last executing test programs: 3.16713664s ago: executing program 3 (id=1680): r0 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x4848c1, 0x42) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000400000009000000ff01000006000000574900004b19db44e676ff3d312442acfb5d0fabd12d341759e449a5751d4c92707967807c331ee50d506d680ce97ec29c64841f07182e313398da6c9c73"], &(0x7f00000001c0), 0x600) syz_io_uring_setup(0x366b, &(0x7f0000000600)={0x0, 0xc279, 0x69d7dc3079d7dea8}, &(0x7f0000000000), &(0x7f0000000680)) socket$unix(0x1, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) pipe2$9p(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x260) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000080)) fcntl$setpipe(r6, 0x407, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000580)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x1, {0x8, 0x5}}, 0x5) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000026c0)={0xcec, 0xd, 0xa, 0xdbb11a906979d34b, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xca0, 0x3, 0x0, 0x1, [{0x59c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xac, 0x6, 0x1, 0x0, "a96d7331de511443702fc8ba47300b245d544d2f9a97481b18b9952dff6560566f58c9d1e91e9bafacaf26f95ccb6a55a3bd106ea700e27194c48c30188d8f806db317490e392af2ccb3cfd919fdf073a16410a0c982e7121a8f9a2392f5bb695e4d62c6565e2477c85e9d65fdc7b4f4d58b0d9e337d725cb504ec08ff5b6f1cee8ac00b738daeb4e8deaff945e3ee1b0a88dcc2a87b6e40604ad800e7697bd3674d420940afbfc3"}, @NFTA_SET_ELEM_KEY_END={0x2ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa6, 0x1, "b754ca2aedf1107462cdfca31a37ec5b8b68bcb93e4bdf1b8b72e234391931b6399edeb58ad57f1c98489d4802876340c4d76cf6deb4bc36573b265e2322960adec05b0ef22c13140438e6a4b632bb6901ee2e8f3dd6b3c117c08a2eb8c5511edd97a1f3264db0c599d343c75ed0b43b884fc7b5993fd75861e3a354c2278730a9783464ee941d61d411650610250c5707b2edb80121228ac49143386237e0832037"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xe33}]}, @NFTA_DATA_VALUE={0x94, 0x1, "b099857a340aa5854b708afffc0d834b01468e5ca2d9d6fb5eb054f7b2dee1125ba4054b7eefb16595b4d0167b190d5b1aa96c6e866b54b1f70fe9b973f0246cbb4b7dd110c0165af63caa2fb59f021f63fd10e3e13bb070358dd1a5b3fe3627531ecb31f2f02921e715fe26462e38030185298ce7f012b7a06f35bedbcc661d3b871da2c9fec395c19adc9bc268e85a"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xb3a}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x49, 0x1, "25dbb39ebf940689c32c34caa9b464f7a31bcba3ece66ac2da092297d752a9e1a288df89f194699aaf5be61fc291a297cbc9bb5935ebe290471618f5c62af8a30c4f06eaee"}, @NFTA_DATA_VALUE={0x2c, 0x1, "e1b9cb7ea73bf454a0cb94b9a94671ce369e622b773ee4772092f85c69de303e4ba3813fafb1c089"}, @NFTA_DATA_VALUE={0x84, 0x1, "a1fbeed58904a523d13d863212aaa248d91fb3c0f4035f238b2a0fbd977a824096409d7834e940c1a289f733c6ab7ae6dbced91b2df9ed4251b715c6aa0197cd483aebb887d8b191421aa9277b37dc65ac150ce68180233e7abdb38582e076927b928b8363fcde514f1ed8b6af854b0eb3874fc09a0bae6cdbe693b4a199f2e1"}, @NFTA_DATA_VALUE={0x46, 0x1, "92a281b1f3b86d7252e96adb15e2ac79ab4ffc7e2416cc0c237fac3c66549a058c4dcfb7fe7534750f4ce54da88a84a28aa13d9ea9aa6719173ff29582444d5233af"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x1f8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbc, 0x1, "4cbacb69fb93c7e19b8eaf1e6798584f56a30d8cc20733f31dfd46ada226cf74cecae00960156c9f95c5397f3bdd61ee1fb78cdfacee5e6a244af3006ca7d62b564cf41c5c17919f4dcd2b9c1fa3b5e49b39122a6a9740648deb4375064facd2be3218870322fa32faa2414ca2b5aed5f4a44d489d7c070c4891b035c2409920b09566c2b243ebc7195408b0dd877671f682e1773b38d56f65bfc152dda5dee818dd2e81e2f313c6d3818f1788ebeb79dfb36f51bbb3068d"}, @NFTA_DATA_VALUE={0xd3, 0x1, "ebf30a0916cf9cd0184b544b11ec15a0c90454e19bc1a337c5b853ff17483c5bbb3756fa53ac3ee682c1bab14671e7f0e397d1a035e9b009dc92afa4967e323e4369adac7d639f2bb3571675aa98eb3842bd7a26c3ed00d2e571c33d168fa7582cc1ea05fef4ac8499d58be8c70107d811b10416e1f9ff263f6543a1143f6a2a61c488d7d8b7c065b9dd12603f48a0373b8fd49dbdc253fb7abd178bb1a3bcb29b114d796950750d1980133faccd91846ea8b6ea869929fe10cfbcff47641ddf3ce1e79f479621bc2fc7004cf0d4c1"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x895}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x8b, 0x6, 0x1, 0x0, "4aa006b9551bdc164bc6a9193b1401f2b55a062b58a800367d59ec4ff361f83c7397f4e7af959ea594f67e83427fce5b99747ef38480265412f44c5c7b9718a6a3ab4775beea922e30289fb46d084a19e24bcc665f936e9edce0d3b353506778d8aba1781dc34fda6e8ef8d5d6087889b7425f2d5006dc097dbf1183f63e023206dbad32ec37f7"}]}, {0x314, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "69e1499aec4614b18a29020b074d0770ce281b2b1e4f220df5b72b9e282dd2ab17d96109243ae7418600088463ef78331f8eb4ed1058842ce9cf2f82a79a00d457c5ec108866eab26e1908ff40afa47ea4148778690237dcd604917f21059b80424314770823fec84b59c0b4123407ebab0a6e1aba25ad9497728f57037287a84d2862a775dbac9456604e0383ec4407983d127e202f3b633d44c0a3f0879f6bb5d4e0666e11d0197e59ba3245cc91dc9b2ec70c85c2f5b64c9783e6f18325edf53707819a3ef2ae22efe09b25"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0x1b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc7, 0x1, "e6b16bae0d8d078b3b8ca0546156517168d6ebf8b34eb2b0f17d8c1f445bf4270513fd525490f40deffbe247a936e9aea3435633712c3e593e5d39b4513ced94b627ed43606e9b7039a7a9b9e2cb5c66091998924b9c4273781381de89ad6537c1f91d635f44cb762e930cd9b6f315b412e96028ffd981e980cddd556e93d2704695ba5c1f820625cd9bf3778481556f675bde12ff5da473f23a364bf318541ee3a79e21c3033aeb08e878ca824367974b3e943fbda7a9e8994e1800fa9de668cd6cf9"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xf93}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x62, 0x1, "d2c2513ae354808811a1a4fcb740d188a403cc9ead1bf07d3d25b8fced580ee0cbe2f1decbc9195ddce1e1853e718d4a19c3b64d4ff37063fb067167fbcff29977f4ea74ae91dbcbd8a1c72ffe6cb45846f36115d42802583a3695826e82"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xb}]}}}]}]}, {0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x15c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x64, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1a}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7e}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x12c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6a, 0x1, "a9704e1acfb066a2a2f8297469cdc98b6d105255049c61cabc8256e7d864fc5e1bfed9654919f29077e8990e5efae5c731e882bfe3d72a672863e70ef072e50403047bb297f654c98bd118aaeee408f34645ac01ba0b4fe3dd3f3a78654c0c2b0a58172481f0"}, @NFTA_DATA_VALUE={0x4c, 0x1, "316d8f9adc45a4e80e21e54e5d759b047b4f77c8f28a012897f17ed51e55edfdc417b4b8b4cda919e5ae850fe46ba452fb9243d6ff85f6c505d892ede1b5fcef731eacc004800c79"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xdc50}]}, @NFTA_DATA_VALUE={0x26, 0x1, "3b6a66d1cf1f82b25dca7c9eecf51b4ef9e48f7b59633b7d9a73a0c0c5087b7020af"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0xcec}, 0x1, 0x0, 0x0, 0x8000}, 0x20048080) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x7a, &(0x7f00000011c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0xb, 0x0, [@remote, @multicast1]}, @ssrr={0x89, 0x7, 0x0, [@multicast2]}, @ssrr={0x89, 0x17, 0x0, [@empty, @dev, @rand_addr, @private, @multicast2]}, @timestamp_prespec={0x44, 0x4}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x4, "dae6"}, {0x0, 0x2}]}]}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r11) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)={0x20, r9, 0x1, 0x0, 0x0, {{0xa}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r7, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r8, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x94, 0x5, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x98}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x188}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xfffffffffffffcf6, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc24}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2aa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x41}, 0x20044040) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") 2.340991668s ago: executing program 3 (id=1691): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) unlink(&(0x7f0000000100)='./file0/file1\x00') 2.3209868s ago: executing program 3 (id=1695): socket$l2tp6(0xa, 0x2, 0x73) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)={0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd08}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x30}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r4, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r4, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() mknod(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) 2.259280235s ago: executing program 0 (id=1700): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 1.416948874s ago: executing program 0 (id=1705): move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) 1.404416945s ago: executing program 0 (id=1706): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000011c0)='Y', &(0x7f00000004c0), 0x0, 0xfffffffd, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES8, @ANYRESHEX, @ANYRES32, @ANYBLOB="0d1d25809b2b6af89f71f186e0301465831d5f0395067b24c9cfe133a4f5bcfd5e43a0d2abb858e7d0c00fba19d7a4686474928127c4fff9d5cf5d564a5d8663ba68fb5f74ca7e5a13c06bab4b73f5455a48daaf72fec1816e9ce98d4322f0049048a5588b807e731af7dc1e6641328e130464655c25fb29ae3f34bc00e4bdbd8e6d44c70f277f9c62d20e4231c3a712ce8ef4d8e3d97b211fecc64db3a4611e5a340f3b0524b54a62345b0b3e20e6fb289cd0a7fcf83da4a298111919de83579682f56047b575e1", @ANYRES64, @ANYRES64, @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x20004091}, 0x4000) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',\x00']) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[], 0x53) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() r5 = epoll_create1(0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xa000000a}) finit_module(r6, 0x0, 0x0) finit_module(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@dont_measure}, {@seclabel}, {@seclabel}, {@smackfsfloor}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}], 0x6b}}) capset(&(0x7f0000000000)={0x19980330, r4}, &(0x7f0000000280)={0x0, 0xb58b, 0x0, 0x0, 0xfffffefc}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.34793322s ago: executing program 0 (id=1707): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000006c0)='./bus\x00', 0x532e612e25ad387b, &(0x7f0000000280)={[{@nodiscard}]}, 0x0, 0x451, &(0x7f0000000a00)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_set_self_attr(0x66, &(0x7f00000000c0)={0x65, 0x0, 0x20}, 0x20, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SETINFO(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000840)='./bus\x00', 0x1200840, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x3, 0x377, &(0x7f00000002c0)="$eJzs3UFom+UbAPAn/dKm/bP924MgCsKnN0HLNgXRix2jg2EuU8LUgxjcptLUwYrB7tCsXsSj4FFP3jzowcNuXgRFdvPg1QkyFQ+628CxT77kS/KlSWqZdLP4+x3Cs/d9nvd9v+Rl+ZqSt6+uxNrZ2Th/48b1mJ+vRHXlxErcrMRSJNF3OcbNTWgDAA6Gm1kWf2Q9EV/upaSy/6sCAPZT9/3/9cOllne/3i0/8+4PAAde8fP/Qrkt2ZEzP634wr4tCwDYR6Of/0fEI2MppV/1V8fuDQCAg+eFl15+7ng94vk0nY9Yf6/daDfimWH/8fPxZrTiXByJxbgV0btRyB8q3ceTp+qrR9I07cTPS9HIK9qNiPVOu9G7UziedOtrcTQWY6moL+42sixLTn5RXz2adkXE5U53/livtBuzsVDM/8P/4lwcizTuG6uPOFVfPZYWAzTW+/WzEdvDzy3y9S/HYnz3WlyIVpyNvLZ/W1Nf3Tqapiey+qHKsL7TbtS6eT1TPwEBAAAAAAAAAAAAAAAAAAAAAIA7spwOLA3Oz8mG5/csL0/o756P06svzgfa7p0PlNWyyLLf33m88X4SI+cD7Tifp9NuVGPm3l46AAAAAAAAAAAAAAAAAAAA/GtsbM5Fs9U6d3Fj89JaOehc3NiciYi85a1vP/tqIUZzFooBRqtGgmqRUupKh1VZ0k/OkpGcIkjyySvVXsunVwYrLufUBlcxcRm16V2t1uGHf/po2PJQ0h/59jAniYnXdSnZsYxysP7/3pKmPy27BMf+JudalmXTyrdeGa+KSkR16lLvMMjy4JvrbzzwxEZ/E2Q9jz62eObah5/8utZs5TPnWq25ixu3srVm8e/Jm216kJT2T6XYbJXyTqg2n7x9+tCUkbdHW5rJ97+9+OAHV4uWmd1fpuzM1WHL2xNykt6kn+/smusF+TIHXc/mQf4cjY8zO2HzTwqein/0wt3/8UrzytaPv+y1qvSfhIM6AAAAAAAAAAAAAAAAAADgrih9V7xQfNl3dreqp0/v/8oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O4Z/v3/QRAz2zta9hb82Yl+y5nod9XyAWOuNOPSPbxaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+q/4KAAD//1UBZGs=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x4010, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(0x0, 0x0, 0x2, 0x0) semtimedop(r1, &(0x7f0000000200)=[{0x0, 0x2}, {}], 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.248416278s ago: executing program 4 (id=1710): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) 1.247979748s ago: executing program 3 (id=1711): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x0, 0x0, 0xbffffff8}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfe89) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000000c0), 0x0}, 0x20) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x380}, 0x1, 0x0, 0x0, 0x40010}, 0x20004084) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) msgctl$IPC_RMID(0x0, 0x0) 1.247688788s ago: executing program 4 (id=1712): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000007c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) 1.232821979s ago: executing program 4 (id=1714): bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000d40), 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000dc0)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f5a783000a3cd0e0475c30849297ba4983a6a5a37c36d5946b1bd3d987ae4a26ae103372c1c2623ab9b0b0f56d52a1a943f05baaef190162159659282dc09c6e", "6b04039b2126517fe0a0070ed3d1c1355e73aa40916d5a7c0a6790957c23080000004abffbd46b285f216cf42073fc54097c4e42e8ff8c13b682d3d4eda7ba5e", "216027aec0211bf88e6e76d980800cdf7ab42b0a0dcdb39ccf821e5fce60f296"}}) 1.22240761s ago: executing program 4 (id=1715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x2, 0x2, 0x201}, 0x14}}, 0x0) 1.197520142s ago: executing program 4 (id=1716): r0 = memfd_secret(0x0) fcntl$setlease(r0, 0x400, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'trusted.', '^)\x00'}) 1.197107222s ago: executing program 4 (id=1717): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000000)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0xc}, 0x20) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x17, 0x0, "d86ac46a073843d9f8060941f3d77262614c3cd1ba8b023fc00414f10c2b7974289520ce79fef70f5a2483620aef97999c7e0f07caa2360fa1374ae1dea4978f54b437d900"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x21, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0xfffffe4d, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 1.196765232s ago: executing program 3 (id=1718): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x86, &(0x7f0000002600)}, 0x10) 1.146064666s ago: executing program 3 (id=1719): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000006c0), 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x14}, {0x3c}, {0x6}]}, 0x10) fcntl$lock(r6, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0xffffffffffffffff, 0xaa, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[], 0x34}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 1.038968365s ago: executing program 2 (id=1723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x11, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xffffffffffffff8e}, {0xc}}}]}]}, 0x48}}, 0x0) 1.010945527s ago: executing program 2 (id=1724): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000104001d80000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800600187893000000040012000500160002"], 0x50}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_read_part_table(0x59c, &(0x7f0000000b80)="$eJzs0r1LXGkUB+BzL4TZYsNICKTIFoEMqSYJTIqkmCmCTIZpMhKyIUXqQAotBAsLGRmt/fgHFL9AbMR+SnEEURgrmVKsFxSbqWbZ9W5jtbKobHie5vKec+49vPxu8L+Wxh+DwSCJiEHu5m//vlX9UH828v7T54gkvkVE9bdf/+4k2cQ/X93Jzo3sXM+VuisHwxdbQ4fPjzuFtTTrt9OI6YgYPV3P/9e78fPbruzlZ2bHa3OTlR8ntamzN99fVp/OV8cW366Wm1+elL9mP1Y7vZv9he67jaNB43zp4asHnW6/tJ/NFZPb2c/9up7/8uNWr9X/+GJz4nXxUW+3uZDlfil/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADglm1X9vIzs+O1ucnKj5Pa1Nmb7y+rT+erY4tvV8vNL0/KX9OruXZ6N/sL3XcbR4PG+dLDVw863X5pP5srJrezn/t1Pf/lx61eq//xxebE6+Kj3m5zIYn4JSIu5Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EvVD/VnI+8/fY5I4ltEDKdD63/VB7mrfpLN7WTPRlav50rdlYPhi62hw+fHncLaSFZvpxHTETF6up6/88twY38GAAD//+Lhh1M=") perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x181000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 978.78392ms ago: executing program 2 (id=1726): listen(0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x80) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000008c0)={'team0\x00', 0xe761}) 917.875045ms ago: executing program 2 (id=1727): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 917.279675ms ago: executing program 1 (id=1729): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='percpu_free_percpu\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000000a01010000000000000000050000000900010073797a30000000000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a300000000008000540000000004c0008800c00014000000000000000010c0002400000000000f6ff000c00024000000000000016cc0c21014000000000000100010c00024000000000000000140c00014000000000000000090900030073797a32000000000b00070066696c746572000030000480080002406b10a61d140003007465616d5f736c6176655f3000000000080002404e73b858080001"], 0x130}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x7b) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r4, 0x451498c376979b4d, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8, 0x9, 0x20000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'ip6erspan0\x00', 0x1}) 917.117825ms ago: executing program 2 (id=1730): socket$kcm(0x10, 0x2, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 893.889186ms ago: executing program 1 (id=1731): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$rfkill(r1, &(0x7f0000000040)={0x0, 0x6, 0x2}, 0x8) 883.448918ms ago: executing program 1 (id=1732): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x26) 860.531679ms ago: executing program 1 (id=1733): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek(r0, 0x5, 0x0) 807.907934ms ago: executing program 1 (id=1734): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)={@ifindex, r0, 0x33, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@sysvgroups}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@nodiscard}]}, 0x1, 0x562, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000300)=""/104, 0x68) getdents(r2, &(0x7f0000001fc0)=""/182, 0xb6) open$dir(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 477.312301ms ago: executing program 1 (id=1735): socket$inet_sctp(0x2, 0x0, 0x84) r0 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x0, 0x10a5, 0x3, &(0x7f0000000040)={[0x1]}, 0x8) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xde5, 0x0, 0x0, 0x0, 0x0) 84.890313ms ago: executing program 2 (id=1736): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000001400)={0x83, 0xfffffffd, 0xffffffff}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x47}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001a006d8700000000000000001c00000000000000000000008400"], 0xa0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) ioctl(0xffffffffffffffff, 0x5, &(0x7f0000000300)="10f17bb64c28b83e223fe2a2") r5 = syz_usbip_server_init(0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000020301040000000000000000000000000900020000000000ff"], 0x20}}, 0x0) write(r5, &(0x7f0000000080)="0f", 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r8, 0x112, 0xb, 0xfffffffffffffffe, &(0x7f00000001c0)) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "ec28a1ba80a20507"}) write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0xffff, 0x2, 0x0, "00e2d97d8200000011eb00000000f7fffeff00"}) r9 = syz_open_pts(r7, 0x0) r10 = dup3(r9, r7, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x17) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) 68.120355ms ago: executing program 0 (id=1737): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}}], 0x1, 0x4000000) 0s ago: executing program 0 (id=1738): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000900), &(0x7f0000000940)='%pI4 \x00'}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) unshare(0x22020600) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x42000000) kernel console output (not intermixed with test programs): r returned 117 for dev=loop4 ino=16 [ 45.435283][ T5076] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.706: bad symlink. [ 45.457800][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.477095][ T5088] program syz.3.711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.526254][ T5069] syz.0.703 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 45.537175][ T5069] CPU: 1 PID: 5069 Comm: syz.0.703 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 45.547304][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 45.557402][ T5069] Call Trace: [ 45.560764][ T5069] [ 45.563690][ T5069] dump_stack_lvl+0xf2/0x150 [ 45.568292][ T5069] dump_stack+0x15/0x20 [ 45.572464][ T5069] dump_header+0x83/0x2d0 [ 45.576810][ T5069] oom_kill_process+0x33e/0x4c0 [ 45.581653][ T5069] out_of_memory+0x9af/0xbe0 [ 45.586293][ T5069] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 45.592351][ T5069] mem_cgroup_out_of_memory+0x13e/0x190 [ 45.597890][ T5069] try_charge_memcg+0x745/0xcd0 [ 45.602797][ T5069] ? _raw_spin_unlock+0x26/0x50 [ 45.607669][ T5069] ? radix_tree_lookup+0xf9/0x150 [ 45.612776][ T5069] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 45.618845][ T5069] __read_swap_cache_async+0x2b9/0x520 [ 45.624313][ T5069] swap_cluster_readahead+0x276/0x3f0 [ 45.629727][ T5069] swapin_readahead+0xe2/0x7a0 [ 45.634481][ T5069] ? __filemap_get_folio+0x420/0x5b0 [ 45.639757][ T5069] ? swap_cache_get_folio+0x6e/0x210 [ 45.645028][ T5069] do_swap_page+0x3bc/0x1840 [ 45.649713][ T5069] ? cgroup_rstat_updated+0x99/0x550 [ 45.655079][ T5069] ? __rcu_read_lock+0x36/0x50 [ 45.659887][ T5069] handle_mm_fault+0x8b9/0x2ac0 [ 45.664845][ T5069] exc_page_fault+0x3b9/0x650 [ 45.669533][ T5069] asm_exc_page_fault+0x26/0x30 [ 45.674416][ T5069] RIP: 0033:0x7fd2fc59f564 [ 45.678903][ T5069] Code: 00 69 3d 53 b1 de 00 e8 03 00 00 48 8d 1d 14 9a 2b 00 e8 df b5 12 00 eb 11 0f 1f 44 00 00 48 81 c3 d8 00 00 00 48 39 dd 74 bc <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 87 ee ff ff eb [ 45.698595][ T5069] RSP: 002b:00007fffbfa8af50 EFLAGS: 00010206 [ 45.704797][ T5069] RAX: 0000000000000000 RBX: 00007fd2fc858f60 RCX: 0000000000000000 [ 45.712749][ T5069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555558f38808 [ 45.720701][ T5069] RBP: 00007fd2fc85aa60 R08: 0000000000000000 R09: 7fffffffffffffff [ 45.728664][ T5069] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000b3c5 [ 45.736713][ T5069] R13: 0000000000000032 R14: 00007fd2fc85aa60 R15: 00007fd2fc859038 [ 45.744767][ T5069] [ 45.747900][ T5069] memory: usage 307200kB, limit 307200kB, failcnt 178 [ 45.754871][ T5069] memory+swap: usage 294644kB, limit 9007199254740988kB, failcnt 0 [ 45.762794][ T5069] kmem: usage 274624kB, limit 9007199254740988kB, failcnt 0 [ 45.770100][ T5069] Memory cgroup stats for /syz0: [ 45.771931][ T5069] cache 69632 [ 45.780232][ T5069] rss 8192 [ 45.783252][ T5069] shmem 0 [ 45.786184][ T5069] mapped_file 69632 [ 45.790085][ T5069] dirty 69632 [ 45.793408][ T5069] writeback 0 [ 45.796721][ T5069] workingset_refault_anon 2 [ 45.801205][ T5069] workingset_refault_file 0 [ 45.805710][ T5069] swap 188416 [ 45.809059][ T5069] swapcached 16384 [ 45.812864][ T5069] pgpgin 11455 [ 45.816237][ T5069] pgpgout 11434 [ 45.819683][ T5069] pgfault 34398 [ 45.823121][ T5069] pgmajfault 4 [ 45.826579][ T5069] inactive_anon 0 [ 45.830194][ T5069] active_anon 16384 [ 45.834067][ T5069] inactive_file 0 [ 45.837818][ T5069] active_file 69632 [ 45.837837][ T5069] unevictable 0 [ 45.837843][ T5069] hierarchical_memory_limit 314572800 [ 45.850529][ T5069] hierarchical_memsw_limit 9223372036854771712 [ 45.856740][ T5069] total_cache 69632 [ 45.860529][ T5069] total_rss 8192 [ 45.864066][ T5069] total_shmem 0 [ 45.867542][ T5069] total_mapped_file 69632 [ 45.871857][ T5069] total_dirty 69632 [ 45.875646][ T5069] total_writeback 0 [ 45.879559][ T5069] total_workingset_refault_anon 2 [ 45.884567][ T5069] total_workingset_refault_file 0 [ 45.889691][ T5069] total_swap 188416 [ 45.893488][ T5069] total_swapcached 16384 [ 45.897808][ T5069] total_pgpgin 11455 [ 45.901776][ T5069] total_pgpgout 11434 [ 45.905757][ T5069] total_pgfault 34398 [ 45.909776][ T5069] total_pgmajfault 4 [ 45.913682][ T5069] total_inactive_anon 0 [ 45.917876][ T5069] total_active_anon 16384 [ 45.922254][ T5069] total_inactive_file 0 [ 45.926414][ T5069] total_active_file 69632 [ 45.930783][ T5069] total_unevictable 0 [ 45.934749][ T5069] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.703,pid=5069,uid=0 [ 45.945410][ T5104] netlink: 277 bytes leftover after parsing attributes in process `syz.1.716'. [ 45.949558][ T5069] Memory cgroup out of memory: Killed process 5069 (syz.0.703) total-vm:80752kB, anon-rss:580kB, file-rss:9896kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 45.968269][ T5102] tmpfs: Unknown parameter 'nr_' [ 46.015927][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 46.015940][ T29] audit: type=1400 audit(1720973736.752:831): avc: denied { mounton } for pid=5106 comm="syz.1.720" path="/proc/348/task" dev="proc" ino=9503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 46.044438][ T29] audit: type=1400 audit(1720973736.752:832): avc: denied { mount } for pid=5106 comm="syz.1.720" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 46.066084][ T29] audit: type=1400 audit(1720973736.752:833): avc: denied { write } for pid=5108 comm="syz.1.720" name="task" dev="proc" ino=9503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 46.087400][ T29] audit: type=1400 audit(1720973736.752:834): avc: denied { add_name } for pid=5108 comm="syz.1.720" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 46.107381][ T29] audit: type=1400 audit(1720973736.752:835): avc: denied { create } for pid=5108 comm="syz.1.720" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 46.127208][ T29] audit: type=1400 audit(1720973736.752:836): avc: denied { associate } for pid=5108 comm="syz.1.720" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 46.150607][ T29] audit: type=1400 audit(1720973736.772:837): avc: denied { mounton } for pid=5110 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.172043][ T29] audit: type=1400 audit(1720973736.802:838): avc: denied { read } for pid=5115 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 46.215703][ T5119] loop4: detected capacity change from 0 to 512 [ 46.234694][ T5119] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 46.247208][ T5119] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.278275][ T5119] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 46.303157][ T5141] tmpfs: Unknown parameter 'nr_' [ 46.309109][ T5119] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 46.349907][ T29] audit: type=1400 audit(1720973737.092:839): avc: denied { read } for pid=5146 comm="syz.0.731" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 46.372427][ T29] audit: type=1400 audit(1720973737.092:840): avc: denied { open } for pid=5146 comm="syz.0.731" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 46.413329][ T5119] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.721: bg 0: block 40: padding at end of block bitmap is not set [ 46.442924][ T5147] hub 9-0:1.0: USB hub found [ 46.453789][ T5119] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 46.462613][ T5147] hub 9-0:1.0: 8 ports detected [ 46.478361][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 46.489576][ T5119] EXT4-fs (loop4): 1 truncate cleaned up [ 46.523123][ T5119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.576148][ T5165] loop1: detected capacity change from 0 to 512 [ 46.587995][ T5165] EXT4-fs: Ignoring removed i_version option [ 46.594313][ T5165] EXT4-fs: Ignoring removed nobh option [ 46.600327][ T5119] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.721: corrupted xattr block 31: invalid header [ 46.600865][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.620719][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.628176][ T5165] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.629345][ T5110] bridge_slave_0: entered allmulticast mode [ 46.638858][ T5119] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 46.644613][ T5110] bridge_slave_0: entered promiscuous mode [ 46.653062][ T5119] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.721: corrupted xattr block 31: invalid header [ 46.688681][ T5167] netlink: 'syz.0.738': attribute type 3 has an invalid length. [ 46.697923][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.705026][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.706411][ T5119] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 46.712843][ T5110] bridge_slave_1: entered allmulticast mode [ 46.736424][ T5119] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.721: bad symlink. [ 46.748531][ T5165] EXT4-fs (loop1): 1 truncate cleaned up [ 46.764737][ T5110] bridge_slave_1: entered promiscuous mode [ 46.770945][ T5165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.813646][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.840562][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.852575][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.873804][ T5180] hub 9-0:1.0: USB hub found [ 46.881751][ T5180] hub 9-0:1.0: 8 ports detected [ 46.900742][ T5181] pim6reg: entered allmulticast mode [ 46.912685][ T5181] pim6reg: left allmulticast mode [ 46.946165][ T5110] team0: Port device team_slave_0 added [ 46.961726][ T5110] team0: Port device team_slave_1 added [ 46.994327][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.001361][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.027403][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.040672][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.047723][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.074162][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.086075][ T5193] netlink: 'syz.0.750': attribute type 3 has an invalid length. [ 47.120842][ T5196] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 47.185487][ T5110] hsr_slave_0: entered promiscuous mode [ 47.196879][ T5110] hsr_slave_1: entered promiscuous mode [ 47.212631][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.222732][ T5110] Cannot create hsr debugfs directory [ 47.381637][ T5110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.450104][ T5110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.452875][ T3079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.523853][ T5110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.524254][ T5231] loop3: detected capacity change from 0 to 256 [ 47.548536][ T5233] hub 9-0:1.0: USB hub found [ 47.559720][ T5233] hub 9-0:1.0: 8 ports detected [ 47.575976][ T5231] FAT-fs (loop3): Directory bread(block 64) failed [ 47.589818][ T5231] FAT-fs (loop3): Directory bread(block 65) failed [ 47.595292][ T5110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.598843][ T5231] FAT-fs (loop3): Directory bread(block 66) failed [ 47.628509][ T5231] FAT-fs (loop3): Directory bread(block 67) failed [ 47.637326][ T5235] netlink: 'syz.1.768': attribute type 3 has an invalid length. [ 47.645838][ T5231] FAT-fs (loop3): Directory bread(block 68) failed [ 47.654401][ T5231] FAT-fs (loop3): Directory bread(block 69) failed [ 47.671888][ T5231] FAT-fs (loop3): Directory bread(block 70) failed [ 47.681136][ T5231] FAT-fs (loop3): Directory bread(block 71) failed [ 47.687381][ T5110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.701093][ T5231] FAT-fs (loop3): Directory bread(block 72) failed [ 47.703387][ T5110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.711581][ T5231] FAT-fs (loop3): Directory bread(block 73) failed [ 47.732532][ T5231] syz.3.766: attempt to access beyond end of device [ 47.732532][ T5231] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 47.747451][ T5231] syz.3.766: attempt to access beyond end of device [ 47.747451][ T5231] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 47.747789][ T5110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.760614][ T5231] Buffer I/O error on dev loop3, logical block 442, async page read [ 47.799996][ T5110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.869669][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.892638][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.904371][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.911648][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.937825][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.944926][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.971366][ T5110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.981789][ T5110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.055906][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.181415][ T5110] veth0_vlan: entered promiscuous mode [ 48.191723][ T5110] veth1_vlan: entered promiscuous mode [ 48.213165][ T5110] veth0_macvtap: entered promiscuous mode [ 48.221893][ T5110] veth1_macvtap: entered promiscuous mode [ 48.227960][ T5291] nftables ruleset with unbound chain [ 48.254694][ T5293] veth0_to_hsr: entered promiscuous mode [ 48.260667][ T5293] vlan2: entered promiscuous mode [ 48.268531][ T5293] veth0_to_hsr: left promiscuous mode [ 48.319255][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.329772][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.339573][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.350006][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.359816][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.370223][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.380020][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.390436][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.400289][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.410704][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.474151][ T5301] __nla_validate_parse: 4 callbacks suppressed [ 48.474206][ T5301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.789'. [ 48.489263][ T5301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.789'. [ 48.505084][ T5301] loop0: detected capacity change from 0 to 256 [ 48.514414][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.525144][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.535606][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.545432][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.556145][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.565966][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.576675][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.586492][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.596901][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.606709][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.617129][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.628909][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.638681][ T5301] FAT-fs (loop0): Directory bread(block 64) failed [ 48.645286][ T5301] FAT-fs (loop0): Directory bread(block 65) failed [ 48.652007][ T5301] FAT-fs (loop0): Directory bread(block 66) failed [ 48.656984][ T5110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.661749][ T5301] FAT-fs (loop0): Directory bread(block 67) failed [ 48.667205][ T5110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.677900][ T5305] loop1: detected capacity change from 0 to 128 [ 48.682402][ T5110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.689050][ T5305] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value [ 48.697325][ T5110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.715768][ T5301] FAT-fs (loop0): Directory bread(block 68) failed [ 48.722352][ T5301] FAT-fs (loop0): Directory bread(block 69) failed [ 48.730468][ T5301] FAT-fs (loop0): Directory bread(block 70) failed [ 48.737426][ T5301] FAT-fs (loop0): Directory bread(block 71) failed [ 48.744165][ T5301] FAT-fs (loop0): Directory bread(block 72) failed [ 48.750990][ T5301] FAT-fs (loop0): Directory bread(block 73) failed [ 48.794093][ T5301] syz.0.789: attempt to access beyond end of device [ 48.794093][ T5301] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 48.815136][ T5301] syz.0.789: attempt to access beyond end of device [ 48.815136][ T5301] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 48.828334][ T5301] Buffer I/O error on dev loop0, logical block 442, async page read [ 48.865782][ T5328] loop1: detected capacity change from 0 to 512 [ 48.873268][ T5328] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.884755][ T5328] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.891630][ T5328] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.800: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 48.909297][ T5328] EXT4-fs error (device loop1): ext4_quota_enable:7037: comm syz.1.800: Bad quota inode: 3, type: 0 [ 48.920539][ T5328] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 48.935231][ T5328] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 48.942410][ T5328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.015149][ T5350] loop1: detected capacity change from 0 to 512 [ 49.032364][ T5350] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 49.040383][ T5350] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 49.048532][ T5350] System zones: 0-1, 15-15, 18-18, 34-34 [ 49.054409][ T5350] EXT4-fs (loop1): orphan cleanup on readonly fs [ 49.060802][ T5350] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 49.073308][ T5365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.815'. [ 49.075531][ T5350] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 49.084358][ T5365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.815'. [ 49.100079][ T5350] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.809: bg 0: block 40: padding at end of block bitmap is not set [ 49.114833][ T5365] loop3: detected capacity change from 0 to 256 [ 49.122675][ T5350] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 49.132496][ T5350] EXT4-fs (loop1): 1 truncate cleaned up [ 49.136263][ T5365] FAT-fs (loop3): Directory bread(block 64) failed [ 49.152901][ T5365] FAT-fs (loop3): Directory bread(block 65) failed [ 49.159688][ T5350] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.809: corrupted xattr block 19: bad e_name length [ 49.160570][ T5365] FAT-fs (loop3): Directory bread(block 66) failed [ 49.179720][ T5365] FAT-fs (loop3): Directory bread(block 67) failed [ 49.180641][ T5350] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 49.186334][ T5365] FAT-fs (loop3): Directory bread(block 68) failed [ 49.186358][ T5365] FAT-fs (loop3): Directory bread(block 69) failed [ 49.186394][ T5365] FAT-fs (loop3): Directory bread(block 70) failed [ 49.186409][ T5365] FAT-fs (loop3): Directory bread(block 71) failed [ 49.186427][ T5365] FAT-fs (loop3): Directory bread(block 72) failed [ 49.231105][ T5350] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.809: corrupted xattr block 19: bad e_name length [ 49.244670][ T5350] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 49.254562][ T5365] FAT-fs (loop3): Directory bread(block 73) failed [ 49.259891][ T5350] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.809: corrupted xattr block 19: bad e_name length [ 49.274811][ T5350] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 49.305686][ T5365] syz.3.815: attempt to access beyond end of device [ 49.305686][ T5365] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 49.319937][ T5365] syz.3.815: attempt to access beyond end of device [ 49.319937][ T5365] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 49.330624][ T5382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.821'. [ 49.333194][ T5365] Buffer I/O error on dev loop3, logical block 442, async page read [ 49.407626][ T5392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 49.484558][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 49.497460][ T5402] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 49.511170][ T5402] batman_adv: batadv1: Adding interface: netdevsim0 [ 49.517884][ T5402] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.544118][ T5402] batman_adv: batadv1: Interface activated: netdevsim0 [ 49.588693][ T5414] SELinux: syz.3.831 (5414) set checkreqprot to 1. This is no longer supported. [ 49.629824][ T5424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'. [ 49.638834][ T5424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.836'. [ 49.651171][ T5424] loop1: detected capacity change from 0 to 256 [ 49.664324][ T5424] FAT-fs (loop1): Directory bread(block 64) failed [ 49.671023][ T5424] FAT-fs (loop1): Directory bread(block 65) failed [ 49.677572][ T5424] FAT-fs (loop1): Directory bread(block 66) failed [ 49.684182][ T5424] FAT-fs (loop1): Directory bread(block 67) failed [ 49.690849][ T5424] FAT-fs (loop1): Directory bread(block 68) failed [ 49.697418][ T5424] FAT-fs (loop1): Directory bread(block 69) failed [ 49.704176][ T5424] FAT-fs (loop1): Directory bread(block 70) failed [ 49.709378][ T5427] loop3: detected capacity change from 0 to 764 [ 49.710731][ T5424] FAT-fs (loop1): Directory bread(block 71) failed [ 49.723458][ T5424] FAT-fs (loop1): Directory bread(block 72) failed [ 49.723479][ T5424] FAT-fs (loop1): Directory bread(block 73) failed [ 49.752004][ T5424] syz.1.836: attempt to access beyond end of device [ 49.752004][ T5424] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 49.766292][ T5424] syz.1.836: attempt to access beyond end of device [ 49.766292][ T5424] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 49.779565][ T5424] Buffer I/O error on dev loop1, logical block 442, async page read [ 49.999469][ T5445] loop0: detected capacity change from 0 to 512 [ 50.008875][ T5445] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.844: corrupted in-inode xattr: invalid ea_ino [ 50.041815][ T5445] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.844: couldn't read orphan inode 15 (err -117) [ 50.058635][ T5452] loop4: detected capacity change from 0 to 512 [ 50.065305][ T5452] EXT4-fs: Ignoring removed i_version option [ 50.075039][ T5452] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 50.084375][ T5452] System zones: 1-12 [ 50.094750][ T5452] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.846: bg 0: block 131: padding at end of block bitmap is not set [ 50.116245][ T5452] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 50.125396][ T5452] EXT4-fs (loop4): 1 truncate cleaned up [ 50.162964][ T5461] loop3: detected capacity change from 0 to 512 [ 50.181191][ T5463] loop0: detected capacity change from 0 to 1024 [ 50.182812][ T5461] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.303348][ T5473] netlink: 52 bytes leftover after parsing attributes in process `syz.0.852'. [ 50.433685][ T5489] loop3: detected capacity change from 0 to 1024 [ 50.466972][ T5492] block device autoloading is deprecated and will be removed. [ 50.474652][ T5492] syz.0.862: attempt to access beyond end of device [ 50.474652][ T5492] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 50.503133][ T5495] loop0: detected capacity change from 0 to 1024 [ 50.728359][ T5519] loop1: detected capacity change from 0 to 1024 [ 50.941959][ T5531] loop4: detected capacity change from 0 to 1024 [ 51.266564][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 51.266576][ T29] audit: type=1400 audit(1720973742.012:897): avc: denied { ioctl } for pid=5547 comm="syz.2.881" path="socket:[11316]" dev="sockfs" ino=11316 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.343424][ T29] audit: type=1400 audit(1720973742.082:898): avc: denied { execute } for pid=5549 comm="syz.2.882" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10886 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 51.417432][ T5560] loop3: detected capacity change from 0 to 128 [ 51.440969][ T5560] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.477922][ T5563] loop1: detected capacity change from 0 to 1024 [ 51.498956][ T5560] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 2147483641 (only 1 groups) [ 51.512337][ T29] audit: type=1400 audit(1720973742.242:899): avc: denied { ioctl } for pid=5559 comm="syz.3.887" path="/183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/freezer.self_freezing" dev="loop3" ino=12 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.704205][ T5583] syz_tun: entered promiscuous mode [ 51.713406][ T5583] ip6gretap0: entered promiscuous mode [ 51.723323][ T29] audit: type=1326 audit(1720973742.462:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5590 comm="syz.2.898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59ae699bd9 code=0x0 [ 51.765415][ T5594] loop3: detected capacity change from 0 to 1024 [ 51.852285][ T5602] loop3: detected capacity change from 0 to 128 [ 51.860815][ T5602] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.897426][ T5602] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 2147483641 (only 1 groups) [ 51.964251][ T29] audit: type=1400 audit(1720973742.702:901): avc: denied { read } for pid=5609 comm="syz.3.903" name="rtc0" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.987213][ T29] audit: type=1400 audit(1720973742.702:902): avc: denied { open } for pid=5609 comm="syz.3.903" path="/dev/rtc0" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.115611][ T5620] loop4: detected capacity change from 0 to 512 [ 52.122343][ T5620] EXT4-fs: Ignoring removed i_version option [ 52.128462][ T5620] EXT4-fs: Ignoring removed nobh option [ 52.134439][ T5620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.146065][ T5620] EXT4-fs (loop4): 1 truncate cleaned up [ 52.214480][ T29] audit: type=1400 audit(1720973742.952:903): avc: denied { create } for pid=5613 comm="syz.1.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.234366][ T29] audit: type=1400 audit(1720973742.952:904): avc: denied { write } for pid=5613 comm="syz.1.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.259082][ T5625] SELinux: failed to load policy [ 52.272949][ T29] audit: type=1400 audit(1720973742.992:905): avc: denied { ioctl } for pid=5622 comm="syz.4.909" path="socket:[10994]" dev="sockfs" ino=10994 ioctlcmd=0x89fd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.297562][ T29] audit: type=1400 audit(1720973743.002:906): avc: denied { load_policy } for pid=5622 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 52.335131][ T5629] loop4: detected capacity change from 0 to 136 [ 52.363625][ T3087] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 52.372766][ T3087] ISOFS: unable to read i-node block [ 52.379304][ T3087] ISOFS: unable to read i-node block [ 52.522636][ T5631] syz_tun: entered promiscuous mode [ 52.531109][ T5631] ip6gretap0: entered promiscuous mode [ 52.540616][ T5631] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 52.550270][ T5631] Cannot create hsr debugfs directory [ 52.590843][ T5640] net_ratelimit: 7 callbacks suppressed [ 52.590867][ T5640] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 52.615102][ T5642] loop0: detected capacity change from 0 to 1024 [ 52.661186][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.716344][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.773990][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.818249][ T5659] vxcan1: tx address claim with dest, not broadcast [ 52.843704][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.873029][ T5646] chnl_net:caif_netlink_parms(): no params data found [ 52.944158][ T5666] loop3: detected capacity change from 0 to 256 [ 53.031900][ T50] bridge_slave_1: left allmulticast mode [ 53.037606][ T50] bridge_slave_1: left promiscuous mode [ 53.043263][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.103420][ T50] bridge_slave_0: left allmulticast mode [ 53.109258][ T50] bridge_slave_0: left promiscuous mode [ 53.114940][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.363853][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.378186][ T5688] loop1: detected capacity change from 0 to 128 [ 53.386400][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.399019][ T5688] ext4 filesystem being mounted at /211/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.440953][ T50] bond0 (unregistering): Released all slaves [ 53.458202][ T50] bond1 (unregistering): Released all slaves [ 53.495023][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.502204][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.512075][ T5646] bridge_slave_0: entered allmulticast mode [ 53.522384][ T5646] bridge_slave_0: entered promiscuous mode [ 53.540099][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.547521][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.559515][ T5698] loop1: detected capacity change from 0 to 128 [ 53.566321][ T5646] bridge_slave_1: entered allmulticast mode [ 53.572915][ T5646] bridge_slave_1: entered promiscuous mode [ 53.581580][ T5698] ext4 filesystem being mounted at /213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.619159][ T5698] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 2147483641 (only 1 groups) [ 53.636694][ T5702] __nla_validate_parse: 3 callbacks suppressed [ 53.636706][ T5702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.933'. [ 53.663334][ T50] hsr_slave_0: left promiscuous mode [ 53.669177][ T50] hsr_slave_1: left promiscuous mode [ 53.674996][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.682449][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.690226][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.697651][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.713998][ T50] veth1_macvtap: left promiscuous mode [ 53.719543][ T50] veth0_macvtap: left promiscuous mode [ 53.725214][ T50] veth1_vlan: left promiscuous mode [ 53.730552][ T50] veth0_vlan: left promiscuous mode [ 53.866797][ T50] team0 (unregistering): Port device team_slave_1 removed [ 53.879325][ T50] team0 (unregistering): Port device team_slave_0 removed [ 53.920296][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.958356][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.014936][ T5646] team0: Port device team_slave_0 added [ 54.031118][ T5728] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 54.040318][ T5646] team0: Port device team_slave_1 added [ 54.058757][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.065737][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.092713][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.105888][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.112908][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.138867][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.181581][ T5646] hsr_slave_0: entered promiscuous mode [ 54.188729][ T5646] hsr_slave_1: entered promiscuous mode [ 54.194661][ T5646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.202548][ T5646] Cannot create hsr debugfs directory [ 54.223135][ T5755] macvlan0: entered promiscuous mode [ 54.568989][ T5786] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 54.612853][ T5792] loop1: detected capacity change from 0 to 128 [ 54.622312][ T5792] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.632973][ T5646] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.664648][ T5646] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.673315][ T5646] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.685327][ T5646] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.735328][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.755223][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.765719][ T903] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.772928][ T903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.796768][ T5797] IPVS: Error joining to the multicast group [ 54.809070][ T903] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.816152][ T903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.855113][ T5646] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.865575][ T5646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.938438][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.029185][ T5830] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 55.110363][ T5646] veth0_vlan: entered promiscuous mode [ 55.128966][ T5646] veth1_vlan: entered promiscuous mode [ 55.148470][ T5646] veth0_macvtap: entered promiscuous mode [ 55.150257][ T5842] loop1: detected capacity change from 0 to 8192 [ 55.157321][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 55.170840][ T5646] veth1_macvtap: entered promiscuous mode [ 55.183205][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.193749][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.194639][ T5842] loop1: p1 < > p4 < > [ 55.203572][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.218191][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.228032][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.238492][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.248610][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.259045][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.269024][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.279495][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.293376][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.303969][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.314626][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.324546][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.335117][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.344973][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.355578][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.365571][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.376032][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.385870][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.396310][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.408100][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.417432][ T5646] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.426165][ T5646] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.434972][ T5646] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.443686][ T5646] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.471886][ T5864] loop3: detected capacity change from 0 to 512 [ 55.480443][ T5864] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 55.520773][ T5864] loop3: detected capacity change from 0 to 512 [ 55.535560][ T5864] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.548242][ T5864] EXT4-fs (loop3): 1 truncate cleaned up [ 55.577903][ T5894] loop4: detected capacity change from 0 to 512 [ 55.585491][ T5894] EXT4-fs error (device loop4): ext4_get_journal_inode:5752: comm syz.4.1000: inode #196608: comm syz.4.1000: iget: illegal inode # [ 55.600951][ T11] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 55.608504][ T5894] EXT4-fs (loop4): Remounting filesystem read-only [ 55.617436][ T5894] EXT4-fs (loop4): no journal found [ 55.622641][ T5894] EXT4-fs (loop4): can't get journal size [ 55.637673][ T5894] EXT4-fs (loop4): failed to initialize system zone (-117) [ 55.651003][ T5898] loop1: detected capacity change from 0 to 8192 [ 55.654063][ T5894] EXT4-fs (loop4): mount failed [ 55.660201][ T5904] loop0: detected capacity change from 0 to 512 [ 55.677786][ T5904] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 55.685744][ T5904] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 55.694933][ T5904] System zones: 0-1, 15-15, 18-18, 34-34 [ 55.700824][ T5904] EXT4-fs (loop0): orphan cleanup on readonly fs [ 55.707326][ T5904] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 55.721946][ T5904] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 55.730696][ T5904] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1003: bg 0: block 40: padding at end of block bitmap is not set [ 55.738362][ T5910] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1004'. [ 55.757864][ T5904] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 55.773871][ T5904] EXT4-fs (loop0): 1 truncate cleaned up [ 55.783916][ T5901] vhci_hcd: default hub control req: 0500 v0000 i0000 l0 [ 55.784645][ T5904] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1003: bad symlink. [ 55.809894][ T5901] vlan2: entered allmulticast mode [ 55.851320][ T5904] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1003: bad symlink. [ 55.911661][ T5922] netlink: 'syz.4.1010': attribute type 3 has an invalid length. [ 55.919483][ T5922] netlink: 'syz.4.1010': attribute type 3 has an invalid length. [ 55.938109][ T5922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1010'. [ 55.961310][ T5925] loop0: detected capacity change from 0 to 2048 [ 56.002339][ T5925] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.008698][ T5929] loop4: detected capacity change from 0 to 512 [ 56.045239][ T5929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 56.074692][ T5929] System zones: 1-12 [ 56.083714][ T5929] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.091485][ T5935] syzkaller0: entered promiscuous mode [ 56.097060][ T5935] syzkaller0: entered allmulticast mode [ 56.103009][ T5929] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.1013: invalid block [ 56.110356][ T5938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1011'. [ 56.130081][ T5929] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1013: invalid indirect mapped block 1819239214 (level 1) [ 56.170172][ T5929] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1013: bg 0: block 361: padding at end of block bitmap is not set [ 56.189742][ T5929] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 56.200065][ T5929] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1013: attempt to clear invalid blocks 33619980 len 1 [ 56.213450][ T5943] loop1: detected capacity change from 0 to 1764 [ 56.220595][ T5943] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 56.221485][ T5929] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1013: invalid indirect mapped block 1819239214 (level 0) [ 56.254209][ T5929] EXT4-fs (loop4): 1 truncate cleaned up [ 56.309169][ T5943] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 56.323674][ T5961] loop0: detected capacity change from 0 to 512 [ 56.324855][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1020'. [ 56.332530][ T5961] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #17: comm syz.0.1025: iget: bogus i_mode (0) [ 56.353073][ T5961] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.1025: couldn't read orphan inode 17 (err -117) [ 56.374229][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 56.374242][ T29] audit: type=1400 audit(1720973747.112:968): avc: denied { ioctl } for pid=5960 comm="syz.0.1025" path="socket:[12082]" dev="sockfs" ino=12082 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.410676][ T5967] loop4: detected capacity change from 0 to 512 [ 56.437809][ T5967] EXT4-fs: Ignoring removed orlov option [ 56.453376][ T5958] vhci_hcd: default hub control req: 0500 v0000 i0000 l0 [ 56.465449][ T5958] vlan2: entered allmulticast mode [ 56.472507][ T5967] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1026: inode #13: comm syz.4.1026: iget: illegal inode # [ 56.502713][ T5967] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1026: couldn't read orphan inode 13 (err -117) [ 56.582125][ T5982] loop0: detected capacity change from 0 to 1024 [ 56.709787][ T29] audit: type=1326 audit(1720973747.442:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.0.1032" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc6cabd9 code=0x0 [ 56.736037][ T5994] loop4: detected capacity change from 0 to 256 [ 56.755405][ T5994] FAT-fs (loop4): Directory bread(block 64) failed [ 56.762694][ T5994] FAT-fs (loop4): Directory bread(block 65) failed [ 56.770541][ T5994] FAT-fs (loop4): Directory bread(block 66) failed [ 56.777718][ T5994] FAT-fs (loop4): Directory bread(block 67) failed [ 56.784695][ T5994] FAT-fs (loop4): Directory bread(block 68) failed [ 56.797797][ T5994] FAT-fs (loop4): Directory bread(block 69) failed [ 56.805160][ T5994] FAT-fs (loop4): Directory bread(block 70) failed [ 56.813083][ T5994] FAT-fs (loop4): Directory bread(block 71) failed [ 56.820015][ T5994] FAT-fs (loop4): Directory bread(block 72) failed [ 56.828078][ T5994] FAT-fs (loop4): Directory bread(block 73) failed [ 56.901902][ T6003] loop3: detected capacity change from 0 to 512 [ 56.908592][ T6003] EXT4-fs: Invalid gid value -1 [ 56.968542][ T6009] loop3: detected capacity change from 0 to 512 [ 56.976687][ T6009] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.1040: corrupted in-inode xattr: invalid ea_ino [ 56.979069][ T6010] loop4: detected capacity change from 0 to 512 [ 56.991910][ T6009] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1040: couldn't read orphan inode 15 (err -117) [ 56.996663][ T6010] EXT4-fs: Ignoring removed bh option [ 57.014976][ T29] audit: type=1400 audit(1720973747.752:970): avc: denied { lock } for pid=6008 comm="syz.3.1040" path="/213/file0/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.045667][ T6010] ext4 filesystem being mounted at /14/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.067916][ T6010] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.1039: corrupted inode contents [ 57.070867][ T6018] loop1: detected capacity change from 0 to 512 [ 57.082016][ T6010] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.1039: mark_inode_dirty error [ 57.097720][ T6018] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.098505][ T6010] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.1039: corrupted inode contents [ 57.108281][ T6018] EXT4-fs (loop1): orphan cleanup on readonly fs [ 57.118515][ T6010] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1039: mark_inode_dirty error [ 57.126144][ T6018] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1041: bg 0: block 248: padding at end of block bitmap is not set [ 57.150209][ T6018] Quota error (device loop1): write_blk: dquota write failed [ 57.157682][ T6018] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 57.167632][ T6018] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.1041: Failed to acquire dquot type 1 [ 57.180218][ T6018] EXT4-fs (loop1): 1 truncate cleaned up [ 57.253862][ T29] audit: type=1400 audit(1720973747.992:971): avc: denied { create } for pid=6022 comm="syz.3.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 57.266893][ T6025] loop1: detected capacity change from 0 to 512 [ 57.332573][ T6027] loop3: detected capacity change from 0 to 8192 [ 57.341475][ T6025] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.341509][ T6027] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.421907][ T6027] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 57.430837][ T6027] FAT-fs (loop3): Filesystem has been set read-only [ 57.441083][ T6027] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 57.450274][ T6027] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 57.476415][ T6035] vhci_hcd: default hub control req: 0500 v0000 i0000 l0 [ 57.487249][ T6035] vlan2: entered allmulticast mode [ 57.534680][ T6045] loop3: detected capacity change from 0 to 512 [ 57.542000][ T6045] EXT4-fs: Invalid gid value -1 [ 57.542420][ T6047] loop0: detected capacity change from 0 to 512 [ 57.567714][ T6047] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.583341][ T29] audit: type=1400 audit(1720973748.322:972): avc: denied { write } for pid=6046 comm="syz.0.1051" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.616720][ T6047] EXT4-fs error (device loop0): ext4_empty_dir:3095: inode #12: block 32: comm syz.0.1051: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 57.647053][ T29] audit: type=1400 audit(1720973748.352:973): avc: denied { add_name } for pid=6046 comm="syz.0.1051" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.667384][ T29] audit: type=1400 audit(1720973748.352:974): avc: denied { remove_name } for pid=6046 comm="syz.0.1051" name="file0" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.683248][ T6047] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz.0.1051: directory missing '.' [ 57.689540][ T29] audit: type=1400 audit(1720973748.352:975): avc: denied { rename } for pid=6046 comm="syz.0.1051" name="file0" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.708842][ T6057] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.1055'. [ 57.733152][ T6057] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.1055'. [ 57.742370][ T6057] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1055'. [ 57.798074][ T6066] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1059'. [ 57.860510][ T6080] loop0: detected capacity change from 0 to 512 [ 57.873949][ T6080] EXT4-fs: Invalid gid value -1 [ 57.960715][ T6097] vhci_hcd: default hub control req: 0500 v0000 i0000 l0 [ 57.961760][ T6095] bond1: entered promiscuous mode [ 57.983016][ T6095] ip6gretap1: entered promiscuous mode [ 57.988949][ T6095] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 57.998798][ T6095] bond1: left promiscuous mode [ 58.003605][ T6095] ip6gretap1: left promiscuous mode [ 58.125696][ T6113] loop0: detected capacity change from 0 to 1024 [ 58.149391][ T6117] loop3: detected capacity change from 0 to 512 [ 58.158278][ T6113] EXT4-fs: Ignoring removed orlov option [ 58.164223][ T6113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.177375][ T6117] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.187805][ T6117] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 58.210208][ T6119] loop1: detected capacity change from 0 to 512 [ 58.217191][ T6117] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 58.228814][ T6119] EXT4-fs: Invalid gid value -1 [ 58.239814][ T6117] System zones: 0-2, 18-18, 34-34 [ 58.249900][ T6117] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.1080: bad orphan inode 15 [ 58.271039][ T6117] ext4_test_bit(bit=14, block=18) = 1 [ 58.276562][ T6117] is_bad_inode(inode)=0 [ 58.280727][ T6117] NEXT_ORPHAN(inode)=2264924160 [ 58.285727][ T6117] max_ino=32 [ 58.288949][ T6117] i_nlink=0 [ 58.322224][ T6117] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 58.342740][ T6117] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1080: bg 0: block 80: padding at end of block bitmap is not set [ 58.371458][ T6117] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 58.431228][ T6130] bond2: entered promiscuous mode [ 58.450007][ T6130] ip6gretap2: entered promiscuous mode [ 58.455869][ T6130] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 58.472653][ T6130] bond2: left promiscuous mode [ 58.477541][ T6130] ip6gretap2: left promiscuous mode [ 58.600217][ T6153] loop0: detected capacity change from 0 to 128 [ 58.821517][ T6164] loop3: detected capacity change from 0 to 2048 [ 58.838414][ T6169] __nla_validate_parse: 6 callbacks suppressed [ 58.838430][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1100'. [ 58.878308][ T6164] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.1099: bad orphan inode 8192 [ 58.891071][ T6169] bond1: entered promiscuous mode [ 58.901716][ T6176] ip6gretap1: entered promiscuous mode [ 58.914325][ T6176] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 58.923286][ T6175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1101'. [ 58.933741][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1100'. [ 58.942762][ T6169] bond1: left promiscuous mode [ 58.947617][ T6169] ip6gretap1: left promiscuous mode [ 59.131217][ T6185] vhci_hcd: default hub control req: 0500 v0000 i0000 l0 [ 59.144358][ T6185] vlan2: entered allmulticast mode [ 59.192208][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'. [ 59.207697][ T6210] bond2: entered promiscuous mode [ 59.232778][ T6210] ip6gretap2: entered promiscuous mode [ 59.239529][ T6210] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 59.255368][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'. [ 59.264310][ T6210] bond2: left promiscuous mode [ 59.269114][ T6210] ip6gretap2: left promiscuous mode [ 59.583476][ T6236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1126'. [ 59.617608][ T6240] loop0: detected capacity change from 0 to 1024 [ 59.624565][ T6240] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 59.624565][ T6240] [ 59.635497][ T6240] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 60.064146][ T6264] loop4: detected capacity change from 0 to 2048 [ 60.097708][ T6264] loop4: p1 < > p4 [ 60.102232][ T6264] loop4: p4 size 8388608 extends beyond EOD, truncated [ 60.119525][ T6266] loop3: detected capacity change from 0 to 4096 [ 60.126165][ T6266] EXT4-fs: Ignoring removed nobh option [ 60.131803][ T6266] EXT4-fs: Ignoring removed i_version option [ 60.179900][ T6264] loop4: detected capacity change from 0 to 1024 [ 60.416566][ T6281] vhci_hcd: default hub control req: 0500 v0000 i0000 l0 [ 60.427571][ T6281] vlan2: entered allmulticast mode [ 60.592095][ T6293] usb usb9: usbfs: process 6293 (syz.2.1151) did not claim interface 0 before use [ 60.615337][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1152'. [ 60.686080][ T6303] loop1: detected capacity change from 0 to 2048 [ 60.726792][ T6303] loop1: p1 < > p4 [ 60.733147][ T6303] loop1: p4 size 8388608 extends beyond EOD, truncated [ 60.803065][ T6303] loop1: detected capacity change from 0 to 1024 [ 60.906354][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 60.937286][ T6335] loop0: detected capacity change from 0 to 512 [ 60.954595][ T6335] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.1169: corrupted in-inode xattr: invalid ea_ino [ 60.960689][ T6333] batadv0: entered promiscuous mode [ 60.977137][ T6335] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.1169: couldn't read orphan inode 15 (err -117) [ 61.005993][ T6340] loop1: detected capacity change from 0 to 512 [ 61.014025][ T6340] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.1172: corrupted in-inode xattr: e_name out of bounds [ 61.028282][ T6340] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1172: couldn't read orphan inode 15 (err -117) [ 61.089448][ T6347] loop3: detected capacity change from 0 to 512 [ 61.137691][ T6347] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.240747][ T6366] raw_sendmsg: syz.1.1172 forgot to set AF_INET. Fix it! [ 61.514530][ T6373] loop4: detected capacity change from 0 to 128 [ 61.522673][ T6373] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 61.636792][ T6380] usb usb8: usbfs: process 6380 (syz.3.1188) did not claim interface 0 before use [ 61.820454][ T6393] loop0: detected capacity change from 0 to 8192 [ 61.833453][ T6393] FAT-fs (loop0): Unrecognized mount option "0x000000000000000001777777777777777777777" or missing value [ 61.966669][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 61.966683][ T29] audit: type=1400 audit(1720973752.712:1017): avc: denied { bind } for pid=6396 comm="syz.1.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.015200][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 62.037051][ T29] audit: type=1400 audit(1720973752.742:1018): avc: denied { listen } for pid=6396 comm="syz.1.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.056596][ T29] audit: type=1400 audit(1720973752.742:1019): avc: denied { accept } for pid=6396 comm="syz.1.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.125603][ T6409] loop0: detected capacity change from 0 to 2048 [ 62.186821][ T6409] loop0: p1 < > p4 [ 62.193020][ T6409] loop0: p4 size 8388608 extends beyond EOD, truncated [ 62.214240][ T6418] loop1: detected capacity change from 0 to 512 [ 62.221654][ T6418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.238160][ T6418] ext4 filesystem being mounted at /271/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.280172][ T6409] loop0: detected capacity change from 0 to 1024 [ 62.352020][ T6423] lo: entered promiscuous mode [ 62.396050][ T6427] loop1: detected capacity change from 0 to 512 [ 62.409271][ T6427] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.440605][ T29] audit: type=1400 audit(1720973753.182:1020): avc: denied { ioctl } for pid=6424 comm="syz.0.1202" path="socket:[13794]" dev="sockfs" ino=13794 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.494144][ T29] audit: type=1400 audit(1720973753.232:1021): avc: denied { setopt } for pid=6424 comm="syz.0.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.546027][ T29] audit: type=1400 audit(1720973753.282:1022): avc: denied { setopt } for pid=6424 comm="syz.0.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.587497][ T29] audit: type=1400 audit(1720973753.332:1023): avc: denied { read } for pid=6424 comm="syz.0.1202" path="socket:[14628]" dev="sockfs" ino=14628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.611610][ T29] audit: type=1400 audit(1720973753.332:1024): avc: denied { ioctl } for pid=6444 comm="syz.3.1206" path="socket:[14642]" dev="sockfs" ino=14642 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.643995][ T6447] loop0: detected capacity change from 0 to 1024 [ 62.652545][ T6447] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 62.662386][ T6447] EXT4-fs (loop0): group descriptors corrupted! [ 62.676946][ T6454] loop4: detected capacity change from 0 to 512 [ 62.683523][ T6454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.709593][ T6454] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.759612][ T6447] vlan2: entered promiscuous mode [ 62.764656][ T6447] macvtap0: entered promiscuous mode [ 62.770397][ T6447] vlan2: entered allmulticast mode [ 62.775509][ T6447] macvtap0: entered allmulticast mode [ 62.780904][ T6447] veth0_macvtap: entered allmulticast mode [ 62.801437][ T6447] macvtap0: left allmulticast mode [ 62.806624][ T6447] veth0_macvtap: left allmulticast mode [ 62.812358][ T6447] macvtap0: left promiscuous mode [ 62.865763][ T6464] 9pnet_fd: Insufficient options for proto=fd [ 63.013940][ T6469] 9pnet: p9_errstr2errno: server reported unknown error s0000010 [ 63.292235][ T6476] loop0: detected capacity change from 0 to 1024 [ 63.312683][ T29] audit: type=1400 audit(1720973754.052:1025): avc: denied { rename } for pid=6475 comm="syz.0.1219" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.413059][ T6480] loop1: detected capacity change from 0 to 1024 [ 63.465925][ T6493] loop1: detected capacity change from 0 to 512 [ 63.466621][ T6495] loop3: detected capacity change from 0 to 512 [ 63.473348][ T6493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.485603][ T6495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.495062][ T6495] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.502975][ T6495] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1227: bg 0: block 248: padding at end of block bitmap is not set [ 63.504561][ T6493] ext4 filesystem being mounted at /279/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.519920][ T6495] Quota error (device loop3): write_blk: dquota write failed [ 63.556394][ T6495] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.1227: Failed to acquire dquot type 1 [ 63.568136][ T6495] EXT4-fs (loop3): 1 truncate cleaned up [ 63.576566][ T6495] EXT4-fs error (device loop3): __ext4_remount:6503: comm syz.3.1227: Abort forced by user [ 63.586876][ T6495] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 63.606646][ T6495] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 63.617251][ T6495] ext4 filesystem being remounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.628486][ T6495] EXT4-fs error (device loop3): ext4_lookup:1858: inode #2: comm syz.3.1227: deleted inode referenced: 12 [ 63.748224][ T6506] loop3: detected capacity change from 0 to 128 [ 63.757792][ T6506] ext4 filesystem being mounted at /256/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.786868][ T6511] loop4: detected capacity change from 0 to 764 [ 63.851632][ T6523] loop4: detected capacity change from 0 to 1024 [ 63.867612][ T6527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1238'. [ 63.888160][ T6527] netlink: 'syz.3.1238': attribute type 10 has an invalid length. [ 63.897040][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.904262][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.932479][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.939602][ T6527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.946974][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.954047][ T6527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.966885][ T6527] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 63.994837][ T6540] loop4: detected capacity change from 0 to 512 [ 64.008780][ T6540] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.1244: corrupted in-inode xattr: invalid ea_ino [ 64.022414][ T6546] netlink: 'syz.3.1246': attribute type 1 has an invalid length. [ 64.024061][ T6540] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1244: couldn't read orphan inode 15 (err -117) [ 64.143607][ T6570] loop3: detected capacity change from 0 to 512 [ 64.158249][ T6570] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.196728][ T6577] loop4: detected capacity change from 0 to 128 [ 64.203374][ T6577] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.278426][ T6584] loop4: detected capacity change from 0 to 1024 [ 64.285139][ T6584] EXT4-fs: Ignoring removed oldalloc option [ 64.291478][ T6584] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 64.667739][ T6616] loop4: detected capacity change from 0 to 1024 [ 64.677495][ T6616] EXT4-fs mount: 99 callbacks suppressed [ 64.677518][ T6616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.702848][ T5646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.772018][ T6624] loop4: detected capacity change from 0 to 128 [ 64.779709][ T6624] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.792302][ T6624] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.829958][ T5646] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.905766][ T6633] netlink: 'syz.1.1279': attribute type 5 has an invalid length. [ 64.913754][ T6633] netlink: 'syz.1.1279': attribute type 11 has an invalid length. [ 64.945863][ T6637] loop1: detected capacity change from 0 to 2048 [ 64.957328][ T6637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.043394][ T6655] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 65.043716][ T6658] loop7: detected capacity change from 0 to 16384 [ 65.267749][ T6684] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.310484][ T6692] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 65.423794][ T6714] loop0: detected capacity change from 0 to 2048 [ 65.432341][ T6704] loop2: detected capacity change from 512 to 1 [ 65.432364][ T6719] Process accounting resumed [ 65.453554][ T3079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.467854][ T6714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.522484][ T6735] usb usb9: usbfs: process 6735 (syz.4.1324) did not claim interface 0 before use [ 65.544709][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.547093][ T6740] loop1: detected capacity change from 0 to 512 [ 65.566283][ T6740] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.597901][ T6740] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 65.609890][ T6740] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 65.626767][ T6740] System zones: 0-2, 18-18, 34-34 [ 65.630846][ T6753] loop4: detected capacity change from 0 to 1764 [ 65.638653][ T6740] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.1326: bad orphan inode 15 [ 65.649069][ T6740] ext4_test_bit(bit=14, block=18) = 1 [ 65.654543][ T6740] is_bad_inode(inode)=0 [ 65.658864][ T6740] NEXT_ORPHAN(inode)=2264924160 [ 65.663809][ T6740] max_ino=32 [ 65.667101][ T6740] i_nlink=0 [ 65.670238][ T6740] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 65.685754][ T6740] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1326: bg 0: block 80: padding at end of block bitmap is not set [ 65.700306][ T6740] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 65.711139][ T6740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.736953][ T6761] tap0: tun_chr_ioctl cmd 1074025677 [ 65.742388][ T6761] tap0: linktype set to 776 [ 65.743050][ T3079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.858258][ T6779] loop1: detected capacity change from 0 to 512 [ 65.867266][ T6779] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.883342][ T6779] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 65.891441][ T6779] System zones: 1-12 [ 65.896030][ T6779] EXT4-fs (loop1): 1 truncate cleaned up [ 65.904259][ T6779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.938529][ T6779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.017450][ T6798] loop1: detected capacity change from 0 to 512 [ 66.025403][ T6798] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.1348: corrupted in-inode xattr: e_name out of bounds [ 66.040915][ T6798] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1348: couldn't read orphan inode 15 (err -117) [ 66.053928][ T6798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.525207][ T6812] can: request_module (can-proto-0) failed. [ 66.679476][ T6823] loop4: detected capacity change from 0 to 512 [ 66.697490][ T6823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.711699][ T6823] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.726038][ T6823] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.1354: corrupted inode contents [ 66.739370][ T6823] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.1354: mark_inode_dirty error [ 66.751115][ T6823] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.1354: corrupted inode contents [ 66.767503][ T6823] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1354: mark_inode_dirty error [ 66.839820][ T6831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6831 comm=syz.3.1356 [ 66.853055][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'. [ 66.866253][ T6823] loop4: detected capacity change from 512 to 1 [ 66.876808][ T6823] Process accounting resumed [ 66.881807][ T6823] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: Out of memory [ 66.892113][ T6823] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #18: comm syz.4.1354: mark_inode_dirty error [ 66.905648][ T6823] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 66.921584][ T3079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.929061][ T6823] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: Out of memory [ 66.940936][ T6823] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #18: comm syz.4.1354: mark_inode_dirty error [ 66.960841][ T6823] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: Out of memory [ 66.970832][ T6823] EXT4-fs error (device loop4): ext4_ext_truncate:4432: inode #18: comm syz.4.1354: mark_inode_dirty error [ 66.987618][ T6839] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 67.018226][ T6844] can: request_module (can-proto-0) failed. [ 67.027884][ T6086] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.038910][ T6826] kmmpd-loop4: attempt to access beyond end of device [ 67.038910][ T6826] loop4: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 67.052270][ T6826] Buffer I/O error on dev loop4, logical block 12, lost sync page write [ 67.175479][ T6862] loop1: detected capacity change from 0 to 512 [ 67.201921][ T6862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.216413][ T6862] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.241226][ T3079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.301042][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.314323][ T6890] loop1: detected capacity change from 0 to 512 [ 67.336459][ T6890] ext4: Unknown parameter 'mask' [ 67.359549][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.401999][ T6906] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 67.419767][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.469558][ T6914] loop3: detected capacity change from 0 to 128 [ 67.483924][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.512350][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 67.512363][ T29] audit: type=1400 audit(1720973758.252:1068): avc: denied { write } for pid=6921 comm="syz.0.1391" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.627342][ T40] bridge_slave_1: left allmulticast mode [ 67.627355][ T40] bridge_slave_1: left promiscuous mode [ 67.627460][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.628531][ T40] bridge_slave_0: left allmulticast mode [ 67.628544][ T40] bridge_slave_0: left promiscuous mode [ 67.628740][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.820062][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.842871][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.857027][ T40] bond0 (unregistering): Released all slaves [ 67.875768][ T6899] chnl_net:caif_netlink_parms(): no params data found [ 67.886023][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'. [ 67.923639][ T6944] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1398'. [ 67.968127][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.975238][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.981901][ T29] audit: type=1400 audit(1720973758.712:1069): avc: denied { append } for pid=6947 comm="syz.2.1399" name="event3" dev="devtmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.982506][ T6899] bridge_slave_0: entered allmulticast mode [ 68.012271][ T6899] bridge_slave_0: entered promiscuous mode [ 68.019149][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.026341][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.034093][ T6899] bridge_slave_1: entered allmulticast mode [ 68.040660][ T6899] bridge_slave_1: entered promiscuous mode [ 68.065896][ T40] hsr_slave_0: left promiscuous mode [ 68.072326][ T40] hsr_slave_1: left promiscuous mode [ 68.086366][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.093805][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.104713][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.112186][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.122721][ T40] veth1_macvtap: left promiscuous mode [ 68.128317][ T40] veth0_macvtap: left promiscuous mode [ 68.133848][ T40] veth1_vlan: left promiscuous mode [ 68.139274][ T40] veth0_vlan: left promiscuous mode [ 68.224646][ T40] team0 (unregistering): Port device team_slave_1 removed [ 68.236272][ T40] team0 (unregistering): Port device team_slave_0 removed [ 68.280020][ T6899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.290783][ T6899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.319648][ T6899] team0: Port device team_slave_0 added [ 68.333697][ T6899] team0: Port device team_slave_1 added [ 68.352101][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.359476][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.385558][ T6899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.398060][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.405024][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.430989][ T6899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.458564][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 68.469774][ T6986] loop0: detected capacity change from 0 to 2048 [ 68.480010][ T6899] hsr_slave_0: entered promiscuous mode [ 68.484961][ T6986] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.493941][ T6899] hsr_slave_1: entered promiscuous mode [ 68.501346][ T6899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.509414][ T29] audit: type=1400 audit(1720973759.242:1070): avc: denied { read } for pid=6993 comm="syz.2.1415" path="socket:[15640]" dev="sockfs" ino=15640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.542760][ T6899] Cannot create hsr debugfs directory [ 68.571102][ T6986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.614466][ T7000] loop3: detected capacity change from 0 to 2048 [ 68.638636][ T7000] EXT4-fs: Ignoring removed bh option [ 68.644100][ T7000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.652270][ T7000] EXT4-fs: Ignoring removed nobh option [ 68.677426][ T29] audit: type=1400 audit(1720973759.412:1071): avc: denied { relabelfrom } for pid=7011 comm="syz.1.1422" name="" dev="pipefs" ino=15677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 68.700117][ T7013] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1410: bg 0: block 234: padding at end of block bitmap is not set [ 68.700062][ T29] audit: type=1401 audit(1720973759.412:1072): op=setxattr invalid_context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fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.818557][ T7013] EXT4-fs (loop0): Remounting filesystem read-only [ 68.860093][ T3081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.015365][ T7039] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1431'. [ 69.024447][ T7039] 0X: renamed from hsr0 (while UP) [ 69.031364][ T7039] 0X: entered allmulticast mode [ 69.036450][ T7039] hsr_slave_0: entered allmulticast mode [ 69.042198][ T7039] hsr_slave_1: entered allmulticast mode [ 69.048875][ T7039] A link change request failed with some changes committed already. Interface c0X may have been left with an inconsistent configuration, please check. [ 69.075505][ T29] audit: type=1400 audit(1720973759.812:1073): avc: denied { ioctl } for pid=7040 comm="syz.3.1432" path="/dev/rtc0" dev="devtmpfs" ino=219 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.096994][ T6899] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.109171][ T6899] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.118488][ T6899] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.124092][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.136023][ T6899] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.170603][ T6899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.183760][ T6899] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.193562][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.200666][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.213463][ T7051] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1436'. [ 69.223628][ T7051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1436'. [ 69.231636][ T6899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.243078][ T6899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.256528][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.263611][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.329796][ T6899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.451538][ T6899] veth0_vlan: entered promiscuous mode [ 69.462088][ T6899] veth1_vlan: entered promiscuous mode [ 69.477332][ T6899] veth0_macvtap: entered promiscuous mode [ 69.484679][ T6899] veth1_macvtap: entered promiscuous mode [ 69.495020][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.505608][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.515424][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.525910][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.536019][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.546540][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.556351][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.566771][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.576636][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.587234][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.600685][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.612892][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.623481][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.633432][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.643947][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.653835][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.664487][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.674440][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.685145][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.695163][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.705757][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.717827][ T7087] loop0: detected capacity change from 0 to 2048 [ 69.721903][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.733779][ T6899] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.742661][ T6899] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.751490][ T6899] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.760292][ T6899] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.780183][ T7087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.804701][ T7099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.805507][ T7095] loop1: detected capacity change from 0 to 1024 [ 69.819671][ T7099] batadv_slave_0: entered promiscuous mode [ 69.820193][ T7095] EXT4-fs: Ignoring removed orlov option [ 69.827183][ T7087] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.831357][ T7095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.847618][ T7087] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 69.864869][ T7087] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.864869][ T7087] [ 69.868015][ T7095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.874555][ T7087] EXT4-fs (loop0): Total free blocks count 0 [ 69.892440][ T7087] EXT4-fs (loop0): Free/Dirty block details [ 69.898385][ T7087] EXT4-fs (loop0): free_blocks=2415919104 [ 69.904196][ T7087] EXT4-fs (loop0): dirty_blocks=16 [ 69.909350][ T7087] EXT4-fs (loop0): Block reservation details [ 69.915328][ T7087] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 69.921461][ T29] audit: type=1400 audit(1720973760.652:1074): avc: denied { setattr } for pid=7090 comm="syz.1.1445" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.956570][ T29] audit: type=1400 audit(1720973760.692:1075): avc: denied { mounton } for pid=7086 comm="syz.0.1443" path="/312/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.999162][ T29] audit: type=1400 audit(1720973760.722:1076): avc: denied { execute } for pid=7090 comm="syz.1.1445" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.021685][ T29] audit: type=1400 audit(1720973760.722:1077): avc: denied { execute_no_trans } for pid=7090 comm="syz.1.1445" path="/312/file1/file0/file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.082144][ T3079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.108506][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.474151][ T7151] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 70.582964][ T7154] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1464'. [ 70.649808][ T7161] loop4: detected capacity change from 0 to 1024 [ 70.658586][ T7161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.704987][ T6899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.765238][ T7173] ip6tnl0: entered allmulticast mode [ 70.771531][ T7173] syzkaller0: entered allmulticast mode [ 70.779202][ T7173] syzkaller0 (unregistering): left allmulticast mode [ 70.811747][ T7177] pim6reg1: entered promiscuous mode [ 70.817086][ T7177] pim6reg1: entered allmulticast mode [ 70.857531][ T7172] ip6tnl0: left allmulticast mode [ 70.948130][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'. [ 71.018143][ T7195] vlan2: entered allmulticast mode [ 71.023341][ T7195] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 71.036912][ T7195] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 71.082910][ T7199] loop1: detected capacity change from 0 to 1024 [ 71.111417][ T7199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.172114][ T3079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.200490][ T7218] loop0: detected capacity change from 0 to 512 [ 71.220361][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.230342][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.235229][ T7222] capability: warning: `syz.1.1491' uses 32-bit capabilities (legacy support in use) [ 71.252858][ T7222] loop1: detected capacity change from 0 to 512 [ 71.261979][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.269557][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.277129][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.284508][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.291993][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.299452][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.301086][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.306942][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.313857][ T7223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.321186][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.335940][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.343469][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.343648][ T7222] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 71.350849][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.350945][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.365270][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.368012][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.375414][ T7223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.382350][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.403970][ T7223] batadv_slave_0: left promiscuous mode [ 71.404351][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.417355][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.424733][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.433134][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.440535][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.447930][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.455322][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.462744][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.470418][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.477928][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.485355][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.492762][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.494457][ T7222] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 71.500221][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.511603][ T7222] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.515482][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.522405][ T7222] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1491: Invalid block bitmap block 0 in block_group 0 [ 71.529191][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.529214][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.547230][ T7222] EXT4-fs (loop1): Remounting filesystem read-only [ 71.550022][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.558156][ T7222] EXT4-fs (loop1): 1 orphan inode deleted [ 71.563860][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.584366][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.591874][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.599252][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.606632][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.614046][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.621463][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.628869][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.636312][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.643673][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.651035][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.658418][ T3173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.668565][ T3173] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 71.672796][ T7222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.692726][ T7222] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 71.708283][ T7222] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.750470][ T7246] loop3: detected capacity change from 0 to 512 [ 71.769507][ T7246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 71.797694][ T7246] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.828905][ T3081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 72.565015][ T7267] loop0: detected capacity change from 0 to 512 [ 72.571739][ T7267] ext4: Unknown parameter 'mask' [ 72.597970][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.607938][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.671642][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.678754][ T7270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.697221][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.704391][ T7270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.764844][ T7279] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1506'. [ 72.821037][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 72.821046][ T29] audit: type=1326 audit(1720973763.562:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7278 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5757242bd9 code=0x7fc00000 [ 72.830820][ T7288] usb usb8: usbfs: interface 0 claimed by usbfs while 'syz.2.1511' sets config #0 [ 72.876923][ T7291] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 72.916334][ T29] audit: type=1326 audit(1720973763.652:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7278 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5757239c27 code=0x7fc00000 [ 72.940842][ T29] audit: type=1326 audit(1720973763.652:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7278 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57571de5d9 code=0x7fc00000 [ 72.964370][ T29] audit: type=1326 audit(1720973763.652:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7278 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f57571de69f code=0x7fc00000 [ 72.990241][ T29] audit: type=1326 audit(1720973763.652:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7278 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5757242bd9 code=0x7fc00000 [ 73.119442][ T29] audit: type=1400 audit(1720973763.862:1094): avc: denied { mounton } for pid=7307 comm="syz.2.1518" path="/175/file0" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.142475][ T29] audit: type=1400 audit(1720973763.862:1095): avc: denied { mount } for pid=7307 comm="syz.2.1518" name="/" dev="hugetlbfs" ino=17300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 73.181577][ T7314] dccp_v6_rcv: dropped packet with invalid checksum [ 73.199617][ T7316] netlink: 'syz.2.1522': attribute type 1 has an invalid length. [ 73.212506][ T7316] bond3: entered promiscuous mode [ 73.218988][ T7316] lo: entered promiscuous mode [ 73.236721][ T7316] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 73.253582][ T7316] bond3: (slave lo): making interface the new active one [ 73.261491][ T7316] bond3: (slave lo): Enslaving as an active interface with an up link [ 73.288866][ T7320] usb usb8: usbfs: interface 0 claimed by usbfs while 'syz.2.1523' sets config #0 [ 73.421902][ T7330] loop0: detected capacity change from 0 to 1024 [ 73.440364][ T7330] EXT4-fs: Ignoring removed orlov option [ 73.446201][ T7330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.488858][ T7330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.525967][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.590342][ T29] audit: type=1326 audit(1720973764.332:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.2.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ae699bd9 code=0x7ffc0000 [ 73.622054][ T29] audit: type=1326 audit(1720973764.332:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.2.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ae699bd9 code=0x7ffc0000 [ 73.645657][ T29] audit: type=1326 audit(1720973764.362:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7336 comm="syz.2.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f59ae699bd9 code=0x7ffc0000 [ 73.747937][ T7359] loop0: detected capacity change from 0 to 128 [ 73.766225][ T7361] loop1: detected capacity change from 0 to 512 [ 73.792716][ T7361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.807073][ T7361] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.835086][ T3079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.313018][ T7418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1563'. [ 74.399866][ T7422] loop4: detected capacity change from 0 to 2048 [ 74.428710][ T7422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.491573][ T6899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.633894][ T7432] loop4: detected capacity change from 0 to 512 [ 74.641034][ T7432] EXT4-fs: Ignoring removed i_version option [ 74.647233][ T7432] EXT4-fs: Ignoring removed nobh option [ 74.653523][ T7432] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.669682][ T7432] EXT4-fs (loop4): 1 truncate cleaned up [ 74.677139][ T7435] pim6reg1: entered promiscuous mode [ 74.677153][ T7432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.682528][ T7435] pim6reg1: entered allmulticast mode [ 74.797603][ T6899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.860667][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.882357][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.978978][ T7474] program syz.4.1586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.035291][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.042506][ T7464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.054612][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.061772][ T7464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.099682][ T7464] 0X: left allmulticast mode [ 75.104399][ T7464] hsr_slave_0: left allmulticast mode [ 75.110077][ T7464] hsr_slave_1: left allmulticast mode [ 75.352035][ T7495] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1596'. [ 75.372291][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1597'. [ 75.407042][ T7505] loop3: detected capacity change from 0 to 512 [ 75.418817][ T7505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.432674][ T7505] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.564437][ T7505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1601'. [ 75.777620][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'. [ 75.831064][ T7529] IPv6: Can't replace route, no match found [ 75.881740][ T7533] loop1: detected capacity change from 0 to 8192 [ 75.889690][ T7533] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.982818][ T7542] pim6reg1: entered promiscuous mode [ 75.988266][ T7542] pim6reg1: entered allmulticast mode [ 76.123347][ T7550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1618'. [ 76.132343][ T7550] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1618'. [ 76.141282][ T7550] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1618'. [ 76.243673][ T3081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.312227][ T7569] SELinux: policydb version -778141760 does not match my version range 15-33 [ 76.322839][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1625'. [ 76.346284][ T7569] SELinux: failed to load policy [ 76.361693][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1625'. [ 76.392486][ T7567] loop1: detected capacity change from 0 to 256 [ 76.400399][ T7567] FAT-fs (loop1): Unrecognized mount option "chec" or missing value [ 76.553361][ T7579] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 76.791556][ T7608] loop3: detected capacity change from 0 to 164 [ 76.840905][ T7610] loop3: detected capacity change from 0 to 512 [ 76.854130][ T7610] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.885060][ T7610] EXT4-fs (loop3): 1 truncate cleaned up [ 76.891164][ T7610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.927379][ T7610] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 76.974525][ T3081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.299072][ T7627] batadv_slave_1: entered promiscuous mode [ 77.306016][ T7626] batadv_slave_1: left promiscuous mode [ 77.311798][ T7557] program syz.4.1620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.398098][ T7643] bond_slave_1: entered promiscuous mode [ 77.404497][ T7643] bond_slave_1: left promiscuous mode [ 77.435643][ T7557] loop4: detected capacity change from 0 to 764 [ 77.443286][ T7557] iso9660: Unknown parameter '$' [ 77.503681][ T7650] loop4: detected capacity change from 0 to 1024 [ 77.510738][ T7650] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.521670][ T7650] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.532055][ T7650] jbd2_journal_init_inode: Cannot locate journal superblock [ 77.539402][ T7650] EXT4-fs (loop4): Could not load journal inode [ 77.584920][ T7650] loop4: detected capacity change from 0 to 1024 [ 77.591797][ T7650] EXT4-fs (loop4): first meta block group too large: 7 (group descriptor block count 1) [ 77.611628][ T7660] netlink: 'syz.2.1667': attribute type 5 has an invalid length. [ 77.739532][ T7672] program syz.2.1673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.885999][ T7696] SELinux: policydb version -778141760 does not match my version range 15-33 [ 77.895007][ T7696] SELinux: failed to load policy [ 77.920029][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 77.920041][ T29] audit: type=1400 audit(1720973768.662:1183): avc: denied { create } for pid=7687 comm="syz.2.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 77.962031][ T7706] RDS: rds_bind could not find a transport for ::4006:20:0:0, load rds_tcp or rds_rdma? [ 78.063401][ T7709] dccp_invalid_packet: P.Data Offset(0) too small [ 78.122219][ T7715] loop3: detected capacity change from 0 to 128 [ 78.128862][ T29] audit: type=1400 audit(1720973768.872:1184): avc: denied { mounton } for pid=7690 comm="syz.3.1680" path="mnt:[4026532377]" dev="nsfs" ino=4026532377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.129326][ T7715] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 78.163646][ T7715] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 78.176107][ T7715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.293943][ T29] audit: type=1400 audit(1720973769.032:1185): avc: denied { ioctl } for pid=7721 comm="syz.0.1688" path="socket:[18121]" dev="sockfs" ino=18121 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.794188][ T7735] loop4: detected capacity change from 0 to 8192 [ 78.914304][ T7760] loop4: detected capacity change from 0 to 128 [ 78.920866][ T7760] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff^ФotԾݶ#):![7i\o "܉-ab oSW$=i]IZf@^N!đ^M`O2 \0) f y-Y7~Srbto@$c"߂}][%nQ>-;_g[~b^|IKR0 f" or missing value [ 79.162865][ T29] audit: type=1400 audit(1720973769.902:1186): avc: denied { ioctl } for pid=7759 comm="syz.4.1703" path="socket:[18984]" dev="sockfs" ino=18984 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.590218][ T29] audit: type=1326 audit(1720973770.332:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5757242bd9 code=0x7ffc0000 [ 79.613812][ T29] audit: type=1326 audit(1720973770.332:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5757242bd9 code=0x7ffc0000 [ 79.637958][ T29] audit: type=1326 audit(1720973770.332:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5757242bd9 code=0x7ffc0000 [ 79.661615][ T29] audit: type=1326 audit(1720973770.382:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5757242bd9 code=0x7ffc0000 [ 79.685406][ T29] audit: type=1326 audit(1720973770.382:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5757242bd9 code=0x7ffc0000 [ 79.708865][ T29] audit: type=1326 audit(1720973770.382:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5757242bd9 code=0x7ffc0000 [ 79.804215][ T7772] dccp_invalid_packet: P.type (SYNC) not Data || [Data]Ack, while P.X == 0 [ 79.833657][ T7785] loop1: detected capacity change from 0 to 512 [ 79.842026][ T7785] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.1713: corrupted in-inode xattr: invalid ea_ino [ 79.855918][ T7785] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1713: couldn't read orphan inode 15 (err -117) [ 79.870383][ T7785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.962327][ T3079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.022630][ T7807] __nla_validate_parse: 10 callbacks suppressed [ 80.022693][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1723'. [ 80.038059][ T7807] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1723'. [ 80.047051][ T7807] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1723'. [ 80.118713][ T7818] 9pnet: p9_errstr2errno: server reported unknown error [ 80.149973][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1729'. [ 80.236998][ T7835] loop1: detected capacity change from 0 to 1024 [ 80.249102][ T7835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.296250][ T7835] loop1: detected capacity change from 1024 to 0 [ 80.303414][ T7835] syz.1.1734: attempt to access beyond end of device [ 80.303414][ T7835] loop1: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 80.321236][ T7835] EXT4-fs error (device loop1): __ext4_find_entry:1684: inode #2: comm syz.1.1734: reading directory lblock 0 [ 80.333106][ T7835] syz.1.1734: attempt to access beyond end of device [ 80.333106][ T7835] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 80.346384][ T7835] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 80.356688][ T7835] EXT4-fs (loop1): I/O error while writing superblock [ 80.364859][ T7835] syz.1.1734: attempt to access beyond end of device [ 80.364859][ T7835] loop1: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 80.379461][ T7835] syz.1.1734: attempt to access beyond end of device [ 80.379461][ T7835] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 80.393683][ T7835] syz.1.1734: attempt to access beyond end of device [ 80.393683][ T7835] loop1: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 80.408317][ T7835] syz.1.1734: attempt to access beyond end of device [ 80.408317][ T7835] loop1: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 80.422092][ T7835] syz.1.1734: attempt to access beyond end of device [ 80.422092][ T7835] loop1: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 80.436987][ T7835] syz.1.1734: attempt to access beyond end of device [ 80.436987][ T7835] loop1: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 80.451088][ T7835] syz.1.1734: attempt to access beyond end of device [ 80.451088][ T7835] loop1: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 80.465849][ T7835] syz.1.1734: attempt to access beyond end of device [ 80.465849][ T7835] loop1: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 80.481445][ T7835] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #2: block 5: comm syz.1.1734: unable to read itable block [ 80.494985][ T7798] syz.4.1717 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 80.502846][ T7835] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 80.509136][ T7798] CPU: 1 PID: 7798 Comm: syz.4.1717 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 80.519589][ T7835] EXT4-fs (loop1): I/O error while writing superblock [ 80.527359][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 80.527372][ T7798] Call Trace: [ 80.527380][ T7798] [ 80.527387][ T7798] dump_stack_lvl+0xf2/0x150 [ 80.534129][ T7835] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure [ 80.534288][ T7835] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 80.544174][ T7798] dump_stack+0x15/0x20 [ 80.547816][ T7835] EXT4-fs (loop1): I/O error while writing superblock [ 80.550354][ T7798] dump_header+0x83/0x2d0 [ 80.555010][ T7835] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.1734: mark_inode_dirty error [ 80.555066][ T7835] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 80.563669][ T7798] oom_kill_process+0x33e/0x4c0 [ 80.563693][ T7798] out_of_memory+0x9af/0xbe0 [ 80.563713][ T7798] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 80.575049][ T7835] EXT4-fs (loop1): I/O error while writing superblock [ 80.576081][ T7798] mem_cgroup_out_of_memory+0x13e/0x190 [ 80.634376][ T7798] try_charge_memcg+0x745/0xcd0 [ 80.639251][ T7798] ? get_page_from_freelist+0x1a30/0x1a70 [ 80.644967][ T7798] obj_cgroup_charge_pages+0xbd/0x1d0 [ 80.650335][ T7798] __memcg_kmem_charge_page+0x9d/0x170 [ 80.655855][ T7798] __alloc_pages_noprof+0x1bc/0x360 [ 80.661070][ T7798] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 80.666462][ T7798] alloc_pages_noprof+0xe1/0x100 [ 80.671498][ T7798] __vmalloc_node_range_noprof+0x719/0xef0 [ 80.677377][ T7798] kvmalloc_node_noprof+0x121/0x170 [ 80.682606][ T7798] ? ip_set_alloc+0x1f/0x30 [ 80.687109][ T7798] ip_set_alloc+0x1f/0x30 [ 80.691505][ T7798] hash_netiface_create+0x273/0x730 [ 80.696734][ T7798] ? __nla_parse+0x40/0x60 [ 80.701197][ T7798] ? __pfx_hash_netiface_create+0x10/0x10 [ 80.706915][ T7798] ip_set_create+0x359/0x8a0 [ 80.711505][ T7798] nfnetlink_rcv_msg+0x4a9/0x570 [ 80.716536][ T7798] netlink_rcv_skb+0x12c/0x230 [ 80.721299][ T7798] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 80.726815][ T7798] nfnetlink_rcv+0x16c/0x15b0 [ 80.731489][ T7798] ? kmem_cache_free+0xd8/0x280 [ 80.736346][ T7798] ? nlmon_xmit+0x51/0x60 [ 80.740708][ T7798] ? __kfree_skb+0x102/0x150 [ 80.745361][ T7798] ? consume_skb+0x57/0x180 [ 80.749858][ T7798] ? nlmon_xmit+0x51/0x60 [ 80.754231][ T7798] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 80.759527][ T7798] ? __dev_queue_xmit+0xb21/0x1e50 [ 80.764702][ T7798] ? ref_tracker_free+0x3a5/0x410 [ 80.769734][ T7798] ? __netlink_deliver_tap+0x495/0x4c0 [ 80.775182][ T7798] netlink_unicast+0x58d/0x660 [ 80.779945][ T7798] netlink_sendmsg+0x5ca/0x6e0 [ 80.784870][ T7798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.790238][ T7798] __sock_sendmsg+0x140/0x180 [ 80.794925][ T7798] ____sys_sendmsg+0x312/0x410 [ 80.799738][ T7798] __sys_sendmsg+0x1e9/0x280 [ 80.804376][ T7798] __x64_sys_sendmsg+0x46/0x50 [ 80.809204][ T7798] x64_sys_call+0xb25/0x2d70 [ 80.813854][ T7798] do_syscall_64+0xc9/0x1c0 [ 80.818399][ T7798] ? clear_bhb_loop+0x55/0xb0 [ 80.823071][ T7798] ? clear_bhb_loop+0x55/0xb0 [ 80.827798][ T7798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.833684][ T7798] RIP: 0033:0x7f7d8e786bd9 [ 80.838144][ T7798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.857736][ T7798] RSP: 002b:00007f7d8da08048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.866166][ T7798] RAX: ffffffffffffffda RBX: 00007f7d8e914f60 RCX: 00007f7d8e786bd9 [ 80.874205][ T7798] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 80.882190][ T7798] RBP: 00007f7d8e7f5e60 R08: 0000000000000000 R09: 0000000000000000 [ 80.890145][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.898112][ T7798] R13: 000000000000000b R14: 00007f7d8e914f60 R15: 00007fff691c3fa8 [ 80.906107][ T7798] [ 80.911859][ T65] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4480: inode #2: block 5: comm kworker/u8:5: unable to read itable block [ 80.911976][ T7798] memory: usage 307200kB, limit 307200kB, failcnt 166 [ 80.925601][ T65] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 80.925616][ T65] EXT4-fs (loop1): I/O error while writing superblock [ 80.927243][ T5325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.932408][ T7798] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 80.942451][ T5325] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 80.947738][ T7798] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 80.958492][ T5325] EXT4-fs (loop1): I/O error while writing superblock [ 80.964516][ T7798] Memory cgroup stats for /syz4 [ 80.972947][ T7836] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 80.980021][ T7798] : [ 81.003884][ T7798] cache 8192 [ 81.009581][ T7798] rss 0 [ 81.012406][ T7798] shmem 0 [ 81.015388][ T7798] mapped_file 8192 [ 81.019212][ T7798] dirty 8192 [ 81.022399][ T7798] writeback 0 [ 81.025722][ T7798] workingset_refault_anon 83 [ 81.030329][ T7798] workingset_refault_file 32 [ 81.034979][ T7798] swap 274432 [ 81.038289][ T7798] swapcached 0 [ 81.041691][ T7798] pgpgin 119881 [ 81.045132][ T7798] pgpgout 119875 [ 81.048692][ T7798] pgfault 123683 [ 81.052218][ T7798] pgmajfault 41 [ 81.055677][ T7798] inactive_anon 0 [ 81.055719][ T7841] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 81.059322][ T7798] active_anon 0 [ 81.059329][ T7798] inactive_file 0 [ 81.059335][ T7798] active_file 24576 [ 81.059341][ T7798] unevictable 0 [ 81.059347][ T7798] hierarchical_memory_limit 314572800 [ 81.065831][ T7841] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.069293][ T7798] hierarchical_memsw_limit 9223372036854771712 [ 81.072919][ T7841] vhci_hcd vhci_hcd.0: Device attached [ 81.076661][ T7798] total_cache 8192 [ 81.076668][ T7798] total_rss 0 [ 81.076674][ T7798] total_shmem 0 [ 81.076679][ T7798] total_mapped_file 8192 [ 81.076685][ T7798] total_dirty 8192 [ 81.076691][ T7798] total_writeback 0 [ 81.076697][ T7798] total_workingset_refault_anon 83 [ 81.076704][ T7798] total_workingset_refault_file 32 [ 81.076710][ T7798] total_swap 274432 [ 81.076716][ T7798] total_swapcached 0 [ 81.076722][ T7798] total_pgpgin 119881 [ 81.076812][ T7798] total_pgpgout 119875 [ 81.152922][ T7798] total_pgfault 123683 [ 81.157008][ T7798] total_pgmajfault 41 [ 81.160972][ T7798] total_inactive_anon 0 [ 81.165212][ T7798] total_active_anon 0 [ 81.169198][ T7798] total_inactive_file 0 [ 81.173335][ T7798] total_active_file 24576 [ 81.177672][ T7798] total_unevictable 0 [ 81.181728][ T7798] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1717,pid=7795,uid=0 [ 81.196644][ T7798] Memory cgroup out of memory: Killed process 7795 (syz.4.1717) total-vm:80620kB, anon-rss:452kB, file-rss:9976kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 81.213480][ T7795] ================================================================== [ 81.221565][ T7795] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 81.231395][ T7795] [ 81.233709][ T7795] read-write to 0xffffffff860079c0 of 8 bytes by interrupt on cpu 1: [ 81.241767][ T7795] tick_do_update_jiffies64+0x112/0x1b0 [ 81.247320][ T7795] tick_nohz_handler+0x7c/0x2d0 [ 81.252176][ T7795] __hrtimer_run_queues+0x20d/0x5e0 [ 81.257366][ T7795] hrtimer_interrupt+0x210/0x7b0 [ 81.262383][ T7795] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 81.268281][ T7795] sysvec_apic_timer_interrupt+0x6e/0x80 [ 81.273919][ T7795] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.279992][ T7795] console_flush_all+0x4fc/0x710 [ 81.284916][ T7795] console_unlock+0x7b/0x280 [ 81.289490][ T7795] vprintk_emit+0x3ed/0x5e0 [ 81.293975][ T7795] vprintk_default+0x26/0x30 [ 81.298547][ T7795] vprintk+0x75/0x80 [ 81.302426][ T7795] _printk+0x7a/0xa0 [ 81.306304][ T7795] __oom_kill_process+0x43c/0x8c0 [ 81.311316][ T7795] oom_kill_process+0xff/0x4c0 [ 81.316075][ T7795] out_of_memory+0x9af/0xbe0 [ 81.320649][ T7795] mem_cgroup_out_of_memory+0x13e/0x190 [ 81.326187][ T7795] try_charge_memcg+0x745/0xcd0 [ 81.331030][ T7795] obj_cgroup_charge_pages+0xbd/0x1d0 [ 81.336387][ T7795] __memcg_kmem_charge_page+0x9d/0x170 [ 81.341832][ T7795] __alloc_pages_noprof+0x1bc/0x360 [ 81.347017][ T7795] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 81.352381][ T7795] alloc_pages_noprof+0xe1/0x100 [ 81.357314][ T7795] __vmalloc_node_range_noprof+0x719/0xef0 [ 81.363110][ T7795] kvmalloc_node_noprof+0x121/0x170 [ 81.368296][ T7795] ip_set_alloc+0x1f/0x30 [ 81.372615][ T7795] hash_netiface_create+0x273/0x730 [ 81.377803][ T7795] ip_set_create+0x359/0x8a0 [ 81.382380][ T7795] nfnetlink_rcv_msg+0x4a9/0x570 [ 81.387307][ T7795] netlink_rcv_skb+0x12c/0x230 [ 81.392061][ T7795] nfnetlink_rcv+0x16c/0x15b0 [ 81.396726][ T7795] netlink_unicast+0x58d/0x660 [ 81.401481][ T7795] netlink_sendmsg+0x5ca/0x6e0 [ 81.406226][ T7795] __sock_sendmsg+0x140/0x180 [ 81.410884][ T7795] ____sys_sendmsg+0x312/0x410 [ 81.415635][ T7795] __sys_sendmsg+0x1e9/0x280 [ 81.420210][ T7795] __x64_sys_sendmsg+0x46/0x50 [ 81.424960][ T7795] x64_sys_call+0xb25/0x2d70 [ 81.429548][ T7795] do_syscall_64+0xc9/0x1c0 [ 81.434047][ T7795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.439936][ T7795] [ 81.442243][ T7795] read to 0xffffffff860079c0 of 8 bytes by task 7795 on cpu 0: [ 81.449771][ T7795] mem_cgroup_flush_stats_ratelimited+0x29/0x100 [ 81.456092][ T7795] count_shadow_nodes+0x6b/0x230 [ 81.461012][ T7795] do_shrink_slab+0x5a/0x690 [ 81.465593][ T7795] shrink_slab+0x4ed/0x860 [ 81.469998][ T7795] shrink_node+0x59a/0x1da0 [ 81.474492][ T7795] do_try_to_free_pages+0x3cf/0xc20 [ 81.479684][ T7795] try_to_free_mem_cgroup_pages+0x1ea/0x4e0 [ 81.485569][ T7795] try_charge_memcg+0x27a/0xcd0 [ 81.490409][ T7795] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 81.496464][ T7795] __read_swap_cache_async+0x2b9/0x520 [ 81.501909][ T7795] swap_cluster_readahead+0x276/0x3f0 [ 81.507263][ T7795] swapin_readahead+0xe2/0x7a0 [ 81.512009][ T7795] do_swap_page+0x3bc/0x1840 [ 81.516589][ T7795] handle_mm_fault+0x8b9/0x2ac0 [ 81.521436][ T7795] exc_page_fault+0x3b9/0x650 [ 81.526106][ T7795] asm_exc_page_fault+0x26/0x30 [ 81.530949][ T7795] [ 81.533251][ T7795] value changed: 0x00000000ffffaa59 -> 0x00000000ffffaa5a [ 81.540336][ T7795] [ 81.542641][ T7795] Reported by Kernel Concurrency Sanitizer on: [ 81.548772][ T7795] CPU: 0 PID: 7795 Comm: syz.4.1717 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 81.558820][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 81.568862][ T7795] ================================================================== [ 81.578085][ T3173] vhci_hcd: vhci_device speed not set [ 81.621492][ T5325] syz_tun (unregistering): left promiscuous mode [ 81.666389][ T3173] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 81.826017][ T7843] vhci_hcd: connection closed [ 81.826327][ T50] vhci_hcd: stop threads [ 81.835304][ T50] vhci_hcd: release socket [ 81.839725][ T50] vhci_hcd: disconnect device [ 81.980848][ T3114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.021117][ T3114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.059908][ T3114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.116671][ T3114] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 82.127435][ T3114] batman_adv: batadv1: Removing interface: netdevsim0 [ 82.134624][ T3114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.199750][ T3114] bridge_slave_1: left allmulticast mode [ 82.205401][ T3114] bridge_slave_1: left promiscuous mode [ 82.211093][ T3114] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.218992][ T3114] bridge_slave_0: left allmulticast mode [ 82.224655][ T3114] bridge_slave_0: left promiscuous mode [ 82.230867][ T3114] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.284129][ T3114] ip6gretap0 (unregistering): left promiscuous mode [ 82.359319][ T3114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.370937][ T3114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.381371][ T3114] bond0 (unregistering): Released all slaves [ 82.478209][ T3114] hsr_slave_0: left promiscuous mode [ 82.483777][ T3114] hsr_slave_1: left promiscuous mode [ 82.491155][ T3114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.498638][ T3114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.505991][ T3114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.513412][ T3114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.523741][ T3114] veth0_macvtap: left promiscuous mode [ 82.529335][ T3114] veth1_vlan: left promiscuous mode [ 82.534595][ T3114] veth0_vlan: left promiscuous mode [ 82.625074][ T3114] team0 (unregistering): Port device team_slave_1 removed [ 82.642038][ T3114] team0 (unregistering): Port device team_slave_0 removed [ 86.706927][ T3173] usb 5-1: enqueue for inactive port 0 [ 86.712443][ T3173] usb 5-1: enqueue for inactive port 0 [ 86.806224][ T3173] vhci_hcd: vhci_device speed not set