last executing test programs: 29.532748213s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 29.437144862s ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000000c0)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x145) 29.311800202s ago: executing program 1 (id=9): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r1, 0x3) 28.308058578s ago: executing program 1 (id=22): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x14, r2, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@void, @void}}}, 0x14}}, 0x0) 28.238544498s ago: executing program 32 (id=22): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x14, r2, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@void, @void}}}, 0x14}}, 0x0) 6.277153562s ago: executing program 5 (id=613): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000054) close(r0) 6.247505281s ago: executing program 5 (id=614): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="b8d3d8e48974aae503984742e847457d61b9459b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd8cbb6f069a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e27b987b", 0x9c}], 0x1, 0x0, 0x0, 0x84}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r1) 6.172665811s ago: executing program 5 (id=618): r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) close_range(r0, r2, 0x0) 6.098299221s ago: executing program 5 (id=621): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 6.063789281s ago: executing program 5 (id=624): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1, 0x0, 0x10000000000}, 0x18) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 5.92029003s ago: executing program 5 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2a020400) r2 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r2, &(0x7f00000001c0)=@known='security.selinux\x00', 0x0, 0x0) 5.864857s ago: executing program 33 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2a020400) r2 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r2, &(0x7f00000001c0)=@known='security.selinux\x00', 0x0, 0x0) 1.705912706s ago: executing program 0 (id=701): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="3503000001000200140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 1.705666075s ago: executing program 6 (id=702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}}, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000001040)="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", 0x5c4}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca396", 0xe4}, {&(0x7f0000001640)="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", 0x187}, {&(0x7f0000000940)="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", 0x11d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90dbe10016823346663fdf1df6200a0dc3c", 0xf8}], 0x5, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}], 0x20}, 0x0) 1.664000726s ago: executing program 6 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 1.623466925s ago: executing program 4 (id=705): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) recvmmsg(r0, &(0x7f0000006bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.578950945s ago: executing program 6 (id=706): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000480)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@noinit_itable}, {@jqfmt_vfsv1}, {@grpid}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x34, 0x33, 0x38, 0x36, 0x61, 0x63, 0x30], 0x2d, [0x34, 0x63, 0x63, 0x65], 0x2d, [0x65, 0x66, 0x65, 0x32], 0x2d, [0x0, 0x31, 0x33, 0x51], 0x2d, [0xb, 0xe, 0x39, 0x33, 0x33, 0x61, 0x63, 0x30]}}}], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000ac0)) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x1) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000001580), 0x800) listen(r1, 0x2) 1.514863685s ago: executing program 0 (id=707): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x2000006, &(0x7f0000001bc0), 0x25, 0x34f, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000000)) 1.394832365s ago: executing program 6 (id=708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x50, 0x2c, 0xd27, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x7, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8011}, 0x20048054) 1.394661784s ago: executing program 4 (id=709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x900d}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.335588104s ago: executing program 4 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1.290812074s ago: executing program 4 (id=711): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) 1.246817594s ago: executing program 6 (id=712): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000c00)={[{@noload}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@dioread_lock}, {@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@discard}]}, 0x1, 0x55a, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x1c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="ff", 0xfffd}], 0x1, 0xe7b, 0x0, 0x0) 1.159607804s ago: executing program 0 (id=713): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='?', 0x1, r0) 1.058705514s ago: executing program 0 (id=714): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f00000004c0), 0x1, 0x597, &(0x7f00000005c0)="$eJzs3U9oHNUfAPDvzCbNr21+pgUFlR6KChVKN0n/aPWUXsVCoQfBSwybbQjZZGN2U5vQQ3ovYkFR6aXeFPSoiHgQLx69elE8C6JFpelBVia7m7ZJNm7SJlu7nw/Mdt682f1+X2ffmz+ZYQPoWoezlzTiqYg4l0QM3FXXE43Kw/X1lm9eLtzuiUIStdr535JIIuLWzcuF5vpJ49/9EbEUEU9GxLe9EUfT9XErC4tTY6VSca5RHqxOzw5WFhaPTU6PTRQnijMnXnzp1OmTp4aPD69mcr+u/nTt7avfv3Lj2iefHVoqvDeWxEj0N+rubseDVP8/6Y2RNctP7kSwDko6nQDbkmv0rt6IeCIGIveA+hrw8Kv1RdSALpVsuf/vDWMGPAqaxwHZ+W9zuucAYWlnjz9+PVM/AcniLjemek1P/dpE/G/l3GTfH8k9ZybZ+eaBnU2NLrB0JSKGenrWf/+Txvdv+4YeRILsqG/O1DfU+u2fZtv/zU8b660df/qb107vU3P8W143/qWr41+uxfh3rs0Yf7/+84ct41+JeHrD+Mlq/GSD+GlEvNFm/OuvfXm6VV3to4gjsXH8pmTz68ODFyZLxaH664Yxvj5y6OXN2r+vRfyRTdqfLZtts/1ffPf5M612o1n855/dfPtvFD87Bn+nzfgHb338aqu6LP54i/ZvFj9bdqPN+C+MHP6xzVUBAAAAAAAAAIAtSFfuZUvS/Op8mubz9Wd4H499aalcqR69UJ6fGa/f83YgetPmnVYD9XKSlYcb9+M2y8fXlE9ExMGIeDe3d6WcL5RL451uPAAAAAAAAAAAAAAAAAAAADwk9q95/v/PXP35f6BL+Mlv6F7b7f/GDfjvu7cfJx3LA9h99uPQvfR/6F6t+v/tr3Y5EWDXtdz/9+5uHsDuc/wP3Uv/h+612v9r/vYH3cb+HwAAAAAAAAAAAAAAAAAAAAAAAAAAdsS5s2ezqXb75uVCVh6/uDA/Vb54bLxYmcpPzxfyhfLcbH6iXJ4oFfOF8vS/fV6pXJ4dipn5S4PVYqU6WFlYHJ0uz89URyenxyaKo0W/KAIAAAAAAAAAAAAAAAAAAADr9a9MSZqPiHRlPk3z+Yj/R8SB6E0uTJaKQxHxWET8kOvty8rDnU4aAAAAAAAAAAAAAAAAAAAAHjGVhcWpsVKpOLf5TNrGOo/eTEQsrVmytc8Z/Wv3cs6S3dbbk6X7ip5EpzeTmR368gMAAAAAAAAAAAAAAAAAALvqzkO/W3zjlR1KCAAAAAAAAAAAAAAAAAAAALpS+kv2mkTEkYHn+tfW7kmWcxF9sSci3rp+/v1LY9Xq3HC2/PfcSn1EVD9oLD/eifyBNi3X6qLZjwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA7KguLU2OlUnFumzN9bXxOh5sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsC3/BAAA//+SBtgH") setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 756.170122ms ago: executing program 0 (id=716): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mount$9p_rdma(0x0, 0x0, 0x0, 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 648.909622ms ago: executing program 6 (id=719): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 610.627652ms ago: executing program 0 (id=720): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 472.105381ms ago: executing program 3 (id=721): r0 = syz_io_uring_setup(0x16a1, &(0x7f0000000480)={0x0, 0xacab, 0x0, 0x4, 0x113}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 341.940561ms ago: executing program 4 (id=723): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 294.500961ms ago: executing program 3 (id=725): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) io_uring_setup(0x4612, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004"], 0xc4}}, 0x0) 259.467941ms ago: executing program 3 (id=727): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000380)='V', 0x1}], 0x1) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) 239.209701ms ago: executing program 3 (id=728): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0}]) 224.056921ms ago: executing program 2 (id=729): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 189.41818ms ago: executing program 4 (id=730): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x4) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x2, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 139.68137ms ago: executing program 2 (id=731): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1f5) sync_file_range(r2, 0x8, 0x0, 0x3) 123.03639ms ago: executing program 2 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3d, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCGABS20(r2, 0x40044591, 0x0) 106.66875ms ago: executing program 2 (id=733): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {}, {0x5, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x5}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xdb}, @TCA_FLOW_KEYS={0x8, 0x1, 0x44a0}]}}]}, 0x54}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 91.11593ms ago: executing program 3 (id=734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x1}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000400)={@val, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x88a8, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "9145879db82f8a2053c969c356382dcd4bba37c97efaa7d9", "c3764d7d552cda0c76e0a0221190c1bd55ae240eb51cc98c80a4824645ea8e60"}}}}}}}, 0x76) 87.46455ms ago: executing program 2 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 11.03422ms ago: executing program 2 (id=736): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}}, 0x14}}, 0x4040040) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 0s ago: executing program 3 (id=737): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): [ 22.083700][ T29] audit: type=1400 audit(1738583602.116:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.10.3' (ED25519) to the list of known hosts. [ 28.301922][ T29] audit: type=1400 audit(1738583608.336:82): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.302928][ T3286] cgroup: Unknown subsys name 'net' [ 28.324677][ T29] audit: type=1400 audit(1738583608.336:83): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.352150][ T29] audit: type=1400 audit(1738583608.376:84): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.487165][ T3286] cgroup: Unknown subsys name 'cpuset' [ 28.493352][ T3286] cgroup: Unknown subsys name 'rlimit' [ 28.644336][ T29] audit: type=1400 audit(1738583608.676:85): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.667721][ T29] audit: type=1400 audit(1738583608.676:86): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.689021][ T29] audit: type=1400 audit(1738583608.676:87): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.709390][ T29] audit: type=1400 audit(1738583608.676:88): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.729818][ T29] audit: type=1400 audit(1738583608.696:89): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.737259][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.754659][ T29] audit: type=1400 audit(1738583608.696:90): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.786501][ T29] audit: type=1400 audit(1738583608.806:91): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.813313][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.896214][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 29.907634][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 29.931155][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 30.005921][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 30.049861][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.057108][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.064328][ T3306] bridge_slave_0: entered allmulticast mode [ 30.071101][ T3306] bridge_slave_0: entered promiscuous mode [ 30.080259][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.087378][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.094964][ T3306] bridge_slave_1: entered allmulticast mode [ 30.101763][ T3306] bridge_slave_1: entered promiscuous mode [ 30.108228][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.115291][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.122576][ T3300] bridge_slave_0: entered allmulticast mode [ 30.129052][ T3300] bridge_slave_0: entered promiscuous mode [ 30.137430][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.144575][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.151882][ T3300] bridge_slave_1: entered allmulticast mode [ 30.158357][ T3300] bridge_slave_1: entered promiscuous mode [ 30.164649][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.171784][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.178925][ T3297] bridge_slave_0: entered allmulticast mode [ 30.185362][ T3297] bridge_slave_0: entered promiscuous mode [ 30.203290][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 30.225358][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.232540][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.239971][ T3297] bridge_slave_1: entered allmulticast mode [ 30.246537][ T3297] bridge_slave_1: entered promiscuous mode [ 30.260712][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.270970][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.292782][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.308320][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.345475][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.361948][ T3306] team0: Port device team_slave_0 added [ 30.368743][ T3306] team0: Port device team_slave_1 added [ 30.374999][ T3300] team0: Port device team_slave_0 added [ 30.381611][ T3300] team0: Port device team_slave_1 added [ 30.388119][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.397288][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.404351][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.411635][ T3296] bridge_slave_0: entered allmulticast mode [ 30.418185][ T3296] bridge_slave_0: entered promiscuous mode [ 30.445408][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.452566][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.459825][ T3296] bridge_slave_1: entered allmulticast mode [ 30.466242][ T3296] bridge_slave_1: entered promiscuous mode [ 30.500695][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.507925][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.515149][ T3302] bridge_slave_0: entered allmulticast mode [ 30.521537][ T3302] bridge_slave_0: entered promiscuous mode [ 30.528286][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.535256][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.561277][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.572264][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.579298][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.605330][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.616846][ T3297] team0: Port device team_slave_0 added [ 30.623695][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.632938][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.640101][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.647319][ T3302] bridge_slave_1: entered allmulticast mode [ 30.653622][ T3302] bridge_slave_1: entered promiscuous mode [ 30.660006][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.667117][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.693094][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.706425][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.713415][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.739357][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.750727][ T3297] team0: Port device team_slave_1 added [ 30.762402][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.783139][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.811016][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.826523][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.833503][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.859500][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.870860][ T3296] team0: Port device team_slave_0 added [ 30.877426][ T3296] team0: Port device team_slave_1 added [ 30.907160][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.914231][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.940168][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.957854][ T3300] hsr_slave_0: entered promiscuous mode [ 30.963946][ T3300] hsr_slave_1: entered promiscuous mode [ 30.972289][ T3306] hsr_slave_0: entered promiscuous mode [ 30.979348][ T3306] hsr_slave_1: entered promiscuous mode [ 30.985151][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.992909][ T3306] Cannot create hsr debugfs directory [ 31.011613][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.018626][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.044659][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.055981][ T3302] team0: Port device team_slave_0 added [ 31.062549][ T3302] team0: Port device team_slave_1 added [ 31.075278][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.082310][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.108329][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.165030][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.172088][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.198064][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.217656][ T3297] hsr_slave_0: entered promiscuous mode [ 31.223653][ T3297] hsr_slave_1: entered promiscuous mode [ 31.229540][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.237126][ T3297] Cannot create hsr debugfs directory [ 31.244669][ T3296] hsr_slave_0: entered promiscuous mode [ 31.250851][ T3296] hsr_slave_1: entered promiscuous mode [ 31.256950][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.264496][ T3296] Cannot create hsr debugfs directory [ 31.270283][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.277297][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.303269][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.396560][ T3302] hsr_slave_0: entered promiscuous mode [ 31.402555][ T3302] hsr_slave_1: entered promiscuous mode [ 31.408449][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.416040][ T3302] Cannot create hsr debugfs directory [ 31.498374][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.511462][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.533369][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.548485][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.572750][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.581514][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.592607][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.601321][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.632906][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.642635][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.652463][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.661324][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.710166][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.718824][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.728283][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.737226][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.749374][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.760185][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.771258][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.780338][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.826419][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.862043][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.875401][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.883898][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.894839][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.902009][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.920888][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.928014][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.937418][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.944511][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.958553][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.965708][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.001134][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.013107][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.025722][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.042145][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.064903][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.072082][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.083494][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.093920][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.101012][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.110800][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.136812][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.143941][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.153930][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.161155][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.171369][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.178455][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.187644][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.194860][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.258002][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.275558][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.315529][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.326456][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.349626][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.375323][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.413278][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.484039][ T3300] veth0_vlan: entered promiscuous mode [ 32.512906][ T3306] veth0_vlan: entered promiscuous mode [ 32.523564][ T3300] veth1_vlan: entered promiscuous mode [ 32.537160][ T3296] veth0_vlan: entered promiscuous mode [ 32.557076][ T3296] veth1_vlan: entered promiscuous mode [ 32.574315][ T3306] veth1_vlan: entered promiscuous mode [ 32.589035][ T3297] veth0_vlan: entered promiscuous mode [ 32.599072][ T3300] veth0_macvtap: entered promiscuous mode [ 32.616200][ T3297] veth1_vlan: entered promiscuous mode [ 32.622711][ T3300] veth1_macvtap: entered promiscuous mode [ 32.635642][ T3302] veth0_vlan: entered promiscuous mode [ 32.653661][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.662023][ T3296] veth0_macvtap: entered promiscuous mode [ 32.672425][ T3296] veth1_macvtap: entered promiscuous mode [ 32.679514][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.687712][ T3302] veth1_vlan: entered promiscuous mode [ 32.695623][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.704419][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.713284][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.722118][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.741131][ T3306] veth0_macvtap: entered promiscuous mode [ 32.758421][ T3306] veth1_macvtap: entered promiscuous mode [ 32.764774][ T3297] veth0_macvtap: entered promiscuous mode [ 32.775717][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.786258][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.796965][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.806133][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.816685][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.827676][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.839170][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.848018][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.856825][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.865614][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.877679][ T3297] veth1_macvtap: entered promiscuous mode [ 32.888351][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.889239][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.913485][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.923427][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.933958][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.944642][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.960678][ T3302] veth0_macvtap: entered promiscuous mode [ 32.968536][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.979061][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.988947][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.999485][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.012700][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.022553][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.033221][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.043274][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.053794][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.063758][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.074594][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.089187][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.093567][ T3438] loop0: detected capacity change from 0 to 512 [ 33.106636][ T3438] ======================================================= [ 33.106636][ T3438] WARNING: The mand mount option has been deprecated and [ 33.106636][ T3438] and is ignored by this kernel. Remove the mand [ 33.106636][ T3438] option from the mount to silence this warning. [ 33.106636][ T3438] ======================================================= [ 33.145263][ T3302] veth1_macvtap: entered promiscuous mode [ 33.152741][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.163358][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.173290][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.183831][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.193783][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.204356][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.215067][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.223372][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.232203][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.240984][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.249703][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.260592][ T3438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.273284][ T3438] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.284318][ T3297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.290090][ T3438] Process accounting resumed [ 33.293151][ T3297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.306507][ T3297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.315214][ T3297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.323972][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 33.323984][ T29] audit: type=1400 audit(1738583613.316:131): avc: denied { append } for pid=3437 comm="syz.0.6" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.330453][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.352107][ T29] audit: type=1400 audit(1738583613.316:132): avc: denied { open } for pid=3437 comm="syz.0.6" path="/1/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.362577][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.362594][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.405524][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.415374][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.425906][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.435761][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.446205][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.457172][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.457651][ T3438] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 33.483750][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.494276][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.504232][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.514694][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.524558][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.535018][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.545017][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.555462][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.566635][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.574613][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.596558][ T29] audit: type=1400 audit(1738583613.626:133): avc: denied { create } for pid=3443 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 33.602592][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.624829][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.633661][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.642403][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.654156][ T29] audit: type=1400 audit(1738583613.636:134): avc: denied { sys_admin } for pid=3443 comm="syz.0.7" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 33.703235][ T3446] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2'. [ 33.801132][ T3456] Zero length message leads to an empty skb [ 33.866883][ T29] audit: type=1400 audit(1738583613.876:135): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.872524][ T3460] loop2: detected capacity change from 0 to 512 [ 33.922891][ T29] audit: type=1400 audit(1738583613.956:136): avc: denied { create } for pid=3461 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.942555][ T29] audit: type=1400 audit(1738583613.956:137): avc: denied { ioctl } for pid=3461 comm="syz.3.11" path="socket:[4501]" dev="sockfs" ino=4501 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.974844][ T3463] syzkaller0: entered allmulticast mode [ 33.977990][ T29] audit: type=1400 audit(1738583614.016:138): avc: denied { setopt } for pid=3461 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.990598][ T3465] loop4: detected capacity change from 0 to 128 [ 34.015646][ T3463] syzkaller0 (unregistering): left allmulticast mode [ 34.032657][ T29] audit: type=1400 audit(1738583614.056:139): avc: denied { mount } for pid=3464 comm="syz.4.12" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.034005][ T3460] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.067453][ T3460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.094507][ T3460] EXT4-fs (loop2): 1 truncate cleaned up [ 34.101266][ T3460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.156646][ T3470] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 34.222604][ T29] audit: type=1400 audit(1738583614.256:140): avc: denied { read } for pid=3471 comm="syz.3.14" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 34.302395][ T3474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 34.375024][ T3476] loop3: detected capacity change from 0 to 512 [ 34.386989][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.438070][ T3476] EXT4-fs (loop3): orphan cleanup on readonly fs [ 34.498876][ T3476] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.16: bg 0: block 248: padding at end of block bitmap is not set [ 34.571393][ T3476] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.16: Failed to acquire dquot type 1 [ 34.633480][ T3476] EXT4-fs (loop3): 1 truncate cleaned up [ 34.664228][ T3476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.718225][ T3476] syz.3.16 (3476) used greatest stack depth: 9504 bytes left [ 34.725906][ T3483] dummy0: entered promiscuous mode [ 34.741979][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.759334][ T3483] dummy0: left promiscuous mode [ 34.833434][ T343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.092286][ T3498] block device autoloading is deprecated and will be removed. [ 35.120511][ T3498] syz.4.27: attempt to access beyond end of device [ 35.120511][ T3498] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 35.271147][ T3373] IPVS: starting estimator thread 0... [ 35.366390][ T3515] IPVS: using max 2304 ests per chain, 115200 per kthread [ 35.398315][ T3499] chnl_net:caif_netlink_parms(): no params data found [ 35.507047][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.514152][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.529727][ T3499] bridge_slave_0: entered allmulticast mode [ 35.537565][ T3499] bridge_slave_0: entered promiscuous mode [ 35.544436][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.551653][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.558974][ T3499] bridge_slave_1: entered allmulticast mode [ 35.565528][ T3499] bridge_slave_1: entered promiscuous mode [ 35.596763][ T3499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.613538][ T3499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.625889][ T343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.654961][ T3536] tipc: Started in network mode [ 35.659939][ T3536] tipc: Node identity ac14140f, cluster identity 4711 [ 35.667165][ T3536] tipc: New replicast peer: 255.255.255.255 [ 35.673305][ T3536] tipc: Enabled bearer , priority 10 [ 35.688670][ T3499] team0: Port device team_slave_0 added [ 35.695765][ T3499] team0: Port device team_slave_1 added [ 35.706480][ T3538] capability: warning: `syz.3.38' uses deprecated v2 capabilities in a way that may be insecure [ 35.752671][ T3499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.759723][ T3499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.785872][ T3499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.803488][ T3499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.810660][ T3499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.836727][ T3499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.871904][ T3549] loop3: detected capacity change from 0 to 512 [ 35.885419][ T3499] hsr_slave_0: entered promiscuous mode [ 35.894667][ T3549] EXT4-fs: Ignoring removed bh option [ 35.900875][ T3499] hsr_slave_1: entered promiscuous mode [ 35.908771][ T3499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.916746][ T3549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.927983][ T3499] Cannot create hsr debugfs directory [ 35.938781][ T3549] EXT4-fs (loop3): 1 orphan inode deleted [ 35.944577][ T3549] EXT4-fs (loop3): 1 truncate cleaned up [ 35.958166][ T3549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.997526][ T343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.010207][ T3549] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 36.132837][ T343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.158082][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.189974][ T3561] netlink: 52 bytes leftover after parsing attributes in process `syz.0.46'. [ 36.232633][ T3499] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.257353][ T3563] loop2: detected capacity change from 0 to 2048 [ 36.274147][ T3499] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.312679][ T3499] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.338359][ T343] bridge_slave_1: left allmulticast mode [ 36.344076][ T343] bridge_slave_1: left promiscuous mode [ 36.349847][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.359844][ T3573] loop3: detected capacity change from 0 to 512 [ 36.377464][ T3573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.411562][ T3577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3577 comm=syz.4.52 [ 36.416554][ T343] bridge_slave_0: left allmulticast mode [ 36.429792][ T343] bridge_slave_0: left promiscuous mode [ 36.435523][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.438478][ T3577] netlink: 'syz.4.52': attribute type 1 has an invalid length. [ 36.466774][ T3573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.499168][ T3573] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.553419][ T3573] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.51: corrupted xattr block 32: bad e_name length [ 36.570982][ T3573] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 36.581418][ T3573] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.51: corrupted xattr block 32: bad e_name length [ 36.595253][ T3573] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 36.607031][ T343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.608102][ T3573] EXT4-fs warning (device loop3): __ext4_unlink:3292: inode #16: comm syz.3.51: Deleting file 'file3' with no links [ 36.630435][ T343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.640502][ T343] bond0 (unregistering): Released all slaves [ 36.649845][ T3499] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.651328][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.725011][ T343] hsr_slave_0: left promiscuous mode [ 36.730979][ T343] hsr_slave_1: left promiscuous mode [ 36.737095][ T343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.744591][ T343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.752498][ T343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.760009][ T343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.770229][ T343] veth1_macvtap: left promiscuous mode [ 36.775910][ T343] veth0_macvtap: left promiscuous mode [ 36.786377][ T3372] tipc: Node number set to 2886997007 [ 36.792764][ T343] veth1_vlan: left promiscuous mode [ 36.798196][ T343] veth0_vlan: left promiscuous mode [ 36.875924][ T343] team0 (unregistering): Port device team_slave_1 removed [ 36.887575][ T343] team0 (unregistering): Port device team_slave_0 removed [ 37.001133][ T3499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.028122][ T3499] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.051180][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.058306][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.089963][ T3499] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.100502][ T3499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.119292][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.126523][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.250793][ T3499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.532256][ T3499] veth0_vlan: entered promiscuous mode [ 37.550088][ T3499] veth1_vlan: entered promiscuous mode [ 37.582330][ T3499] veth0_macvtap: entered promiscuous mode [ 37.594854][ T3499] veth1_macvtap: entered promiscuous mode [ 37.611606][ T3499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.622350][ T3499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.632299][ T3499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.642771][ T3499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.652628][ T3499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.663144][ T3499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.673117][ T3499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.683583][ T3499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.696796][ T3499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.706945][ T3499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.717520][ T3499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.727414][ T3499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.737984][ T3499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.747840][ T3499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.758420][ T3499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.768291][ T3499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.778902][ T3499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.789697][ T3499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.798250][ T3499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.807074][ T3499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.815861][ T3499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.824677][ T3499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.001369][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24'. [ 38.013532][ T3722] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 38.039715][ T3715] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 38.040759][ T3723] loop2: detected capacity change from 0 to 2048 [ 38.084856][ T3723] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.118281][ T3734] loop4: detected capacity change from 0 to 256 [ 38.151400][ T3723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.212227][ T3749] loop5: detected capacity change from 0 to 512 [ 38.228072][ T3723] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 38.269989][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.271730][ T3749] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.85: casefold flag without casefold feature [ 38.309398][ T3778] loop4: detected capacity change from 0 to 256 [ 38.328642][ T3749] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.85: couldn't read orphan inode 15 (err -117) [ 38.387078][ T3782] netlink: 332 bytes leftover after parsing attributes in process `syz.3.89'. [ 38.403026][ T3749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.405828][ T3778] FAT-fs (loop4): Directory bread(block 64) failed [ 38.422468][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 38.422506][ T29] audit: type=1400 audit(1738583618.456:337): avc: denied { write } for pid=3787 comm="syz.2.88" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.447968][ T3788] hub 5-0:1.0: USB hub found [ 38.457193][ T3782] netlink: 'syz.3.89': attribute type 9 has an invalid length. [ 38.464806][ T3782] netlink: 108 bytes leftover after parsing attributes in process `syz.3.89'. [ 38.473767][ T3782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.89'. [ 38.483863][ T3778] FAT-fs (loop4): Directory bread(block 65) failed [ 38.498505][ T29] audit: type=1400 audit(1738583618.536:338): avc: denied { create } for pid=3748 comm="+}[@" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 38.498807][ T3778] FAT-fs (loop4): Directory bread(block 66) failed [ 38.525812][ T3788] hub 5-0:1.0: 8 ports detected [ 38.548973][ T29] audit: type=1400 audit(1738583618.576:339): avc: denied { setattr } for pid=3748 comm="+}[@" name="file1" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 38.564136][ T3778] FAT-fs (loop4): Directory bread(block 67) failed [ 38.570403][ T29] audit: type=1400 audit(1738583618.576:340): avc: denied { write } for pid=3748 comm="+}[@" name="file1" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 38.580788][ T3778] FAT-fs (loop4): Directory bread(block 68) failed [ 38.598455][ T29] audit: type=1400 audit(1738583618.576:341): avc: denied { add_name } for pid=3748 comm="+}[@" name="file4" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 38.626479][ T3778] FAT-fs (loop4): Directory bread(block 69) failed [ 38.633158][ T3778] FAT-fs (loop4): Directory bread(block 70) failed [ 38.633476][ T3499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.641210][ T3778] FAT-fs (loop4): Directory bread(block 71) failed [ 38.656088][ T3778] FAT-fs (loop4): Directory bread(block 72) failed [ 38.680584][ T3778] FAT-fs (loop4): Directory bread(block 73) failed [ 38.717630][ T3804] loop2: detected capacity change from 0 to 128 [ 38.768750][ T29] audit: type=1400 audit(1738583618.806:342): avc: denied { create } for pid=3806 comm="syz.5.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.794025][ T3809] loop3: detected capacity change from 0 to 128 [ 38.815285][ T3778] process '+}[@' launched '/dev/fd/4' with NULL argv: empty string added [ 38.837624][ T3804] syz.2.92: attempt to access beyond end of device [ 38.837624][ T3804] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 38.843264][ T3778] +}[@: attempt to access beyond end of device [ 38.843264][ T3778] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 38.873719][ T29] audit: type=1400 audit(1738583618.806:343): avc: denied { write } for pid=3806 comm="syz.5.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.894212][ T29] audit: type=1400 audit(1738583618.846:344): avc: denied { module_load } for pid=3803 comm="syz.2.92" path="/19/file0/bus" dev="loop2" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 38.917833][ T29] audit: type=1400 audit(1738583618.846:345): avc: denied { execute } for pid=3774 comm="+}[@" dev="tmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.938713][ T29] audit: type=1400 audit(1738583618.876:346): avc: denied { execute_no_trans } for pid=3774 comm="+}[@" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.969394][ T3778] +}[@: attempt to access beyond end of device [ 38.969394][ T3778] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 39.024658][ T3822] loop3: detected capacity change from 0 to 128 [ 39.071348][ T3825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 39.117830][ T3825] veth0_macvtap: left promiscuous mode [ 39.120952][ T3822] syz.3.96: attempt to access beyond end of device [ 39.120952][ T3822] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 39.169531][ T3836] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.199572][ T3822] syz.3.96: attempt to access beyond end of device [ 39.199572][ T3822] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 39.241565][ T3839] loop0: detected capacity change from 0 to 2048 [ 39.249805][ T3831] xt_CT: No such helper "snmp_trap" [ 39.249865][ T3822] syz.3.96: attempt to access beyond end of device [ 39.249865][ T3822] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.270962][ T3822] syz.3.96: attempt to access beyond end of device [ 39.270962][ T3822] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.285491][ T3822] syz.3.96: attempt to access beyond end of device [ 39.285491][ T3822] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.310191][ T3822] syz.3.96: attempt to access beyond end of device [ 39.310191][ T3822] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.328761][ T3839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.425378][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.562340][ T3869] Illegal XDP return value 875809305 on prog (id 64) dev N/A, expect packet loss! [ 39.669691][ T3878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.112'. [ 39.943008][ T3910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 40.035945][ T3910] team0 (unregistering): Port device team_slave_0 removed [ 40.083939][ T3910] team0 (unregistering): Port device team_slave_1 removed [ 40.280489][ T3929] rdma_op ffff8881187c6580 conn xmit_rdma 0000000000000000 [ 40.333924][ T3932] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 40.340506][ T3932] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 40.348242][ T3932] vhci_hcd vhci_hcd.0: Device attached [ 40.395026][ T3933] vhci_hcd: connection closed [ 40.395206][ T3795] vhci_hcd: stop threads [ 40.404229][ T3795] vhci_hcd: release socket [ 40.408740][ T3795] vhci_hcd: disconnect device [ 40.421536][ T3939] loop4: detected capacity change from 0 to 512 [ 40.448086][ T3939] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.126: Failed to acquire dquot type 1 [ 40.480264][ T3939] EXT4-fs (loop4): 1 truncate cleaned up [ 40.489606][ T3939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.502240][ T3939] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.513702][ T3939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.841969][ T3960] netlink: 96 bytes leftover after parsing attributes in process `syz.4.133'. [ 41.030299][ T3979] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«QÿNd [ 41.040780][ T3977] loop3: detected capacity change from 0 to 512 [ 41.054275][ T3836] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.064835][ T3975] loop2: detected capacity change from 0 to 8192 [ 41.092425][ T3977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.105153][ T3977] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.121907][ T3977] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.141: corrupted inode contents [ 41.150039][ T3977] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.141: mark_inode_dirty error [ 41.229349][ T3992] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 41.249981][ T3977] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.141: corrupted inode contents [ 41.262527][ T3977] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.141: mark_inode_dirty error [ 41.290649][ T3977] EXT4-fs error (device loop3): ext4_lookup:1810: inode #19: comm syz.3.141: 'file0' linked to parent dir [ 41.309612][ T3836] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.351026][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.374563][ T3836] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.467110][ T4009] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1143694041/1143694043 [ 41.468440][ T3836] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.476463][ T4009] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1143694041/1143694043 [ 41.508724][ T3836] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.520834][ T3836] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.589070][ T3836] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.649580][ T4024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.658706][ T4024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.105065][ T4042] loop3: detected capacity change from 0 to 2048 [ 42.199179][ T4042] loop3: p1 < > p4 [ 42.240049][ T4042] loop3: p4 size 8388608 extends beyond EOD, truncated [ 42.898894][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 42.919121][ T3462] udevd[3462]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 43.020201][ T4100] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 43.026773][ T4100] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 43.034544][ T4100] vhci_hcd vhci_hcd.0: Device attached [ 43.151597][ T4103] vhci_hcd: connection closed [ 43.151877][ T3765] vhci_hcd: stop threads [ 43.160962][ T3765] vhci_hcd: release socket [ 43.165402][ T3765] vhci_hcd: disconnect device [ 43.193187][ T4120] bio_check_eod: 11667 callbacks suppressed [ 43.193208][ T4120] syz.4.200: attempt to access beyond end of device [ 43.193208][ T4120] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 43.280517][ T4127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 43.331317][ T4127] erspan0: entered promiscuous mode [ 43.360393][ T4127] macvtap1: entered promiscuous mode [ 43.365846][ T4127] macvtap1: entered allmulticast mode [ 43.371288][ T4127] erspan0: entered allmulticast mode [ 43.425597][ T4128] erspan0: left allmulticast mode [ 43.430845][ T4128] erspan0: left promiscuous mode [ 43.509655][ T4132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.570970][ T4132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.607081][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 43.607097][ T29] audit: type=1326 audit(1738583623.646:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4135 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb7dbcda9 code=0x7ffc0000 [ 43.645903][ T29] audit: type=1326 audit(1738583623.646:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4135 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fceb7dbcda9 code=0x7ffc0000 [ 43.669737][ T29] audit: type=1326 audit(1738583623.646:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4135 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb7dbcda9 code=0x7ffc0000 [ 43.693036][ T29] audit: type=1326 audit(1738583623.646:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4135 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fceb7dbcda9 code=0x7ffc0000 [ 43.716413][ T29] audit: type=1326 audit(1738583623.646:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4135 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb7dbcda9 code=0x7ffc0000 [ 43.739767][ T29] audit: type=1326 audit(1738583623.646:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4135 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb7dbcda9 code=0x7ffc0000 [ 43.778516][ T4141] netlink: 332 bytes leftover after parsing attributes in process `syz.4.208'. [ 43.805565][ T4132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.806691][ T29] audit: type=1400 audit(1738583623.846:484): avc: denied { create } for pid=4142 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.883835][ T4132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.998004][ T4132] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.044219][ T4132] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.074575][ T4132] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.113923][ T4132] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.277818][ T29] audit: type=1400 audit(1738583624.316:485): avc: denied { create } for pid=4176 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 44.424771][ T29] audit: type=1400 audit(1738583624.456:486): avc: denied { read } for pid=4196 comm="syz.5.231" path="socket:[7274]" dev="sockfs" ino=7274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.470822][ T4203] loop3: detected capacity change from 0 to 512 [ 44.481799][ T4203] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.500756][ T4203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.513485][ T4203] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.533115][ T29] audit: type=1400 audit(1738583624.566:487): avc: denied { read write } for pid=4202 comm="syz.3.233" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.579033][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.620284][ T4215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.659618][ T4215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.677767][ T4224] pimreg: entered allmulticast mode [ 44.684545][ T4224] pimreg: left allmulticast mode [ 44.733660][ T4215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.803299][ T4215] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.825180][ T4231] loop4: detected capacity change from 0 to 2048 [ 44.851073][ T4235] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 44.867035][ T4231] loop4: p1 < > p4 [ 44.871449][ T4231] loop4: p4 size 8388608 extends beyond EOD, truncated [ 44.896130][ T4215] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.908456][ T4215] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.921050][ T4215] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.933169][ T4215] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.936182][ T2999] loop4: p1 < > p4 [ 44.947351][ T2999] loop4: p4 size 8388608 extends beyond EOD, truncated [ 44.990017][ T4095] udevd[4095]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 44.997625][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 45.128751][ T4255] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 45.137466][ T4255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.251'. [ 45.147990][ T4251] vhci_hcd: invalid port number 224 [ 45.164373][ T4257] SELinux: security_context_str_to_sid () failed with errno=-22 [ 45.237147][ T4263] ALSA: seq fatal error: cannot create timer (-19) [ 45.247864][ T4268] usb usb7: usbfs: process 4268 (syz.3.256) did not claim interface 0 before use [ 45.336815][ T4275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.379912][ T4275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.391081][ T4289] syz.5.264: attempt to access beyond end of device [ 45.391081][ T4289] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 45.422204][ T4291] SELinux: security_context_str_to_sid () failed with errno=-22 [ 45.459531][ T4275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.520170][ T4275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.591310][ T4275] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.606314][ C0] hrtimer: interrupt took 17965 ns [ 45.625030][ T4275] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.653047][ T4275] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.666003][ T4275] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.680683][ T4314] loop2: detected capacity change from 0 to 2048 [ 45.747063][ T4314] loop2: p1 < > p4 [ 45.751727][ T4314] loop2: p4 size 8388608 extends beyond EOD, truncated [ 45.779511][ T2999] loop2: p1 < > p4 [ 45.789861][ T2999] loop2: p4 size 8388608 extends beyond EOD, truncated [ 45.850354][ T4324] loop0: detected capacity change from 0 to 512 [ 45.874401][ T4324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.904130][ T4324] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.913215][ T4324] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.282: bg 0: block 248: padding at end of block bitmap is not set [ 45.929188][ T4324] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.282: Failed to acquire dquot type 1 [ 45.941448][ T4324] EXT4-fs (loop0): 1 truncate cleaned up [ 45.954445][ T4324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.992878][ T4324] syz.0.282 (4324) used greatest stack depth: 9280 bytes left [ 46.033589][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.198898][ T4351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 46.319453][ T4360] syzkaller0: entered allmulticast mode [ 46.325728][ T4360] syzkaller0: left allmulticast mode [ 46.569935][ T4383] loop2: detected capacity change from 0 to 512 [ 46.612083][ T4383] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.306: bad orphan inode 13 [ 46.638514][ T4383] ext4_test_bit(bit=12, block=4) = 1 [ 46.643937][ T4383] is_bad_inode(inode)=0 [ 46.648185][ T4383] NEXT_ORPHAN(inode)=0 [ 46.652315][ T4383] max_ino=32 [ 46.655523][ T4383] i_nlink=1 [ 46.701023][ T4383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.739522][ T4383] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.306: Unrecognised inode hash code 20 [ 46.751015][ T4383] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.306: Corrupt directory, running e2fsck is recommended [ 46.797997][ T4387] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.306: Unrecognised inode hash code 20 [ 46.809524][ T4387] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.306: Corrupt directory, running e2fsck is recommended [ 46.827308][ T4387] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 13: comm syz.2.306: path /71/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 46.867651][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.940086][ T4399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.009650][ T4399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.069886][ T4399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.143644][ T4399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.218869][ T4399] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.247792][ T4399] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.270354][ T4399] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.314896][ T4418] loop5: detected capacity change from 0 to 512 [ 47.321426][ T4399] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.332043][ T4418] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 47.378383][ T4418] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.401828][ T4426] loop3: detected capacity change from 0 to 512 [ 47.421905][ T4418] EXT4-fs (loop5): 1 truncate cleaned up [ 47.433802][ T4426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 47.450077][ T4418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.462778][ T4426] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.499962][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 47.508389][ T4435] loop0: detected capacity change from 0 to 1024 [ 47.516695][ T4435] EXT4-fs: Ignoring removed nobh option [ 47.522336][ T4435] EXT4-fs: Ignoring removed bh option [ 47.529904][ T3499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.552773][ T4435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.572936][ T4441] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 47.579501][ T4441] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 47.587190][ T4441] vhci_hcd vhci_hcd.0: Device attached [ 47.597061][ T4442] vhci_hcd: connection closed [ 47.597387][ T3795] vhci_hcd: stop threads [ 47.606462][ T3795] vhci_hcd: release socket [ 47.610958][ T3795] vhci_hcd: disconnect device [ 47.628474][ T4445] loop3: detected capacity change from 0 to 512 [ 47.638770][ T4445] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.328: casefold flag without casefold feature [ 47.652509][ T4445] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.328: couldn't read orphan inode 15 (err -117) [ 47.654629][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.669523][ T4445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.721577][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.841188][ T4462] loop0: detected capacity change from 0 to 128 [ 47.872030][ T4462] syz.0.333: attempt to access beyond end of device [ 47.872030][ T4462] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 47.894768][ T4462] syz.0.333: attempt to access beyond end of device [ 47.894768][ T4462] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 47.909139][ T4462] syz.0.333: attempt to access beyond end of device [ 47.909139][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 47.922513][ T4462] syz.0.333: attempt to access beyond end of device [ 47.922513][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 47.940064][ T4462] syz.0.333: attempt to access beyond end of device [ 47.940064][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 47.953429][ T4462] syz.0.333: attempt to access beyond end of device [ 47.953429][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 47.966734][ T4462] syz.0.333: attempt to access beyond end of device [ 47.966734][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 47.980060][ T4462] syz.0.333: attempt to access beyond end of device [ 47.980060][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 48.188083][ T4478] loop5: detected capacity change from 0 to 128 [ 48.196526][ T4462] bio_check_eod: 4362 callbacks suppressed [ 48.196543][ T4462] syz.0.333: attempt to access beyond end of device [ 48.196543][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 48.223239][ T4462] syz.0.333: attempt to access beyond end of device [ 48.223239][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 48.236803][ T4478] syz.5.341: attempt to access beyond end of device [ 48.236803][ T4478] loop5: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 48.252457][ T4462] syz.0.333: attempt to access beyond end of device [ 48.252457][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 48.266242][ T4462] syz.0.333: attempt to access beyond end of device [ 48.266242][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 48.279620][ T4462] syz.0.333: attempt to access beyond end of device [ 48.279620][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 48.280159][ T4481] loop4: detected capacity change from 0 to 512 [ 48.293280][ T4462] syz.0.333: attempt to access beyond end of device [ 48.293280][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 48.312358][ T4462] syz.0.333: attempt to access beyond end of device [ 48.312358][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 48.325650][ T4462] syz.0.333: attempt to access beyond end of device [ 48.325650][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 48.339475][ T4462] syz.0.333: attempt to access beyond end of device [ 48.339475][ T4462] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 48.416834][ T4481] EXT4-fs: inline encryption not supported [ 48.438391][ T4481] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.449976][ T4481] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 48.460201][ T4481] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.342: Corrupt directory, running e2fsck is recommended [ 48.488721][ T4488] Cannot find del_set index 0 as target [ 48.508539][ T4481] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 48.527984][ T4481] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.342: corrupted in-inode xattr: invalid ea_ino [ 48.561666][ T4490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.346'. [ 48.595666][ T4494] loop2: detected capacity change from 0 to 128 [ 48.604726][ T4492] loop3: detected capacity change from 0 to 1024 [ 48.612042][ T4490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.346'. [ 48.622517][ T4481] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.342: couldn't read orphan inode 15 (err -117) [ 48.641461][ T4494] netlink: 104 bytes leftover after parsing attributes in process `syz.2.348'. [ 48.669970][ T4481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.693626][ T4492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.744178][ T4498] loop5: detected capacity change from 0 to 1024 [ 48.753867][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 48.753884][ T29] audit: type=1400 audit(1738583628.786:611): avc: denied { mounton } for pid=4491 comm="syz.3.347" path="/71/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.786727][ T4481] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.798068][ T4498] EXT4-fs: Ignoring removed orlov option [ 48.798262][ T4481] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 48.813994][ T4481] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.342: Corrupt directory, running e2fsck is recommended [ 48.833488][ T4481] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.845097][ T4481] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 48.855241][ T4481] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.342: Corrupt directory, running e2fsck is recommended [ 48.878599][ T4498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.893510][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.911280][ T4481] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.922955][ T4481] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 48.933291][ T4481] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.342: Corrupt directory, running e2fsck is recommended [ 48.951106][ T29] audit: type=1400 audit(1738583628.986:612): avc: denied { ioctl } for pid=4503 comm="syz.0.361" path="socket:[8650]" dev="sockfs" ino=8650 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.986368][ T4481] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.014008][ T3499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.052352][ T4513] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.342: path /79/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 49.079639][ T4513] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 8: comm syz.4.342: path /79/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 49.114479][ T4520] loop3: detected capacity change from 0 to 512 [ 49.145338][ T4520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.151179][ T4524] syzkaller0: entered allmulticast mode [ 49.176681][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.178575][ T4524] syzkaller0: left allmulticast mode [ 49.201678][ T4520] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.223401][ T4520] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.351: bg 0: block 248: padding at end of block bitmap is not set [ 49.247772][ T4520] Quota error (device loop3): write_blk: dquota write failed [ 49.255235][ T4520] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 49.265196][ T4520] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.351: Failed to acquire dquot type 1 [ 49.299738][ T4520] EXT4-fs (loop3): 1 truncate cleaned up [ 49.333611][ T4520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.353723][ T4537] Falling back ldisc for ttyS3. [ 49.383824][ T4543] x_tables: duplicate underflow at hook 1 [ 49.403319][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.431548][ T29] audit: type=1400 audit(1738583629.456:613): avc: denied { write } for pid=4545 comm="syz.5.368" laddr=fe80::13 lport=60 faddr=fe80::43 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.474906][ T4550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.497924][ T29] audit: type=1326 audit(1738583629.526:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3cb3cda9 code=0x7ffc0000 [ 49.521785][ T29] audit: type=1326 audit(1738583629.526:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e3cb3cda9 code=0x7ffc0000 [ 49.545204][ T29] audit: type=1326 audit(1738583629.526:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3cb3cda9 code=0x7ffc0000 [ 49.559876][ T4550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.568625][ T29] audit: type=1326 audit(1738583629.526:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3cb3cda9 code=0x7ffc0000 [ 49.599639][ T29] audit: type=1326 audit(1738583629.526:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e3cb3cda9 code=0x7ffc0000 [ 49.856950][ T4593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.381'. [ 49.872185][ T4589] loop2: detected capacity change from 0 to 512 [ 49.907519][ T4589] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.973884][ T4589] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 50.072760][ T4589] EXT4-fs (loop2): 1 truncate cleaned up [ 50.113213][ T4589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.205169][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.214202][ T4633] loop4: detected capacity change from 0 to 512 [ 50.224453][ T4633] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.258070][ T4633] EXT4-fs (loop4): 1 truncate cleaned up [ 50.268499][ T4633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.302742][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.426638][ T4646] loop4: detected capacity change from 0 to 1024 [ 50.446768][ T4646] EXT4-fs: Ignoring removed orlov option [ 50.452548][ T4646] EXT4-fs: Ignoring removed orlov option [ 50.488595][ T4646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.558059][ T4646] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.4.392: corrupted in-inode xattr: bad magic number in in-inode xattr [ 50.591095][ T4646] EXT4-fs (loop4): Remounting filesystem read-only [ 50.609066][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.621011][ T4662] loop5: detected capacity change from 0 to 512 [ 50.630193][ T4664] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.671915][ T4664] wireguard0: entered promiscuous mode [ 50.677535][ T4664] wireguard0: entered allmulticast mode [ 50.694371][ T4662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.708111][ T4662] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.710091][ T4661] loop0: detected capacity change from 0 to 512 [ 50.724062][ T4662] serio: Serial port ttyS3 [ 50.738646][ T4661] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.767823][ T4661] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 50.785037][ T4675] pim6reg1: entered promiscuous mode [ 50.790561][ T4675] pim6reg1: entered allmulticast mode [ 50.797176][ T4661] EXT4-fs (loop0): 1 truncate cleaned up [ 50.818569][ T3499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.820280][ T4661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.874330][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.934702][ T4690] loop3: detected capacity change from 0 to 512 [ 50.954355][ T4690] EXT4-fs (loop3): too many log groups per flexible block group [ 50.962149][ T4690] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 50.996585][ T4690] EXT4-fs (loop3): mount failed [ 51.115432][ T4718] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 51.188395][ T4728] loop5: detected capacity change from 0 to 2048 [ 51.234596][ T4728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.287763][ T3499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.475462][ T4770] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.484105][ T4770] vhci_hcd: invalid port number 23 [ 51.553815][ T4789] loop3: detected capacity change from 0 to 512 [ 51.580325][ T4789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.593661][ T4789] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.610718][ T4789] serio: Serial port ttyS3 [ 51.681122][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.735824][ T4813] loop3: detected capacity change from 0 to 512 [ 51.762585][ T4813] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.785309][ T4813] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 51.804090][ T4813] EXT4-fs (loop3): 1 truncate cleaned up [ 51.812100][ T4813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.839108][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.267643][ T4847] netlink: 48 bytes leftover after parsing attributes in process `syz.2.446'. [ 52.411071][ T4858] netlink: 96 bytes leftover after parsing attributes in process `syz.3.451'. [ 52.437124][ T4865] mmap: syz.2.454 (4865) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.543164][ T4879] netlink: 132 bytes leftover after parsing attributes in process `syz.3.461'. [ 52.672599][ T4899] netlink: 268 bytes leftover after parsing attributes in process `syz.3.470'. [ 52.681696][ T4899] unsupported nla_type 65024 [ 52.698761][ T4902] netlink: 483 bytes leftover after parsing attributes in process `syz.2.472'. [ 53.165263][ T4943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 53.269599][ T4956] loop0: detected capacity change from 0 to 512 [ 53.279976][ T4956] EXT4-fs: inline encryption not supported [ 53.309305][ T4956] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 53.320966][ T4956] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 53.331114][ T4956] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.496: Corrupt directory, running e2fsck is recommended [ 53.348490][ T4956] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 53.361339][ T4956] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.496: corrupted in-inode xattr: invalid ea_ino [ 53.381179][ T4956] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.496: couldn't read orphan inode 15 (err -117) [ 53.402607][ T4956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.442789][ T4956] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 53.454415][ T4956] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 53.464555][ T4956] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.496: Corrupt directory, running e2fsck is recommended [ 53.490335][ T4956] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 53.501936][ T4956] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 53.512204][ T4956] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.496: Corrupt directory, running e2fsck is recommended [ 53.538635][ T4970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.498'. [ 53.571128][ T4970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.498'. [ 53.580408][ T4956] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 53.591989][ T4956] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 53.602119][ T4956] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.496: Corrupt directory, running e2fsck is recommended [ 53.608133][ T4960] chnl_net:caif_netlink_parms(): no params data found [ 53.627039][ T4956] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 53.641422][ T4956] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.496: path /94/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 53.667149][ T4956] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 8: comm syz.0.496: path /94/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 53.707092][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.734608][ T4960] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.741865][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.749290][ T4960] bridge_slave_0: entered allmulticast mode [ 53.756109][ T4960] bridge_slave_0: entered promiscuous mode [ 53.763327][ T4960] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.770658][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.778139][ T4960] bridge_slave_1: entered allmulticast mode [ 53.786145][ T4960] bridge_slave_1: entered promiscuous mode [ 53.794884][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 53.794901][ T29] audit: type=1326 audit(2000000001.270:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3cb3cda9 code=0x7ffc0000 [ 53.838441][ T29] audit: type=1326 audit(2000000001.270:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f7e3cb3cda9 code=0x7ffc0000 [ 53.861756][ T29] audit: type=1326 audit(2000000001.270:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3cb3cda9 code=0x7ffc0000 [ 53.891816][ T29] audit: type=1326 audit(2000000001.370:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.4.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb7dbcda9 code=0x7ffc0000 [ 53.915246][ T29] audit: type=1326 audit(2000000001.370:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.4.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb7dbcda9 code=0x7ffc0000 [ 53.938648][ T29] audit: type=1326 audit(2000000001.370:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.4.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fceb7dbcda9 code=0x7ffc0000 [ 53.963374][ T4989] loop0: detected capacity change from 0 to 128 [ 54.010170][ T29] audit: type=1326 audit(2000000001.440:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.4.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb7dbcda9 code=0x7ffc0000 [ 54.033724][ T29] audit: type=1326 audit(2000000001.450:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.4.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb7dbcda9 code=0x7ffc0000 [ 54.057323][ T29] audit: type=1400 audit(2000000001.460:775): avc: denied { mount } for pid=4988 comm="syz.0.507" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 54.079297][ T29] audit: type=1326 audit(2000000001.470:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.4.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fceb7dbcda9 code=0x7ffc0000 [ 54.122902][ T4960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.135222][ T4960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.165200][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 54.174956][ T4960] team0: Port device team_slave_0 added [ 54.204849][ T4960] team0: Port device team_slave_1 added [ 54.234055][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.241143][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.267092][ T4960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.293523][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.300550][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.326604][ T4960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.361967][ T4960] hsr_slave_0: entered promiscuous mode [ 54.374201][ T4960] hsr_slave_1: entered promiscuous mode [ 54.381874][ T4960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.394979][ T4960] Cannot create hsr debugfs directory [ 54.424913][ T5019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.520'. [ 54.525518][ T4960] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.563782][ T5028] loop5: detected capacity change from 0 to 764 [ 54.572996][ T5038] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.587803][ T4960] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.619382][ T5028] Symlink component flag not implemented [ 54.649556][ T4960] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.681868][ T4960] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.760198][ T4960] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.773879][ T4960] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.784354][ T4960] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.803557][ T4960] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.869195][ T4960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.889161][ T4960] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.901684][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.908866][ T3795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.926115][ T3795] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.933256][ T3795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.995695][ T4960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.092397][ T4960] veth0_vlan: entered promiscuous mode [ 55.104082][ T4960] veth1_vlan: entered promiscuous mode [ 55.121851][ T4960] veth0_macvtap: entered promiscuous mode [ 55.138980][ T4960] veth1_macvtap: entered promiscuous mode [ 55.159864][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.170408][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.180298][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.190926][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.201032][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.211533][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.221379][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.231955][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.241818][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.252330][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.280319][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.293074][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.303644][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.313524][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.323988][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.333912][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.344365][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.354279][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.364740][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.374633][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.385229][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.396144][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.407937][ T4960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.416791][ T4960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.425513][ T4960] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.434330][ T4960] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.459683][ T5106] loop5: detected capacity change from 0 to 512 [ 55.481225][ T5106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.494059][ T5106] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.533606][ T5106] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #19: comm syz.5.553: corrupted inode contents [ 55.554971][ T5106] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #19: comm syz.5.553: mark_inode_dirty error [ 55.568613][ T5106] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #19: comm syz.5.553: corrupted inode contents [ 55.582629][ T5106] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3006: inode #19: comm syz.5.553: mark_inode_dirty error [ 55.595412][ T5115] loop3: detected capacity change from 0 to 512 [ 55.602223][ T5106] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3009: inode #19: comm syz.5.553: mark inode dirty (error -117) [ 55.615013][ T5106] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 55.626113][ T5115] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 55.645835][ T5117] netlink: 'syz.4.556': attribute type 3 has an invalid length. [ 55.658628][ T5115] netlink: 'syz.3.555': attribute type 21 has an invalid length. [ 55.669825][ T5115] netlink: 'syz.3.555': attribute type 6 has an invalid length. [ 55.687920][ T3499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.844779][ T5140] loop3: detected capacity change from 0 to 256 [ 55.887260][ T5140] FAT-fs (loop3): Directory bread(block 64) failed [ 55.893972][ T5140] FAT-fs (loop3): Directory bread(block 65) failed [ 55.910115][ T5140] FAT-fs (loop3): Directory bread(block 66) failed [ 55.925107][ T5140] FAT-fs (loop3): Directory bread(block 67) failed [ 55.932833][ T5140] FAT-fs (loop3): Directory bread(block 68) failed [ 55.942554][ T5140] FAT-fs (loop3): Directory bread(block 69) failed [ 55.949781][ T5140] FAT-fs (loop3): Directory bread(block 70) failed [ 55.957430][ T5140] FAT-fs (loop3): Directory bread(block 71) failed [ 55.964082][ T5140] FAT-fs (loop3): Directory bread(block 72) failed [ 55.979138][ T5140] FAT-fs (loop3): Directory bread(block 73) failed [ 56.071363][ T50] bio_check_eod: 12005 callbacks suppressed [ 56.071423][ T50] kworker/u8:3: attempt to access beyond end of device [ 56.071423][ T50] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 56.570877][ T5204] loop0: detected capacity change from 0 to 4096 [ 56.588521][ T5204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.821719][ T5226] netem: change failed [ 56.828105][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.026938][ T5252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.168697][ T5272] IPVS: Error joining to the multicast group [ 57.253716][ T3795] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.328684][ T3795] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.388850][ T3795] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.468585][ T3795] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.567228][ T5284] chnl_net:caif_netlink_parms(): no params data found [ 57.583756][ T3795] bridge_slave_1: left allmulticast mode [ 57.589576][ T3795] bridge_slave_1: left promiscuous mode [ 57.595288][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.610637][ T3795] bridge_slave_0: left allmulticast mode [ 57.616462][ T3795] bridge_slave_0: left promiscuous mode [ 57.622160][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.741289][ T5309] loop0: detected capacity change from 0 to 4096 [ 57.758756][ T5309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.789066][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.791657][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.810854][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.840527][ T3795] bond0 (unregistering): Released all slaves [ 57.899375][ T3795] hsr_slave_0: left promiscuous mode [ 57.905274][ T3795] hsr_slave_1: left promiscuous mode [ 57.916798][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.924249][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.968253][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.973581][ T5325] loop0: detected capacity change from 0 to 512 [ 57.975695][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.002072][ T5325] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.008527][ T5330] __nla_validate_parse: 8 callbacks suppressed [ 58.008543][ T5330] netlink: 100 bytes leftover after parsing attributes in process `syz.2.645'. [ 58.029645][ T3795] veth1_macvtap: left promiscuous mode [ 58.035158][ T3795] veth0_macvtap: left promiscuous mode [ 58.041451][ T5325] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.643: bg 0: block 248: padding at end of block bitmap is not set [ 58.076507][ T3795] veth1_vlan: left promiscuous mode [ 58.082001][ T3795] veth0_vlan: left promiscuous mode [ 58.087566][ T5325] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.643: Failed to acquire dquot type 1 [ 58.108242][ T5325] EXT4-fs (loop0): 1 truncate cleaned up [ 58.126929][ T5325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.182962][ T5325] syz.0.643 (5325) used greatest stack depth: 9272 bytes left [ 58.192156][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.246671][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 58.258612][ T3795] team0 (unregistering): Port device team_slave_0 removed [ 58.338963][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.346093][ T5284] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.430957][ T5284] bridge_slave_0: entered allmulticast mode [ 58.437644][ T5284] bridge_slave_0: entered promiscuous mode [ 58.444513][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.451675][ T5284] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.471886][ T5284] bridge_slave_1: entered allmulticast mode [ 58.479061][ T5284] bridge_slave_1: entered promiscuous mode [ 58.512450][ T5284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.538294][ T5284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.588092][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 58.597027][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 58.612733][ T5284] team0: Port device team_slave_0 added [ 58.620655][ T5284] team0: Port device team_slave_1 added [ 58.625849][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 58.662787][ T5395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 58.678553][ T5284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.685644][ T5284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.711647][ T5284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.730888][ T5284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.737984][ T5284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.763948][ T5284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.781906][ T5408] loop3: detected capacity change from 0 to 256 [ 58.794076][ T5395] erspan0: entered promiscuous mode [ 58.799751][ T5395] macvtap0: entered promiscuous mode [ 58.805166][ T5395] macvtap0: entered allmulticast mode [ 58.810676][ T5395] erspan0: entered allmulticast mode [ 58.828323][ T5403] erspan0: left allmulticast mode [ 58.833548][ T5403] erspan0: left promiscuous mode [ 58.848172][ T5408] FAT-fs (loop3): Directory bread(block 64) failed [ 58.855135][ T5408] FAT-fs (loop3): Directory bread(block 65) failed [ 58.862185][ T5408] FAT-fs (loop3): Directory bread(block 66) failed [ 58.870892][ T5408] FAT-fs (loop3): Directory bread(block 67) failed [ 58.878215][ T5408] FAT-fs (loop3): Directory bread(block 68) failed [ 58.887887][ T5408] FAT-fs (loop3): Directory bread(block 69) failed [ 58.894492][ T5408] FAT-fs (loop3): Directory bread(block 70) failed [ 58.901392][ T5408] FAT-fs (loop3): Directory bread(block 71) failed [ 58.927375][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 58.927393][ T29] audit: type=1400 audit(2000000006.410:969): avc: denied { mount } for pid=5415 comm="syz.2.667" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 58.929114][ T5284] hsr_slave_0: entered promiscuous mode [ 58.949371][ T5408] FAT-fs (loop3): Directory bread(block 72) failed [ 58.981552][ T5408] FAT-fs (loop3): Directory bread(block 73) failed [ 58.993897][ T5284] hsr_slave_1: entered promiscuous mode [ 59.000870][ T5284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.009056][ T5284] Cannot create hsr debugfs directory [ 59.249606][ T5442] loop3: detected capacity change from 0 to 1024 [ 59.278667][ T5442] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 59.312374][ T5442] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 59.341072][ T5284] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 59.347325][ T5442] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.673: inode #1: comm syz.3.673: iget: illegal inode # [ 59.363435][ T5284] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 59.375133][ T5284] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 59.393739][ T5442] EXT4-fs (loop3): no journal found [ 59.399147][ T5442] EXT4-fs (loop3): can't get journal size [ 59.412257][ T5284] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 59.430531][ T5442] EXT4-fs (loop3): failed to initialize system zone (-22) [ 59.452082][ T5442] EXT4-fs (loop3): mount failed [ 59.543129][ T5284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.557049][ T29] audit: type=1400 audit(2000000007.040:970): avc: denied { connect } for pid=5457 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.579587][ T5284] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.609999][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.617130][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.628114][ T29] audit: type=1400 audit(2000000007.070:971): avc: denied { bind } for pid=5457 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.663931][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 59.676840][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 59.693670][ T5463] smc: net device bond0 applied user defined pnetid SYZ0 [ 59.705456][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.712771][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.738329][ T5470] smc: net device bond0 erased user defined pnetid SYZ0 [ 59.746225][ T29] audit: type=1400 audit(2000000007.220:972): avc: denied { cpu } for pid=5468 comm="syz.4.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 59.840196][ T29] audit: type=1326 audit(2000000007.320:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5477 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3cb3cda9 code=0x7ffc0000 [ 59.863983][ T29] audit: type=1326 audit(2000000007.320:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5477 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3cb3cda9 code=0x7ffc0000 [ 59.887631][ T29] audit: type=1326 audit(2000000007.320:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5477 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e3cb3cda9 code=0x7ffc0000 [ 59.910916][ T29] audit: type=1326 audit(2000000007.320:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5477 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3cb3cda9 code=0x7ffc0000 [ 59.934255][ T29] audit: type=1326 audit(2000000007.320:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5477 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3cb3cda9 code=0x7ffc0000 [ 59.957716][ T29] audit: type=1400 audit(2000000007.320:978): avc: denied { create } for pid=5479 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.087901][ T5493] loop4: detected capacity change from 0 to 1024 [ 60.089850][ T5284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.107452][ T5493] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.147508][ T5493] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.683: Invalid block bitmap block 0 in block_group 0 [ 60.172293][ T5493] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.683: Failed to acquire dquot type 0 [ 60.200025][ T5493] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.683: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.400998][ T5493] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.683: Invalid inode bitmap blk 0 in block_group 0 [ 60.417021][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 60.477471][ T5493] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 60.505945][ T5493] EXT4-fs (loop4): 1 orphan inode deleted [ 60.533286][ T5493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.580437][ T5284] veth0_vlan: entered promiscuous mode [ 60.612863][ T5284] veth1_vlan: entered promiscuous mode [ 60.637881][ T5284] veth0_macvtap: entered promiscuous mode [ 60.659100][ T5284] veth1_macvtap: entered promiscuous mode [ 60.668495][ T5532] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 60.682542][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.693100][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.702968][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.713597][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.723481][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.733967][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.743975][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.754470][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.764393][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.774862][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.785737][ T5284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.798478][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.831464][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.842067][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.852118][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.862628][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.872493][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.883022][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.892874][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.903488][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.913469][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.923971][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.939867][ T5284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.982942][ T5545] IPv6: Can't replace route, no match found [ 61.010587][ T5548] loop3: detected capacity change from 0 to 2048 [ 61.024553][ T5284] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.033478][ T5284] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.042426][ T5284] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.051236][ T5284] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.076160][ T5548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.153083][ T5555] vlan2: entered allmulticast mode [ 61.517256][ T5597] dummy0: entered promiscuous mode [ 61.535542][ T5597] dummy0: left promiscuous mode [ 61.623954][ T5609] loop6: detected capacity change from 0 to 512 [ 61.642016][ T5609] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 61.672892][ T5612] loop0: detected capacity change from 0 to 256 [ 61.697811][ T5609] netlink: 'syz.6.706': attribute type 21 has an invalid length. [ 61.724725][ T5612] FAT-fs (loop0): Directory bread(block 64) failed [ 61.736360][ T5609] netlink: 'syz.6.706': attribute type 6 has an invalid length. [ 61.737787][ T5612] FAT-fs (loop0): Directory bread(block 65) failed [ 61.744075][ T5609] netlink: 132 bytes leftover after parsing attributes in process `syz.6.706'. [ 61.788808][ T5612] FAT-fs (loop0): Directory bread(block 66) failed [ 61.819669][ T5612] FAT-fs (loop0): Directory bread(block 67) failed [ 61.846453][ T5612] FAT-fs (loop0): Directory bread(block 68) failed [ 61.853112][ T5612] FAT-fs (loop0): Directory bread(block 69) failed [ 61.886350][ T5612] FAT-fs (loop0): Directory bread(block 70) failed [ 61.893582][ T5612] FAT-fs (loop0): Directory bread(block 71) failed [ 61.916678][ T5612] FAT-fs (loop0): Directory bread(block 72) failed [ 61.923287][ T5612] FAT-fs (loop0): Directory bread(block 73) failed [ 61.957112][ T5623] loop6: detected capacity change from 0 to 1024 [ 61.963890][ T5623] EXT4-fs: Ignoring removed nobh option [ 61.969584][ T5623] EXT4-fs: Ignoring removed bh option [ 62.009517][ T3793] kworker/u8:36: attempt to access beyond end of device [ 62.009517][ T3793] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 62.060469][ T5623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.144883][ T5631] loop0: detected capacity change from 0 to 1024 [ 62.151432][ T5623] loop6: detected capacity change from 1024 to 64 [ 62.162721][ T5623] syz.6.712: attempt to access beyond end of device [ 62.162721][ T5623] loop6: rw=3, sector=290, nr_sectors = 6 limit=64 [ 62.193344][ T5623] syz.6.712: attempt to access beyond end of device [ 62.193344][ T5623] loop6: rw=2051, sector=296, nr_sectors = 58 limit=64 [ 62.207291][ T5623] EXT4-fs (loop6): discard request in group:0 block:9 count:32 failed with -5 [ 62.216911][ T5623] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: IO failure [ 62.218634][ T4960] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.237596][ T5623] syz.6.712: attempt to access beyond end of device [ 62.237596][ T5623] loop6: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 62.250975][ T5623] EXT4-fs warning (device loop6): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 113) [ 62.262480][ T5623] Buffer I/O error on device loop6, logical block 113 [ 62.270092][ T5623] syz.6.712: attempt to access beyond end of device [ 62.270092][ T5623] loop6: rw=2049, sector=230, nr_sectors = 26 limit=64 [ 62.283513][ T5623] EXT4-fs warning (device loop6): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 115) [ 62.287556][ T5631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.294846][ T5623] Buffer I/O error on device loop6, logical block 115 [ 62.313725][ T5623] Buffer I/O error on device loop6, logical block 116 [ 62.320548][ T5623] Buffer I/O error on device loop6, logical block 117 [ 62.327410][ T5623] Buffer I/O error on device loop6, logical block 118 [ 62.334245][ T5623] Buffer I/O error on device loop6, logical block 119 [ 62.341174][ T5623] Buffer I/O error on device loop6, logical block 120 [ 62.347972][ T5623] Buffer I/O error on device loop6, logical block 121 [ 62.354755][ T5623] Buffer I/O error on device loop6, logical block 122 [ 62.361585][ T5623] Buffer I/O error on device loop6, logical block 123 [ 62.368615][ T5631] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.419376][ T5623] syz.6.712: attempt to access beyond end of device [ 62.419376][ T5623] loop6: rw=2049, sector=258, nr_sectors = 2 limit=64 [ 62.432715][ T5623] EXT4-fs warning (device loop6): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 129) [ 62.444664][ T5623] syz.6.712: attempt to access beyond end of device [ 62.444664][ T5623] loop6: rw=2049, sector=258, nr_sectors = 30 limit=64 [ 62.458075][ T5623] EXT4-fs warning (device loop6): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 129) [ 62.521312][ T5284] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 62.537911][ T5284] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 62.561378][ T5284] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 62.581103][ T5284] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 62.599579][ T5284] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 62.613543][ T5284] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 62.846183][ T5653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.722'. [ 62.855314][ T5650] wireguard0: entered promiscuous mode [ 62.861045][ T5650] wireguard0: entered allmulticast mode [ 62.880065][ T5657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 62.952342][ T5665] hsr_slave_0: left promiscuous mode [ 62.958575][ T5665] hsr_slave_1: left promiscuous mode [ 63.206641][ T5684] loop3: detected capacity change from 0 to 8192 [ 63.351920][ T5685] ================================================================== [ 63.360072][ T5685] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 63.367321][ T5685] [ 63.369666][ T5685] write to 0xffff8881170d6f14 of 4 bytes by task 5684 on cpu 1: [ 63.377322][ T5685] __xa_set_mark+0x182/0x1b0 [ 63.381947][ T5685] __folio_mark_dirty+0x3b5/0x4e0 [ 63.387017][ T5685] mark_buffer_dirty+0x134/0x230 [ 63.391991][ T5685] block_write_end+0x123/0x210 [ 63.396797][ T5685] generic_write_end+0x5c/0x160 [ 63.401681][ T5685] fat_write_end+0x4e/0x160 [ 63.406225][ T5685] generic_perform_write+0x33c/0x4a0 [ 63.411543][ T5685] __generic_file_write_iter+0xa1/0x120 [ 63.417121][ T5685] generic_file_write_iter+0x8f/0x310 [ 63.422522][ T5685] iter_file_splice_write+0x5f1/0x980 [ 63.427929][ T5685] direct_splice_actor+0x160/0x2c0 [ 63.433066][ T5685] splice_direct_to_actor+0x302/0x670 [ 63.438523][ T5685] do_splice_direct+0xd7/0x150 [ 63.443318][ T5685] do_sendfile+0x398/0x660 [ 63.447778][ T5685] __x64_sys_sendfile64+0x110/0x150 [ 63.453020][ T5685] x64_sys_call+0xfbd/0x2dc0 [ 63.457647][ T5685] do_syscall_64+0xc9/0x1c0 [ 63.462177][ T5685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.468374][ T5685] [ 63.470706][ T5685] read to 0xffff8881170d6f14 of 4 bytes by task 5685 on cpu 0: [ 63.478266][ T5685] xas_find_marked+0x608/0x650 [ 63.483079][ T5685] find_get_entry+0x54/0x390 [ 63.487713][ T5685] filemap_get_folios_tag+0x9e/0x210 [ 63.493032][ T5685] file_write_and_wait_range+0x204/0x2f0 [ 63.498712][ T5685] __generic_file_fsync+0x46/0x140 [ 63.503857][ T5685] fat_file_fsync+0x46/0x100 [ 63.508503][ T5685] vfs_fsync_range+0x116/0x130 [ 63.513306][ T5685] generic_file_write_iter+0x1c3/0x310 [ 63.518803][ T5685] iter_file_splice_write+0x5f1/0x980 [ 63.524209][ T5685] direct_splice_actor+0x160/0x2c0 [ 63.529347][ T5685] splice_direct_to_actor+0x302/0x670 [ 63.534749][ T5685] do_splice_direct+0xd7/0x150 [ 63.539543][ T5685] do_sendfile+0x398/0x660 [ 63.544015][ T5685] __x64_sys_sendfile64+0x110/0x150 [ 63.549247][ T5685] x64_sys_call+0xfbd/0x2dc0 [ 63.553871][ T5685] do_syscall_64+0xc9/0x1c0 [ 63.558401][ T5685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.564338][ T5685] [ 63.566674][ T5685] value changed: 0x04000021 -> 0x0a000021 [ 63.572406][ T5685] [ 63.574746][ T5685] Reported by Kernel Concurrency Sanitizer on: [ 63.580907][ T5685] CPU: 0 UID: 0 PID: 5685 Comm: syz.3.737 Not tainted 6.14.0-rc1-syzkaller #0 [ 63.589780][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.599856][ T5685] ================================================================== [ 63.741449][ T5685] ================================================================== [ 63.749576][ T5685] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 63.757613][ T5685] [ 63.759985][ T5685] write to 0xffff8881170d6e28 of 4 bytes by task 5684 on cpu 1: [ 63.767634][ T5685] writeback_single_inode+0x14f/0x3f0 [ 63.773050][ T5685] sync_inode_metadata+0x5c/0x90 [ 63.778037][ T5685] __generic_file_fsync+0xed/0x140 [ 63.783176][ T5685] fat_file_fsync+0x46/0x100 [ 63.787799][ T5685] vfs_fsync_range+0x116/0x130 [ 63.792585][ T5685] generic_file_write_iter+0x1c3/0x310 [ 63.798078][ T5685] iter_file_splice_write+0x5f1/0x980 [ 63.803477][ T5685] direct_splice_actor+0x160/0x2c0 [ 63.808622][ T5685] splice_direct_to_actor+0x302/0x670 [ 63.814033][ T5685] do_splice_direct+0xd7/0x150 [ 63.818817][ T5685] do_sendfile+0x398/0x660 [ 63.823272][ T5685] __x64_sys_sendfile64+0x110/0x150 [ 63.828510][ T5685] x64_sys_call+0xfbd/0x2dc0 [ 63.833129][ T5685] do_syscall_64+0xc9/0x1c0 [ 63.837667][ T5685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.843593][ T5685] [ 63.845935][ T5685] read to 0xffff8881170d6e28 of 4 bytes by task 5685 on cpu 0: [ 63.853515][ T5685] vfs_fsync_range+0x9a/0x130 [ 63.858314][ T5685] generic_file_write_iter+0x1c3/0x310 [ 63.863802][ T5685] iter_file_splice_write+0x5f1/0x980 [ 63.869206][ T5685] direct_splice_actor+0x160/0x2c0 [ 63.874439][ T5685] splice_direct_to_actor+0x302/0x670 [ 63.879848][ T5685] do_splice_direct+0xd7/0x150 [ 63.884637][ T5685] do_sendfile+0x398/0x660 [ 63.889095][ T5685] __x64_sys_sendfile64+0x110/0x150 [ 63.894320][ T5685] x64_sys_call+0xfbd/0x2dc0 [ 63.898952][ T5685] do_syscall_64+0xc9/0x1c0 [ 63.903487][ T5685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.909418][ T5685] [ 63.911745][ T5685] value changed: 0x00000038 -> 0x00000022 [ 63.917463][ T5685] [ 63.919797][ T5685] Reported by Kernel Concurrency Sanitizer on: [ 63.925959][ T5685] CPU: 0 UID: 0 PID: 5685 Comm: syz.3.737 Not tainted 6.14.0-rc1-syzkaller #0 [ 63.934823][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.944892][ T5685] ================================================================== [ 64.279296][ T5628] kmmpd-loop6: attempt to access beyond end of device [ 64.279296][ T5628] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 64.292894][ T5628] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 64.302547][ T3795] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.359018][ T3795] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.428770][ T3795] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.488928][ T3795] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.575331][ T3795] bridge_slave_1: left allmulticast mode [ 64.581081][ T3795] bridge_slave_1: left promiscuous mode [ 64.586922][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.596739][ T3795] bridge_slave_0: left allmulticast mode [ 64.602438][ T3795] bridge_slave_0: left promiscuous mode [ 64.608165][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.700523][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.710387][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.721405][ T3795] bond0 (unregistering): Released all slaves [ 64.780364][ T3795] hsr_slave_0: left promiscuous mode [ 64.790402][ T3795] hsr_slave_1: left promiscuous mode [ 64.796329][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.803762][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.817440][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.825017][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.838876][ T3795] veth1_macvtap: left promiscuous mode [ 64.844411][ T3795] veth0_macvtap: left promiscuous mode [ 64.866428][ T3795] veth1_vlan: left promiscuous mode [ 64.871773][ T3795] veth0_vlan: left promiscuous mode [ 64.954581][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 64.965762][ T3795] team0 (unregistering): Port device team_slave_0 removed