last executing test programs: 2m53.740321322s ago: executing program 32 (id=118): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r0, r1, 0x0, 0x2000000e3aa6ea) 2m31.716152212s ago: executing program 33 (id=643): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2m24.071654685s ago: executing program 34 (id=825): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x42, 0x0, &(0x7f0000000580)) 2m1.289239602s ago: executing program 35 (id=1284): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m58.512382169s ago: executing program 36 (id=1328): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000240)=0x7, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000003c0)={'macvlan1\x00', {0x2, 0x4e21, @remote}}) getsockname$inet(r0, 0x0, &(0x7f0000000100)) 1m42.877810038s ago: executing program 37 (id=1644): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x28, 0xc, 0x5c}, 0x2c) 1m29.341501607s ago: executing program 5 (id=1997): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x22020600) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 1m29.259919748s ago: executing program 5 (id=1999): unshare(0x8000000) r0 = semget$private(0x0, 0x1, 0x3) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x7]) semtimedop(r0, &(0x7f0000000040)=[{0x6, 0x43, 0x1000}], 0x1, 0x0) unshare(0x8000000) 1m29.175774359s ago: executing program 5 (id=2002): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6a) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 1m29.09653117s ago: executing program 5 (id=2005): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 1m29.03584129s ago: executing program 5 (id=2009): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbf59c09c55f0386dd6100000000103afffe8000dfffffffffffffff000000009e0000000000000000000000000000000186"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m28.927778591s ago: executing program 5 (id=2014): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) mq_notify(r0, &(0x7f0000000180)={0x0, 0x3e, 0x0, @thr={0x0, 0x0}}) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r0, 0x0}]) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 1m28.852683452s ago: executing program 38 (id=2014): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) mq_notify(r0, &(0x7f0000000180)={0x0, 0x3e, 0x0, @thr={0x0, 0x0}}) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r0, 0x0}]) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 1m26.840674251s ago: executing program 3 (id=2046): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0xf, 0x8, 0x7, {0x4e24, 0x4e22, [0x3, 0x31, 0xffffff01, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0xde, 0x7fffffff]}, 0x2, 0x3}}, 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) 1m26.793620072s ago: executing program 3 (id=2047): r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x18}) mq_timedreceive(r0, &(0x7f0000000140)=""/117, 0x75, 0xf0ffffff7f0000, 0x0) 1m26.703954972s ago: executing program 3 (id=2049): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x4}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m26.666455813s ago: executing program 3 (id=2051): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) syz_clone(0x20a8500, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 1m26.282350556s ago: executing program 3 (id=2057): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0x3ff}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) 1m25.822366141s ago: executing program 3 (id=2068): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x2, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x1a28951f, 0x0, 0x0, 0x0, 0x0, 0x0) 1m25.822268141s ago: executing program 39 (id=2068): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x2, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x1a28951f, 0x0, 0x0, 0x0, 0x0, 0x0) 1m7.306578878s ago: executing program 8 (id=2454): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200008d5}, 0x20004090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m6.375174006s ago: executing program 8 (id=2484): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0xe, 0xf000, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.164003069s ago: executing program 8 (id=2496): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setuid(0xee00) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000290000003700"], 0x18}}], 0x1, 0x4000000) 1m6.153689768s ago: executing program 8 (id=2498): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x24000894) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) file_getattr(r0, 0x0, &(0x7f0000000040), 0x64, 0x1000) 1m5.783704932s ago: executing program 8 (id=2503): r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) shmat(r0, &(0x7f0000f02000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) 1m5.549191664s ago: executing program 8 (id=2510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)) 1m5.474157875s ago: executing program 40 (id=2510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)) 36.269917583s ago: executing program 4 (id=3217): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 35.392589192s ago: executing program 4 (id=3239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}}, 0x0) 35.392056882s ago: executing program 4 (id=3240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @local}, 0xc) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x400000, 0x9}, 0x8) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 35.334511142s ago: executing program 4 (id=3241): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 35.334081172s ago: executing program 4 (id=3243): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6d}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 35.168630384s ago: executing program 4 (id=3246): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 35.144636474s ago: executing program 41 (id=3246): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 16.087032156s ago: executing program 6 (id=3715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 15.66081035s ago: executing program 6 (id=3726): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x80) 15.475380892s ago: executing program 6 (id=3736): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)="b8d3d8e400000061b9459b68100dbf05177b24a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad49d96f7cc3583630f2ed9c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cfde8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb", 0x90}, {&(0x7f0000000780)="78e2ff9ac7b7289fbd0fd76734ffa281", 0x10}], 0x2, 0x0, 0x0, 0x40084}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r1) 15.382527273s ago: executing program 6 (id=3739): open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x18d883, 0x0) 15.310190413s ago: executing program 6 (id=3741): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000100)=ANY=[@ANYBLOB="757466382c73686f776173736f632c696f636861727365743d69736f383835392d322c636865636b3d72656c617865642c6f76657272696465726f636b7065726d2c63727566742c6d61703d6f66662c6e6f726f636b2c6d61703d61636f726e2c6d61703d6f66662c636865636b3d72656c617865642c6d61703d6f66662c696f636861727365743d64656661756c742c6d6f64653d3078303030303030303030303030303166662c00122b283f78031c611daf7f0bf36a5c73e646912be408e7a81c99d07535d0fafeda084c3f6f8a0495c3d0ab05005e15a482afaff7a92f6c342f7316073712"], 0x4, 0xa07, &(0x7f0000001f80)="$eJzs3UtsXOXZB/D/8SUxBiUB8vHxISCT8CUYcB3bKUkjFjSxJ4mpL5XtSERdEEqcKo1bWtJKgCoRpKqrolZq1UW7Q6zaDRKbsqnYtbt21UWlilX3qKt05erMjOPbjMc2jh3C7xeN51ye877Pub6Z8fF5wxfLwv4VYwsLtdcWxy/+fgcy5i52dvTT9z98r3y9ezN70pnniz8mPUkqSVeSR5PukdHpqYk2BV1PLif5JCmS7E39fUMup/hFHlga/yTF78p6W9qz0ZJpZ4Evtd0+/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4G5UjIwODg4VezI2efHlSl1SWWNkdHqqyMLC2jmLy9R9XOv1u/i4bb1JUb7S07PY1fejB5dmP5KkciSP18cer3VInp68ff8jB154uKtjcflW2Xwuezde7I233r7+6vz83ButQxbeqa/D9uR2lzlfnRybmRqbOHO+WhmbmaqcPnly8PiFczOVc2Pj1ZlLM7PVicrIdPXM7NR0pW/kmcrQ6dMnKtWBS1MXJ8+PDoxXFyee+srw4ODJyksD36yemZ6Zmjz+0sDMyIWx8fGxyfO1mHJ2GXOqPBC/MTZbma2emahUrl6bnzuxKqfO1Ru7DBpqtyZl0HC7oOHB4eGhoeHhoXcbvWffnnDy+dPPnxoc7BpcJWsi7tBBy93lvta7eZuv4LB1HfX2P98dz1gmczEvp9L030hGM52pTLSY37DY/h89Xl233uXtf6OV71o2+7Hyx5E82RjtadH+t8hl5/7dyFt5O9fzauYzn7m8sesZ7ey/86lmMmOZyVTGMpEztSmVxpRKTudkTmYwr+RCDmUmlZzLWMZTzUwuZSazqdaOqJFMp5ozmc1UplNJX0byTCoZyumczolUUs1ALmUqFzOZ8xnNmVopV3Ottt1PrJPj7aChjQQNrxO0ujEvj/XNtf/Ve/V/gmzY9l/EYYsWGu3/nvahfSM7kRAAAACw7f7vL9l38KE//zMp8kTte/lzY+PVF3c7LQAAAGAb1W7Xe7x86y6Hnuipff4f3O20AAAAgG1U1P7GrkjSm0P1ocW/hPIlAAAAANwjar//fzLFoaUJPv8DAADAPaaz7TP22z6Fv+hffPxv5Ur9/Uojoj5W9J4bG68OjEyNvzCUY7WnDCR5Ym1pnUnRXfvzg2dzuB51uLf+3rtUYllnTxk1NPDCUJ7NkXrEkb6nyren+ppEDtcjn65HPr08sjMrIk+UkQBwrzuyTnu80fb/2fTXI/ofqzX5XY81aYMHtawAcLe43cfOfxpdmjVp/xsRT7Zq/7+6zuf/MuKhXD1Uv6VgIK/l9cznSvrTuOPgULNSF3sjqN+G0N/m24Dexi0LfzvVkf413wf03F7X5bFzGU5/028ElpVbLOZwoh7XeWf2AQDstCPrtsMba//723z+73VLIQDcVW73YL+JgXc2Ezz3xo3dXkcAYCWtNAAAAAAAAAAAAAAAAAAAAAAAAAAAAGy/DT3A/6/Hkvn5uWQLnQVseaBnMxmuP9CRHcp51wc6k+xW7S9m00uV+/hzVPqH+xqL/2v3t/w9N7DLFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2RJF0NpvekexNMpjk+M5ndefc3O0Etktlz5YWK27lVt7Mvm3PBwAAAAAAAAAAAAAAAAAAAAAAAAAAAADgS67x/P+O1N/vr09KV0dyNMnlJN/a7Ry3063dTuDOKNqHfK8euPT8/46kOwtFuuq7PUX3yOj01ERZVLG3nP/p+x++V77al722V4WygLKGFZ1LNGpYNqV75VIP1pbqHZ27cf1Hr/+gMnq2dmCenT03PjpxfvrrS4GPFB8lldRfixbz/cnRP/1y2eRGRwnFR+WaNre63nO1ekfX1vu/zZZuUe8GXJufGy5rmq2+PPvj7197c9msh3I4eaov6VtZ03fKV4uaDq/enisVnxU/K/blN7lc2//l1igWinIX7a+t/31Xr83PDbz2+vyV2zm9syKnAzmU5ErSs/GcDrU+NmtHXUd3WetgLaj8cbBNeetaVuJQi+36YO2Q6d3UOlTanF9ttns+6CozOtE0o1/98OEc2/SePtamxqaKz4p/FBfy9/x0Wf8fHeX+P5qmZ2eTImqRy46U5fNWnF4d9cjavhhePuOV1WW2PCu5A36eb+drt/d/x7Lrf2Nf7cz1aFmNzc+LZPPnxQf717QoS2ot0sFVLVLj6tNqmUaeB+tRLfL8nzxXL3MTV5Tn2rXYd+j8/23Rl3/npv5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu1+RdDab3pEcTXIgyf5yvJIsrI65uYX6OnqLraS5bbaS8xdP0XJFi1u5lTezb6czAgAAAAAAAODOODv66fsfvle+ar+P78z/dzTmVJKuJAeKX3ePjE5PTbQpqDu5vPgr/Z7N5XC5/PHA0vgn5dijbRba3dsHAOAL7b8BAAD///69bw8=") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x9080) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xffff, 0x0) 14.970661466s ago: executing program 6 (id=3751): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) tkill(r0, 0x12) waitid(0x1, r0, 0x0, 0x8, &(0x7f0000000240)) 14.950352947s ago: executing program 42 (id=3751): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) tkill(r0, 0x12) waitid(0x1, r0, 0x0, 0x8, &(0x7f0000000240)) 1.735490023s ago: executing program 0 (id=4083): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='bond_slave_1\x00', &(0x7f0000000200)='-*\\\x00', 0x0) 1.710795993s ago: executing program 0 (id=4084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.649844144s ago: executing program 0 (id=4085): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000080)={&(0x7f0000000040)=[{0x0, 0x2, 0x0, {0x213, 0x13c8a1a9, 0x2}}], 0x1, 0x20, 0x101, 0x7}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 1.587042334s ago: executing program 0 (id=4086): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000234308000000000000000000850000004100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, r2, 0x25, 0x4, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 1.567434725s ago: executing program 0 (id=4088): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 992.61568ms ago: executing program 1 (id=4095): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6020400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0xc, 0x0, 0xb, 0x4, 0x35]}, &(0x7f0000000040)=0x54) 969.32179ms ago: executing program 0 (id=4096): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) 682.621973ms ago: executing program 2 (id=4099): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) shutdown(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80800) 653.609333ms ago: executing program 7 (id=4101): r0 = socket(0x1, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/54, 0x36}], 0x1}}], 0x2, 0x0, 0x0) 486.035205ms ago: executing program 1 (id=4103): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000140)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) 485.835685ms ago: executing program 2 (id=4104): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x40000000) getdents64(r0, &(0x7f0000000040)=""/225, 0xe1) 419.979776ms ago: executing program 7 (id=4105): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 385.728916ms ago: executing program 9 (id=4106): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080), 0x2204803, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 372.913246ms ago: executing program 1 (id=4107): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4601f5f014ab0800000000000002003e00010000809a010000380000008b0000000600000005002000020001000100200000f2ffff04"], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x10012, r0, 0x0) 331.530246ms ago: executing program 9 (id=4108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 330.913846ms ago: executing program 1 (id=4109): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) sendmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000000) sendmsg(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0xa0) 312.024277ms ago: executing program 2 (id=4110): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000b80)={[{@init_itable}, {@usrjquota}, {@nobh}, {@resuid}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40, 0xa3) ioctl$EXT4_IOC_MIGRATE(r0, 0x80e8662d) 280.707997ms ago: executing program 1 (id=4111): socket$pppl2tp(0x18, 0x1, 0x1) pipe(0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '&'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) 235.117567ms ago: executing program 9 (id=4112): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x1002, 0x7, 0x7, 0x9, 0x5, 0x3, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x10) 208.314707ms ago: executing program 7 (id=4113): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000100)="0000000001", 0x0, 0x7228, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x8, 0x0, 0xfd, r1}, [@IFA_LOCAL={0x14, 0x2, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) 207.886787ms ago: executing program 1 (id=4123): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(0x3) 162.582188ms ago: executing program 7 (id=4114): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8044000}, 0x0) 146.471908ms ago: executing program 9 (id=4115): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close(0x4) 133.041668ms ago: executing program 2 (id=4116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 121.576218ms ago: executing program 7 (id=4117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) 105.487839ms ago: executing program 9 (id=4118): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) 69.727379ms ago: executing program 9 (id=4119): unshare(0x2040600) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) 64.722979ms ago: executing program 2 (id=4120): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4605100702000000000000000003003e00f9ffffffda0300000000000040000000000000008b000000000000002c0d000005003800020078000700040051e57464"], 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 23.954209ms ago: executing program 2 (id=4121): unshare(0x60600) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020400) close(r0) 0s ago: executing program 7 (id=4122): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) kernel console output (not intermixed with test programs): 2) [ 141.654170][T10850] loop0: detected capacity change from 0 to 2048 [ 141.663794][T10852] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 141.686111][T10850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.725359][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.786572][T10859] loop9: detected capacity change from 0 to 256 [ 141.802161][T10859] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.853443][T10859] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.887197][T10868] veth1_to_bond: entered allmulticast mode [ 141.906055][T10867] veth1_to_bond: left allmulticast mode [ 141.922147][T10870] loop8: detected capacity change from 0 to 512 [ 141.949227][T10870] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.2355: Invalid inode bitmap blk 4 in block_group 0 [ 141.985105][T10870] loop8: lost filesystem error report for type 5 error -117 [ 141.985663][T10870] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.033172][T10877] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 142.061471][T10879] loop9: detected capacity change from 0 to 1024 [ 142.132136][T10879] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.162658][ T7353] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.189554][ T7206] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.508079][T10929] loop2: detected capacity change from 0 to 1024 [ 142.518211][T10929] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.555110][T10929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.646048][T10940] loop0: detected capacity change from 0 to 1024 [ 142.653793][T10940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.668509][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.696378][T10940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.806504][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.876992][T10957] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 143.254323][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2404'. [ 144.068181][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2434'. [ 144.078819][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2434'. [ 144.153565][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 144.819093][ T4364] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.819255][ T3722] Bluetooth: hci0: command 0x1003 tx timeout [ 145.115491][T11121] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 145.115491][T11121] The task syz.0.2447 (11121) triggered the difference, watch for misbehavior. [ 145.700299][T11149] netlink: 'syz.2.2462': attribute type 1 has an invalid length. [ 145.732211][T11149] netlink: 'syz.2.2462': attribute type 2 has an invalid length. [ 145.740431][T11149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2462'. [ 145.760826][T11149] netlink: 'syz.2.2462': attribute type 1 has an invalid length. [ 145.822074][T11149] netlink: 'syz.2.2462': attribute type 2 has an invalid length. [ 145.831534][T11149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2462'. [ 145.878243][T11155] loop0: detected capacity change from 0 to 512 [ 145.900545][T11155] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2465: EA inode hash validation failed [ 145.929747][T11155] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.2465: iget: bad extra_isize 90 (inode size 256) [ 145.960238][T11155] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.960575][T11155] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2465: error while reading EA inode 11 err=-117 [ 145.970244][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 145.970270][ C0] EXT4-fs (loop0): initial error at time 1777932533: ext4_xattr_inode_iget:441: inode 11 [ 145.970311][ C0] EXT4-fs (loop0): last error at time 1777932533: ext4_xattr_inode_iget:441: inode 11 [ 145.999369][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'. [ 146.019092][T11155] loop0: lost filesystem error report for type 5 error -117 [ 146.022265][T11155] EXT4-fs (loop0): 1 orphan inode deleted [ 146.038567][T11155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.087774][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.103653][T11169] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2471'. [ 146.110042][ T4448] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 146.129504][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'. [ 146.179292][ T3414] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 146.238805][T11176] netlink: 452 bytes leftover after parsing attributes in process `syz.4.2474'. [ 146.347484][T11133] Set syz1 is full, maxelem 65536 reached [ 146.422890][T11199] sock: sock_set_timeout: `syz.2.2485' (pid 11199) tries to set negative timeout [ 146.422938][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 146.422984][ T28] audit: type=1400 audit(1777932533.647:2034): avc: denied { setopt } for pid=11198 comm="syz.2.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.628968][T11229] loop2: detected capacity change from 0 to 256 [ 146.639652][T11230] loop8: detected capacity change from 0 to 512 [ 146.647757][T11229] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.659862][T11230] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.692532][T11229] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 146.704380][T11229] FAT-fs (loop2): Filesystem has been set read-only [ 146.721270][T11230] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 146.752941][T11229] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 146.761673][T11230] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 146.779373][T11230] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2498: Failed to acquire dquot type 1 [ 146.794194][T11230] loop8: lost filesystem error report for type 5 error -5 [ 146.794847][T11230] EXT4-fs (loop8): 1 truncate cleaned up [ 146.796462][ T28] audit: type=1400 audit(1777932534.017:2035): avc: denied { getattr } for pid=11242 comm="syz.4.2501" path="socket:[30800]" dev="sockfs" ino=30800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 146.803182][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 146.803205][ C1] EXT4-fs (loop8): last error at time 1777932534: ext4_acquire_dquot:7034 [ 146.850682][T11230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 146.869185][ T28] audit: type=1400 audit(1777932534.087:2036): avc: denied { write } for pid=11227 comm="syz.8.2498" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.900587][T11229] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 146.909222][ T3414] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 146.924562][T11229] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 146.955705][ T28] audit: type=1400 audit(1777932534.177:2037): avc: denied { write } for pid=11234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.986738][ T7206] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 146.998242][ T7206] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 147.015276][ T7206] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz-executor: Failed to acquire dquot type 1 [ 147.020604][ T28] audit: type=1400 audit(1777932534.207:2038): avc: denied { write } for pid=7206 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.085146][ T28] audit: type=1400 audit(1777932534.277:2039): avc: denied { write } for pid=11256 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.135838][ T7514] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 147.224466][ T30] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.300379][ T30] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.372775][T11277] loop0: detected capacity change from 0 to 4096 [ 147.411267][T11277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.441236][ T30] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.530474][ T30] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.664329][ T30] bridge_slave_1: left allmulticast mode [ 147.673444][ T30] bridge_slave_1: left promiscuous mode [ 147.692888][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.721452][ T30] bridge_slave_0: left allmulticast mode [ 147.737331][ T30] bridge_slave_0: left promiscuous mode [ 147.755648][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.893969][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.909387][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.928341][ T30] bond0 (unregistering): Released all slaves [ 147.949787][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 148.134800][T11347] netlink: 'syz.4.2528': attribute type 1 has an invalid length. [ 148.202189][T11281] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.241336][T11281] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.281005][T11281] bridge_slave_0: entered allmulticast mode [ 148.318218][T11281] bridge_slave_0: entered promiscuous mode [ 148.339691][T11281] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.374429][T11281] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.395244][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.408812][T11281] bridge_slave_1: entered allmulticast mode [ 148.430921][T11281] bridge_slave_1: entered promiscuous mode [ 148.484460][T11281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.512123][T11281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.555653][T11281] team0: Port device team_slave_0 added [ 148.598785][T11281] team0: Port device team_slave_1 added [ 148.662598][T11281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.687813][T11281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.780402][T11281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.816039][T11281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.842795][T11281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.929079][T11281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.987165][T11281] hsr_slave_0: entered promiscuous mode [ 149.006706][T11281] hsr_slave_1: entered promiscuous mode [ 149.023678][T11281] debugfs: 'hsr0' already exists in 'hsr' [ 149.039112][T11281] Cannot create hsr debugfs directory [ 149.051062][ T30] hsr_slave_0: left promiscuous mode [ 149.061297][ T30] hsr_slave_1: left promiscuous mode [ 149.077464][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.105363][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.174508][ T30] team0 (unregistering): Port device team_slave_1 removed [ 149.206672][ T30] team0 (unregistering): Port device team_slave_0 removed [ 149.381527][T11281] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.434137][T11281] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.546755][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 149.779167][T11281] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.844647][T11452] __nla_validate_parse: 2 callbacks suppressed [ 149.844666][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2546'. [ 149.890666][T11452] netlink: 'syz.9.2546': attribute type 5 has an invalid length. [ 149.914105][T11452] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2546'. [ 149.946775][T11452] geneve2: entered promiscuous mode [ 149.958569][T11452] geneve2: entered allmulticast mode [ 149.973697][ T5793] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 149.995989][ T5793] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 150.025969][ T5793] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 150.045977][ T5793] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 150.075087][T11281] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.203388][T11281] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.221240][T11281] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.236789][T11281] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.256101][T11281] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.270057][T11281] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.295978][T11281] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.307557][T11281] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.326465][T11281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.455658][T11281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.484722][T11281] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.505319][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.513343][ T5793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.540485][T11516] loop9: detected capacity change from 0 to 8192 [ 150.552158][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.559299][ T5797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.705112][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 150.785300][T11542] netlink: 'syz.4.2561': attribute type 12 has an invalid length. [ 150.855185][T11281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.974980][T11281] veth0_vlan: entered promiscuous mode [ 150.982104][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 150.994246][T11281] veth1_vlan: entered promiscuous mode [ 151.019583][T11281] veth0_macvtap: entered promiscuous mode [ 151.027534][T11281] veth1_macvtap: entered promiscuous mode [ 151.043518][T11281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.064432][T11281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.076684][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.093524][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.108823][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.133864][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.232750][T11589] loop0: detected capacity change from 0 to 512 [ 151.243687][T11589] EXT4-fs: inline encryption not supported [ 151.266130][T11589] EXT4-fs: inline encryption not supported [ 151.274951][T11589] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 151.303607][T11589] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 151.320971][T11589] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2564: bg 0: block 248: padding at end of block bitmap is not set [ 151.349100][T11589] loop0: lost filesystem error report for type 5 error -117 [ 151.350426][T11589] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2564: Failed to acquire dquot type 1 [ 151.369612][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 151.369632][ C0] EXT4-fs (loop0): last error at time 1777932538: ext4_validate_block_bitmap:441 [ 151.385685][T11589] loop0: lost filesystem error report for type 5 error -28 [ 151.390579][T11589] EXT4-fs (loop0): 1 truncate cleaned up [ 151.409611][T11589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 151.436096][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 151.436116][ T28] audit: type=1400 audit(1777932538.656:2094): avc: denied { write } for pid=11586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.485122][T11589] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 151.501691][ T28] audit: type=1400 audit(1777932538.726:2095): avc: denied { write } for pid=11609 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.614478][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 151.654646][ T28] audit: type=1400 audit(1777932538.876:2096): avc: denied { write } for pid=11611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.738478][ T28] audit: type=1400 audit(1777932538.956:2097): avc: denied { write } for pid=11624 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.918608][ T28] audit: type=1400 audit(1777932539.136:2098): avc: denied { write } for pid=11632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.016261][ T28] audit: type=1400 audit(1777932539.236:2099): avc: denied { write } for pid=11658 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.100312][ T28] audit: type=1326 audit(1777932539.266:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.9.2579" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd0acdd9 code=0x7ffc0000 [ 152.174038][ T28] audit: type=1326 audit(1777932539.266:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.9.2579" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd0acdd9 code=0x7ffc0000 [ 152.241054][ T28] audit: type=1326 audit(1777932539.266:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.9.2579" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd0acdd9 code=0x7ffc0000 [ 152.299778][T11684] loop0: detected capacity change from 0 to 2048 [ 152.323077][T11668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.323313][T11684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.396940][T11684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.514046][T11684] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2583: bg 0: block 2: invalid block bitmap [ 152.569479][T11684] EXT4-fs (loop0): Remounting filesystem read-only [ 152.675973][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.207842][T11783] loop9: detected capacity change from 0 to 256 [ 153.224752][T11783] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.241451][ T4462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.270526][T11783] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.469450][T11789] loop9: detected capacity change from 0 to 512 [ 153.502175][T11789] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 153.607005][ T5782] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 153.703157][T11794] loop9: detected capacity change from 0 to 2048 [ 153.730735][T11794] EXT4-fs: Ignoring removed nobh option [ 153.776178][T11794] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.809209][T11794] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.884488][ T7353] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.904955][T11800] loop0: detected capacity change from 0 to 4096 [ 153.964949][T11800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.144358][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.179382][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.259396][ T4462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.451353][T11847] loop9: detected capacity change from 0 to 512 [ 154.471425][T11849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.493638][T11847] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 154.521125][T11847] ext4 filesystem being mounted at /301/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.567380][ T7353] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 154.693688][T11867] xt_hashlimit: size too large, truncated to 1048576 [ 154.739617][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.757313][T11877] loop2: detected capacity change from 0 to 256 [ 154.764830][T11877] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.802679][T11877] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.841530][T11881] loop9: detected capacity change from 0 to 1024 [ 154.862737][T11881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.894290][T11881] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.926454][ T5782] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: comm kworker/u8:10: lblock 0 mapped to illegal pblock 0 (length 1) [ 154.945710][ T5782] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 154.958850][ T5782] EXT4-fs (loop9): This should not happen!! Data will be lost [ 154.958850][ T5782] [ 154.978112][ T7353] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 154.990481][ T7353] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 155.059442][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.098904][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2654'. [ 155.111540][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2654'. [ 155.299270][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.310043][ T4456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.341412][T11928] xt_hashlimit: size too large, truncated to 1048576 [ 155.341987][T11930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2665'. [ 155.501041][T11940] syzkaller1: entered allmulticast mode [ 155.717807][T11957] netlink: 'syz.9.2677': attribute type 2 has an invalid length. [ 155.784879][T11966] loop1: detected capacity change from 0 to 512 [ 155.794224][T11966] EXT4-fs: Ignoring removed nobh option [ 155.802295][T11966] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.821668][T11964] geneve3: entered promiscuous mode [ 155.827815][T11964] geneve3: entered allmulticast mode [ 155.833640][T11966] EXT4-fs (loop1): 1 truncate cleaned up [ 155.840754][T11966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.875219][T11281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.028472][T11978] loop9: detected capacity change from 0 to 128 [ 156.087169][T11982] loop9: detected capacity change from 0 to 512 [ 156.101175][T11982] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 156.112677][T11982] EXT4-fs (loop9): 1 truncate cleaned up [ 156.119621][T11982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.210163][ T7353] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.349338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.358543][ T3414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.522394][T12010] EXT4-fs: Ignoring removed bh option [ 156.541663][T12010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.560249][ T28] kauditd_printk_skb: 452 callbacks suppressed [ 156.560266][ T28] audit: type=1400 audit(1777932543.786:2553): avc: denied { write } for pid=12009 comm="syz.0.2698" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.578118][T12010] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2698: bg 0: block 248: padding at end of block bitmap is not set [ 156.625397][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.702233][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 156.710817][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 156.847574][T12052] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2716'. [ 156.951507][T12054] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.967375][T12066] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12066 comm=syz.4.2723 [ 157.277029][ T28] audit: type=1400 audit(1777932544.496:2554): avc: denied { attach_queue } for pid=12101 comm="syz.1.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 157.654882][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2753'. [ 158.429174][ T3414] net_ratelimit: 4 callbacks suppressed [ 158.429191][ T3414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.739086][ T4364] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 158.739180][ T3722] Bluetooth: hci0: command 0x1003 tx timeout [ 158.833542][T12159] set_capacity_and_notify: 2 callbacks suppressed [ 158.833564][T12159] loop9: detected capacity change from 0 to 512 [ 158.882882][T12159] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.2765: corrupted in-inode xattr: invalid ea_ino [ 158.948204][T12159] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.949035][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 158.965030][ C1] EXT4-fs (loop9): initial error at time 1777932546: ext4_iget_extra_inode:5128: inode 15 [ 158.975079][ C1] EXT4-fs (loop9): last error at time 1777932546: ext4_iget_extra_inode:5128: inode 15 [ 158.989806][T12159] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2765: couldn't read orphan inode 15 (err -117) [ 159.026568][T12159] loop9: lost filesystem error report for type 5 error -117 [ 159.027343][T12159] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.134957][ T7353] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.315296][T12172] loop9: detected capacity change from 0 to 512 [ 159.461349][ T4458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.668755][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2786'. [ 159.706659][T12189] netlink: 'syz.9.2777': attribute type 8 has an invalid length. [ 159.807181][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2782'. [ 159.834894][T12204] netlink: 'syz.9.2784': attribute type 13 has an invalid length. [ 159.851991][T12204] netlink: 24859 bytes leftover after parsing attributes in process `syz.9.2784'. [ 159.873365][T12202] ip_vti0: Master is either lo or non-ether device [ 160.012195][T12219] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12219 comm=syz.4.2791 [ 160.163945][T12241] loop1: detected capacity change from 0 to 256 [ 160.213782][ T28] audit: type=1400 audit(1777932547.436:2555): avc: denied { watch watch_reads } for pid=12240 comm="syz.1.2801" path="/54/file0/file0/file0" dev="loop1" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 160.221180][T12250] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2805'. [ 160.271528][T12252] loop2: detected capacity change from 0 to 256 [ 160.318869][ T28] audit: type=1400 audit(1777932547.536:2556): avc: denied { watch_reads } for pid=12251 comm="syz.2.2817" path="/117/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 160.370336][T12259] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20002 [ 160.445055][T12267] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2821'. [ 160.501602][ T3414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.551827][ T28] audit: type=1400 audit(1777932547.776:2557): avc: denied { getopt } for pid=12262 comm="syz.4.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.606743][T12278] loop2: detected capacity change from 0 to 1024 [ 160.628262][T12281] netlink: 'syz.9.2816': attribute type 1 has an invalid length. [ 160.641367][T12278] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 160.651580][T12281] netlink: 'syz.9.2816': attribute type 2 has an invalid length. [ 160.662999][T12281] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2816'. [ 160.672450][T12278] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 160.679347][T12282] netlink: 'syz.9.2816': attribute type 1 has an invalid length. [ 160.683158][T12278] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 160.699857][T12282] netlink: 'syz.9.2816': attribute type 2 has an invalid length. [ 160.708968][T12282] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2816'. [ 160.740552][T12278] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2827'. [ 160.791337][T12286] loop9: detected capacity change from 0 to 128 [ 160.807936][T12286] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.827200][T12286] ext4 filesystem being mounted at /358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.876748][ T28] audit: type=1400 audit(1777932548.096:2558): avc: denied { write } for pid=12285 comm="syz.9.2822" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.919166][ T7353] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.979092][T12299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2835'. [ 161.006906][T12299] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.014457][T12299] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.028525][T12299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2835'. [ 161.106594][T12310] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 161.140099][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 161.148909][ T3414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.157047][ T3414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.364732][T12330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2840'. [ 161.410931][T12333] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2842'. [ 161.428244][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 161.540520][ T4458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.087807][ T28] audit: type=1400 audit(1777932549.306:2559): avc: denied { ioctl } for pid=12403 comm="syz.1.2875" path="socket:[33376]" dev="sockfs" ino=33376 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.109791][T12408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.122370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.153448][T12412] loop2: detected capacity change from 0 to 164 [ 162.184038][ T28] audit: type=1400 audit(1777932549.396:2560): avc: denied { read } for pid=12407 comm="syz.1.2877" path="socket:[33389]" dev="sockfs" ino=33389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 162.209923][T12412] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 162.299847][T12426] bond1: Invalid ad_actor_system MAC address. [ 162.316600][T12426] bond1: option ad_actor_system: invalid value (4294967295) [ 162.353646][T12426] bond1 (unregistering): Released all slaves [ 162.419608][ T4446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.179304][T12520] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12520 comm=syz.9.2927 [ 163.434714][ T28] audit: type=1400 audit(1777932551.655:2561): avc: denied { write } for pid=12524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.478451][T12539] loop0: detected capacity change from 0 to 512 [ 163.495168][T12539] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.498078][ T28] audit: type=1400 audit(1777932551.715:2562): avc: denied { write } for pid=12540 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.543932][T12539] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.2930: corrupted in-inode xattr: e_value size too large [ 163.567186][T12539] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.567462][T12539] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2930: couldn't read orphan inode 15 (err -117) [ 163.577126][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 163.577149][ C1] EXT4-fs (loop0): initial error at time 1777932551: ext4_iget_extra_inode:5128: inode 15 [ 163.577194][ C1] EXT4-fs (loop0): last error at time 1777932551: ext4_iget_extra_inode:5128: inode 15 [ 163.618494][T12539] loop0: lost filesystem error report for type 5 error -117 [ 163.619143][ T4458] net_ratelimit: 2 callbacks suppressed [ 163.619183][ T4458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.619634][T12539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.663330][T12539] EXT4-fs (loop0): shut down requested (2) [ 163.692779][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.702530][ T4446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.828499][T12556] loop0: detected capacity change from 0 to 8192 [ 164.286071][ T28] audit: type=1400 audit(1777932552.505:2563): avc: denied { write } for pid=12584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.342787][ T4446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.395119][ T28] audit: type=1400 audit(1777932552.605:2564): avc: denied { write } for pid=12600 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.620275][ T28] audit: type=1326 audit(1777932552.835:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.2.2950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69724acdd9 code=0x7ffc0000 [ 164.660758][ T4462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.706599][ T28] audit: type=1326 audit(1777932552.875:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.2.2950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69724acdd9 code=0x7ffc0000 [ 164.792882][ T28] audit: type=1326 audit(1777932552.875:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.2.2950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69724acdd9 code=0x7ffc0000 [ 164.849856][ T28] audit: type=1326 audit(1777932552.875:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.2.2950" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69724acdd9 code=0x7ffc0000 [ 164.979320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.194705][T12628] netlink: 'syz.0.2953': attribute type 5 has an invalid length. [ 165.229595][T12628] __nla_validate_parse: 12 callbacks suppressed [ 165.229615][T12628] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2953'. [ 165.578074][T12655] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.598454][T12659] netlink: 'syz.0.2960': attribute type 4 has an invalid length. [ 165.718515][T12655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.745038][T12655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.841920][ T5801] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.867196][ T5801] netdevsim netdevsim9 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 165.888658][ T5801] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.914047][ T5801] netdevsim netdevsim9 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 165.937155][ T5801] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.960511][ T5801] netdevsim netdevsim9 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 165.987835][ T5801] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.013308][ T5801] netdevsim netdevsim9 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 166.117442][ T4458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.527286][T12724] loop0: detected capacity change from 0 to 4096 [ 166.549390][T12724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.588163][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.699651][T12741] loop0: detected capacity change from 0 to 512 [ 166.707185][T12741] EXT4-fs: test_dummy_encryption option not supported [ 166.714987][T12741] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 166.740373][ T4445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.139229][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.275758][T12774] loop1: detected capacity change from 0 to 512 [ 167.291511][T12774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.306620][T12774] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.330666][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 167.330684][ T28] audit: type=1400 audit(1777932555.555:2616): avc: denied { write } for pid=12773 comm="syz.1.3010" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.376085][T11281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.476897][ T28] audit: type=1400 audit(1777932555.685:2617): avc: denied { create } for pid=12790 comm="syz.1.3016" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.519547][ T28] audit: type=1400 audit(1777932555.695:2618): avc: denied { write } for pid=12790 comm="syz.1.3016" name="file0" dev="tmpfs" ino=513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.566842][ T28] audit: type=1400 audit(1777932555.695:2619): avc: denied { open } for pid=12790 comm="syz.1.3016" path="/96/file0" dev="tmpfs" ino=513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.600617][ T28] audit: type=1400 audit(1777932555.695:2620): avc: denied { ioctl } for pid=12790 comm="syz.1.3016" path="/96/file0" dev="tmpfs" ino=513 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.725432][ T28] audit: type=1400 audit(1777932555.945:2621): avc: denied { unlink } for pid=11281 comm="syz-executor" name="file0" dev="tmpfs" ino=513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.778620][T12797] loop1: detected capacity change from 0 to 4096 [ 167.794686][T12797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.810425][ T28] audit: type=1400 audit(1777932556.035:2622): avc: denied { write } for pid=12796 comm="syz.1.3018" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.115518][T11281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.142846][T12815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.151247][T12815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.816285][ T28] audit: type=1400 audit(1777932557.035:2623): avc: denied { map } for pid=12857 comm="syz.0.3042" path="socket:[34964]" dev="sockfs" ino=34964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.844710][ T28] audit: type=1400 audit(1777932557.035:2624): avc: denied { read } for pid=12857 comm="syz.0.3042" path="socket:[34964]" dev="sockfs" ino=34964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.919607][T12866] loop0: detected capacity change from 0 to 128 [ 168.926873][T12866] EXT4-fs: Ignoring removed nobh option [ 168.939870][T12866] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.952831][T12866] ext4 filesystem being mounted at /632/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.967184][ T28] audit: type=1400 audit(1777932557.195:2625): avc: denied { write } for pid=12865 comm="syz.0.3046" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.033553][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.112044][T12880] loop0: detected capacity change from 0 to 1024 [ 169.119481][T12880] EXT4-fs: Ignoring removed bh option [ 169.131569][T12880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.146096][T12880] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.0.3051: path /635/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 169.169405][T12880] EXT4-fs (loop0): Remounting filesystem read-only [ 169.186283][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.887982][T12935] loop1: detected capacity change from 0 to 32768 [ 171.717649][T12983] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3096'. [ 172.046788][T13006] loop1: detected capacity change from 0 to 256 [ 172.061680][T13006] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.067971][T13009] loop2: detected capacity change from 0 to 512 [ 172.090413][T13006] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.124404][T13009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.139398][T13013] netlink: 'syz.4.3109': attribute type 21 has an invalid length. [ 172.144687][T13009] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.190425][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.223149][T13026] vcan0: tx address claim with different name [ 172.321938][T13044] xt_hashlimit: max too large, truncated to 1048576 [ 172.497094][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3125'. [ 172.558315][T13060] loop1: detected capacity change from 0 to 2048 [ 172.567016][T13060] EXT4-fs: Ignoring removed nobh option [ 172.596543][T13060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.609186][T13060] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.652516][ T28] kauditd_printk_skb: 588 callbacks suppressed [ 172.652549][ T28] audit: type=1400 audit(1777932560.865:3214): avc: denied { write } for pid=13059 comm="syz.1.3128" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.696031][T11281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.132086][T13089] Invalid argument reading file caps for ./file0 [ 173.386693][T13105] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 174.047809][T13066] syz.2.3130 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 174.110544][T13066] CPU: 1 UID: 0 PID: 13066 Comm: syz.2.3130 Not tainted syzkaller #0 PREEMPT(full) [ 174.110575][T13066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.110591][T13066] Call Trace: [ 174.110600][T13066] [ 174.110610][T13066] __dump_stack+0x1d/0x30 [ 174.110639][T13066] dump_stack_lvl+0x95/0xd0 [ 174.110681][T13066] dump_stack+0x15/0x1b [ 174.110705][T13066] dump_header+0x80/0x240 [ 174.110791][T13066] oom_kill_process+0x295/0x350 [ 174.110838][T13066] out_of_memory+0x97d/0xb80 [ 174.110903][T13066] try_charge_memcg+0x62f/0xa10 [ 174.110940][T13066] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 174.110967][T13066] __alloc_frozen_pages_noprof+0x18a/0x350 [ 174.111009][T13066] alloc_pages_mpol+0xb3/0x260 [ 174.111041][T13066] alloc_pages_noprof+0x8f/0x140 [ 174.111071][T13066] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 174.111114][T13066] __kvmalloc_node_noprof+0x3d4/0x640 [ 174.111142][T13066] ? futex_hash_allocate+0x190/0x9a0 [ 174.111175][T13066] ? futex_hash_allocate+0x190/0x9a0 [ 174.111216][T13066] futex_hash_allocate+0x190/0x9a0 [ 174.111258][T13066] ? cap_task_prctl+0x13f/0x6b0 [ 174.111337][T13066] futex_hash_prctl+0xd8/0xf0 [ 174.111370][T13066] __se_sys_prctl+0x4f4/0x1400 [ 174.111399][T13066] __x64_sys_prctl+0x67/0x80 [ 174.111426][T13066] x64_sys_call+0x2533/0x3020 [ 174.111517][T13066] do_syscall_64+0x12c/0x3b0 [ 174.111545][T13066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.111571][T13066] RIP: 0033:0x7f69724acdd9 [ 174.111639][T13066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.111662][T13066] RSP: 002b:00007f6970f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 174.111700][T13066] RAX: ffffffffffffffda RBX: 00007f6972725fa0 RCX: 00007f69724acdd9 [ 174.111716][T13066] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 174.111730][T13066] RBP: 00007f6972542d69 R08: 0000000000000000 R09: 0000000000000000 [ 174.111744][T13066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.111769][T13066] R13: 00007f6972726038 R14: 00007f6972725fa0 R15: 00007ffcda9d4988 [ 174.111794][T13066] [ 174.111802][T13066] memory: usage 307200kB, limit 307200kB, failcnt 245 [ 174.349071][T13066] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 174.382964][T13066] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 174.414110][T13066] Memory cgroup stats for /syz2: [ 174.414349][T13066] cache 0 [ 174.444667][T13066] rss 4096 [ 174.462116][T13066] shmem 0 [ 174.468921][T13066] mapped_file 0 [ 174.480678][T13066] dirty 0 [ 174.483717][T13066] writeback 0 [ 174.493087][T13066] workingset_refault_anon 143 [ 174.504764][T13066] workingset_refault_file 666 [ 174.518007][T13066] swap 368640 [ 174.521011][T13119] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 174.525999][T13066] swapcached 13242368 [ 174.548235][T13066] pgpgin 82143 [ 174.555094][T13066] pgpgout 82141 [ 174.563981][T13066] pgfault 77034 [ 174.571571][T13066] pgmajfault 85 [ 174.581479][T13066] inactive_anon 8192 [ 174.591020][T13066] active_anon 0 [ 174.609660][T13066] inactive_file 0 [ 174.616855][T13066] active_file 0 [ 174.626767][T13066] unevictable 0 [ 174.638717][T13066] hierarchical_memory_limit 314572800 [ 174.644982][T13066] hierarchical_memsw_limit 9223372036854771712 [ 174.670595][T13066] total_cache 0 [ 174.674361][T13066] total_rss 4096 [ 174.678018][T13066] total_shmem 0 [ 174.681923][T13066] total_mapped_file 0 [ 174.686368][T13066] total_dirty 0 [ 174.690515][T13066] total_writeback 0 [ 174.710984][T13066] total_workingset_refault_anon 143 [ 174.717977][T13066] total_workingset_refault_file 666 [ 174.723469][T13066] total_swap 368640 [ 174.727370][T13066] total_swapcached 13242368 [ 174.737483][T13066] total_pgpgin 82143 [ 174.742978][T13066] total_pgpgout 82141 [ 174.758881][T13066] total_pgfault 77034 [ 174.764580][T13066] total_pgmajfault 85 [ 174.770190][T13066] total_inactive_anon 8192 [ 174.779242][T13066] total_active_anon 0 [ 174.796298][T13066] total_inactive_file 0 [ 174.811008][T13066] total_active_file 0 [ 174.818063][T13066] total_unevictable 0 [ 174.823736][T13066] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3130,pid=13065,uid=0 [ 174.840711][T13066] Memory cgroup out of memory: Killed process 13066 (syz.2.3130) total-vm:96084kB, anon-rss:1244kB, file-rss:22208kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 175.036292][T13158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3170'. [ 175.045739][T13159] loop2: detected capacity change from 0 to 128 [ 175.109729][T13159] FAT-fs (loop2): error, corrupted directory (invalid i_start) [ 175.124025][T13163] net_ratelimit: 297 callbacks suppressed [ 175.124042][T13163] openvswitch: netlink: Missing key (keys=40, expected=100) [ 175.136203][T13159] FAT-fs (loop2): Filesystem has been set read-only [ 175.201900][T13168] loop2: detected capacity change from 0 to 128 [ 175.372060][T13168] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.391556][T13168] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.410773][ T28] audit: type=1400 audit(1777932563.635:3215): avc: denied { write } for pid=13166 comm="syz.2.3177" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.455520][ T9453] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.581396][T13195] loop2: detected capacity change from 0 to 2048 [ 175.614991][T13195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.672452][ T28] audit: type=1400 audit(1777932563.895:3216): avc: denied { write } for pid=13194 comm="syz.2.3190" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.711214][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.848260][ T28] audit: type=1400 audit(1777932564.065:3217): avc: denied { connect } for pid=13219 comm="syz.9.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.997855][T13225] raw_sendmsg: syz.9.3201 forgot to set AF_INET. Fix it! [ 176.032684][T13227] loop0: detected capacity change from 0 to 1024 [ 176.046121][T13227] EXT4-fs: Ignoring removed orlov option [ 176.082512][T13227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.115813][ T28] audit: type=1400 audit(1777932564.335:3218): avc: denied { write } for pid=13226 comm="syz.0.3202" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.138890][ T28] audit: type=1400 audit(1777932564.335:3219): avc: denied { write } for pid=13226 comm="syz.0.3202" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.170898][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.289885][T13257] loop1: detected capacity change from 0 to 512 [ 176.306751][T13257] EXT4-fs: Ignoring removed i_version option [ 176.320444][T13257] EXT4-fs: Ignoring removed bh option [ 176.361150][T13257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.377219][T13257] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.426930][T11281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.514342][ T28] audit: type=1400 audit(1777932564.735:3220): avc: denied { listen } for pid=13285 comm="syz.4.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.553199][ T28] audit: type=1400 audit(1777932564.775:3221): avc: denied { create } for pid=13289 comm="syz.0.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 176.681370][T13307] loop0: detected capacity change from 0 to 512 [ 176.725738][T13307] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.3221: inode has both inline data and extents flags [ 176.747209][T13307] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.749029][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 176.765843][ C1] EXT4-fs (loop0): initial error at time 1777932564: ext4_orphan_get:1397: inode 15 [ 176.769601][T13307] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3221: couldn't read orphan inode 15 (err -117) [ 176.775460][ C1] EXT4-fs (loop0): last error at time 1777932564: ext4_orphan_get:1397: inode 15 [ 176.814748][T13307] loop0: lost filesystem error report for type 5 error -117 [ 176.816898][T13307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.862633][ T28] audit: type=1400 audit(1777932565.085:3222): avc: denied { write } for pid=13305 comm="syz.0.3221" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.892365][ T28] audit: type=1400 audit(1777932565.085:3223): avc: denied { create } for pid=13305 comm="syz.0.3221" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 176.933219][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.127613][T13362] macvtap1: entered promiscuous mode [ 177.136521][T13362] ip6gretap0: entered promiscuous mode [ 177.149428][T13362] team0: Device macvtap1 failed to register rx_handler [ 177.157740][T13362] ip6gretap0: left promiscuous mode [ 177.320609][T13382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3236'. [ 177.333082][T13384] xt_hashlimit: size too large, truncated to 1048576 [ 177.555700][T13398] xt_hashlimit: size too large, truncated to 1048576 [ 177.702140][T13409] netlink: 'syz.9.3248': attribute type 12 has an invalid length. [ 177.834146][T13402] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.841500][T13402] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.848912][T13402] bridge_slave_0: entered allmulticast mode [ 177.855518][T13402] bridge_slave_0: entered promiscuous mode [ 177.862638][T13402] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.869982][T13402] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.877298][T13402] bridge_slave_1: entered allmulticast mode [ 177.883888][T13402] bridge_slave_1: entered promiscuous mode [ 177.900077][T13402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.910641][T13402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.930257][T13402] team0: Port device team_slave_0 added [ 177.936903][T13402] team0: Port device team_slave_1 added [ 177.953245][T13402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.964432][T13402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.991018][T13402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.004631][T13402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.005754][T13425] xt_hashlimit: size too large, truncated to 1048576 [ 178.011939][T13402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.059880][T13402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.092522][T13402] hsr_slave_0: entered promiscuous mode [ 178.098713][T13402] hsr_slave_1: entered promiscuous mode [ 178.104934][T13402] debugfs: 'hsr0' already exists in 'hsr' [ 178.111317][T13402] Cannot create hsr debugfs directory [ 178.243955][T13442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3254'. [ 178.264081][T13442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3254'. [ 178.272250][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 178.272267][ T28] audit: type=1400 audit(1777932566.495:3225): avc: denied { write } for pid=13435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.355998][ T28] audit: type=1400 audit(1777932566.575:3226): avc: denied { write } for pid=13456 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.469604][T13402] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 178.533239][T13402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.546854][ T28] audit: type=1400 audit(1777932566.765:3227): avc: denied { write } for pid=13461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.574193][T13402] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 178.594876][T13402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.621311][ T28] audit: type=1400 audit(1777932566.845:3228): avc: denied { write } for pid=13476 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.646194][T13480] geneve2: entered promiscuous mode [ 178.658743][T13480] geneve2: entered allmulticast mode [ 178.668635][T13402] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 178.680593][T13402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.688682][T13402] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 178.707188][T13402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.752389][T13495] netlink: 'syz.0.3263': attribute type 2 has an invalid length. [ 178.805680][ T28] audit: type=1400 audit(1777932567.025:3229): avc: denied { write } for pid=13482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.842720][T13507] loop0: detected capacity change from 0 to 128 [ 178.858346][T13402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.872726][T13402] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.894170][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.901409][ T5801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.916216][ T28] audit: type=1400 audit(1777932567.135:3230): avc: denied { write } for pid=13508 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.958697][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.966035][ T5801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.189406][ T28] audit: type=1400 audit(1777932567.405:3231): avc: denied { write } for pid=13512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.255265][ T28] audit: type=1400 audit(1777932567.475:3232): avc: denied { write } for pid=13541 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.358201][ T28] audit: type=1400 audit(1777932567.575:3233): avc: denied { getopt } for pid=13549 comm="syz.0.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 179.459443][T13402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.549091][ T28] audit: type=1400 audit(1777932567.765:3234): avc: denied { write } for pid=13551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.731846][T13584] sctp: [Deprecated]: syz.9.3281 (pid 13584) Use of int in maxseg socket option. [ 179.731846][T13584] Use struct sctp_assoc_value instead [ 179.905561][T13402] veth0_vlan: entered promiscuous mode [ 179.931799][T13402] veth1_vlan: entered promiscuous mode [ 179.963976][T13402] veth0_macvtap: entered promiscuous mode [ 179.977182][T13617] netlink: 'syz.9.3286': attribute type 7 has an invalid length. [ 179.986121][T13402] veth1_macvtap: entered promiscuous mode [ 179.993958][T13617] netlink: 'syz.9.3286': attribute type 23 has an invalid length. [ 180.034197][T13622] loop1: detected capacity change from 0 to 512 [ 180.054551][T13402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.063945][T13622] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.096457][T13402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.117446][T13622] EXT4-fs (loop1): 1 truncate cleaned up [ 180.130007][ T1659] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.141748][T13622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.154382][ T1659] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.184854][ T1659] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.194249][ T1659] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.251362][T13636] loop0: detected capacity change from 0 to 2048 [ 180.327838][T11281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.539436][T13685] netlink: 'syz.1.3301': attribute type 12 has an invalid length. [ 180.551457][T13685] netlink: 'syz.1.3301': attribute type 29 has an invalid length. [ 180.562029][T13685] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3301'. [ 180.578492][T13685] netlink: 'syz.1.3301': attribute type 1 has an invalid length. [ 180.596809][T13685] netlink: 'syz.1.3301': attribute type 2 has an invalid length. [ 180.610957][T13685] netlink: 15 bytes leftover after parsing attributes in process `syz.1.3301'. [ 180.707170][T13715] loop6: detected capacity change from 0 to 512 [ 180.717042][T13715] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 180.743617][T13715] EXT4-fs (loop6): 1 truncate cleaned up [ 180.763886][T13715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.811567][T13402] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.879324][T13742] netlink: 'syz.6.3311': attribute type 39 has an invalid length. [ 180.916547][T13747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3312'. [ 181.015267][T13763] loop1: detected capacity change from 0 to 256 [ 181.022464][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881141efc00: rx timeout, send abort [ 181.034111][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881141efc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 181.106489][T13772] tmpfs: Bad value for 'mpol' [ 181.238340][ T1659] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.408533][T13805] loop0: detected capacity change from 0 to 1024 [ 181.432221][T13805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.451004][T13805] ext4 filesystem being mounted at /695/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.465650][T13805] EXT4-fs (loop0): shut down requested (1) [ 181.481346][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.578957][T13816] loop0: detected capacity change from 0 to 512 [ 181.602039][T13816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.616372][T13816] EXT4-fs (loop0): shut down requested (0) [ 181.635964][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.011486][T13828] loop0: detected capacity change from 0 to 256 [ 182.024267][T13828] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.042145][T13828] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.099931][T13835] loop6: detected capacity change from 0 to 1024 [ 182.123047][T13833] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 182.123790][T13835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 182.145502][ T3393] IPVS: starting estimator thread 0... [ 182.170290][T13835] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.220039][T13835] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.3340: lblock 0 mapped to illegal pblock 0 (length 1) [ 182.234556][T13835] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 182.249186][T13841] IPVS: using max 2736 ests per chain, 136800 per kthread [ 182.256757][T13835] EXT4-fs (loop6): This should not happen!! Data will be lost [ 182.256757][T13835] [ 182.284835][T13835] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.3340: lblock 0 mapped to illegal pblock 0 (length 1) [ 182.323749][T13835] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.3340: lblock 0 mapped to illegal pblock 0 (length 1) [ 182.353524][T13835] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.3340: lblock 0 mapped to illegal pblock 0 (length 1) [ 182.387275][T13835] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.3340: lblock 0 mapped to illegal pblock 0 (length 1) [ 182.422304][T13835] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.3340: lblock 0 mapped to illegal pblock 0 (length 1) [ 182.428662][T13858] 9p: Bad value for 'rfdno' [ 182.462192][T13835] EXT4-fs error (device loop6): ext4_ext_remove_space:2969: inode #15: comm syz.6.3340: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 182.487776][T13853] loop0: detected capacity change from 0 to 1024 [ 182.531338][T13402] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 182.573077][T13853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.609993][T13873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13873 comm=syz.9.3354 [ 182.662375][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.696487][T13881] EXT4-fs: Ignoring removed bh option [ 182.733868][T13881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.752774][T13881] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.1.3358: path /172/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 182.776677][T13881] EXT4-fs (loop1): Remounting filesystem read-only [ 182.795244][T11281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.893873][T13900] EXT4-fs (loop0): 1 truncate cleaned up [ 182.903366][T13900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.003777][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.299078][ T4364] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.587391][T13959] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3391'. [ 183.687697][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3397'. [ 183.700275][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 183.700366][ T28] audit: type=1326 audit(1777932571.925:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13972 comm="syz.9.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd0acdd9 code=0x7ffc0000 [ 183.776392][T13975] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 183.802969][ T28] audit: type=1326 audit(1777932571.925:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13972 comm="syz.9.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd0acdd9 code=0x7ffc0000 [ 183.831916][ T28] audit: type=1326 audit(1777932571.925:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13972 comm="syz.9.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd0acdd9 code=0x7ffc0000 [ 183.845194][T13983] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13983 comm=syz.1.3401 [ 183.859939][ T28] audit: type=1326 audit(1777932571.925:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13972 comm="syz.9.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd0acdd9 code=0x7ffc0000 [ 183.879730][T13978] set_capacity_and_notify: 4 callbacks suppressed [ 183.879749][T13978] loop2: detected capacity change from 0 to 8192 [ 183.898117][ T28] audit: type=1326 audit(1777932571.925:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13972 comm="syz.9.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f98cd0acdd9 code=0x7ffc0000 [ 183.941635][ T36] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 183.954443][T13978] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.995001][ T28] audit: type=1326 audit(1777932571.925:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13972 comm="syz.9.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd0acdd9 code=0x7ffc0000 [ 184.061321][ T28] audit: type=1326 audit(1777932571.925:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13972 comm="syz.9.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd0acdd9 code=0x7ffc0000 [ 184.092333][T13993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3408'. [ 184.127312][T13993] netlink: 67 bytes leftover after parsing attributes in process `syz.0.3408'. [ 184.149268][ T28] audit: type=1326 audit(1777932571.925:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13972 comm="syz.9.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd0acdd9 code=0x7ffc0000 [ 184.213381][ T28] audit: type=1326 audit(1777932571.925:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13972 comm="syz.9.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f98cd0acdd9 code=0x7ffc0000 [ 184.239721][ T28] audit: type=1326 audit(1777932571.925:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13972 comm="syz.9.3407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd0acdd9 code=0x7ffc0000 [ 184.289891][T14005] loop2: detected capacity change from 0 to 512 [ 184.306056][T14008] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 184.306056][T14008] Please contact the netfilter-devel mailing list or update your nftables rules. [ 184.350527][T14005] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 184.369148][T14005] System zones: 0-2, 18-18, 34-34 [ 184.376663][T14005] EXT4-fs (loop2): 1 orphan inode deleted [ 184.383458][T14005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.396333][ T36] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 184.408343][ T36] loop2: lost filesystem error report for type 5 error -117 [ 184.409104][ T36] EXT4-fs (loop2): Remounting filesystem read-only [ 184.409336][T14005] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.559815][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.074505][T14045] loop0: detected capacity change from 0 to 512 [ 185.103502][T14045] EXT4-fs: Ignoring removed nobh option [ 185.133139][T14045] EXT4-fs (loop0): 1 truncate cleaned up [ 185.145295][T14045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.290990][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.345982][T14059] loop0: detected capacity change from 0 to 1024 [ 185.378794][T14059] EXT4-fs: Ignoring removed orlov option [ 185.394637][T14063] loop6: detected capacity change from 0 to 512 [ 185.402203][T14059] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 185.440517][T14059] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 185.459429][T14059] EXT4-fs (loop0): orphan cleanup on readonly fs [ 185.485335][T14059] EXT4-fs error (device loop0): ext4_quota_enable:7221: comm syz.0.3435: Bad quota inum: 2, type: 0 [ 185.554962][T14059] loop0: lost filesystem error report for type 5 error -117 [ 185.555155][T14059] EXT4-fs (loop0): Remounting filesystem read-only [ 185.562955][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 185.562987][ C0] EXT4-fs (loop0): initial error at time 1777932574: ext4_quota_enable:7221 [ 185.563026][ C0] EXT4-fs (loop0): last error at time 1777932574: ext4_quota_enable:7221 [ 185.610936][T14059] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 185.629485][T14072] loop1: detected capacity change from 0 to 1024 [ 185.646763][T14059] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 185.670710][T14072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.675152][T14059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.696415][T14059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.736159][T11281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.215788][T14104] loop0: detected capacity change from 0 to 512 [ 186.225773][T14098] loop6: detected capacity change from 0 to 8192 [ 186.233188][T14104] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 186.265755][T14104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.330656][T14104] ext4 filesystem being mounted at /728/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.410931][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.473944][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3457'. [ 186.506095][T14112] ip_vti0: Master is either lo or non-ether device [ 187.598023][T14138] loop6: detected capacity change from 0 to 512 [ 187.611408][T14137] loop1: detected capacity change from 0 to 1024 [ 187.640591][T14138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.656845][T14137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.698440][T14138] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.730542][T14138] EXT4-fs (loop6): shut down requested (1) [ 187.749394][T14138] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 187.767677][T11281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.794245][T14138] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 187.867080][T13402] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.159549][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3480'. [ 188.179169][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3480'. [ 188.291133][T14169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.456167][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.800757][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3482'. [ 188.902341][ T4446] IPVS: starting estimator thread 0... [ 188.924333][T14186] set_capacity_and_notify: 1 callbacks suppressed [ 188.924370][T14186] loop0: detected capacity change from 0 to 256 [ 189.029071][T14184] IPVS: using max 2640 ests per chain, 132000 per kthread [ 189.479282][T14211] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14211 comm=syz.0.3498 [ 189.865734][T14223] loop2: detected capacity change from 0 to 512 [ 189.905637][T14223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 189.946150][T14223] ext4 filesystem being mounted at /210/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.995166][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 189.995261][ T28] audit: type=1400 audit(1777932580.214:3297): avc: denied { write } for pid=14222 comm="syz.2.3503" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.068684][T14231] loop0: detected capacity change from 0 to 512 [ 190.069390][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 190.091223][T14231] EXT4-fs: Ignoring removed bh option [ 190.098242][ T28] audit: type=1400 audit(1777932580.254:3298): avc: denied { write } for pid=14222 comm="syz.2.3503" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.131013][T14231] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 190.156733][T14231] EXT4-fs (loop0): 1 truncate cleaned up [ 190.168472][T14231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.195601][ T28] audit: type=1400 audit(1777932580.414:3299): avc: denied { write } for pid=14230 comm="syz.0.3506" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.220178][T14231] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3506: invalid indirect mapped block 4294967295 (level 1) [ 190.237684][T14233] loop2: detected capacity change from 0 to 2048 [ 190.284188][T14233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.300822][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.336804][ T28] audit: type=1400 audit(1777932580.554:3300): avc: denied { write } for pid=14232 comm="syz.2.3507" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.422944][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.618683][T14267] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20002 [ 190.627448][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3521'. [ 190.641931][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3521'. [ 190.729240][T14279] netlink: 236 bytes leftover after parsing attributes in process `syz.9.3526'. [ 190.749031][T14279] netlink: 236 bytes leftover after parsing attributes in process `syz.9.3526'. [ 190.793431][ T28] audit: type=1400 audit(1777932581.014:3301): avc: denied { ioctl } for pid=14283 comm="syz.0.3528" path="socket:[38623]" dev="sockfs" ino=38623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.963700][T14305] loop1: detected capacity change from 0 to 256 [ 191.069710][T14316] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3545'. [ 191.079928][T14316] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3545'. [ 191.204451][T14328] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14328 comm=syz.1.3551 [ 191.491479][T14339] loop6: detected capacity change from 0 to 128 [ 191.516430][T14339] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.540464][T14339] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.577370][ T28] audit: type=1400 audit(1777932581.794:3302): avc: denied { write } for pid=14338 comm="syz.6.3554" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.634798][T13402] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.712942][ T28] audit: type=1326 audit(1777932581.934:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14347 comm="syz.0.3558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3143d3cdd9 code=0x7ffc0000 [ 191.741875][ T28] audit: type=1326 audit(1777932581.934:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14347 comm="syz.0.3558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3143d3cdd9 code=0x7ffc0000 [ 191.768798][ T28] audit: type=1326 audit(1777932581.934:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14347 comm="syz.0.3558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3143d3cdd9 code=0x7ffc0000 [ 191.795531][ T28] audit: type=1326 audit(1777932581.934:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14347 comm="syz.0.3558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f3143d3cdd9 code=0x7ffc0000 [ 191.896165][T14359] netlink: 'syz.6.3564': attribute type 29 has an invalid length. [ 191.912831][T14359] netlink: 'syz.6.3564': attribute type 29 has an invalid length. [ 191.925781][T14357] loop0: detected capacity change from 0 to 8192 [ 191.930606][T14365] loop2: detected capacity change from 0 to 1024 [ 191.934109][T14359] netlink: 264 bytes leftover after parsing attributes in process `syz.6.3564'. [ 191.953640][T14357] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.972864][T14365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.004983][T14365] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.050714][ T1659] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 192.064714][ T1659] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 192.078670][ T1659] EXT4-fs (loop2): This should not happen!! Data will be lost [ 192.078670][ T1659] [ 192.114674][ T9453] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 192.134543][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.202736][T14393] xt_hashlimit: size too large, truncated to 1048576 [ 192.293527][T14403] serio: Serial port ptm0 [ 192.343153][T14387] loop2: detected capacity change from 0 to 2048 [ 192.413667][T14387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.439168][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3570'. [ 192.480035][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.904724][T14488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3594'. [ 193.135984][T14529] bond2 (unregistering): Released all slaves [ 193.764730][T14603] netlink: 'syz.1.3643': attribute type 1 has an invalid length. [ 195.028487][T14651] loop6: detected capacity change from 0 to 2048 [ 195.045059][T14659] netlink: 'syz.0.3659': attribute type 3 has an invalid length. [ 195.052992][T14659] __nla_validate_parse: 4 callbacks suppressed [ 195.053009][T14659] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3659'. [ 195.059701][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 195.084692][T14651] Alternate GPT is invalid, using primary GPT. [ 195.100887][T14651] loop6: p1 p2 p3 [ 195.200136][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 195.203303][ T8068] udevd[8068]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 195.256334][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 195.333726][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3673'. [ 195.707111][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 195.707128][ T28] audit: type=1400 audit(1777932585.924:3326): avc: denied { read } for pid=14704 comm="syz.6.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 195.785889][ T28] audit: type=1400 audit(1777932586.004:3327): avc: denied { setopt } for pid=14704 comm="syz.6.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 195.858227][ T28] audit: type=1400 audit(1777932586.064:3328): avc: denied { ioctl } for pid=14707 comm="syz.6.3683" path="socket:[39298]" dev="sockfs" ino=39298 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 195.957792][T14722] loop1: detected capacity change from 0 to 256 [ 195.993790][T14722] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.001422][ T28] audit: type=1326 audit(1777932586.214:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.2.3693" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69724acdd9 code=0x7ffc0000 [ 196.056492][T14722] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.058807][ T28] audit: type=1326 audit(1777932586.214:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.2.3693" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69724acdd9 code=0x7ffc0000 [ 196.125264][ T28] audit: type=1326 audit(1777932586.234:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.2.3693" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69724acdd9 code=0x7ffc0000 [ 196.162968][ T28] audit: type=1326 audit(1777932586.234:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.2.3693" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69724acdd9 code=0x7ffc0000 [ 196.189704][T14737] loop2: detected capacity change from 0 to 512 [ 196.190642][ T28] audit: type=1326 audit(1777932586.234:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.2.3693" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69724acdd9 code=0x7ffc0000 [ 196.270554][T14737] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.3705: iget: bad i_size value: 38620345925642 [ 196.283711][ T28] audit: type=1326 audit(1777932586.234:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.2.3693" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f69724acdd9 code=0x7ffc0000 [ 196.310110][ T28] audit: type=1326 audit(1777932586.234:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.2.3693" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69724acdd9 code=0x7ffc0000 [ 196.351119][T14742] 9pnet: p9_errstr2errno: server reported unknown error [ 196.358857][T14737] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 196.359057][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 196.375928][ C1] EXT4-fs (loop2): initial error at time 1777932586: ext4_orphan_get:1397: inode 15 [ 196.385768][ C1] EXT4-fs (loop2): last error at time 1777932586: ext4_orphan_get:1397: inode 15 [ 196.396286][T14749] sock: sock_set_timeout: `syz.1.3695' (pid 14749) tries to set negative timeout [ 196.477307][T14737] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3705: couldn't read orphan inode 15 (err -117) [ 196.489829][T14737] loop2: lost filesystem error report for type 5 error -117 [ 196.490373][T14737] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.543077][T14737] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3705: bg 0: block 5: invalid block bitmap [ 196.561074][T14737] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 196.576416][T14737] EXT4-fs (loop2): This should not happen!! Data will be lost [ 196.576416][T14737] [ 196.602687][T14737] EXT4-fs (loop2): Total free blocks count 0 [ 196.616935][T14737] EXT4-fs (loop2): Free/Dirty block details [ 196.634041][T14737] EXT4-fs (loop2): free_blocks=0 [ 196.647369][T14737] EXT4-fs (loop2): dirty_blocks=1 [ 196.671227][T14737] EXT4-fs (loop2): Block reservation details [ 196.690190][T14737] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 196.717496][ T9453] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 196.730695][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 196.767056][T14787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.776940][T14783] loop1: detected capacity change from 0 to 8192 [ 196.799511][T14787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.831356][T14783] loop1: p1 < > p2 < > p3 p4 < > [ 196.837073][T14783] loop1: partition table partially beyond EOD, truncated [ 196.854546][T14783] loop1: p1 start 67108864 is beyond EOD, truncated [ 196.867226][T14783] loop1: p3 start 100859904 is beyond EOD, truncated [ 196.974776][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 196.977331][ T8068] udevd[8068]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 197.175587][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3730'. [ 197.296923][T14825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3735'. [ 197.692266][T14849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3746'. [ 197.928387][T14872] loop1: detected capacity change from 0 to 512 [ 197.942268][T14872] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.985317][T14872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.018116][T14886] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3761'. [ 198.022378][T14872] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.072263][ T5784] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.123087][T11281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.177234][ T5784] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.236620][T14901] loop1: detected capacity change from 0 to 512 [ 198.258956][T14901] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 198.310255][ T5784] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.322311][T14901] EXT4-fs (loop1): 1 truncate cleaned up [ 198.333316][T14901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.403405][ T5784] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.430708][T11281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.523165][T14868] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.530980][T14868] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.538580][T14868] bridge_slave_0: entered allmulticast mode [ 198.549504][T14868] bridge_slave_0: entered promiscuous mode [ 198.592186][T14868] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.603954][T14868] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.611841][T14868] bridge_slave_1: entered allmulticast mode [ 198.620421][T14868] bridge_slave_1: entered promiscuous mode [ 198.645301][ T5784] bridge_slave_1: left allmulticast mode [ 198.654169][ T5784] bridge_slave_1: left promiscuous mode [ 198.660357][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.668789][ T5784] bridge_slave_0: left allmulticast mode [ 198.675032][ T5784] bridge_slave_0: left promiscuous mode [ 198.681109][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.772154][ T5784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.782617][ T5784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.792333][ T5784] bond0 (unregistering): Released all slaves [ 198.802280][T14868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.813726][T14928] macsec1: entered promiscuous mode [ 198.819147][T14928] ip6gretap0: entered promiscuous mode [ 198.824807][T14928] macsec1: entered allmulticast mode [ 198.830329][T14928] ip6gretap0: entered allmulticast mode [ 198.837081][T14928] ip6gretap0: left allmulticast mode [ 198.837725][T14924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.843355][T14928] ip6gretap0: left promiscuous mode [ 198.851824][T14924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.871625][T14868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.895580][T14868] team0: Port device team_slave_0 added [ 198.903845][T14868] team0: Port device team_slave_1 added [ 198.916783][ T5784] hsr_slave_0: left promiscuous mode [ 198.922746][ T5784] hsr_slave_1: left promiscuous mode [ 198.928503][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.935995][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.943699][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.951481][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.962913][ T5784] veth1_macvtap: left promiscuous mode [ 198.968589][ T5784] veth0_macvtap: left promiscuous mode [ 198.974242][ T5784] veth1_vlan: left promiscuous mode [ 198.979788][ T5784] veth0_vlan: left promiscuous mode [ 199.055788][ T5784] team0 (unregistering): Port device team_slave_1 removed [ 199.067655][ T5784] team0 (unregistering): Port device team_slave_0 removed [ 199.104364][T14868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.111580][T14868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.138776][T14868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.150714][T14868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.158412][T14868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.184914][T14868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.213449][T14868] hsr_slave_0: entered promiscuous mode [ 199.221100][T14868] hsr_slave_1: entered promiscuous mode [ 199.227071][T14868] debugfs: 'hsr0' already exists in 'hsr' [ 199.233020][T14868] Cannot create hsr debugfs directory [ 199.385858][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 199.530836][T14983] loop1: detected capacity change from 0 to 2048 [ 199.563217][T14983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.616354][T11281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.699969][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 199.789224][T14868] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 199.808763][T14868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.828820][T14868] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 199.839607][T14868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.855245][T14868] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 199.879475][T14868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.891769][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 199.900029][T14868] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 199.920502][T14868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.974934][T15048] macsec1: entered promiscuous mode [ 199.980812][T15048] batadv_slave_1: entered promiscuous mode [ 199.987195][T15048] macsec1: entered allmulticast mode [ 199.994011][T15048] batadv_slave_1: entered allmulticast mode [ 200.002489][T15048] batadv_slave_1: left allmulticast mode [ 200.017116][T15048] batadv_slave_1: left promiscuous mode [ 200.044231][T14868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.067320][T14868] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.098153][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.105314][ T5797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.127531][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.134889][ T5797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.183660][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 200.276722][T15091] netlink: 'syz.0.3816': attribute type 10 has an invalid length. [ 200.367966][T14868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.666603][T14868] veth0_vlan: entered promiscuous mode [ 200.694263][T14868] veth1_vlan: entered promiscuous mode [ 200.744605][T14868] veth0_macvtap: entered promiscuous mode [ 200.766411][T14868] veth1_macvtap: entered promiscuous mode [ 200.811672][T14868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.833435][T14868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.845906][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 200.845976][ T28] audit: type=1400 audit(1777932592.072:3404): avc: denied { write } for pid=15147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.894157][ T5797] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.925215][ T5797] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.930053][ T28] audit: type=1400 audit(1777932592.142:3405): avc: denied { write } for pid=15170 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.963510][ T5797] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.982198][ T5797] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.121032][ T28] audit: type=1400 audit(1777932592.342:3406): avc: denied { write } for pid=15176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.197937][ T28] audit: type=1400 audit(1777932592.382:3407): avc: denied { write } for pid=15196 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.461881][ T28] audit: type=1400 audit(1777932592.682:3408): avc: denied { write } for pid=15208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.554493][ T28] audit: type=1400 audit(1777932592.772:3409): avc: denied { write } for pid=15234 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.777738][T15256] loop2: detected capacity change from 0 to 7 [ 201.815844][ T28] audit: type=1400 audit(1777932593.032:3410): avc: denied { write } for pid=15236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.893108][T15264] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3850'. [ 201.915708][ T28] audit: type=1400 audit(1777932593.092:3411): avc: denied { write } for pid=15261 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.953162][T15264] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3850'. [ 202.078818][T15283] loop2: detected capacity change from 0 to 128 [ 202.095012][T15283] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 202.146975][ T28] audit: type=1400 audit(1777932593.362:3412): avc: denied { write } for pid=15265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.237161][ T28] audit: type=1400 audit(1777932593.452:3413): avc: denied { write } for pid=15292 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.459978][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3867'. [ 202.574960][T15337] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 202.591718][T15337] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 202.603028][T15339] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3872'. [ 202.684729][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3875'. [ 202.726337][T15349] netlink: 'syz.2.3875': attribute type 5 has an invalid length. [ 202.761290][T15349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3875'. [ 202.787014][T15349] geneve2: entered promiscuous mode [ 202.799106][T15349] geneve2: entered allmulticast mode [ 202.837652][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 202.856734][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 202.914537][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 202.944095][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 202.965667][T15373] netlink: 'syz.9.3890': attribute type 4 has an invalid length. [ 204.181529][T15525] loop2: detected capacity change from 0 to 512 [ 204.204940][T15525] EXT4-fs (loop2): orphan cleanup on readonly fs [ 204.220375][T15525] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 204.249248][T15525] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 204.259216][T15525] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3926: couldn't read orphan inode 26 (err -116) [ 204.271421][T15525] loop2: lost filesystem error report for type 5 error -116 [ 204.272112][T15525] EXT4-fs (loop2): Remounting filesystem read-only [ 204.279546][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 204.279566][ C0] EXT4-fs (loop2): initial error at time 1777932595: ext4_orphan_get:1402 [ 204.279607][ C0] EXT4-fs (loop2): last error at time 1777932595: ext4_orphan_get:1402 [ 204.310687][T15525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 204.334361][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.484850][T15542] batadv_slave_0: entered promiscuous mode [ 204.525451][T15541] batadv_slave_0: left promiscuous mode [ 205.124824][T15585] loop2: detected capacity change from 0 to 512 [ 205.137595][T15585] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.3948: inode has both inline data and extents flags [ 205.151930][T15585] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.152161][T15585] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3948: couldn't read orphan inode 15 (err -117) [ 205.161648][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 205.161669][ C0] EXT4-fs (loop2): initial error at time 1777932596: ext4_orphan_get:1397: inode 15 [ 205.161702][ C0] EXT4-fs (loop2): last error at time 1777932596: ext4_orphan_get:1397: inode 15 [ 205.202295][T15585] loop2: lost filesystem error report for type 5 error -117 [ 205.202876][T15585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.236186][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.328670][T15595] loop2: detected capacity change from 0 to 512 [ 205.340897][T15595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.353952][T15595] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.377356][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.439481][T15604] loop2: detected capacity change from 0 to 512 [ 205.446661][T15604] EXT4-fs: inline encryption not supported [ 205.456107][T15604] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3955: bad orphan inode 15 [ 205.466867][T15604] loop2: lost filesystem error report for type 5 error -117 [ 205.467075][T15604] ext4_test_bit(bit=14, block=5) = 0 [ 205.474611][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 205.474638][ C0] EXT4-fs (loop2): initial error at time 1777932596: ext4_orphan_get:1423 [ 205.474665][ C0] EXT4-fs (loop2): last error at time 1777932596: ext4_orphan_get:1423 [ 205.504147][T15604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.532252][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.636377][T15614] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 205.812482][T15631] loop2: detected capacity change from 0 to 512 [ 205.854595][T15631] __quota_error: 38 callbacks suppressed [ 205.854669][T15631] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 205.892804][T15631] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 205.914515][T15631] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.3964: Failed to acquire dquot type 1 [ 205.926428][T15631] loop2: lost filesystem error report for type 5 error -117 [ 205.926771][T15631] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 205.934348][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 205.934371][ C0] EXT4-fs (loop2): last error at time 1777932597: ext4_acquire_dquot:7034 [ 205.960862][T15631] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 205.970908][T15631] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.3964: Failed to acquire dquot type 1 [ 205.982515][T15631] loop2: lost filesystem error report for type 5 error -117 [ 205.984233][T15631] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3964: bg 0: block 248: padding at end of block bitmap is not set [ 206.006691][T15631] loop2: lost filesystem error report for type 5 error -117 [ 206.007754][T15631] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 206.026619][T15631] loop2: lost filesystem error report for type 5 error -117 [ 206.026920][T15631] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 206.045225][T15631] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 206.055201][T15631] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.3964: Failed to acquire dquot type 1 [ 206.066626][T15631] loop2: lost filesystem error report for type 5 error -117 [ 206.067654][T15631] EXT4-fs (loop2): 1 orphan inode deleted [ 206.086935][T15631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.095225][T15644] netlink: 64859 bytes leftover after parsing attributes in process `syz.7.3970'. [ 206.099904][T15631] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.102462][ T28] audit: type=1400 audit(1777932597.322:3451): avc: denied { write } for pid=15630 comm="syz.2.3964" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.142663][T15631] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 206.153730][T15631] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 206.164120][T15631] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.3964: Failed to acquire dquot type 1 [ 206.221268][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.260234][T15649] loop7: detected capacity change from 0 to 8192 [ 206.328111][T15658] loop7: detected capacity change from 0 to 4096 [ 206.341282][T15655] SELinux: failed to load policy [ 206.352873][T15658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.423788][ T28] audit: type=1400 audit(1777932597.642:3452): avc: denied { write } for pid=15657 comm="syz.7.3976" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.898774][T15685] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.930339][T14868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.040153][T15701] loop7: detected capacity change from 0 to 512 [ 207.047033][T15701] EXT4-fs: inline encryption not supported [ 207.056172][T15701] EXT4-fs: inline encryption not supported [ 207.063405][T15701] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.085797][T15701] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 207.100603][T15701] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3992: bg 0: block 248: padding at end of block bitmap is not set [ 207.115216][T15701] loop7: lost filesystem error report for type 5 error -117 [ 207.115497][T15701] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.3992: Failed to acquire dquot type 1 [ 207.122927][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 207.122946][ C0] EXT4-fs (loop7): last error at time 1777932598: ext4_validate_block_bitmap:441 [ 207.151957][T15701] loop7: lost filesystem error report for type 5 error -28 [ 207.152587][T15701] EXT4-fs (loop7): 1 truncate cleaned up [ 207.166204][T15701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 207.200063][T15701] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 207.243833][T15701] syz.7.3992 (15701) used greatest stack depth: 8184 bytes left [ 207.255842][T14868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 208.395306][T15743] loop2: detected capacity change from 0 to 4096 [ 208.409552][T15743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.443282][T15749] loop1: detected capacity change from 0 to 512 [ 208.467603][T15749] EXT4-fs: test_dummy_encryption option not supported [ 208.489737][T15749] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 208.500285][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 208.611818][T15761] loop1: detected capacity change from 0 to 128 [ 208.767125][T15770] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4024'. [ 208.789090][T15770] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4024'. [ 208.810192][T15770] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4024'. [ 208.837407][T15770] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4024'. [ 209.088933][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.163965][T15787] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 210.259254][ T4446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.291788][T15864] loop2: detected capacity change from 0 to 2048 [ 210.304737][T15864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.334453][T15864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.377084][T15840] loop7: detected capacity change from 0 to 32768 [ 210.395151][T15864] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4064: bg 0: block 2: invalid block bitmap [ 210.410790][T15864] EXT4-fs (loop2): Remounting filesystem read-only [ 210.441057][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.526487][T15882] netlink: 116 bytes leftover after parsing attributes in process `syz.7.4070'. [ 210.819222][ T4457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.859403][ T28] kauditd_printk_skb: 306 callbacks suppressed [ 210.859419][ T28] audit: type=1326 audit(1777932602.082:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.4068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd64024d60e code=0x7ffc0000 [ 210.892398][ T28] audit: type=1326 audit(1777932602.082:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.4068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd64024d60e code=0x7ffc0000 [ 210.918485][ T28] audit: type=1326 audit(1777932602.082:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.4068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd64024d60e code=0x7ffc0000 [ 210.951154][ T28] audit: type=1326 audit(1777932602.082:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.4068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd64024d60e code=0x7ffc0000 [ 210.978092][ T28] audit: type=1326 audit(1777932602.082:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.4068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd64024d60e code=0x7ffc0000 [ 211.007611][ T28] audit: type=1326 audit(1777932602.082:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.4068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd64024d60e code=0x7ffc0000 [ 211.034613][ T28] audit: type=1326 audit(1777932602.082:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.4068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd64024d60e code=0x7ffc0000 [ 211.062772][ T28] audit: type=1326 audit(1777932602.082:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.4068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd64024d60e code=0x7ffc0000 [ 211.091104][ T28] audit: type=1326 audit(1777932602.082:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.4068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd64024d60e code=0x7ffc0000 [ 211.118072][ T28] audit: type=1326 audit(1777932602.082:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.4068" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd64024d60e code=0x7ffc0000 [ 211.154260][T15920] netlink: 'syz.0.4085': attribute type 21 has an invalid length. [ 211.457550][T15937] loop2: detected capacity change from 0 to 256 [ 211.487714][T15937] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.532157][T15937] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.563368][T15940] loop7: detected capacity change from 0 to 2048 [ 211.589839][T15940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.632667][T15940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.711096][T15940] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4092: bg 0: block 2: invalid block bitmap [ 211.759946][T15940] EXT4-fs (loop7): Remounting filesystem read-only [ 211.837204][T14868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.859636][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.311010][T15966] loop2: detected capacity change from 0 to 1024 [ 212.335615][T15966] EXT4-fs: Ignoring removed bh option [ 212.366084][T15966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.394295][T15966] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.2.4104: path /325/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 212.417075][T15975] 9p: Bad value for 'wfdno' [ 212.440802][T15966] EXT4-fs (loop2): Remounting filesystem read-only [ 212.458853][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.527575][T15986] loop2: detected capacity change from 0 to 2048 [ 212.539317][T15986] EXT4-fs: Ignoring removed nobh option [ 212.563076][T15986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.582833][T15986] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.637774][ T9453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.677899][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4116'. [ 212.722914][T16009] Invalid argument reading file caps for ./file0 [ 212.840323][T16013] loop7: detected capacity change from 0 to 4096 [ 212.853699][T16013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.899582][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.993473][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.002567][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.011391][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.034043][T16013] ================================================================== [ 213.042397][T16013] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 213.049714][T16013] [ 213.052227][T16013] read-write to 0xffff88811aeab230 of 8 bytes by task 16016 on cpu 0: [ 213.060391][T16013] xas_clear_mark+0x91/0x180 [ 213.065003][T16013] __folio_start_writeback+0x270/0x370 [ 213.070483][T16013] ext4_bio_write_folio+0x5a6/0xa20 [ 213.076486][T16013] ext4_do_writepages+0x1422/0x2770 [ 213.081866][T16013] ext4_writepages+0x18f/0x320 [ 213.086648][T16013] do_writepages+0x1c6/0x310 [ 213.091249][T16013] filemap_write_and_wait_range+0x166/0x370 [ 213.097159][T16013] kiocb_write_and_wait+0x7a/0x110 [ 213.102378][T16013] __iomap_dio_rw+0x5d5/0x1480 [ 213.107245][T16013] iomap_dio_rw+0x40/0x90 [ 213.111650][T16013] ext4_file_read_iter+0x20f/0x290 [ 213.116957][T16013] do_iter_readv_writev+0x4fd/0x5a0 [ 213.122346][T16013] vfs_readv+0x1f4/0x6e0 [ 213.126704][T16013] __se_sys_preadv2+0xfc/0x1c0 [ 213.131490][T16013] __x64_sys_preadv2+0x67/0x80 [ 213.136284][T16013] x64_sys_call+0x2b3b/0x3020 [ 213.140977][T16013] do_syscall_64+0x12c/0x3b0 [ 213.145584][T16013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.151598][T16013] [ 213.153962][T16013] read to 0xffff88811aeab230 of 8 bytes by task 16013 on cpu 1: [ 213.161604][T16013] xas_find_marked+0x213/0x620 [ 213.166466][T16013] filemap_get_folios_tag+0xfa/0x430 [ 213.171949][T16013] mpage_prepare_extent_to_map+0x328/0xc50 [ 213.178689][T16013] ext4_do_writepages+0x9f6/0x2770 [ 213.183994][T16013] ext4_writepages+0x18f/0x320 [ 213.188946][T16013] do_writepages+0x1c6/0x310 [ 213.193549][T16013] file_write_and_wait_range+0x178/0x2f0 [ 213.199464][T16013] mmb_fsync_noflush+0x48/0x140 [ 213.204423][T16013] ext4_sync_file+0x1f1/0x6b0 [ 213.209195][T16013] vfs_fsync_range+0xc5/0xe0 [ 213.213971][T16013] ext4_buffered_write_iter+0x447/0x4c0 [ 213.219547][T16013] ext4_file_write_iter+0x380/0xfa0 [ 213.224768][T16013] do_iter_readv_writev+0x4fd/0x5a0 [ 213.230001][T16013] vfs_writev+0x2e1/0x900 [ 213.234453][T16013] __se_sys_pwritev2+0xfc/0x1c0 [ 213.239513][T16013] __x64_sys_pwritev2+0x67/0x80 [ 213.244560][T16013] x64_sys_call+0xe07/0x3020 [ 213.249259][T16013] do_syscall_64+0x12c/0x3b0 [ 213.254035][T16013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.259942][T16013] [ 213.262355][T16013] value changed: 0xfffff80000000000 -> 0xffe0000000000000 [ 213.269553][T16013] [ 213.271881][T16013] Reported by Kernel Concurrency Sanitizer on: [ 213.278379][T16013] CPU: 1 UID: 0 PID: 16013 Comm: syz.7.4122 Not tainted syzkaller #0 PREEMPT(full) [ 213.287945][T16013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.298282][T16013] ================================================================== [ 213.428118][T14868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.620613][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.630389][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.640234][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.939240][ T4457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.980178][ T28] kauditd_printk_skb: 160 callbacks suppressed [ 215.980196][ T28] audit: type=1400 audit(1777932607.202:3927): avc: denied { write } for pid=16045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.010958][ T28] audit: type=1400 audit(1777932607.222:3928): avc: denied { write } for pid=16056 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.019136][ T3393] net_ratelimit: 1 callbacks suppressed [ 216.019227][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.046867][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.225124][ T28] audit: type=1400 audit(1777932607.442:3929): avc: denied { write } for pid=16059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.250698][ T28] audit: type=1400 audit(1777932607.462:3930): avc: denied { write } for pid=16070 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.829117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.838090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.059579][ T4457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.100490][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.059659][ T4446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.139845][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.179258][ T4456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.219932][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.100227][ T4446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.259526][ T4457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog