc: denied { setopt } for pid=5181 comm="syz.7.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.897758][ T5183] netlink: 'syz.6.573': attribute type 12 has an invalid length. [ 50.914040][ T29] audit: type=1400 audit(1770262663.953:465): avc: denied { bind } for pid=5181 comm="syz.7.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.921744][ T5183] netlink: 'syz.6.573': attribute type 29 has an invalid length. [ 50.921757][ T5183] netlink: 148 bytes leftover after parsing attributes in process `syz.6.573'. [ 50.957827][ T29] audit: type=1400 audit(1770262663.953:466): avc: denied { read } for pid=5181 comm="syz.7.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.472279][ T5232] loop7: detected capacity change from 0 to 512 [ 51.526277][ T5232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.593946][ T5232] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.661916][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.594'. [ 51.679327][ T5117] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 51.686782][ T5117] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 51.691044][ T5257] netlink: 104 bytes leftover after parsing attributes in process `syz.0.606'. [ 51.694189][ T5117] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 51.710705][ T5117] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 51.718152][ T5117] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 51.725615][ T5117] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 51.733052][ T5117] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 51.740589][ T5117] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 51.748039][ T5117] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 51.756428][ T4736] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.766555][ T5117] hid-generic 0103:0004:0000.0003: hidraw0: HID v0.02 Device [syz0] on syz1 [ 51.767414][ T5251] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.836607][ T5266] fido_id[5266]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.877697][ T5251] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.928608][ T5251] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.997870][ T5251] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.013402][ T5278] loop0: detected capacity change from 0 to 512 [ 52.023340][ T5278] EXT4-fs: inline encryption not supported [ 52.032556][ T5278] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 52.041366][ T5278] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.603: invalid indirect mapped block 2683928664 (level 1) [ 52.057609][ T5278] EXT4-fs (loop0): 1 truncate cleaned up [ 52.063980][ T5278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.069714][ T41] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.088092][ T5278] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.603: Invalid block bitmap block 3 in block_group 0 [ 52.113502][ T5278] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 52.115601][ T41] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.131434][ T41] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.152989][ T5278] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.603: invalid indirect mapped block 480848489 (level 1) [ 52.168415][ T41] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.191592][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.229521][ T5284] netlink: 12 bytes leftover after parsing attributes in process `syz.7.608'. [ 52.238504][ T5284] bridge: RTM_NEWNEIGH with invalid ether address [ 52.453434][ T5313] loop7: detected capacity change from 0 to 1024 [ 52.462729][ T5313] EXT4-fs: inline encryption not supported [ 52.483838][ T5313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.589188][ T5327] netlink: 4580 bytes leftover after parsing attributes in process `syz.6.623'. [ 52.598321][ T5327] netlink: 4580 bytes leftover after parsing attributes in process `syz.6.623'. [ 52.661723][ T4736] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.705759][ T5341] loop6: detected capacity change from 0 to 128 [ 52.814320][ T5354] loop6: detected capacity change from 0 to 512 [ 52.822594][ T5354] EXT4-fs: Ignoring removed nobh option [ 52.851889][ T5354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.884441][ T5354] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.929949][ T4709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.956746][ T5372] loop6: detected capacity change from 0 to 512 [ 52.992063][ T5372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.005373][ T5372] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.040492][ T4709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.264694][ T5403] loop7: detected capacity change from 0 to 512 [ 53.278346][ T5403] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.658: bg 0: block 248: padding at end of block bitmap is not set [ 53.307231][ T5403] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.658: Failed to acquire dquot type 1 [ 53.329340][ T5403] EXT4-fs (loop7): 1 truncate cleaned up [ 53.345319][ T5403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.358934][ T5403] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.532335][ T5437] loop6: detected capacity change from 0 to 1024 [ 53.560186][ T5437] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.583111][ T4736] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.677484][ T1944] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 1 [ 53.692531][ T5437] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 53.701498][ T5439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.727173][ T5437] System zones: 0-1, 3-36 [ 53.751817][ T5439] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 53.768876][ T5437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.794206][ T5437] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 53.840570][ T3947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.851424][ T4709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.101191][ T5468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.218947][ T5482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.252425][ T4709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.265923][ T5482] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 54.288887][ T5489] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 54.288887][ T5489] The task syz.0.673 (5489) triggered the difference, watch for misbehavior. [ 54.294628][ T5482] System zones: 1-2, 4-12, 8-8 [ 54.332631][ T5482] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.674: iget: bad i_size value: 38620345925642 [ 54.368083][ T5498] autofs4:pid:5498:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(951.8), cmd(0xc018937e) [ 54.381362][ T5498] autofs4:pid:5498:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 54.384276][ T5482] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.674: couldn't read orphan inode 15 (err -117) [ 54.405462][ T5482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.750888][ T31] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 54.767745][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 54.780445][ T31] EXT4-fs (loop5): This should not happen!! Data will be lost [ 54.780445][ T31] [ 54.790138][ T31] EXT4-fs (loop5): Total free blocks count 0 [ 54.796189][ T31] EXT4-fs (loop5): Free/Dirty block details [ 54.802156][ T31] EXT4-fs (loop5): free_blocks=0 [ 54.807155][ T31] EXT4-fs (loop5): dirty_blocks=16032 [ 54.812602][ T31] EXT4-fs (loop5): Block reservation details [ 54.818611][ T31] EXT4-fs (loop5): i_reserved_data_blocks=16032 [ 54.856498][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 54.897916][ T5528] netlink: 'syz.1.692': attribute type 3 has an invalid length. [ 54.929069][ T5530] set_capacity_and_notify: 3 callbacks suppressed [ 54.929086][ T5530] loop1: detected capacity change from 0 to 128 [ 54.996663][ T5534] netlink: 'syz.5.695': attribute type 1 has an invalid length. [ 55.004376][ T5534] netlink: 'syz.5.695': attribute type 2 has an invalid length. [ 55.075875][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 55.075891][ T29] audit: type=1400 audit(1770262668.173:497): avc: denied { bind } for pid=5541 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.302752][ T29] audit: type=1400 audit(1770262668.393:498): avc: denied { getopt } for pid=5543 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.398752][ T5564] loop0: detected capacity change from 0 to 512 [ 55.412807][ T5564] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.423364][ T29] audit: type=1400 audit(1770262668.503:499): avc: denied { read } for pid=5565 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.444221][ T5564] EXT4-fs (loop0): 1 truncate cleaned up [ 55.530703][ T5578] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.566759][ T5580] netlink: 'syz.5.715': attribute type 3 has an invalid length. [ 55.574513][ T5580] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.715'. [ 55.611869][ T5583] xt_policy: output policy not valid in PREROUTING and INPUT [ 55.785773][ T5593] capability: warning: `syz.6.721' uses 32-bit capabilities (legacy support in use) [ 55.797327][ T29] audit: type=1400 audit(1770262668.893:500): avc: denied { read write } for pid=5592 comm="syz.6.721" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.821721][ T29] audit: type=1400 audit(1770262668.893:501): avc: denied { open } for pid=5592 comm="syz.6.721" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.897168][ T29] audit: type=1400 audit(1770262668.943:502): avc: denied { ioctl } for pid=5592 comm="syz.6.721" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.928655][ T5597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.723'. [ 55.980127][ T5600] loop1: detected capacity change from 0 to 136 [ 56.009773][ T5600] Attempt to read inode for relocated directory [ 56.064619][ T29] audit: type=1400 audit(1770262669.153:503): avc: denied { getopt } for pid=5595 comm="syz.5.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.227310][ T5621] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 56.227355][ T29] audit: type=1400 audit(1770262669.323:504): avc: denied { read } for pid=5620 comm="syz.1.731" path="socket:[12646]" dev="sockfs" ino=12646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.258480][ T5619] loop5: detected capacity change from 0 to 8192 [ 56.273825][ T5623] netlink: 176 bytes leftover after parsing attributes in process `syz.0.732'. [ 56.284861][ T4561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.299320][ T29] audit: type=1400 audit(1770262669.393:505): avc: denied { firmware_load } for pid=5622 comm="syz.0.732" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 56.363276][ T5629] loop6: detected capacity change from 0 to 1764 [ 56.415576][ T29] audit: type=1400 audit(1770262669.503:506): avc: denied { create } for pid=5630 comm="syz.7.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 56.537798][ T5646] loop7: detected capacity change from 0 to 2048 [ 56.580759][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 56.605619][ T5657] chnl_net:caif_netlink_parms(): no params data found [ 56.612941][ T41] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 56.628022][ T41] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 56.640276][ T41] EXT4-fs (loop7): This should not happen!! Data will be lost [ 56.640276][ T41] [ 56.649993][ T41] EXT4-fs (loop7): Total free blocks count 0 [ 56.656093][ T41] EXT4-fs (loop7): Free/Dirty block details [ 56.662182][ T41] EXT4-fs (loop7): free_blocks=2415919504 [ 56.668044][ T41] EXT4-fs (loop7): dirty_blocks=16 [ 56.673294][ T41] EXT4-fs (loop7): Block reservation details [ 56.679400][ T41] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 56.701047][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 56.731393][ T5673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.752'. [ 56.740667][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 56.797293][ T5677] loop7: detected capacity change from 0 to 2048 [ 57.023484][ T5692] veth1_to_bond: entered allmulticast mode [ 57.030267][ T5691] veth1_to_bond: left allmulticast mode [ 57.308624][ T5723] loop7: detected capacity change from 0 to 128 [ 57.331859][ T5723] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.367182][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.773'. [ 57.518999][ T5745] loop1: detected capacity change from 0 to 1024 [ 57.526240][ T5745] EXT4-fs: Ignoring removed bh option [ 57.887055][ T5769] loop5: detected capacity change from 0 to 1764 [ 58.028218][ T47] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 58.045216][ T47] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 58.057591][ T47] EXT4-fs (loop5): This should not happen!! Data will be lost [ 58.057591][ T47] [ 58.067301][ T47] EXT4-fs (loop5): Total free blocks count 0 [ 58.073351][ T47] EXT4-fs (loop5): Free/Dirty block details [ 58.079339][ T47] EXT4-fs (loop5): free_blocks=2415919504 [ 58.085135][ T47] EXT4-fs (loop5): dirty_blocks=16 [ 58.090359][ T47] EXT4-fs (loop5): Block reservation details [ 58.096394][ T47] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 58.210959][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.807'. [ 58.231743][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 58.365533][ T5824] bond1: entered promiscuous mode [ 58.451891][ T5833] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 58.452810][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 58.475764][ T5833] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 58.488079][ T5833] EXT4-fs (loop7): This should not happen!! Data will be lost [ 58.488079][ T5833] [ 58.498085][ T5833] EXT4-fs (loop7): Total free blocks count 0 [ 58.504078][ T5833] EXT4-fs (loop7): Free/Dirty block details [ 58.510209][ T5833] EXT4-fs (loop7): free_blocks=4096 [ 58.515602][ T5833] EXT4-fs (loop7): dirty_blocks=16 [ 58.520809][ T5833] EXT4-fs (loop7): Block reservation details [ 58.527452][ T5833] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 58.546975][ T5833] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 58.559460][ T5833] EXT4-fs (loop7): This should not happen!! Data will be lost [ 58.559460][ T5833] [ 59.260459][ T5890] mmap: syz.6.837 (5890) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.900695][ T5937] ISOFS: unable to read i-node block [ 59.915409][ T5937] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 60.893996][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'. [ 61.053964][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.7.882'. [ 61.062948][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.7.882'. [ 61.127578][ T6048] netlink: 'syz.1.887': attribute type 3 has an invalid length. [ 61.135447][ T6048] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.887'. [ 61.155742][ T6052] netlink: 'syz.7.888': attribute type 1 has an invalid length. [ 61.163535][ T6052] netlink: 'syz.7.888': attribute type 2 has an invalid length. [ 61.176934][ T6054] set_capacity_and_notify: 4 callbacks suppressed [ 61.177029][ T6054] loop6: detected capacity change from 0 to 1024 [ 61.178782][ T6049] loop5: detected capacity change from 0 to 512 [ 61.222324][ T6049] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.898: inode has both inline data and extents flags [ 61.236493][ T6049] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.898: couldn't read orphan inode 15 (err -117) [ 61.272947][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 61.273027][ T29] audit: type=1326 audit(1770262674.363:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.7.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 61.277664][ T6060] bond1: entered promiscuous mode [ 61.283051][ T29] audit: type=1326 audit(1770262674.373:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.7.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 61.347094][ T29] audit: type=1326 audit(1770262674.413:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.7.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 61.370676][ T29] audit: type=1326 audit(1770262674.413:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.7.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 61.394190][ T29] audit: type=1326 audit(1770262674.413:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.7.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 61.417662][ T29] audit: type=1326 audit(1770262674.413:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.7.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 61.441278][ T29] audit: type=1326 audit(1770262674.413:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.7.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 61.465073][ T29] audit: type=1326 audit(1770262674.413:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.7.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 61.487414][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 61.489186][ T29] audit: type=1326 audit(1770262674.413:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.7.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 61.520716][ T29] audit: type=1326 audit(1770262674.413:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.7.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 61.656283][ T6099] loop1: detected capacity change from 0 to 512 [ 61.660756][ T6093] syzkaller1: entered promiscuous mode [ 61.668142][ T6093] syzkaller1: entered allmulticast mode [ 61.683504][ T6099] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.713601][ T6104] loop0: detected capacity change from 0 to 256 [ 61.730632][ T6099] EXT4-fs (loop1): 1 truncate cleaned up [ 62.097918][ T6141] loop0: detected capacity change from 0 to 1024 [ 62.127352][ T6141] EXT4-fs: Ignoring removed bh option [ 62.212766][ T6152] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 62.481317][ T6170] loop7: detected capacity change from 0 to 8192 [ 62.506944][ T6170] bio_check_eod: 2 callbacks suppressed [ 62.506960][ T6170] syz.7.916: attempt to access beyond end of device [ 62.506960][ T6170] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 62.534696][ T6170] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 62.542592][ T6170] FAT-fs (loop7): Filesystem has been set read-only [ 62.665921][ T1944] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.718518][ T6204] loop5: detected capacity change from 0 to 512 [ 62.724632][ T6206] loop7: detected capacity change from 0 to 256 [ 62.726021][ T6204] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 62.746350][ T6204] EXT4-fs (loop5): 1 truncate cleaned up [ 62.819064][ T6211] loop7: detected capacity change from 0 to 1024 [ 62.844653][ T41] Bluetooth: hci1: Frame reassembly failed (-84) [ 63.062289][ T6231] netlink: 'syz.7.941': attribute type 3 has an invalid length. [ 63.107302][ T6239] loop1: detected capacity change from 0 to 512 [ 63.114080][ T6239] EXT4-fs: Ignoring removed nobh option [ 63.138801][ T6239] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.185808][ T6245] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 63.729490][ T6283] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 63.767258][ T6285] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.959: inode has both inline data and extents flags [ 63.785854][ T6285] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.959: couldn't read orphan inode 15 (err -117) [ 63.993761][ T6309] ext4 filesystem being mounted at /210/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.032519][ T3323] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 64.044210][ T3323] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 64.063590][ T3323] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 64.082112][ T3323] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 64.094302][ T3323] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 64.106445][ T3323] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 64.118084][ T3323] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 64.129771][ T3323] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 64.145177][ T3323] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 64.201742][ T3323] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 64.226249][ T6322] syz.0.974: attempt to access beyond end of device [ 64.226249][ T6322] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 64.251323][ T6322] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 64.259303][ T6322] FAT-fs (loop0): Filesystem has been set read-only [ 64.348738][ T6325] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 64.441427][ T6329] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.986'. [ 64.483599][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.514350][ T6334] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.536531][ T6334] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.550010][ T6334] EXT4-fs (loop0): shut down requested (0) [ 64.559266][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.628982][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.682814][ T6338] chnl_net:caif_netlink_parms(): no params data found [ 64.694879][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 64.695038][ T4159] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.709675][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.753001][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.760296][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.768066][ T6338] bridge_slave_0: entered allmulticast mode [ 64.781346][ T6338] bridge_slave_0: entered promiscuous mode [ 64.788884][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.795981][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.803494][ T6338] bridge_slave_1: entered allmulticast mode [ 64.810199][ T6338] bridge_slave_1: entered promiscuous mode [ 64.836520][ T6338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.847130][ T4159] Bluetooth: hci1: command 0x1003 tx timeout [ 64.853151][ T4561] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 64.880206][ T6338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.934082][ T31] bridge_slave_1: left allmulticast mode [ 64.939902][ T31] bridge_slave_1: left promiscuous mode [ 64.945667][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.974779][ T31] bridge_slave_0: left allmulticast mode [ 64.980562][ T31] bridge_slave_0: left promiscuous mode [ 64.986395][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.097294][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.993'. [ 65.106528][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.115585][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.124185][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.124207][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.143823][ T31] bond0 (unregistering): Released all slaves [ 65.152801][ T31] bond1 (unregistering): Released all slaves [ 65.162952][ T6338] team0: Port device team_slave_0 added [ 65.171312][ T6378] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.186157][ T6338] team0: Port device team_slave_1 added [ 65.202033][ T31] hsr_slave_0: left promiscuous mode [ 65.208314][ T31] hsr_slave_1: left promiscuous mode [ 65.214207][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.221647][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.229716][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.237244][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.260682][ T31] veth1_macvtap: left promiscuous mode [ 65.268348][ T31] veth0_macvtap: left promiscuous mode [ 65.275832][ T31] veth1_vlan: left promiscuous mode [ 65.281630][ T31] veth0_vlan: left promiscuous mode [ 65.339033][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.7.994'. [ 65.353749][ T6390] netlink: 80 bytes leftover after parsing attributes in process `syz.7.994'. [ 65.427663][ T31] team0 (unregistering): Port device team_slave_1 removed [ 65.437699][ T31] team0 (unregistering): Port device team_slave_0 removed [ 65.485208][ T6378] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.505147][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.512115][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.538069][ T6338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.554092][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.561089][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.587104][ T6338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.626205][ T6338] hsr_slave_0: entered promiscuous mode [ 65.632290][ T6338] hsr_slave_1: entered promiscuous mode [ 65.648880][ T6338] debugfs: 'hsr0' already exists in 'hsr' [ 65.654713][ T6338] Cannot create hsr debugfs directory [ 65.679664][ T6378] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.727100][ T6378] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.893123][ T1664] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.000518][ T1944] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.012350][ T31] IPVS: stop unused estimator thread 0... [ 66.032541][ T1944] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.042181][ T6427] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.999: inode has both inline data and extents flags [ 66.055403][ T1944] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.120267][ T6338] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 66.129339][ T6338] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 66.138935][ T6338] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 66.143098][ T6427] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.999: couldn't read orphan inode 15 (err -117) [ 66.160300][ T6338] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 66.282424][ T6338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.299276][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 66.299290][ T29] audit: type=1326 audit(1770262679.393:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.7.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 66.329008][ T29] audit: type=1326 audit(1770262679.393:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.7.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 66.355739][ T6338] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.370856][ T29] audit: type=1326 audit(1770262679.403:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.7.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 66.371902][ T1664] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.394230][ T29] audit: type=1326 audit(1770262679.403:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.7.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 66.401234][ T1664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.424579][ T29] audit: type=1326 audit(1770262679.443:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.7.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 66.424603][ T29] audit: type=1326 audit(1770262679.443:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.7.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 66.478916][ T29] audit: type=1326 audit(1770262679.443:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.7.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 66.502538][ T29] audit: type=1326 audit(1770262679.443:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.7.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 66.528106][ T1664] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.535286][ T1664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.589016][ T6338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.599458][ T6338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.611868][ T29] audit: type=1326 audit(1770262679.643:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.7.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff2cf43aeb9 code=0x7ffc0000 [ 66.790577][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.840877][ T29] audit: type=1326 audit(1770262679.923:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz.6.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0ee7aeb9 code=0x7ffc0000 [ 67.132855][ T6338] veth0_vlan: entered promiscuous mode [ 67.165734][ T6338] veth1_vlan: entered promiscuous mode [ 67.195734][ T6338] veth0_macvtap: entered promiscuous mode [ 67.216041][ T6338] veth1_macvtap: entered promiscuous mode [ 67.241636][ T6541] program syz.5.1027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.257037][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.278994][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.298942][ T41] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.308938][ T41] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.351555][ T41] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.380272][ T41] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.383710][ T6548] set_capacity_and_notify: 11 callbacks suppressed [ 67.383726][ T6548] loop8: detected capacity change from 0 to 512 [ 67.448388][ T6548] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.601133][ T6564] loop8: detected capacity change from 0 to 1024 [ 67.621373][ T6566] sd 0:0:1:0: device reset [ 67.628658][ T6564] EXT4-fs: Ignoring removed orlov option [ 67.650035][ T6564] EXT4-fs mount: 50 callbacks suppressed [ 67.650051][ T6564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.716883][ T6338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.778991][ T6578] loop5: detected capacity change from 0 to 512 [ 67.812185][ T6578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.847039][ T6578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.867496][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1045'. [ 67.882254][ T6586] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.897875][ T6578] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.931370][ T3947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.007344][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1058'. [ 68.025892][ T6592] netlink: 'syz.5.1058': attribute type 1 has an invalid length. [ 68.110853][ T6596] team0: Port device gretap0 added [ 68.155389][ T6596] team0: Port device gretap0 removed [ 68.177349][ T6604] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1053'. [ 68.186501][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1053'. [ 68.195603][ T6604] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1053'. [ 68.204639][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1053'. [ 68.213573][ T6604] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1053'. [ 68.227889][ T6596] bridge_slave_0: left allmulticast mode [ 68.233563][ T6596] bridge_slave_0: left promiscuous mode [ 68.239313][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.249080][ T6596] bridge_slave_1: left allmulticast mode [ 68.254930][ T6596] bridge_slave_1: left promiscuous mode [ 68.260795][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.271391][ T6596] bond0: (slave bond_slave_0): Releasing backup interface [ 68.291886][ T6596] bond0: (slave bond_slave_1): Releasing backup interface [ 68.316254][ T6596] team0: Port device team_slave_0 removed [ 68.323122][ T6603] delete_channel: no stack [ 68.340088][ T6596] team0: Port device team_slave_1 removed [ 68.348371][ T6596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.356055][ T6596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.371680][ T6596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.379208][ T6596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.389264][ T6596] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 68.462033][ T5026] IPVS: starting estimator thread 0... [ 68.469792][ T6615] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 68.554768][ T6620] IPVS: using max 2112 ests per chain, 105600 per kthread [ 68.594260][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1065'. [ 68.613320][ T6632] loop6: detected capacity change from 0 to 128 [ 68.613620][ T6630] netlink: 'syz.7.1065': attribute type 1 has an invalid length. [ 68.707434][ T6637] loop7: detected capacity change from 0 to 1024 [ 68.716046][ T6586] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.727534][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1069'. [ 68.749186][ T6637] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.761752][ T6637] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.781216][ T6637] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1067: bg 0: block 112: padding at end of block bitmap is not set [ 68.795796][ T6637] EXT4-fs (loop7): Remounting filesystem read-only [ 68.816513][ T4736] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 68.867086][ T6646] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1070'. [ 68.899674][ T6645] delete_channel: no stack [ 69.315938][ T6680] loop7: detected capacity change from 0 to 1024 [ 69.322915][ T6680] EXT4-fs: Ignoring removed orlov option [ 69.350300][ T6680] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.386102][ T4736] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.415053][ T6690] loop0: detected capacity change from 0 to 256 [ 69.423073][ T6690] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.557842][ T6586] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.648565][ T6707] batadv_slave_1: entered promiscuous mode [ 69.655461][ T6706] batadv_slave_1: left promiscuous mode [ 69.940342][ T6726] loop0: detected capacity change from 0 to 512 [ 69.956137][ T6726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.978133][ T6586] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.013590][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.044035][ T41] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.071238][ T41] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.092191][ T41] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.103309][ T6734] loop6: detected capacity change from 0 to 512 [ 70.113118][ T41] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.129610][ T6734] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 70.176677][ T6734] EXT4-fs (loop6): 1 truncate cleaned up [ 70.220092][ T6734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.335868][ T4709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.359875][ T6755] loop6: detected capacity change from 0 to 512 [ 70.367775][ T6755] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.391476][ T6755] EXT4-fs (loop6): orphan cleanup on readonly fs [ 70.398266][ T6755] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 70.412894][ T6755] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 70.419575][ T6755] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1117: bad orphan inode 768 [ 70.449559][ T6755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.509679][ T6755] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 70.545025][ T6755] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 70.585995][ T4709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.627926][ T6778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.640731][ T6778] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.699763][ T6785] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 70.720459][ T6778] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #18: comm syz.7.1127: corrupted inode contents [ 70.723127][ T6785] EXT4-fs (loop5): 1 truncate cleaned up [ 70.739416][ T6785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.765370][ T6778] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #18: comm syz.7.1127: mark_inode_dirty error [ 70.782479][ T6778] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #18: comm syz.7.1127: corrupted inode contents [ 70.795793][ T6778] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3001: inode #18: comm syz.7.1127: mark_inode_dirty error [ 70.808052][ T6778] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3004: inode #18: comm syz.7.1127: mark inode dirty (error -117) [ 70.820861][ T6778] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -117) [ 70.848737][ T3947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.863183][ T4736] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.892947][ T6792] veth1_to_bond: entered allmulticast mode [ 70.899422][ T6790] veth1_to_bond: left allmulticast mode [ 71.096423][ T6807] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.113605][ T6807] EXT4-fs (loop7): orphan cleanup on readonly fs [ 71.120311][ T6807] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 71.135035][ T6807] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 71.141698][ T6807] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1137: bad orphan inode 768 [ 71.161691][ T6807] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.182824][ T6807] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 71.206179][ T6807] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 71.248141][ T4736] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.519509][ T6849] syzkaller1: entered promiscuous mode [ 71.525084][ T6849] syzkaller1: entered allmulticast mode [ 71.634722][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 71.634739][ T29] audit: type=1400 audit(1770262684.733:676): avc: denied { bind } for pid=6852 comm="syz.5.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.945245][ T6887] loop5: p1 < > p4 [ 71.950864][ T6887] loop5: p4 size 8388608 extends beyond EOD, truncated [ 71.995430][ T3004] loop5: p1 < > p4 [ 72.002346][ T3004] loop5: p4 size 8388608 extends beyond EOD, truncated [ 72.032599][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 72.049517][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 72.073930][ T3777] udevd[3777]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 72.095742][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 72.115601][ T6901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.151661][ T6911] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.165634][ T6901] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.266759][ T6917] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.1176: corrupted inode contents [ 72.269856][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 72.295816][ T6917] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #18: comm syz.5.1176: mark_inode_dirty error [ 72.311220][ T6917] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.1176: corrupted inode contents [ 72.345427][ T6917] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #18: comm syz.5.1176: mark_inode_dirty error [ 72.381112][ T6928] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.398760][ T6917] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #18: comm syz.5.1176: mark inode dirty (error -117) [ 72.417193][ T6917] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 72.437450][ T6928] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.487547][ T3947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.493018][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.517534][ T29] audit: type=1400 audit(1770262685.613:677): avc: denied { append } for pid=6939 comm="syz.5.1194" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.554317][ T6943] set_capacity_and_notify: 7 callbacks suppressed [ 72.554334][ T6943] loop6: detected capacity change from 0 to 512 [ 72.580250][ T6943] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.589825][ T29] audit: type=1400 audit(1770262685.683:678): avc: denied { write } for pid=6946 comm="syz.7.1196" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 72.634134][ T6943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.673253][ T6943] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.1195: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 72.697344][ T6943] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 12: comm syz.6.1195: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 72.726866][ T6943] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 13: comm syz.6.1195: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 72.773358][ T4709] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 72.780965][ T36] kernel write not supported for file /locks (pid: 36 comm: kworker/1:1) [ 72.803394][ T4709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.855825][ T6970] loop6: detected capacity change from 0 to 512 [ 72.876733][ T6970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.890117][ T6970] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.901170][ T29] audit: type=1400 audit(1770262686.003:679): avc: denied { ioctl } for pid=6966 comm="syz.7.1204" path="socket:[17043]" dev="sockfs" ino=17043 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.978887][ T6970] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.1202: corrupted inode contents [ 72.991985][ T6970] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #18: comm syz.6.1202: mark_inode_dirty error [ 73.003855][ T6970] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.1202: corrupted inode contents [ 73.024487][ T6970] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #18: comm syz.6.1202: mark_inode_dirty error [ 73.036971][ T6970] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #18: comm syz.6.1202: mark inode dirty (error -117) [ 73.049932][ T6970] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 73.105456][ T4709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.141002][ T6983] loop6: detected capacity change from 0 to 512 [ 73.149813][ T6983] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 73.165504][ T6983] EXT4-fs (loop6): 1 truncate cleaned up [ 73.173779][ T6983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.182030][ T29] audit: type=1400 audit(1770262686.263:680): avc: denied { getopt } for pid=6985 comm="syz.7.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.194982][ T6986] 9p: Invalid uid '0x00000000ffffffff' [ 73.211800][ T6983] EXT4-fs error (device loop6): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.6.1207: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 73.236218][ T6983] EXT4-fs (loop6): Remounting filesystem read-only [ 73.242750][ T6983] EXT4-fs warning (device loop6): ext4_rename_delete:3729: inode #2: comm syz.6.1207: Deleting old file: nlink 5, error=-117 [ 73.258908][ T29] audit: type=1400 audit(1770262686.303:681): avc: denied { rename } for pid=6982 comm="syz.6.1207" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.281392][ T29] audit: type=1400 audit(1770262686.303:682): avc: denied { rmdir } for pid=6982 comm="syz.6.1207" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 73.317878][ T29] audit: type=1400 audit(1770262686.403:683): avc: denied { add_name } for pid=6982 comm="syz.6.1207" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 73.338460][ T29] audit: type=1400 audit(1770262686.403:684): avc: denied { create } for pid=6982 comm="syz.6.1207" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 73.364181][ T4709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.385727][ T29] audit: type=1400 audit(1770262686.483:685): avc: denied { mounton } for pid=6994 comm="syz.6.1212" path="/proc/324/cgroup" dev="proc" ino=17095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 73.517889][ T7009] netlink: 'syz.7.1220': attribute type 46 has an invalid length. [ 73.525912][ T7009] __nla_validate_parse: 13 callbacks suppressed [ 73.525929][ T7009] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1220'. [ 73.647085][ T7019] loop0: detected capacity change from 0 to 1024 [ 73.707792][ T7021] loop5: detected capacity change from 0 to 1764 [ 73.720151][ T7019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.762869][ T7028] loop6: detected capacity change from 0 to 2048 [ 73.790816][ T7019] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 73.820507][ T7019] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 73.832893][ T7019] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.832893][ T7019] [ 73.842943][ T7019] EXT4-fs (loop0): Total free blocks count 0 [ 73.849012][ T7019] EXT4-fs (loop0): Free/Dirty block details [ 73.855088][ T7019] EXT4-fs (loop0): free_blocks=20480 [ 73.860375][ T7019] EXT4-fs (loop0): dirty_blocks=80 [ 73.865592][ T7019] EXT4-fs (loop0): Block reservation details [ 73.871586][ T7019] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 73.880793][ T7033] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 63 with error 28 [ 73.905032][ T3285] loop6: p1 < > p4 [ 73.909649][ T3285] loop6: p4 size 8388608 extends beyond EOD, truncated [ 73.937154][ T7028] loop6: p1 < > p4 [ 73.949737][ T7028] loop6: p4 size 8388608 extends beyond EOD, truncated [ 73.977360][ T3004] loop6: p1 < > p4 [ 73.986122][ T3004] loop6: p4 size 8388608 extends beyond EOD, truncated [ 73.986975][ T1035] kernel write not supported for file bpf-prog (pid: 1035 comm: kworker/0:2) [ 74.043386][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1234'. [ 74.058792][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1234'. [ 74.076154][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 74.076302][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 74.128431][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 74.139924][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 74.299963][ T7059] loop8: detected capacity change from 0 to 512 [ 74.347034][ T7059] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.359989][ T7059] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.448587][ T7059] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #18: comm syz.8.1239: corrupted inode contents [ 74.460945][ T7059] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #18: comm syz.8.1239: mark_inode_dirty error [ 74.472738][ T7059] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #18: comm syz.8.1239: corrupted inode contents [ 74.486996][ T7059] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #18: comm syz.8.1239: mark_inode_dirty error [ 74.499591][ T7059] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #18: comm syz.8.1239: mark inode dirty (error -117) [ 74.512598][ T7059] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 74.537902][ T6338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.853711][ T7075] netlink: 'syz.0.1253': attribute type 6 has an invalid length. [ 75.058239][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1247'. [ 75.087723][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1247'. [ 75.507020][ T7097] loop8: detected capacity change from 0 to 2048 [ 75.566320][ T3285] loop8: p1 < > p4 [ 75.570822][ T3285] loop8: p4 size 8388608 extends beyond EOD, truncated [ 75.587606][ T7097] loop8: p1 < > p4 [ 75.592613][ T7097] loop8: p4 size 8388608 extends beyond EOD, truncated [ 75.685836][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 75.701664][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 75.870114][ T7110] loop8: detected capacity change from 0 to 512 [ 75.912356][ T7110] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 75.955131][ T7110] EXT4-fs (loop8): 1 truncate cleaned up [ 75.961446][ T7110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.025893][ T7110] EXT4-fs error (device loop8): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.8.1255: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 76.073592][ T7110] EXT4-fs (loop8): Remounting filesystem read-only [ 76.080167][ T7110] EXT4-fs warning (device loop8): ext4_rename_delete:3729: inode #2: comm syz.8.1255: Deleting old file: nlink 5, error=-117 [ 76.277515][ T6338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.545244][ T7144] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 76.575431][ T7144] SELinux: failed to load policy [ 76.893641][ T7170] loop8: detected capacity change from 0 to 8192 [ 76.952483][ T7182] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1290'. [ 76.954183][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1291'. [ 76.961573][ T7182] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1290'. [ 76.961602][ T7182] netlink: 'syz.0.1290': attribute type 6 has an invalid length. [ 76.961615][ T7182] netlink: 'syz.0.1290': attribute type 5 has an invalid length. [ 76.961675][ T7182] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1290'. [ 76.993301][ T7184] bond1: Invalid ad_actor_system MAC address. [ 77.010370][ T7184] bond1: option ad_actor_system: invalid value (4294967295) [ 77.042053][ T7184] bond1 (unregistering): Released all slaves [ 77.507938][ T7243] batadv_slave_1: entered promiscuous mode [ 77.520956][ T7241] batadv_slave_1: left promiscuous mode [ 77.521844][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 77.521868][ T29] audit: type=1400 audit(1770262690.603:725): avc: denied { watch } for pid=7240 comm="syz.0.1309" path="/257/file0" dev="tmpfs" ino=1349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.638350][ T7256] loop5: detected capacity change from 0 to 1024 [ 77.651861][ T7258] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 77.669108][ T7258] SELinux: failed to load policy [ 77.705588][ T7256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.736040][ T3947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.767686][ T7272] loop8: detected capacity change from 0 to 512 [ 77.794771][ T7272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.810106][ T7274] loop0: detected capacity change from 0 to 512 [ 77.843020][ T7272] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.864758][ T7272] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.939049][ T7292] loop0: detected capacity change from 0 to 1024 [ 77.949712][ T7272] EXT4-fs (loop8): shut down requested (0) [ 77.956556][ T7292] EXT4-fs: Ignoring removed orlov option [ 77.982561][ T6338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.023233][ T7292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.143523][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.230141][ T7323] loop6: detected capacity change from 0 to 512 [ 78.247247][ T7323] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1329: bg 0: block 248: padding at end of block bitmap is not set [ 78.262405][ T7323] Quota error (device loop6): write_blk: dquota write failed [ 78.269947][ T7323] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 78.294690][ T7323] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1329: Failed to acquire dquot type 1 [ 78.313924][ T7323] EXT4-fs (loop6): 1 truncate cleaned up [ 78.327058][ T7323] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.347005][ T7323] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.374852][ T7323] syz.6.1329 (7323) used greatest stack depth: 9136 bytes left [ 78.398037][ T4709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.602142][ T1035] kernel write not supported for file bpf-prog (pid: 1035 comm: kworker/0:2) [ 79.022791][ T29] audit: type=1326 audit(1770262692.113:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0ee7aeb9 code=0x7fc00000 [ 79.090114][ T7390] erspan0: entered promiscuous mode [ 79.151318][ T29] audit: type=1326 audit(1770262692.243:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.8.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a11b1aeb9 code=0x7ffc0000 [ 79.195116][ T29] audit: type=1326 audit(1770262692.243:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.8.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a11b1aeb9 code=0x7ffc0000 [ 79.219144][ T29] audit: type=1326 audit(1770262692.243:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.8.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a11b1aeb9 code=0x7ffc0000 [ 79.242779][ T29] audit: type=1326 audit(1770262692.253:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.8.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a11b1aeb9 code=0x7ffc0000 [ 79.266133][ T29] audit: type=1326 audit(1770262692.253:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.8.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a11b1aeb9 code=0x7ffc0000 [ 79.289510][ T29] audit: type=1326 audit(1770262692.253:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.8.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a11b1aeb9 code=0x7ffc0000 [ 79.418926][ T7411] loop8: detected capacity change from 0 to 1024 [ 79.429501][ T7411] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.458607][ T7411] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.479973][ T7411] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.499614][ T7411] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm syz.8.1361: lblock 0 mapped to illegal pblock 0 (length 6) [ 79.514401][ T7411] EXT4-fs error (device loop8): ext4_ext_remove_space:2955: inode #15: comm syz.8.1361: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 79.534897][ T7411] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm syz.8.1361: lblock 0 mapped to illegal pblock 0 (length 1) [ 79.560448][ T6338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.688088][ T7431] loop8: detected capacity change from 0 to 1024 [ 79.726934][ T7431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.811466][ T6338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.946793][ T7451] erspan0: entered promiscuous mode [ 79.983628][ T7456] loop6: detected capacity change from 0 to 2048 [ 80.023760][ T7456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.092069][ T7464] loop8: detected capacity change from 0 to 512 [ 80.101993][ T4709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.109535][ T7468] loop5: detected capacity change from 0 to 256 [ 80.126796][ T7468] FAT-fs (loop5): bogus logical sector size 13 [ 80.133054][ T7468] FAT-fs (loop5): Can't find a valid FAT filesystem [ 80.151222][ T7464] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1373: bg 0: block 248: padding at end of block bitmap is not set [ 80.174871][ T7464] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.1373: Failed to acquire dquot type 1 [ 80.194513][ T7464] EXT4-fs (loop8): 1 truncate cleaned up [ 80.200871][ T7464] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.216811][ T7468] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1377'. [ 80.228329][ T7464] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.299127][ T6338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.590831][ T7507] EXT4-fs: Ignoring removed bh option [ 80.596402][ T7507] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.621579][ T7507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.722315][ T3947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.010275][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1404'. [ 81.171639][ T7486] syz.6.1386 (7486) used greatest stack depth: 9048 bytes left [ 81.428787][ T7558] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 81.729098][ T7581] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.750462][ T7581] EXT4-fs (loop8): resizing filesystem from 512 to 0 blocks [ 81.756706][ T7584] syzkaller1: entered promiscuous mode [ 81.757849][ T7581] EXT4-fs warning (device loop8): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 81.763277][ T7584] syzkaller1: entered allmulticast mode [ 81.797255][ T6338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.879472][ T7588] netlink: 'syz.6.1429': attribute type 3 has an invalid length. [ 81.887348][ T7588] netlink: 'syz.6.1429': attribute type 1 has an invalid length. [ 81.895125][ T7588] netlink: 198116 bytes leftover after parsing attributes in process `syz.6.1429'. [ 81.931609][ T7593] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 81.938304][ T7593] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 81.946134][ T7593] vhci_hcd vhci_hcd.0: Device attached [ 81.954811][ T7594] vhci_hcd: cannot find the pending unlink 1 [ 81.961451][ T7594] vhci_hcd: connection closed [ 81.961644][ T1664] vhci_hcd vhci_hcd.0: stop threads [ 81.971851][ T1664] vhci_hcd vhci_hcd.0: release socket [ 81.977778][ T1664] vhci_hcd vhci_hcd.0: disconnect device [ 82.147300][ T7621] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1441'. [ 82.478721][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1457'. [ 82.487758][ T7655] netlink: 'syz.5.1457': attribute type 30 has an invalid length. [ 82.509731][ T47] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.524887][ T47] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.545353][ T47] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.576340][ T47] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.711943][ T7676] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1467'. [ 82.721131][ T7676] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1467'. [ 82.763941][ T7683] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 82.819168][ T7691] set_capacity_and_notify: 4 callbacks suppressed [ 82.819184][ T7691] loop8: detected capacity change from 0 to 512 [ 82.836242][ T7691] EXT4-fs: Ignoring removed nobh option [ 82.856811][ T7691] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 82.868371][ T7691] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 82.878516][ T7691] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1473: Corrupt directory, running e2fsck is recommended [ 82.912095][ T7691] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 82.920446][ T7691] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.1473: corrupted in-inode xattr: invalid ea_ino [ 82.939961][ T7691] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1473: couldn't read orphan inode 15 (err -117) [ 82.952616][ T7691] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.039180][ T7701] loop7: detected capacity change from 0 to 128 [ 83.057861][ T7703] loop5: detected capacity change from 0 to 512 [ 83.074617][ T7703] EXT4-fs: Ignoring removed i_version option [ 83.080677][ T7703] EXT4-fs: Ignoring removed oldalloc option [ 83.112037][ T7703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.137355][ T7706] EXT4-fs error (device loop8): ext4_xattr_set_entry:1670: inode #2: comm syz.8.1473: corrupted xattr entries [ 83.165002][ T3947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.216098][ T7711] loop5: detected capacity change from 0 to 512 [ 83.223335][ T7713] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1482'. [ 83.298463][ T7717] loop5: detected capacity change from 0 to 1024 [ 83.307374][ T7719] loop6: detected capacity change from 0 to 256 [ 83.313811][ T6338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.336400][ T7717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.352448][ T7719] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 83.361309][ T7719] FAT-fs (loop6): Filesystem has been set read-only [ 83.376919][ T7717] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.386177][ T7719] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 83.392698][ T7717] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.1485: lblock 3 mapped to illegal pblock 3 (length 3) [ 83.397021][ T7719] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 83.420311][ T7719] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 83.429336][ T7719] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 83.438532][ T7719] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 83.439176][ T7717] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 83.447505][ T7719] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 83.459641][ T7717] EXT4-fs (loop5): This should not happen!! Data will be lost [ 83.459641][ T7717] [ 83.464041][ T7718] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 83.487238][ T7719] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 83.490680][ T7727] loop8: detected capacity change from 0 to 512 [ 83.514219][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 83.514234][ T29] audit: type=1400 audit(1770262696.603:769): avc: denied { map } for pid=7716 comm="syz.5.1485" path="/267/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.556502][ T7719] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 83.557345][ T7727] EXT4-fs: Ignoring removed orlov option [ 83.576199][ T7735] loop7: detected capacity change from 0 to 512 [ 83.582801][ T7735] EXT4-fs: Ignoring removed i_version option [ 83.588903][ T7735] EXT4-fs: Ignoring removed oldalloc option [ 83.599848][ T7727] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 83.649307][ T7727] EXT4-fs (loop8): 1 truncate cleaned up [ 83.658849][ T7727] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.673295][ T7735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.705074][ T7727] EXT4-fs (loop8): shut down requested (1) [ 83.714378][ T1664] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:5: lblock 4 mapped to illegal pblock 4 (length 2) [ 83.714820][ T4736] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.756907][ T1664] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 83.769238][ T1664] EXT4-fs (loop5): This should not happen!! Data will be lost [ 83.769238][ T1664] [ 83.813016][ T1664] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 83.832835][ T1664] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 83.845167][ T1664] EXT4-fs (loop5): This should not happen!! Data will be lost [ 83.845167][ T1664] [ 83.892324][ T7750] loop5: detected capacity change from 0 to 512 [ 83.936297][ T7750] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.984747][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1499'. [ 83.995087][ T7758] veth0: entered promiscuous mode [ 84.036142][ T7758] veth0: left promiscuous mode [ 84.050501][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1499'. [ 84.096398][ T7765] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 84.330091][ T29] audit: type=1400 audit(1770262697.413:770): avc: denied { write } for pid=7787 comm="syz.6.1514" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 84.428652][ T7795] loop7: detected capacity change from 0 to 512 [ 84.466299][ T7795] EXT4-fs: Ignoring removed nobh option [ 84.478774][ T7795] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.490506][ T7795] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 84.500932][ T7795] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1517: Corrupt directory, running e2fsck is recommended [ 84.551168][ T29] audit: type=1400 audit(1770262697.643:771): avc: denied { write } for pid=7800 comm="syz.8.1520" path="socket:[19180]" dev="sockfs" ino=19180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.590733][ T7795] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 84.609601][ T7795] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.1517: corrupted in-inode xattr: invalid ea_ino [ 84.623741][ T7795] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1517: couldn't read orphan inode 15 (err -117) [ 84.676537][ T7802] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 84.708423][ T7802] System zones: 1-3, 19-19, 35-36 [ 84.724588][ T7802] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.883462][ T7816] raw_sendmsg: syz.8.1527 forgot to set AF_INET. Fix it! [ 85.010980][ T7824] loop0: p4 < > [ 85.024584][ T29] audit: type=1400 audit(1770262698.113:772): avc: denied { write } for pid=7822 comm="syz.0.1530" name="loop0p4" dev="devtmpfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.047428][ T29] audit: type=1400 audit(1770262698.113:773): avc: denied { open } for pid=7822 comm="syz.0.1530" path="/dev/loop0p4" dev="devtmpfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.070684][ T29] audit: type=1400 audit(1770262698.113:774): avc: denied { read } for pid=7822 comm="syz.0.1530" name="loop0p4" dev="devtmpfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.098969][ T7828] EXT4-fs error (device loop7): ext4_xattr_set_entry:1670: inode #2: comm syz.7.1517: corrupted xattr entries [ 85.121590][ T7831] tipc: Started in network mode [ 85.126636][ T7831] tipc: Node identity 7f000001, cluster identity 4711 [ 85.144953][ T7831] tipc: Enabled bearer , priority 10 [ 85.307855][ T7844] SELinux: policydb magic number 0x1c does not match expected magic number 0xf97cff8c [ 85.351247][ T7844] SELinux: failed to load policy [ 85.721584][ T7886] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.734204][ T7886] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.757188][ T1664] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.826354][ T7890] EXT4-fs (loop0): 1 truncate cleaned up [ 85.838661][ T7890] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1560: bg 0: block 465: padding at end of block bitmap is not set [ 85.853724][ T7890] EXT4-fs (loop0): Remounting filesystem read-only [ 85.881714][ T7890] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 86.032045][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 86.138038][ T7918] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.151703][ T7918] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 86.166626][ T7918] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 86.178886][ T7918] EXT4-fs (loop0): This should not happen!! Data will be lost [ 86.178886][ T7918] [ 86.188567][ T7918] EXT4-fs (loop0): Total free blocks count 0 [ 86.194594][ T7918] EXT4-fs (loop0): Free/Dirty block details [ 86.200776][ T7918] EXT4-fs (loop0): free_blocks=65280 [ 86.206240][ T7918] EXT4-fs (loop0): dirty_blocks=1 [ 86.211267][ T7918] EXT4-fs (loop0): Block reservation details [ 86.217306][ T7918] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 86.224216][ T7922] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 86.236711][ T7922] EXT4-fs (loop0): This should not happen!! Data will be lost [ 86.236711][ T7922] [ 86.264525][ T10] tipc: Node number set to 2130706433 [ 86.288896][ T7927] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 86.302994][ T7927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.388641][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1589'. [ 86.389403][ T7937] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 86.406858][ T7937] System zones: 1-3, 19-19, 35-36 [ 86.415368][ T7937] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.443187][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1580'. [ 86.511611][ T7945] tipc: Started in network mode [ 86.516654][ T7945] tipc: Node identity 7f000001, cluster identity 4711 [ 86.547638][ T7945] tipc: Enabled bearer , priority 10 [ 86.611484][ T29] audit: type=1326 audit(1770262699.703:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20135aeb9 code=0x7ffc0000 [ 86.634981][ T29] audit: type=1326 audit(1770262699.703:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20135aeb9 code=0x7ffc0000 [ 86.658460][ T29] audit: type=1326 audit(1770262699.703:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20135aeb9 code=0x7ffc0000 [ 86.681948][ T29] audit: type=1326 audit(1770262699.703:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20135aeb9 code=0x7ffc0000 [ 86.748845][ T7957] EXT4-fs: Ignoring removed bh option [ 86.982735][ T7971] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 87.079437][ T3285] loop6: p4 < > [ 87.095931][ T7976] loop6: p4 < > [ 87.373330][ T7997] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1605: error while reading EA inode 32 err=-116 [ 87.388119][ T7997] EXT4-fs (loop8): Remounting filesystem read-only [ 87.395599][ T7997] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 87.406698][ T7997] EXT4-fs (loop8): 1 orphan inode deleted [ 87.469249][ T8002] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1608'. [ 87.524132][ T8006] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 87.584670][ T5117] tipc: Node number set to 2130706433 [ 87.670448][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 87.743063][ T8021] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 87.867600][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1620'. [ 87.924761][ T8030] infiniband syz2: set active [ 87.929474][ T8030] infiniband syz2: added team0 [ 87.955659][ T8042] set_capacity_and_notify: 14 callbacks suppressed [ 87.955677][ T8042] loop7: detected capacity change from 0 to 2048 [ 87.959985][ T8030] RDS/IB: syz2: added [ 87.973445][ T8030] smc: adding ib device syz2 with port count 1 [ 87.979882][ T8030] smc: ib device syz2 port 1 has no pnetid [ 88.024596][ T8049] loop7: detected capacity change from 0 to 128 [ 88.083337][ T8055] loop7: detected capacity change from 0 to 1024 [ 88.090575][ T8055] EXT4-fs: Ignoring removed orlov option [ 88.097003][ T8055] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 88.243069][ T8070] batman_adv: batadv0: Adding interface: ipvlan2 [ 88.249548][ T8070] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.274919][ T8070] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 88.296786][ T8074] loop7: detected capacity change from 0 to 1024 [ 88.328865][ T8074] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.359171][ T8082] loop5: detected capacity change from 0 to 512 [ 88.384674][ T31] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 4) [ 88.418108][ T31] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 88.430466][ T31] EXT4-fs (loop7): This should not happen!! Data will be lost [ 88.430466][ T31] [ 88.443681][ T1707] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 88.495744][ T1707] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 88.508141][ T1707] EXT4-fs (loop7): This should not happen!! Data will be lost [ 88.508141][ T1707] [ 88.517953][ T1707] EXT4-fs (loop7): Total free blocks count 0 [ 88.523995][ T1707] EXT4-fs (loop7): Free/Dirty block details [ 88.530260][ T1707] EXT4-fs (loop7): free_blocks=0 [ 88.534567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.535288][ T1707] EXT4-fs (loop7): dirty_blocks=16 [ 88.548437][ T1707] EXT4-fs (loop7): Block reservation details [ 88.554519][ T1707] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 88.560567][ T5117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.674737][ T8097] loop7: detected capacity change from 0 to 8192 [ 88.803808][ T8109] loop7: detected capacity change from 0 to 512 [ 88.822707][ T8113] loop6: detected capacity change from 0 to 1024 [ 88.846154][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.898198][ T8113] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.916095][ T8117] rdma_rxe: rxe_newlink: failed to add team0 [ 88.940489][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1656'. [ 88.965132][ T41] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 4) [ 88.992321][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 88.992336][ T29] audit: type=1326 audit(1770262702.083:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5a3aaeb9 code=0x7ffc0000 [ 89.025391][ T29] audit: type=1326 audit(1770262702.083:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5a3aaeb9 code=0x7ffc0000 [ 89.048827][ T29] audit: type=1326 audit(1770262702.083:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5a3aaeb9 code=0x7ffc0000 [ 89.072439][ T29] audit: type=1326 audit(1770262702.083:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee5a3aaeb9 code=0x7ffc0000 [ 89.095952][ T29] audit: type=1326 audit(1770262702.083:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5a3aaeb9 code=0x7ffc0000 [ 89.104925][ T41] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 89.119464][ T29] audit: type=1326 audit(1770262702.083:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5a3aaeb9 code=0x7ffc0000 [ 89.131797][ T41] EXT4-fs (loop6): This should not happen!! Data will be lost [ 89.131797][ T41] [ 89.165057][ T29] audit: type=1326 audit(1770262702.083:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5a3aaeb9 code=0x7ffc0000 [ 89.165609][ T60] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 89.188729][ T29] audit: type=1326 audit(1770262702.083:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5a3aaeb9 code=0x7ffc0000 [ 89.188760][ T29] audit: type=1326 audit(1770262702.083:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fee5a3aaeb9 code=0x7ffc0000 [ 89.250718][ T29] audit: type=1326 audit(1770262702.123:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5a3aaeb9 code=0x7ffc0000 [ 89.286309][ T8130] loop8: detected capacity change from 0 to 8192 [ 89.291509][ T60] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 89.305041][ T60] EXT4-fs (loop6): This should not happen!! Data will be lost [ 89.305041][ T60] [ 89.314700][ T60] EXT4-fs (loop6): Total free blocks count 0 [ 89.320679][ T60] EXT4-fs (loop6): Free/Dirty block details [ 89.326679][ T60] EXT4-fs (loop6): free_blocks=0 [ 89.331693][ T60] EXT4-fs (loop6): dirty_blocks=16 [ 89.336925][ T60] EXT4-fs (loop6): Block reservation details [ 89.342901][ T60] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 89.353521][ T8135] rdma_op ffff8881045fb180 conn xmit_rdma 0000000000000000 [ 89.461841][ T8147] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1668'. [ 89.471015][ T8147] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1668'. [ 89.511616][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1672'. [ 89.564562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.572852][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.645051][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.743443][ T8172] loop5: detected capacity change from 0 to 2048 [ 89.806312][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.830611][ T8180] EXT4-fs: Ignoring removed oldalloc option [ 89.836887][ T8180] EXT4-fs: Ignoring removed bh option [ 89.854938][ T8172] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.968768][ T8196] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.994494][ T8196] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.049230][ T8194] ext4 filesystem being mounted at /303/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.103667][ T8209] batman_adv: batadv0: Adding interface: ipvlan2 [ 90.103678][ T8209] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.103695][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.103799][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.103843][ T8209] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 90.115633][ T8194] EXT4-fs error (device loop5): ext4_get_first_dir_block:3527: inode #12: comm syz.5.1686: Attempting to read directory block (0) that is past i_size (3) [ 90.207427][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.222438][ T8213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.230627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.342316][ T8222] EXT4-fs: Ignoring removed oldalloc option [ 90.348334][ T8222] EXT4-fs: Ignoring removed bh option [ 90.506869][ T8242] EXT4-fs: Ignoring removed orlov option [ 90.530309][ T8242] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 90.985940][ T8265] netlink: 'syz.5.1714': attribute type 10 has an invalid length. [ 91.307857][ T8265] dummy0: entered promiscuous mode [ 91.313060][ T8265] dummy0: entered allmulticast mode [ 91.325685][ T8265] bridge0: port 1(dummy0) entered blocking state [ 91.332147][ T8265] bridge0: port 1(dummy0) entered disabled state [ 91.349329][ T8265] bridge0: port 1(dummy0) entered blocking state [ 91.355754][ T8265] bridge0: port 1(dummy0) entered forwarding state [ 91.367849][ T8268] team0: entered promiscuous mode [ 91.372925][ T8268] team_slave_0: entered promiscuous mode [ 91.378727][ T8268] team_slave_1: entered promiscuous mode [ 91.392580][ T8266] team0: left promiscuous mode [ 91.397435][ T8266] team_slave_0: left promiscuous mode [ 91.402898][ T8266] team_slave_1: left promiscuous mode [ 91.447028][ T8271] FAT-fs (loop8): bogus number of FAT sectors [ 91.453133][ T8271] FAT-fs (loop8): Can't find a valid FAT filesystem [ 91.676208][ T8289] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.715127][ T8285] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.728558][ T8289] EXT4-fs (loop0): 1 truncate cleaned up [ 91.864359][ T8304] serio: Serial port ttyS3 [ 92.373165][ T8363] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.508673][ T8370] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 92.795424][ T8390] program syz.0.1767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.015662][ T8399] set_capacity_and_notify: 12 callbacks suppressed [ 93.015679][ T8399] loop7: detected capacity change from 0 to 512 [ 93.047155][ T8399] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 93.071949][ T8399] EXT4-fs (loop7): 1 truncate cleaned up [ 93.078192][ T8401] loop0: detected capacity change from 0 to 2048 [ 93.130855][ T1664] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 93.174652][ T1664] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 93.186907][ T1664] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.186907][ T1664] [ 93.196747][ T1664] EXT4-fs (loop0): Total free blocks count 0 [ 93.202887][ T1664] EXT4-fs (loop0): Free/Dirty block details [ 93.208839][ T1664] EXT4-fs (loop0): free_blocks=2415919504 [ 93.214568][ T1664] EXT4-fs (loop0): dirty_blocks=48 [ 93.219798][ T1664] EXT4-fs (loop0): Block reservation details [ 93.225812][ T1664] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 93.234573][ T8401] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 93.247030][ T8401] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.247030][ T8401] [ 93.261548][ T8376] syz.8.1761 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 93.271471][ T8376] CPU: 1 UID: 0 PID: 8376 Comm: syz.8.1761 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.271502][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.271517][ T8376] Call Trace: [ 93.271540][ T8376] [ 93.271550][ T8376] __dump_stack+0x1d/0x30 [ 93.271578][ T8376] dump_stack_lvl+0x95/0xd0 [ 93.271598][ T8376] dump_stack+0x15/0x1b [ 93.271617][ T8376] dump_header+0x80/0x240 [ 93.271681][ T8376] oom_kill_process+0x295/0x350 [ 93.271712][ T8376] out_of_memory+0x97d/0xb80 [ 93.271742][ T8376] try_charge_memcg+0x62e/0xa10 [ 93.271793][ T8376] __mem_cgroup_charge+0x65/0x150 [ 93.271830][ T8376] handle_mm_fault+0x1140/0x3030 [ 93.271936][ T8376] ? _raw_spin_lock+0x52/0xa0 [ 93.271974][ T8376] ? __pte_offset_map_lock+0x1d9/0x240 [ 93.272049][ T8376] __get_user_pages+0x1023/0x1ea0 [ 93.272098][ T8376] __mm_populate+0x242/0x390 [ 93.272150][ T8376] vm_mmap_pgoff+0x23b/0x2d0 [ 93.272179][ T8376] ksys_mmap_pgoff+0xc1/0x310 [ 93.272241][ T8376] ? __x64_sys_mmap+0x49/0x70 [ 93.272376][ T8376] x64_sys_call+0x16bb/0x3000 [ 93.272399][ T8376] do_syscall_64+0xc0/0x2a0 [ 93.272433][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.272533][ T8376] RIP: 0033:0x7f8a11b1aeb9 [ 93.272573][ T8376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.272594][ T8376] RSP: 002b:00007f8a10556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 93.272638][ T8376] RAX: ffffffffffffffda RBX: 00007f8a11d96090 RCX: 00007f8a11b1aeb9 [ 93.272653][ T8376] RDX: 000000000300000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 93.272667][ T8376] RBP: 00007f8a11b88c1f R08: ffffffffffffffff R09: 0000000000000000 [ 93.272698][ T8376] R10: 20c44fb6edc09a38 R11: 0000000000000246 R12: 0000000000000000 [ 93.272712][ T8376] R13: 00007f8a11d96128 R14: 00007f8a11d96090 R15: 00007ffc53d5b418 [ 93.272735][ T8376] [ 93.272744][ T8376] memory: usage 307200kB, limit 307200kB, failcnt 332 [ 93.472109][ T8376] memory+swap: usage 215348kB, limit 9007199254740988kB, failcnt 0 [ 93.480082][ T8376] kmem: usage 198492kB, limit 9007199254740988kB, failcnt 0 [ 93.488086][ T8376] Memory cgroup stats for /syz8: [ 93.541627][ T8410] net_ratelimit: 28 callbacks suppressed [ 93.541663][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.564753][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.573062][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.581677][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.589965][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.594791][ T8376] cache 0 [ 93.601022][ T8376] rss 3424256 [ 93.604329][ T8376] shmem 0 [ 93.607355][ T8376] mapped_file 0 [ 93.610813][ T8376] dirty 0 [ 93.613808][ T8376] writeback 0 [ 93.617191][ T8376] workingset_refault_anon 20 [ 93.621779][ T8376] workingset_refault_file 0 [ 93.626427][ T8376] swap 286720 [ 93.629763][ T8376] swapcached 20480 [ 93.633791][ T8376] pgpgin 17111 [ 93.637378][ T8376] pgpgout 16270 [ 93.640839][ T8376] pgfault 33173 [ 93.644305][ T8376] pgmajfault 5 [ 93.647471][ T8409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.647761][ T8376] inactive_anon 4096 [ 93.659898][ T8376] active_anon 16384 [ 93.663692][ T8376] inactive_file 3424256 [ 93.667935][ T8376] active_file 0 [ 93.671659][ T8376] unevictable 0 [ 93.675533][ T8376] hierarchical_memory_limit 314572800 [ 93.680899][ T8376] hierarchical_memsw_limit 9223372036854771712 [ 93.687266][ T8376] total_cache 0 [ 93.690729][ T8376] total_rss 3424256 [ 93.694598][ T8376] total_shmem 0 [ 93.698110][ T8376] total_mapped_file 0 [ 93.702083][ T8376] total_dirty 0 [ 93.705623][ T8376] total_writeback 0 [ 93.709437][ T8376] total_workingset_refault_anon 20 [ 93.714677][ T8376] total_workingset_refault_file 0 [ 93.719787][ T8376] total_swap 286720 [ 93.723619][ T8376] total_swapcached 20480 [ 93.727957][ T8376] total_pgpgin 17111 [ 93.731912][ T8376] total_pgpgout 16270 [ 93.734521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.735918][ T8376] total_pgfault 33173 [ 93.747965][ T8376] total_pgmajfault 5 [ 93.751870][ T8376] total_inactive_anon 4096 [ 93.756330][ T8376] total_active_anon 16384 [ 93.760654][ T8376] total_inactive_file 3424256 [ 93.765454][ T8376] total_active_file 0 [ 93.769434][ T8376] total_unevictable 0 [ 93.773469][ T8376] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1761,pid=8366,uid=0 [ 93.788938][ T8376] Memory cgroup out of memory: Killed process 8366 (syz.8.1761) total-vm:96312kB, anon-rss:4536kB, file-rss:22064kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 93.807650][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.920477][ T8367] syz.8.1761 (8367) used greatest stack depth: 7432 bytes left [ 94.261347][ T8469] loop7: detected capacity change from 0 to 128 [ 94.283401][ T8469] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.306377][ T8469] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.339352][ T41] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.495552][ T8482] program syz.5.1805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.515762][ T8484] loop7: detected capacity change from 0 to 2048 [ 94.593856][ T8484] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 94.627797][ T8484] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 94.640147][ T8484] EXT4-fs (loop7): This should not happen!! Data will be lost [ 94.640147][ T8484] [ 94.649813][ T8484] EXT4-fs (loop7): Total free blocks count 0 [ 94.655879][ T8484] EXT4-fs (loop7): Free/Dirty block details [ 94.661778][ T8484] EXT4-fs (loop7): free_blocks=2415919504 [ 94.667543][ T8484] EXT4-fs (loop7): dirty_blocks=48 [ 94.672651][ T8484] EXT4-fs (loop7): Block reservation details [ 94.678691][ T8484] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 94.693762][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 94.693791][ T29] audit: type=1326 audit(1770262707.783:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20135aeb9 code=0x7fc00000 [ 94.764985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.829055][ T1664] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 94.841335][ T1664] EXT4-fs (loop7): This should not happen!! Data will be lost [ 94.841335][ T1664] [ 94.855001][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.880987][ T29] audit: type=1400 audit(1770262707.973:890): avc: denied { mounton } for pid=8500 comm="syz.0.1814" path="/proc/808/task" dev="proc" ino=21324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 94.923181][ T8508] batadv_slave_0: entered promiscuous mode [ 94.931208][ T8503] batadv_slave_0: left promiscuous mode [ 95.083123][ T8524] ================================================================== [ 95.091332][ T8524] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 95.099502][ T8524] [ 95.101826][ T8524] write to 0xffff88811b2f8aa0 of 8 bytes by task 8525 on cpu 0: [ 95.109461][ T8524] cpu_map_kthread_run+0x4e7/0x1650 [ 95.114682][ T8524] kthread+0x488/0x510 [ 95.118764][ T8524] ret_from_fork+0x148/0x280 [ 95.123369][ T8524] ret_from_fork_asm+0x1a/0x30 [ 95.128147][ T8524] [ 95.130460][ T8524] read to 0xffff88811b2f8aa0 of 8 bytes by task 8524 on cpu 1: [ 95.137986][ T8524] bq_flush_to_queue+0x124/0x350 [ 95.142917][ T8524] __cpu_map_flush+0x38/0x80 [ 95.147545][ T8524] xdp_do_flush+0xf8/0x160 [ 95.151959][ T8524] bpf_test_run_xdp_live+0xe8a/0x1360 [ 95.157332][ T8524] bpf_prog_test_run_xdp+0x57b/0xa10 [ 95.162626][ T8524] bpf_prog_test_run+0x204/0x340 [ 95.167563][ T8524] __sys_bpf+0x4c0/0x7b0 [ 95.171803][ T8524] __x64_sys_bpf+0x41/0x50 [ 95.176215][ T8524] x64_sys_call+0x28e1/0x3000 [ 95.180904][ T8524] do_syscall_64+0xc0/0x2a0 [ 95.185416][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.191320][ T8524] [ 95.193660][ T8524] value changed: 0xffff888104216070 -> 0x0000000000000000 [ 95.200764][ T8524] [ 95.203082][ T8524] Reported by Kernel Concurrency Sanitizer on: [ 95.209227][ T8524] CPU: 1 UID: 0 PID: 8524 Comm: syz.8.1821 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.218947][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.228999][ T8524] ================================================================== [ 98.924588][ C1] net_ratelimit: 8 callbacks suppressed [ 98.924612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.938285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.004655][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.974533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.045156][ T5117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.525039][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.004560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.084747][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.164875][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.975085][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.124562][ C0] net_ratelimit: 5 callbacks suppressed [ 104.124583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.204649][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog