last executing test programs: 1.047833466s ago: executing program 3 (id=551): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0x18, 0x30, 0x25, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.035413876s ago: executing program 2 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000540), 0x0) 997.095337ms ago: executing program 3 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x18) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 962.808528ms ago: executing program 2 (id=558): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) 906.575198ms ago: executing program 2 (id=561): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x3, 0x6}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 767.03385ms ago: executing program 2 (id=562): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x20) 764.83396ms ago: executing program 3 (id=563): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) syslog(0x1, 0x0, 0x0) 732.808451ms ago: executing program 3 (id=565): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xd3, 0x88, 0x39, 0x20, 0x3f0, 0x581d, 0x3488, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xdd, 0x1, 0x0, 0xff, 0x1, 0x7, 0x80}}]}}]}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 699.606381ms ago: executing program 2 (id=568): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9dadd77c2dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) keyctl$revoke(0x3, r1) keyctl$search(0xa, r0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 656.787531ms ago: executing program 2 (id=571): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x3}, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 548.655253ms ago: executing program 0 (id=577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) 498.902283ms ago: executing program 0 (id=580): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000020003000b", @ANYRES32=r0, @ANYRESHEX=r1], 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 372.937355ms ago: executing program 0 (id=587): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) setregid(r1, 0x0) 342.116076ms ago: executing program 0 (id=590): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 322.026566ms ago: executing program 4 (id=592): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x4000000, 0x3, 0x7, 0x1c27, 0x3fffffc}) 244.356067ms ago: executing program 1 (id=596): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 224.214068ms ago: executing program 1 (id=597): socket$inet(0xa, 0x801, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) clock_settime(0x0, &(0x7f0000000040)) 203.385508ms ago: executing program 1 (id=598): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80002c, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@grpid}]}, 0x3, 0x44b, &(0x7f0000000940)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 177.943568ms ago: executing program 4 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) set_robust_list(&(0x7f0000000400)={0x0, 0x1}, 0x18) 159.676638ms ago: executing program 1 (id=600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 144.063309ms ago: executing program 4 (id=601): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4e0664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa7666b5ded16ee7025f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b3a2327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6cd28cf28fe2ee593e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c191355391771f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde34ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f2708e09ae8268dcc15411483b8506386aa0ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae4c697bfc674e03231c42f7eaaf5166bbc4653c71805f9448416e379cc1c40f8f866c9b319a849dd00ff9b84857436ed362c4632bfc3fa7357c24f15bbb07bd91893e61df7eb6dc5e071a9cc2faa7a32a91c4d982f5cfb725dca80b23874877a4980dbd70cda040b1ce527e7188159df77b493efbbd7bfe2680bf44e49eb68e5e33a0a5726072b2699d6244cd5c4a82bf18c668a3d43cec78c5fe1f12283d5dde6d0ea0b1b81ee7c065c938577e4ec93f22f1e6106f337625b7f7798011a6"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd4d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 122.585769ms ago: executing program 4 (id=602): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 119.975359ms ago: executing program 1 (id=603): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000006800019ef00000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 118.420239ms ago: executing program 0 (id=604): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 93.328659ms ago: executing program 0 (id=605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x434, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0x8, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff8, 0x4, 0x8, 0x1a0055ee, 0x401, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x1, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0x4000006, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca6, 0x9fa7, 0x7, 0x38, 0x4, 0xb, 0x7, 0x4d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x8, 0x8, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xffff, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x1, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}]}}]}, 0x434}}, 0x8840) 86.793689ms ago: executing program 1 (id=606): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000100), 0x9) 84.598569ms ago: executing program 4 (id=607): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x80000002, 0x12) 71.131459ms ago: executing program 3 (id=608): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 4.39057ms ago: executing program 4 (id=609): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 0s ago: executing program 3 (id=610): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 32.571866][ T29] audit: type=1400 audit(1747789869.071:65): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.572868][ T3306] cgroup: Unknown subsys name 'net' [ 32.594578][ T29] audit: type=1400 audit(1747789869.071:66): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.621969][ T29] audit: type=1400 audit(1747789869.111:67): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.760165][ T3306] cgroup: Unknown subsys name 'cpuset' [ 32.766279][ T3306] cgroup: Unknown subsys name 'rlimit' [ 32.897798][ T29] audit: type=1400 audit(1747789869.391:68): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.921106][ T29] audit: type=1400 audit(1747789869.391:69): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.941656][ T29] audit: type=1400 audit(1747789869.391:70): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.962097][ T29] audit: type=1400 audit(1747789869.401:71): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.982395][ T29] audit: type=1400 audit(1747789869.421:72): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.994866][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.007150][ T29] audit: type=1400 audit(1747789869.421:73): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.039145][ T29] audit: type=1400 audit(1747789869.521:74): avc: denied { relabelto } for pid=3310 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.048214][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.036239][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 34.124039][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.131182][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.138516][ T3316] bridge_slave_0: entered allmulticast mode [ 34.145203][ T3316] bridge_slave_0: entered promiscuous mode [ 34.153265][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.160364][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.167578][ T3316] bridge_slave_1: entered allmulticast mode [ 34.173982][ T3316] bridge_slave_1: entered promiscuous mode [ 34.207222][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.218821][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.253545][ T3316] team0: Port device team_slave_0 added [ 34.274939][ T3316] team0: Port device team_slave_1 added [ 34.303278][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.310301][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.336449][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.356080][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.363059][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.389103][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.444040][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 34.466265][ T3316] hsr_slave_0: entered promiscuous mode [ 34.472375][ T3316] hsr_slave_1: entered promiscuous mode [ 34.538878][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 34.588526][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.595746][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.602985][ T3325] bridge_slave_0: entered allmulticast mode [ 34.609345][ T3325] bridge_slave_0: entered promiscuous mode [ 34.635100][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.642196][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.649306][ T3325] bridge_slave_1: entered allmulticast mode [ 34.655992][ T3325] bridge_slave_1: entered promiscuous mode [ 34.664020][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 34.685369][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 34.721047][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.743360][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.752585][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.759712][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.767131][ T3328] bridge_slave_0: entered allmulticast mode [ 34.773780][ T3328] bridge_slave_0: entered promiscuous mode [ 34.792328][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.799438][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.806553][ T3328] bridge_slave_1: entered allmulticast mode [ 34.813131][ T3328] bridge_slave_1: entered promiscuous mode [ 34.852803][ T3325] team0: Port device team_slave_0 added [ 34.864831][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.886742][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.893833][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.900993][ T3329] bridge_slave_0: entered allmulticast mode [ 34.907377][ T3329] bridge_slave_0: entered promiscuous mode [ 34.914564][ T3325] team0: Port device team_slave_1 added [ 34.921541][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.935832][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.942954][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.950148][ T3327] bridge_slave_0: entered allmulticast mode [ 34.956672][ T3327] bridge_slave_0: entered promiscuous mode [ 34.963228][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.970403][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.977504][ T3329] bridge_slave_1: entered allmulticast mode [ 34.983971][ T3329] bridge_slave_1: entered promiscuous mode [ 35.002243][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.009315][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.016536][ T3327] bridge_slave_1: entered allmulticast mode [ 35.023032][ T3327] bridge_slave_1: entered promiscuous mode [ 35.043567][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.052992][ T3328] team0: Port device team_slave_0 added [ 35.058681][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.077156][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.086626][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.093654][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.119729][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.131565][ T3328] team0: Port device team_slave_1 added [ 35.137300][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.151630][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.161890][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.181106][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.188061][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.214004][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.227699][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.237678][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.257350][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.264390][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.290441][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.301874][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.308891][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.334985][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.350945][ T3329] team0: Port device team_slave_0 added [ 35.376545][ T3327] team0: Port device team_slave_0 added [ 35.382910][ T3329] team0: Port device team_slave_1 added [ 35.395051][ T3325] hsr_slave_0: entered promiscuous mode [ 35.401070][ T3325] hsr_slave_1: entered promiscuous mode [ 35.406834][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.414470][ T3325] Cannot create hsr debugfs directory [ 35.427089][ T3327] team0: Port device team_slave_1 added [ 35.455324][ T3328] hsr_slave_0: entered promiscuous mode [ 35.461379][ T3328] hsr_slave_1: entered promiscuous mode [ 35.467235][ T3328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.474831][ T3328] Cannot create hsr debugfs directory [ 35.493048][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.500118][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.526190][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.537159][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.544179][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.570183][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.581517][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.588464][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.614469][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.629111][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.636127][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.662052][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.726428][ T3329] hsr_slave_0: entered promiscuous mode [ 35.732447][ T3329] hsr_slave_1: entered promiscuous mode [ 35.738336][ T3329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.746058][ T3329] Cannot create hsr debugfs directory [ 35.789008][ T3327] hsr_slave_0: entered promiscuous mode [ 35.795081][ T3327] hsr_slave_1: entered promiscuous mode [ 35.801074][ T3327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.808634][ T3327] Cannot create hsr debugfs directory [ 35.884810][ T3328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.907672][ T3328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.935545][ T3328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.944441][ T3328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.980755][ T3325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.989954][ T3325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.998756][ T3325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.007877][ T3325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.042697][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.067450][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.077278][ T3329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.098566][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.107155][ T3329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.117325][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.124577][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.137338][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.144453][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.156635][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.164018][ T3329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.172979][ T3329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.189205][ T3327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.199680][ T3327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.210278][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.217426][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.231846][ T3327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.241033][ T3327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.251963][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.259074][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.294539][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.342066][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.366043][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.373277][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.383816][ T2671] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.390972][ T2671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.415049][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.438415][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.457680][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.476367][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.491526][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.508339][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.522389][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.529609][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.539220][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.561560][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.568756][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.583682][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.590771][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.607417][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.614636][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.641265][ T3329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.651768][ T3329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.677528][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.687035][ T3327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.724601][ T3316] veth0_vlan: entered promiscuous mode [ 36.732335][ T3316] veth1_vlan: entered promiscuous mode [ 36.786415][ T3316] veth0_macvtap: entered promiscuous mode [ 36.806922][ T3316] veth1_macvtap: entered promiscuous mode [ 36.819724][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.831742][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.852825][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.871019][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.884017][ T3316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.892941][ T3316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.901876][ T3316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.910677][ T3316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.950199][ T3328] veth0_vlan: entered promiscuous mode [ 36.963787][ T3328] veth1_vlan: entered promiscuous mode [ 36.977847][ T3325] veth0_vlan: entered promiscuous mode [ 37.003653][ T3328] veth0_macvtap: entered promiscuous mode [ 37.015205][ T3325] veth1_vlan: entered promiscuous mode [ 37.027956][ T3327] veth0_vlan: entered promiscuous mode [ 37.035383][ T3328] veth1_macvtap: entered promiscuous mode [ 37.043469][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.053419][ T3329] veth0_vlan: entered promiscuous mode [ 37.075012][ T3329] veth1_vlan: entered promiscuous mode [ 37.082722][ T3327] veth1_vlan: entered promiscuous mode [ 37.093027][ T3325] veth0_macvtap: entered promiscuous mode [ 37.113566][ T3325] veth1_macvtap: entered promiscuous mode [ 37.123080][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.137909][ T3329] veth0_macvtap: entered promiscuous mode [ 37.150944][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.160544][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.169174][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.177832][ T3327] veth0_macvtap: entered promiscuous mode [ 37.193962][ T3329] veth1_macvtap: entered promiscuous mode [ 37.205762][ T3328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.214613][ T3328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.223355][ T3328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.232082][ T3328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.242902][ T3327] veth1_macvtap: entered promiscuous mode [ 37.249611][ T3325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.258342][ T3325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.267161][ T3325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.275952][ T3325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.298132][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.310266][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.322399][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.332346][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.355157][ T3329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.363979][ T3329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.372724][ T3329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.381474][ T3329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.394293][ T3327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.403163][ T3327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.412072][ T3327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.420957][ T3327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.517137][ T3468] loop0: detected capacity change from 0 to 512 [ 37.545148][ T3468] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.558345][ T3468] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.586892][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 37.586923][ T29] audit: type=1400 audit(1747789874.081:108): avc: denied { create } for pid=3475 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.620869][ T3468] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7: bg 0: block 384: padding at end of block bitmap is not set [ 37.641339][ T3474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 37.641719][ T29] audit: type=1400 audit(1747789874.121:109): avc: denied { bind } for pid=3475 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.668986][ T29] audit: type=1400 audit(1747789874.121:110): avc: denied { node_bind } for pid=3475 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 37.688671][ T29] audit: type=1400 audit(1747789874.121:111): avc: denied { write } for pid=3475 comm="syz.2.9" name="icmp6" dev="proc" ino=4026532679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 37.697909][ T3468] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 37.711042][ T29] audit: type=1400 audit(1747789874.121:112): avc: denied { open } for pid=3478 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.711070][ T29] audit: type=1400 audit(1747789874.121:113): avc: denied { kernel } for pid=3478 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.758855][ T29] audit: type=1400 audit(1747789874.231:114): avc: denied { create } for pid=3478 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 37.779443][ T3468] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.7: attempt to clear invalid blocks 983260 len 1 [ 37.794395][ T3468] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.7: Invalid inode table block 0 in block_group 0 [ 37.808508][ T3468] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 37.828580][ T3468] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 37.854878][ T3487] lo: entered promiscuous mode [ 37.862402][ T3468] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.7: Invalid inode table block 0 in block_group 0 [ 37.880842][ T29] audit: type=1400 audit(1747789874.371:115): avc: denied { setcheckreqprot } for pid=3488 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 37.909701][ T3468] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 37.930098][ T3468] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.7: mark_inode_dirty error [ 37.951358][ T3468] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 37.973694][ T3468] EXT4-fs (loop0): 1 truncate cleaned up [ 37.984524][ T3495] loop2: detected capacity change from 0 to 1024 [ 37.999848][ T3468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.025564][ T29] audit: type=1400 audit(1747789874.521:116): avc: denied { mount } for pid=3466 comm="syz.0.7" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.063709][ T3495] ======================================================= [ 38.063709][ T3495] WARNING: The mand mount option has been deprecated and [ 38.063709][ T3495] and is ignored by this kernel. Remove the mand [ 38.063709][ T3495] option from the mount to silence this warning. [ 38.063709][ T3495] ======================================================= [ 38.108163][ T3468] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.7: Invalid inode bitmap blk 0 in block_group 0 [ 38.119163][ T29] audit: type=1400 audit(1747789874.601:117): avc: denied { write } for pid=3466 comm="syz.0.7" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.178693][ T3502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 38.189102][ T3495] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.205521][ T3468] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.7: Invalid inode table block 0 in block_group 0 [ 38.206903][ T3502] Zero length message leads to an empty skb [ 38.291590][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 38.323769][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.587470][ T3544] loop4: detected capacity change from 0 to 512 [ 38.609991][ T3544] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.655414][ T3544] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.676622][ T3544] EXT4-fs (loop4): 1 truncate cleaned up [ 38.695747][ T3544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.795704][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.834303][ T3568] loop0: detected capacity change from 0 to 256 [ 38.840750][ T3566] No such timeout policy "syz1" [ 38.939300][ T3576] capability: warning: `syz.2.53' uses 32-bit capabilities (legacy support in use) [ 39.174360][ T3605] netlink: 96 bytes leftover after parsing attributes in process `syz.0.67'. [ 39.309288][ T3618] mmap: syz.1.73 (3618) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.796733][ T3663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.93'. [ 39.873552][ T3671] netlink: 'syz.4.97': attribute type 10 has an invalid length. [ 39.873577][ T3671] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.97'. [ 39.974363][ T3686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=3686 comm=syz.4.105 [ 40.492124][ T3745] loop1: detected capacity change from 0 to 512 [ 40.510853][ T3748] netlink: 'syz.3.132': attribute type 25 has an invalid length. [ 40.518664][ T3748] netlink: 'syz.3.132': attribute type 1 has an invalid length. [ 40.526383][ T3748] bridge0: port 1(bridge_slave_0) entered learning state [ 40.558145][ T3752] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.573181][ T3745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.604598][ T3745] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.623839][ T3760] loop0: detected capacity change from 0 to 256 [ 40.638704][ T3745] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.130: corrupted inode contents [ 40.663591][ T3745] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.130: mark_inode_dirty error [ 40.688052][ T3745] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.130: corrupted inode contents [ 40.715133][ T3763] loop2: detected capacity change from 0 to 2048 [ 40.715204][ T3745] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.130: mark_inode_dirty error [ 40.769164][ T3763] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.789827][ T3773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 40.811846][ T3745] syz.1.130 (3745) used greatest stack depth: 10960 bytes left [ 40.842549][ T3775] loop3: detected capacity change from 0 to 128 [ 40.863152][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.876796][ T3775] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 40.903545][ T3776] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.932324][ T416] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 41.146942][ T3802] netlink: 'syz.3.154': attribute type 1 has an invalid length. [ 41.173395][ T3804] loop1: detected capacity change from 0 to 1024 [ 41.212365][ T3804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.309282][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.512588][ T3830] batadv_slave_0: entered promiscuous mode [ 41.581666][ T3836] capability: warning: `syz.1.168' uses deprecated v2 capabilities in a way that may be insecure [ 41.759243][ T3852] loop4: detected capacity change from 0 to 256 [ 41.825243][ T3329] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 41.924485][ T3862] loop1: detected capacity change from 0 to 512 [ 41.949053][ T3865] SELinux: syz.2.178 (3865) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 41.991771][ T3862] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 42.058252][ T3873] loop4: detected capacity change from 0 to 512 [ 42.066192][ T3873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.086455][ T3873] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.087961][ T3875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.185'. [ 42.096463][ T3873] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 42.102102][ T3875] netlink: 152 bytes leftover after parsing attributes in process `syz.3.185'. [ 42.126612][ T3873] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 42.162205][ T3873] EXT4-fs (loop4): 1 truncate cleaned up [ 42.168338][ T3873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.221593][ T3891] netlink: 'syz.1.188': attribute type 8 has an invalid length. [ 42.252137][ T3873] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.318609][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.377764][ T3915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3915 comm=syz.1.199 [ 42.400981][ T3915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.199'. [ 42.455725][ T3925] netlink: 52 bytes leftover after parsing attributes in process `syz.2.203'. [ 42.488944][ T3931] loop3: detected capacity change from 0 to 2048 [ 42.551761][ T3931] loop3: p1 < > p4 [ 42.560437][ T3931] loop3: p4 size 8388608 extends beyond EOD, truncated [ 42.571497][ T3934] syz.4.209 (3934) used greatest stack depth: 10800 bytes left [ 42.608634][ T3953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=3953 comm=syz.2.216 [ 42.621378][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 42.621396][ T29] audit: type=1400 audit(1747789880.106:253): avc: denied { name_connect } for pid=3949 comm="syz.4.217" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 42.649732][ T3954] loop1: detected capacity change from 0 to 1024 [ 42.675049][ T3954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.692196][ T3954] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.726962][ T12] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 42.772286][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 42.784685][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.784685][ T12] [ 42.794856][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 42.801323][ T12] EXT4-fs (loop1): Free/Dirty block details [ 42.807235][ T12] EXT4-fs (loop1): free_blocks=4293918720 [ 42.813021][ T12] EXT4-fs (loop1): dirty_blocks=80 [ 42.818174][ T12] EXT4-fs (loop1): Block reservation details [ 42.824183][ T12] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 42.860660][ T3971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 42.869704][ T3971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 42.882430][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.892518][ T3971] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.901289][ T3971] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.910045][ T3971] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.918853][ T3971] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.953339][ T29] audit: type=1400 audit(1747789880.456:254): avc: denied { create } for pid=3972 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 42.985279][ T29] audit: type=1400 audit(1747789880.456:255): avc: denied { bind } for pid=3972 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 43.004581][ T29] audit: type=1400 audit(1747789880.456:256): avc: denied { write } for pid=3972 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 43.028474][ T3971] syz.3.226 (3971) used greatest stack depth: 10272 bytes left [ 43.042080][ T3978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.227'. [ 43.069079][ T3978] vlan2: entered promiscuous mode [ 43.074201][ T3978] bridge0: entered promiscuous mode [ 43.120792][ T29] audit: type=1400 audit(1747789880.626:257): avc: denied { setopt } for pid=3983 comm="syz.0.231" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.150510][ T3988] loop3: detected capacity change from 0 to 512 [ 43.157042][ T3986] loop1: detected capacity change from 0 to 1024 [ 43.164005][ T3986] EXT4-fs: Ignoring removed nobh option [ 43.169644][ T3986] EXT4-fs: inline encryption not supported [ 43.172190][ T3988] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.175459][ T3986] EXT4-fs: Ignoring removed bh option [ 43.184510][ T3988] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 43.199250][ T3988] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 43.205391][ T3991] loop2: detected capacity change from 0 to 1024 [ 43.208329][ T3988] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 43.216132][ T3991] EXT4-fs: inline encryption not supported [ 43.222552][ T3988] System zones: 0-2, 18-18, 34-34 [ 43.228917][ T3991] EXT4-fs: Ignoring removed bh option [ 43.239985][ T3986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.240627][ T3988] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 43.267549][ T3988] EXT4-fs (loop3): 1 truncate cleaned up [ 43.274205][ T3988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.276407][ T3991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.290986][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.342502][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.369675][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.382721][ T29] audit: type=1400 audit(1747789880.886:258): avc: denied { compute_member } for pid=3998 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.502787][ T4018] loop1: detected capacity change from 0 to 1024 [ 43.527427][ T4018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.540156][ T4018] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.566812][ T51] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 43.583948][ T29] audit: type=1400 audit(1747789881.056:259): avc: denied { map } for pid=4017 comm="syz.1.245" path="/53/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.606792][ T29] audit: type=1400 audit(1747789881.056:260): avc: denied { execute } for pid=4017 comm="syz.1.245" path="/53/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.632649][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 43.644970][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 43.644970][ T51] [ 43.654664][ T51] EXT4-fs (loop1): Total free blocks count 0 [ 43.660761][ T51] EXT4-fs (loop1): Free/Dirty block details [ 43.666674][ T51] EXT4-fs (loop1): free_blocks=4293918720 [ 43.672553][ T51] EXT4-fs (loop1): dirty_blocks=16 [ 43.677727][ T51] EXT4-fs (loop1): Block reservation details [ 43.683855][ T51] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 43.695277][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.708259][ T29] audit: type=1326 audit(1747789881.206:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91072e969 code=0x7ffc0000 [ 43.733673][ T29] audit: type=1326 audit(1747789881.236:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd91072e969 code=0x7ffc0000 [ 43.802339][ T4043] loop2: detected capacity change from 0 to 512 [ 43.808998][ T4043] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 43.826856][ T4046] block device autoloading is deprecated and will be removed. [ 43.834593][ T4046] syz.3.256: attempt to access beyond end of device [ 43.834593][ T4046] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 43.907379][ T4060] netlink: 76 bytes leftover after parsing attributes in process `syz.3.262'. [ 43.916675][ T4060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 43.928766][ T4060] netlink: 76 bytes leftover after parsing attributes in process `syz.3.262'. [ 43.942341][ T4060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 43.954036][ T4066] loop2: detected capacity change from 0 to 1024 [ 43.976212][ T4066] EXT4-fs: Ignoring removed nobh option [ 43.981841][ T4066] EXT4-fs: Ignoring removed bh option [ 44.037538][ T4066] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.265: bad orphan inode 32767 [ 44.049549][ T4066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.083886][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.226408][ T4107] netlink: 95 bytes leftover after parsing attributes in process `syz.2.282'. [ 44.282822][ T4117] SELinux: syz.0.288 (4117) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 44.370040][ T4134] loop3: detected capacity change from 0 to 512 [ 44.371411][ T4135] syz.2.295: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 44.376787][ T4134] EXT4-fs: Ignoring removed nobh option [ 44.390802][ T4135] CPU: 0 UID: 0 PID: 4135 Comm: syz.2.295 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 44.390840][ T4135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.390910][ T4135] Call Trace: [ 44.390920][ T4135] [ 44.390930][ T4135] __dump_stack+0x1d/0x30 [ 44.391033][ T4135] dump_stack_lvl+0xe8/0x140 [ 44.391053][ T4135] dump_stack+0x15/0x1b [ 44.391070][ T4135] warn_alloc+0x12b/0x1a0 [ 44.391100][ T4135] ? kmem_cache_free+0xdd/0x2f0 [ 44.391259][ T4135] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 44.391298][ T4135] ? slow_avc_audit+0x104/0x140 [ 44.391428][ T4135] ? xskq_create+0x36/0xe0 [ 44.391538][ T4135] vmalloc_user_noprof+0x59/0x70 [ 44.391573][ T4135] ? xskq_create+0x80/0xe0 [ 44.391613][ T4135] xskq_create+0x80/0xe0 [ 44.391709][ T4135] xsk_init_queue+0x95/0xf0 [ 44.391823][ T4135] xsk_setsockopt+0x35c/0x510 [ 44.391911][ T4135] ? __pfx_xsk_setsockopt+0x10/0x10 [ 44.391945][ T4135] __sys_setsockopt+0x181/0x200 [ 44.391969][ T4135] ? fpregs_restore_userregs+0xbb/0x190 [ 44.392007][ T4135] __x64_sys_setsockopt+0x64/0x80 [ 44.392185][ T4135] x64_sys_call+0x2bd5/0x2fb0 [ 44.392213][ T4135] do_syscall_64+0xd0/0x1a0 [ 44.392243][ T4135] ? clear_bhb_loop+0x40/0x90 [ 44.392277][ T4135] ? clear_bhb_loop+0x40/0x90 [ 44.392311][ T4135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.392339][ T4135] RIP: 0033:0x7f492aa8e969 [ 44.392438][ T4135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.392461][ T4135] RSP: 002b:00007f49290f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 44.392486][ T4135] RAX: ffffffffffffffda RBX: 00007f492acb5fa0 RCX: 00007f492aa8e969 [ 44.392497][ T4135] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 44.392509][ T4135] RBP: 00007f492ab10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 44.392524][ T4135] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.392539][ T4135] R13: 0000000000000000 R14: 00007f492acb5fa0 R15: 00007ffc08816c68 [ 44.392629][ T4135] [ 44.392642][ T4135] Mem-Info: [ 44.408420][ T4134] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.296: invalid indirect mapped block 256 (level 2) [ 44.408805][ T4135] active_anon:3946 inactive_anon:1 isolated_anon:0 [ 44.408805][ T4135] active_file:5652 inactive_file:2333 isolated_file:0 [ 44.408805][ T4135] unevictable:0 dirty:1404 writeback:0 [ 44.408805][ T4135] slab_reclaimable:2915 slab_unreclaimable:13782 [ 44.408805][ T4135] mapped:28750 shmem:216 pagetables:923 [ 44.408805][ T4135] sec_pagetables:0 bounce:0 [ 44.408805][ T4135] kernel_misc_reclaimable:0 [ 44.408805][ T4135] free:1900832 free_pcp:11843 free_cma:0 [ 44.423053][ T4134] EXT4-fs (loop3): 2 truncates cleaned up [ 44.425169][ T4135] Node 0 active_anon:15784kB inactive_anon:4kB active_file:22608kB inactive_file:9332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115000kB dirty:5616kB writeback:0kB shmem:864kB writeback_tmp:0kB kernel_stack:2800kB pagetables:3692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 44.430525][ T4134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.434091][ T4135] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 44.438514][ T4131] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 44.442632][ T4135] lowmem_reserve[]: 0 2884 [ 44.447477][ T4131] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 44.453248][ T4135] 7863 [ 44.489087][ T4134] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.296: bg 0: block 5: invalid block bitmap [ 44.490609][ T4135] 7863 [ 44.490626][ T4135] Node 0 DMA32 free:2949928kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953560kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 44.496528][ T4134] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 44.501071][ T4135] lowmem_reserve[]: 0 0 4978 4978 [ 44.501111][ T4135] Node 0 Normal free:4638040kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:15784kB inactive_anon:4kB active_file:22608kB inactive_file:9332kB unevictable:0kB writepending:5616kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:43576kB local_pcp:560kB free_cma:0kB [ 44.506127][ T4134] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.506127][ T4134] [ 44.510837][ T4135] lowmem_reserve[]: 0 0 0 [ 44.515341][ T4134] EXT4-fs (loop3): Total free blocks count 0 [ 44.520044][ T4135] 0 [ 44.524681][ T4134] EXT4-fs (loop3): Free/Dirty block details [ 44.530596][ T4135] [ 44.530605][ T4135] Node 0 [ 44.535002][ T4134] EXT4-fs (loop3): free_blocks=0 [ 44.554613][ T4135] DMA: 0*4kB 0*8kB 0*16kB [ 44.563129][ T4134] EXT4-fs (loop3): dirty_blocks=2 [ 44.563147][ T4134] EXT4-fs (loop3): Block reservation details [ 44.563161][ T4134] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 44.571128][ T4135] 0*32kB 0*64kB [ 44.628459][ T4134] syz.3.296 (4134) used greatest stack depth: 9608 bytes left [ 44.667326][ T4135] 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 44.936020][ T4135] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949928kB [ 44.952301][ T4135] Node 0 Normal: 535*4kB (UME) 362*8kB (UME) 178*16kB (UME) 68*32kB (UME) 34*64kB (UME) 36*128kB (UME) 45*256kB (UM) 37*512kB (UM) 29*1024kB (UME) 15*2048kB (UE) 1111*4096kB (UM) = 4658380kB [ 44.972088][ T4135] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 44.981511][ T4135] 9978 total pagecache pages [ 44.986127][ T4135] 1 pages in swap cache [ 44.990334][ T4135] Free swap = 124992kB [ 44.994501][ T4135] Total swap = 124996kB [ 44.998739][ T4135] 2097051 pages RAM [ 45.002571][ T4135] 0 pages HighMem/MovableOnly [ 45.007263][ T4135] 80260 pages reserved [ 45.030555][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.110202][ T4151] loop3: detected capacity change from 0 to 1024 [ 45.117925][ T4151] EXT4-fs: Ignoring removed i_version option [ 45.124229][ T4151] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.152103][ T4155] netlink: 1 bytes leftover after parsing attributes in process `syz.2.305'. [ 45.161424][ T4151] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.178611][ T4151] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 45.190014][ T4151] EXT4-fs (loop3): orphan cleanup on readonly fs [ 45.210295][ T4151] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 45.220404][ T4151] EXT4-fs (loop3): Remounting filesystem read-only [ 45.227085][ T4151] EXT4-fs (loop3): 1 orphan inode deleted [ 45.298073][ T4151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.325670][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.340796][ C1] hrtimer: interrupt took 38214 ns [ 45.373970][ T4179] loop0: detected capacity change from 0 to 164 [ 45.392128][ T4179] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.406519][ T4184] loop2: detected capacity change from 0 to 1024 [ 45.421122][ T4184] EXT4-fs: Ignoring removed bh option [ 45.449704][ T4184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.473676][ T4196] Illegal XDP return value 4294967294 on prog (id 141) dev N/A, expect packet loss! [ 45.509732][ T4184] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.319: Allocating blocks 481-513 which overlap fs metadata [ 45.525256][ T4184] EXT4-fs (loop2): Remounting filesystem read-only [ 45.543576][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.577095][ T4210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.331'. [ 45.620215][ T4212] loop0: detected capacity change from 0 to 2048 [ 45.650348][ T4220] vhci_hcd: invalid port number 254 [ 45.655768][ T4220] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 45.673784][ T4212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.729546][ T4231] xt_CT: You must specify a L4 protocol and not use inversions on it [ 45.756559][ T4237] loop1: detected capacity change from 0 to 512 [ 45.783108][ T4237] EXT4-fs (loop1): 1 orphan inode deleted [ 45.803681][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 45.816402][ T4237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.833963][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.839201][ T4237] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.880840][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.911313][ T4247] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 45.935683][ T4255] loop4: detected capacity change from 0 to 512 [ 45.975791][ T4255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.977142][ T4263] loop0: detected capacity change from 0 to 128 [ 45.990620][ T4255] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.029925][ T4263] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 46.054077][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.064849][ T4265] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.086955][ T4269] SELinux: policydb version 0 does not match my version range 15-34 [ 46.095184][ T4269] SELinux: failed to load policy [ 46.142297][ T51] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 46.152607][ T4280] loop4: detected capacity change from 0 to 512 [ 46.159098][ T4276] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 46.163207][ T4280] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.183633][ T4278] SELinux: Context system_u:object_r:syslogd_initrc_exec_t:s0 is not valid (left unmapped). [ 46.205043][ T4280] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 46.221419][ T4280] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.363: attempt to clear invalid blocks 2 len 1 [ 46.240199][ T4288] loop2: detected capacity change from 0 to 128 [ 46.245085][ T4280] EXT4-fs (loop4): Remounting filesystem read-only [ 46.254326][ T4292] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 46.257032][ T4288] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.265762][ T4280] EXT4-fs (loop4): 1 truncate cleaned up [ 46.289883][ T4280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.303835][ T4288] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.348157][ T4299] loop3: detected capacity change from 0 to 512 [ 46.387721][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.429110][ T4311] netlink: 'syz.2.377': attribute type 25 has an invalid length. [ 46.465331][ T4317] smc: net device bond0 applied user defined pnetid SYZ2 [ 46.481469][ T4317] smc: net device bond0 erased user defined pnetid SYZ2 [ 46.548551][ T4335] loop3: detected capacity change from 0 to 512 [ 46.564055][ T4335] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.570967][ T4335] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.583499][ T4335] EXT4-fs (loop3): 1 truncate cleaned up [ 46.589771][ T4335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.604234][ T4331] loop0: detected capacity change from 0 to 527 [ 46.609824][ T4335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.612487][ T4331] EXT4-fs (loop0): failed to parse options in superblock:  [ 46.632343][ T4331] EXT4-fs (loop0): Unsupported encryption level 4 [ 46.862774][ T4378] loop1: detected capacity change from 0 to 512 [ 46.883664][ T4374] loop0: detected capacity change from 0 to 2048 [ 46.890355][ T4378] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 46.937408][ T4382] xt_CT: No such helper "snmp_trap" [ 46.960338][ T4374] Alternate GPT is invalid, using primary GPT. [ 46.966658][ T4374] loop0: p1 p2 p3 [ 46.993297][ T4368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.018667][ T4368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.021142][ T4397] sctp: [Deprecated]: syz.0.415 (pid 4397) Use of int in maxseg socket option. [ 47.021142][ T4397] Use struct sctp_assoc_value instead [ 47.115187][ T4410] loop0: detected capacity change from 0 to 764 [ 47.129151][ T4410] Symlink component flag not implemented [ 47.143516][ T4414] loop1: detected capacity change from 0 to 128 [ 47.150528][ T4410] Symlink component flag not implemented (7) [ 47.295003][ T4439] vhci_hcd: default hub control req: 8010 v0002 i0000 l86 [ 47.295256][ T4438] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 47.354511][ T4447] loop1: detected capacity change from 0 to 512 [ 47.365429][ T4445] loop3: detected capacity change from 0 to 512 [ 47.367989][ T4447] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 47.384422][ T4447] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 47.403654][ T4445] EXT4-fs (loop3): too many log groups per flexible block group [ 47.411408][ T4445] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 47.418404][ T4447] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.439: corrupted in-inode xattr: e_value size too large [ 47.439436][ T4445] EXT4-fs (loop3): mount failed [ 47.444568][ T4447] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.439: couldn't read orphan inode 15 (err -117) [ 47.458382][ T4447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.506353][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.640901][ T4483] loop1: detected capacity change from 0 to 2048 [ 47.652136][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 47.652152][ T29] audit: type=1400 audit(1747789885.156:419): avc: denied { create } for pid=4486 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.683572][ T29] audit: type=1400 audit(1747789885.156:420): avc: denied { write } for pid=4486 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.703608][ T29] audit: type=1400 audit(1747789885.156:421): avc: denied { nlmsg_write } for pid=4486 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.727365][ T29] audit: type=1400 audit(1747789885.186:422): avc: denied { create } for pid=4484 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.746884][ T29] audit: type=1400 audit(1747789885.226:423): avc: denied { write } for pid=4484 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.749912][ T4483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.795310][ T29] audit: type=1400 audit(1747789885.286:424): avc: denied { read write } for pid=4472 comm="syz.4.451" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.818814][ T29] audit: type=1400 audit(1747789885.286:425): avc: denied { open } for pid=4472 comm="syz.4.451" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.842320][ T29] audit: type=1400 audit(1747789885.286:426): avc: denied { ioctl } for pid=4472 comm="syz.4.451" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.867638][ T29] audit: type=1400 audit(1747789885.296:427): avc: denied { create } for pid=4495 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.887051][ T29] audit: type=1400 audit(1747789885.346:428): avc: denied { write } for pid=4495 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.077367][ T4510] loop0: detected capacity change from 0 to 1024 [ 48.078956][ T4512] loop2: detected capacity change from 0 to 128 [ 48.092999][ T4510] EXT4-fs: Ignoring removed nobh option [ 48.098647][ T4510] EXT4-fs: Ignoring removed bh option [ 48.115113][ T4512] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.128247][ T4510] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.467: bad orphan inode 32767 [ 48.163387][ T4510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.179568][ T4512] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.200546][ T4523] loop3: detected capacity change from 0 to 512 [ 48.215953][ T4523] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.228931][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.229011][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.230312][ T3329] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.256777][ T4523] EXT4-fs (loop3): 1 truncate cleaned up [ 48.262764][ T4523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.372674][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.390210][ T4546] loop1: detected capacity change from 0 to 128 [ 48.409851][ T4546] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.440742][ T4546] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.468687][ T4557] loop0: detected capacity change from 0 to 512 [ 48.476349][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.477896][ T4557] EXT4-fs: Ignoring removed nobh option [ 48.505690][ T4561] loop2: detected capacity change from 0 to 512 [ 48.508259][ T4563] loop3: detected capacity change from 0 to 1024 [ 48.512432][ T4561] EXT4-fs: Ignoring removed bh option [ 48.519524][ T4563] EXT4-fs: Ignoring removed nobh option [ 48.526086][ T4561] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.529347][ T4563] EXT4-fs: Ignoring removed bh option [ 48.541514][ T4561] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 48.554226][ T4561] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 48.563172][ T4557] EXT4-fs (loop0): failed to initialize system zone (-117) [ 48.570511][ T4557] EXT4-fs (loop0): mount failed [ 48.580148][ T4563] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.491: bad orphan inode 32767 [ 48.599786][ T4561] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.606883][ T4563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.621032][ T4561] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.489: Failed to acquire dquot type 1 [ 48.638341][ T4561] EXT4-fs (loop2): Remounting filesystem read-only [ 48.649347][ T4561] EXT4-fs (loop2): 1 orphan inode deleted [ 48.665688][ T4561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.718517][ T4574] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 48.778192][ T4561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.848854][ T4579] netlink: 'syz.0.496': attribute type 1 has an invalid length. [ 48.919236][ T4584] C: renamed from team_slave_0 (while UP) [ 48.943496][ T4584] netlink: 'syz.2.498': attribute type 1 has an invalid length. [ 48.951742][ T4584] __nla_validate_parse: 4 callbacks suppressed [ 48.951755][ T4584] netlink: 152 bytes leftover after parsing attributes in process `syz.2.498'. [ 48.983074][ T4584] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 49.016714][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.079927][ T4592] vhci_hcd: invalid port number 96 [ 49.085128][ T4592] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 49.145329][ T4602] netlink: 'syz.3.506': attribute type 21 has an invalid length. [ 49.361663][ T4620] loop4: detected capacity change from 0 to 512 [ 49.368639][ T4620] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.386392][ T4621] loop3: detected capacity change from 0 to 512 [ 49.412323][ T4620] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.513: Failed to acquire dquot type 0 [ 49.430808][ T4621] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.439946][ T4620] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 49.479794][ T4620] EXT4-fs (loop4): 1 truncate cleaned up [ 49.486236][ T4621] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.514: bg 0: block 248: padding at end of block bitmap is not set [ 49.502603][ T4620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.527656][ T4621] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.514: Failed to acquire dquot type 1 [ 49.561049][ T4620] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.513: corrupted xattr block 19: bad e_name length [ 49.589483][ T4621] EXT4-fs (loop3): 1 truncate cleaned up [ 49.599571][ T4620] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 49.605899][ T4621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.615068][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 49.631872][ T3316] CPU: 1 UID: 0 PID: 3316 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 49.631906][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.631920][ T3316] Call Trace: [ 49.631927][ T3316] [ 49.631936][ T3316] __dump_stack+0x1d/0x30 [ 49.631961][ T3316] dump_stack_lvl+0xe8/0x140 [ 49.632064][ T3316] dump_stack+0x15/0x1b [ 49.632084][ T3316] dump_header+0x81/0x220 [ 49.632123][ T3316] oom_kill_process+0x334/0x3f0 [ 49.632148][ T3316] out_of_memory+0x979/0xb80 [ 49.632210][ T3316] ? css_next_descendant_pre+0x138/0x160 [ 49.632245][ T3316] mem_cgroup_out_of_memory+0x13d/0x190 [ 49.632279][ T3316] try_charge_memcg+0x5e2/0x870 [ 49.632346][ T3316] charge_memcg+0x51/0xc0 [ 49.632367][ T3316] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 49.632393][ T3316] __read_swap_cache_async+0x1df/0x350 [ 49.632478][ T3316] swap_cluster_readahead+0x376/0x3e0 [ 49.632558][ T3316] swapin_readahead+0xde/0x6f0 [ 49.632631][ T3316] ? __filemap_get_folio+0x49f/0x650 [ 49.632679][ T3316] ? swap_cache_get_folio+0x77/0x200 [ 49.632704][ T3316] do_swap_page+0x301/0x2460 [ 49.632736][ T3316] ? save_fpregs_to_fpstate+0x100/0x160 [ 49.632839][ T3316] ? _raw_spin_unlock+0x26/0x50 [ 49.632876][ T3316] ? finish_task_switch+0xad/0x2b0 [ 49.632905][ T3316] ? __pfx_default_wake_function+0x10/0x10 [ 49.633013][ T3316] handle_mm_fault+0xb60/0x2ae0 [ 49.633069][ T3316] ? mas_walk+0xf2/0x120 [ 49.633101][ T3316] do_user_addr_fault+0x636/0x1090 [ 49.633145][ T3316] ? switch_fpu_return+0xe/0x20 [ 49.633180][ T3316] exc_page_fault+0x54/0xc0 [ 49.633204][ T3316] asm_exc_page_fault+0x26/0x30 [ 49.633254][ T3316] RIP: 0033:0x7f5d1f7611e5 [ 49.633267][ T3316] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e 33 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 49.633285][ T3316] RSP: 002b:00007ffe28b61438 EFLAGS: 00010246 [ 49.633304][ T3316] RAX: 0000000000000000 RBX: 00000000000000cd RCX: 00007f5d1f7611e3 [ 49.633320][ T3316] RDX: 00007ffe28b61450 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.633335][ T3316] RBP: 00007ffe28b614bc R08: 00000000217b364f R09: 0000000000000000 [ 49.633350][ T3316] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 49.633365][ T3316] R13: 00000000000927c0 R14: 000000000000bdf4 R15: 00007ffe28b61510 [ 49.633409][ T3316] [ 49.633414][ T3316] memory: usage 307200kB, limit 307200kB, failcnt 194 [ 49.691190][ T4620] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.513: corrupted xattr block 19: bad e_name length [ 49.695002][ T3316] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 49.695020][ T3316] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 49.715110][ T4620] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 49.715923][ T3316] Memory cgroup stats for [ 49.740193][ T4620] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.513: corrupted xattr block 19: bad e_name length [ 49.742189][ T3316] /syz1: [ 49.743170][ T3316] cache 0 [ 49.746955][ T4621] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 49.752446][ T3316] rss 0 [ 49.767699][ T4628] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.513: corrupted xattr block 19: bad e_name length [ 49.768197][ T3316] shmem 0 [ 49.768252][ T3316] mapped_file 0 [ 49.774890][ T4621] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 49.777274][ T3316] dirty 0 [ 49.777284][ T3316] writeback 0 [ 49.782716][ T4627] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 49.787237][ T3316] workingset_refault_anon 54 [ 49.787249][ T3316] workingset_refault_file 32 [ 49.787258][ T3316] swap 303104 [ 49.799612][ T4620] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 49.801062][ T3316] swapcached 0 [ 49.870125][ T4621] syz.3.514 (4621) used greatest stack depth: 9360 bytes left [ 49.870318][ T3316] pgpgin 10604 [ 49.889801][ T4628] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 49.890409][ T3316] pgpgout 10604 [ 49.915025][ T4620] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.513: corrupted xattr block 19: bad e_name length [ 49.918848][ T3316] pgfault 16257 [ 49.918858][ T3316] pgmajfault 41 [ 49.918866][ T3316] inactive_anon 0 [ 50.059452][ T4620] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.513: corrupted xattr block 19: bad e_name length [ 50.061357][ T3316] active_anon 0 [ 50.070162][ T4620] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 50.078404][ T3316] inactive_file 0 [ 50.094924][ T3316] active_file 0 [ 50.097207][ T4620] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.513: Failed to acquire dquot type 0 [ 50.098452][ T3316] unevictable 0 [ 50.113126][ T3316] hierarchical_memory_limit 314572800 [ 50.118633][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 50.124243][ T4635] pimreg3: entered allmulticast mode [ 50.124882][ T3316] total_cache 0 [ 50.133631][ T3316] total_rss 0 [ 50.136932][ T3316] total_shmem 0 [ 50.140418][ T3316] total_mapped_file 0 [ 50.141022][ T4634] pimreg3: left allmulticast mode [ 50.144386][ T3316] total_dirty 0 [ 50.144396][ T3316] total_writeback 0 [ 50.144405][ T3316] total_workingset_refault_anon 54 [ 50.161888][ T3316] total_workingset_refault_file 32 [ 50.167014][ T3316] total_swap 303104 [ 50.170950][ T3316] total_swapcached 0 [ 50.174860][ T3316] total_pgpgin 10604 [ 50.178757][ T3316] total_pgpgout 10604 [ 50.182780][ T3316] total_pgfault 16257 [ 50.186841][ T3316] total_pgmajfault 41 [ 50.190854][ T3316] total_inactive_anon 0 [ 50.194999][ T3316] total_active_anon 0 [ 50.198985][ T3316] total_inactive_file 0 [ 50.203305][ T3316] total_active_file 0 [ 50.207390][ T3316] total_unevictable 0 [ 50.211447][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.492,pid=4566,uid=0 [ 50.225985][ T3316] Memory cgroup out of memory: Killed process 4566 (syz.1.492) total-vm:95796kB, anon-rss:936kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 50.293424][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.304189][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.341565][ T4641] loop0: detected capacity change from 0 to 1024 [ 50.356861][ T4643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 50.366619][ T4643] netlink: 'syz.3.521': attribute type 1 has an invalid length. [ 50.379005][ T4641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.396676][ T4648] Invalid ELF header magic: != ELF [ 50.498148][ T36] IPVS: starting estimator thread 0... [ 50.560656][ T4661] 9pnet: Could not find request transport: r&½p [ 50.589497][ T4654] IPVS: using max 2448 ests per chain, 122400 per kthread [ 50.636923][ T4567] syz.1.492 (4567) used greatest stack depth: 7208 bytes left [ 50.661592][ T4672] netlink: 'syz.4.534': attribute type 2 has an invalid length. [ 51.109025][ T4719] loop4: detected capacity change from 0 to 2048 [ 51.118863][ T4655] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 51.140969][ T4729] macsec0: entered promiscuous mode [ 51.146798][ T4655] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 51.159385][ T4655] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.159385][ T4655] [ 51.169184][ T4655] EXT4-fs (loop0): Total free blocks count 0 [ 51.170688][ T4729] macvtap1: entered allmulticast mode [ 51.175248][ T4655] EXT4-fs (loop0): Free/Dirty block details [ 51.180624][ T4729] macsec0: entered allmulticast mode [ 51.186444][ T4655] EXT4-fs (loop0): free_blocks=68451041280 [ 51.191748][ T4729] veth1_macvtap: entered allmulticast mode [ 51.203477][ T4655] EXT4-fs (loop0): dirty_blocks=16400 [ 51.208872][ T4655] EXT4-fs (loop0): Block reservation details [ 51.209973][ T4731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 51.214943][ T4655] EXT4-fs (loop0): i_reserved_data_blocks=1025 [ 51.282815][ T4739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.303363][ T4739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.331617][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 51.406650][ T4756] loop1: detected capacity change from 0 to 512 [ 51.443911][ T4756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.462679][ T4756] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.477103][ T4756] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.574: corrupted inode contents [ 51.493313][ T4756] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.574: mark_inode_dirty error [ 51.505223][ T4756] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.574: corrupted inode contents [ 51.525285][ T4756] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.574: mark_inode_dirty error [ 51.557796][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.566946][ T4774] loop0: detected capacity change from 0 to 1024 [ 51.593607][ T4774] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.580: missing EA_INODE flag [ 51.610769][ T4774] EXT4-fs (loop0): Remounting filesystem read-only [ 51.811857][ T4813] loop1: detected capacity change from 0 to 512 [ 51.971537][ T4835] ================================================================== [ 51.979680][ T4835] BUG: KCSAN: data-race in process_scheduled_works / process_scheduled_works [ 51.988483][ T4835] [ 51.990819][ T4835] read-write to 0xffff8881008106b0 of 8 bytes by task 51 on cpu 1: [ 51.998727][ T4835] process_scheduled_works+0x4fe/0x9d0 [ 52.004210][ T4835] worker_thread+0x582/0x770 [ 52.008842][ T4835] kthread+0x486/0x510 [ 52.012925][ T4835] ret_from_fork+0x4b/0x60 [ 52.017368][ T4835] ret_from_fork_asm+0x1a/0x30 [ 52.022168][ T4835] [ 52.024510][ T4835] read-write to 0xffff8881008106b0 of 8 bytes by task 4835 on cpu 0: [ 52.032591][ T4835] process_scheduled_works+0x4fe/0x9d0 [ 52.038072][ T4835] worker_thread+0x582/0x770 [ 52.042700][ T4835] kthread+0x486/0x510 [ 52.046778][ T4835] ret_from_fork+0x4b/0x60 [ 52.051214][ T4835] ret_from_fork_asm+0x1a/0x30 [ 52.056009][ T4835] [ 52.058342][ T4835] value changed: 0x0000000000000077 -> 0x0000000000000079 [ 52.065490][ T4835] [ 52.067825][ T4835] Reported by Kernel Concurrency Sanitizer on: [ 52.074003][ T4835] CPU: 0 UID: 0 PID: 4835 Comm: kworker/u8:11 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 52.086701][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.096789][ T4835] Workqueue: iou_exit io_ring_exit_work [ 52.102368][ T4835] ================================================================== [ 52.149818][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state